Using enterprise risk management to strengthen organisational resiliency : One institution's story

This paper discusses how Carnegie Mellon University launched a cyclical enterprise risk management framework that incorporates both emergency preparedness and response and business continuity into its purview, to deliver greater organisational resiliency. The paper goes on to describe the governance structure that defines roles and responsibilities throughout the organisation, before discussing how faculty, staff and students are engaged and educated to sense risks, and to collaborate with leadership at all levels in prioritising risks for deep-dive assessments and employing feedback loops to support continuous process improvement. As the paper will show, these cyclical practices support organisational resiliency and a greater sense of risk consciousness.