Managed Risk Program

Ongoing enterprise risk management, delivered as a structured service.

CONTACT US

Registers go stale. Ours don't.

Most organisations can produce a risk register. Far fewer can keep one alive. Registers go stale, treatment actions drift, and the Board keeps receiving reports that describe last year's risk profile. The Managed Risk Program exists to fix that.

The Program is Barrick Group's ongoing delivery model for enterprise risk management. Instead of a one-off assessment that ages in a drawer, we operate your risk management framework with you: governance meetings run on schedule, the risk register stays current, treatment actions are tracked to completion, and reporting reaches executives and the Board in a form they can act on.
What the Program includes
  • Scheduled governance meetings
  • Enterprise risk reviews
  • Risk register maintenance
  • Treatment action monitoring
  • Executive and Board reporting
  • Governance advice
  • Framework maintenance
  • Assurance coordination
  • Continuous improvement planning
What the Board Actually Sees

Reporting built to be read, not filed.

Enterprise Risk Dashboard
A quarterly, one-page view of the organisation's top risks, direction of travel, and treatment status, designed for executive and Board audiences without technical jargon.
Governance Performance Report
A quarterly report against the agreed governance reporting cycle, covering meeting attendance, actions closed on time, and any escalations requiring Board attention.
Framework Effectiveness Review
An annual, independent review of whether the risk framework itself is working, not just whether individual risks have been treated, with recommendations for the year ahead.

How it runs

The Program follows a defined governance reporting cycle. Operational and program reviews run monthly. An enterprise risk dashboard and a governance performance report are produced quarterly for executive leadership and the Board. A framework effectiveness review is completed annually. Every output feeds governance reporting, so what the Board sees reflects how the organisation is actually performing.

The Program is built on the Barrick Group Enterprise Risk and Resilience Management Framework and aligns with recognised international standards, including ISO 31000.

Who it suits

Organisations that need a functioning risk capability without building an internal risk function or hiring a dedicated risk team. Boards and executives who want oversight that is current, evidenced and defensible, rather than a risk register that was accurate the day it was written and stale ever since. Businesses whose regulators, insurers, government counterparts or major clients expect risk management to be demonstrable and current, not just documented once and filed away. It is a practical fit for organisations moving from a one-off risk assessment or PSPF review into ongoing management of the findings, and for organisations that already have a framework but lack the internal capacity to operate it consistently.
Proven Track Record

The same team and methodology behind our risk assessment work.

Built on Real Engagements

The Program is built on the same eight-stage engagement methodology we use for standalone assessments, including work such as our ongoing risk program for Holroyd Hospital.

A Credentialed Team

Program oversight is backed by a leadership team with an MBA, a Master of Commerce, and a background in policing and security management. Meet the team →

Independent, Always

We do not sell or deliver security services. Program recommendations reflect your risk environment, not what is most profitable for us to recommend. See our full Risk Services →
FAQs

Managed Risk Program: Common Questions

Managed Risk Program

Talk to us about scoping a Managed Risk Program for your organisation.