Lifetime Citizen Portal Access — AI Briefings, Alerts & Unlimited Follows
Risk manager outlines year‑long plan to build enterprise risk management program
Loading...
Summary
Yvette Griffin, the city’s risk manager, told the FOAC the city is implementing an enterprise risk management framework to move from siloed department risk management toward a citywide model with an Executive Risk Council; she estimated about one to 1.5 years to establish governance, reporting and initial measurable results.
Yvette Griffin, the city’s risk manager, presented the city’s plan to implement an enterprise risk management (ERM) framework designed to centralize risk identification, align risk to strategic priorities, and improve decision‑making.
Griffin said the ERM effort grew from a 2022 review that found risks were managed in silos and recommended a citywide framework. She explained the approach will use a phased implementation, integrate with program‑based budgeting, and create an Executive Risk Council composed of senior leadership (deputy city managers, the city attorney and the city manager) to set risk appetite and governance. "Enterprise risk management is not a new concept... our goal is to move us on that spectrum to strategic," Griffin said.
Short-term work includes cleaning up existing inventories (for example, vehicle insurance schedules), completing preliminary risk assessments with departments and hiring additional staff for the risk function. Griffin estimated it would take about a year to 18 months before organization-wide effects are visible and said internal audit will help validate deployment and build a risk-control matrix. There was no committee action on this item; FOAC members welcomed the presentation and asked to be included in future briefings.
