1. EXECUTIVE POLICY GROUP Enterprise Risk Management Campus Safety Security & Business Continuity Enterprise Risk Management www.utdallas.edu

2. Enterprise Risk Management (ERM) • ERM forms an important element of organizational management and provisioning of consolidated services. • The effective deployment of resources performs a rollup of risks into a holistic view. • Monitoring and testing provides transparency into the operational ‘state of readiness’ at most process points to effectively manage organizational efficiency.

3. Notification IR Systems Emergency Response Administrative Services Training Test & Review Campus Safety & Security Finance Business Continuity Risk Assessment Procurement IR Data Backup Emergency Operations Executive Policy Group Enterprise Risk Management Faculty/Student Readiness Human Resources Facilities Management Special Needs Populations Planning Preparation & Resilience Modes of Instruction Enrollment Policies Internal Audit & Compliance Learning Mgmt System International Communications Library Academic Affairs Research Student Housing Operational Continuity Athletics Academic Continuity Research Mitigation Preparedness Response Recovery

4. Integrated Framework ERM Policies Present a holistic method of managing both operational and strategic risks across the organization. The strategic plan for Enterprise Risk Management includes four strategic initiatives for all areas: • Mitigation • Preparedness • Emergency Response • Resumption & Business Recovery

5. Management Activities • Create high level-risk strategy (policy) aligned with strategic business objectives • Create a risk management organization structure and ensure clear reporting lines • Develop/assign responsibilities for risk management • Communicate vision, strategy, policy, responsibilities and reporting lines to all employees across organization

6. Embed Risk Activities into ongoing Business Processes • Align and integrate risk management activities within all processes • Embed real-time controls related to risk into digital systems as appropriate • Develop continuous improvement processes related to risk

7. Measure & Monitor • Identify key performance indicators and critical success factors related to risk • Establish success measures for risk strategy/activities • Provide a periodic process for measuring risk/return • Identity and implement monitoring processes and methods of feedback

8. Enterprise Risk Management is meant to have a broad meaning as an all-encompassing term to describe an integrated and enterprise-wide comprehensive processes that include: 1.) emergency response; 2.) resumption; 3.) recovery; and 4.) restoration