Protect Your Organization: Your Risk Assessment Step-by-Step Guide


In today’s world, unexpected things happen. That’s why it’s important to be prepared. This free template download below will help you identify potential problems and figure out how to fix them. You can keep your organization safe and strong by staying ahead of risks.

Remember, this isn’t a one-time thing. You need to keep reviewing and updating this checklist to make sure it’s always relevant. With a little effort, you can create a stronger organization that is able to withstand life’s little surprises.

Here are two examples of big problems that can hurt an organization:

  1. Hackers stealing information: Bad guys can steal important stuff like customer data or company secrets. This can ruin your reputation and cost you a lot of money.
  2. Mother Nature strikes back: Hurricanes, floods, or earthquakes can damage your business and disrupt operations.

A Risk Assessment: Your Roadmap to a Safer Future

In today’s uncertain world, risks are everywhere. From financial losses to reputational damage, the potential consequences can be severe. That’s where a risk assessment comes in. By identifying potential threats and understanding their impact, you can take proactive steps to protect your organization.

So, what exactly is a risk assessment? It’s like a crystal ball, helping you see potential problems before they happen. Think of it as a map that guides you through the dangers ahead. By understanding the risks you face, you can develop strategies to avoid or reduce them.

But how do you do it? It’s actually simpler than you might think. Let’s break it down into two key steps:

  1. Identify the risks: Think about all the things that could go wrong. Financial losses? Safety issues? Reputation damage? Write them down.
  2. Assess the impact and probability: For each risk, figure out how bad it would be if it happened (the impact) and how likely it is to happen (the probability).

By combining these two factors, you can rank the risks that pose the biggest threat to your organization. Then, you can create a plan to tackle them.

Have a strategy for risk management

A strong risk management plan is like a safety net for your business. By spotting potential problems and having a plan to deal with them, you can protect your money, keep your good name, and build a stronger, more stable company.

  • Find potential threats: By understanding the risks you face, you can take proactive steps to prevent or mitigate them.
  • Protect your assets: Effective risk management helps safeguard your organization’s financial resources, reputation, and operations.
  • Make informed decisions: Risk strategies give valuable insights that can inform smart decisions and resource allocation.
  • Guarantee long-term sustainability: You can build a more resilient and sustainable organization by managing risks effectively.

What is risk?

A risk is simply a potential problem or danger. It’s something that might happen in the future that could cause harm or loss to your organization. Think of it as a threat that you need to be prepared for.

A risk assessment is a proactive tool that helps you discover potential threats to your organization and develop strategies to mitigate their impact. By understanding the risks you face, you can take steps to avoid or manage them effectively, protecting your assets and ensuring long-term success.

Unpacking the two ratings

What is the meaning of risk impact?

Impact refers to the potential consequences or severity of a risk event. It measures the harm or damage that could result if the risk occurs. For example, a high-impact risk might involve significant financial loss, reputational damage, or operational disruption.

How to look at probability or likelihood

Probability refers to the probability of a risk event occurring. It measures the chances that the risk will materialize. For example, a high-probability risk is more likely to happen than a low-probability risk.

By considering both the impact and probability of a risk, you can focus your efforts on mitigating the most significant threats to your organization.

Assessing Risks: A Step-by-Step Guide

Identify Potential Risks:

  • Brainstorm a list of potential risks that could affect your organization. Consider risks that could impact your financial situation, the way you are able to run your organizational processes, your reputational, and risks that relate to legal issues – think about compliance and adhering to legal requirements and regulations.

2. Evaluate Impact:

Assess the potential impact of each risk on a scale of 1-5 where you use either a 1 a 3 or a 5 to rate the impact of every risk you noted in case they happened:

  • 1: Low impact (minor financial loss or inconvenience)
  • 3: Medium impact (noticeable financial loss or disruption)
  • 5: High impact (significant financial loss, reputational damage, or operational disruption)

3. Assess Probability:

  • Estimate the probability of each risk occurring on a scale of 1-5. Use a number 1, 3, or 5 to rate the probability or likelihood that the risks you have would happen:
    • 1: Very low probability
    • 3: Medium Probability
    • 5: High Probability

4. Calculate Overall Risk:

  • The download template below will multiply the impact rating by the probability rating to determine the overall risk level.
  • Rank risks based on the calculated overall risk score. The higher the score, the more important it is to have a plan to avoid it, lower its impact (mitigation), or manage it if there is no way you can avoid it.

5. Develop Risk Strategies

This is where you spot potential problems and make a plan to deal with them. It could be to protect your money, keep your good name, and build a stronger, more stable organization.

Here are some types of strategies that might be needed:

  • Risk Avoidance: Remove or avoid the risk completely by putting some form of protection in place to ensure it can’t easily happen.
  • Risk Reduction: Instead of just letting problems happen, take steps to make them less likely or less harmful. Or you could say it is about implementing measures to reduce the likelihood or impact of the risk.
  • Risk Transfer: Instead of taking on the risk yourself, pass it on to someone else, like an insurance company.
  • Risk Acceptance:  Sometimes, risks are unavoidable. Instead of trying to stop them completely, be prepared for them. Have a backup plan in case things go wrong.

Taking Action: Protecting Your Organization

Once you’ve identified and assessed your risks, it’s time to act. Focus on the risks with the highest scores and implement your mitigation strategies. Remember, a risk assessment isn’t a one-time thing. Review it regularly to make sure it’s still relevant and up to date.

Share your risk assessment with key leaders in your organization. Their insights can help you refine your strategies and check to be sure they align with your overall business goals. By actively managing risks, you’re taking a proactive step toward protecting your organization and securing its long-term success.

Data Privacy Essentials: Your Compliance Starter Kit


Navigating the complex world of data protection can be overwhelming, especially for small organizations like charities and businesses.

The Perils of Data Breaches

When personal data falls into the wrong hands, the consequences can be devastating. Individuals may become victims of identity theft, financial loss, or emotional distress. Trust, once broken, is difficult to rebuild. Organizations face reputational damage, monetary penalties, and legal repercussions. Moreover, a data breach can erode public confidence in digital services, hindering innovation and economic growth. Safeguarding personal information is not just a legal obligation but a moral imperative.

Compliance

The General Data Protection Regulation (GDPR) has set a new global standard for data privacy in Europe. At this time there are several countries worldwide with similar compliance requirements – from Australia’s Privacy Act to California’s Consumer Privacy Act (CCPA), organizations across the globe are grappling with the complexities of safeguarding personal information.

Free draft forms and guidelines

Data protection can be a real headache, especially for small businesses and charities. That’s why this toolkit of draft forms and policies is here to help you get started with practical templates to help you stay compliant without the hassle.

Think of these draft documents as your trusty sidekick, providing a solid foundation for your data protection journey.

The toolkit has the following elements:

Data Protection draft Policy Template: Establish clear guidelines for handling personal data.

Data Breach draft Incident Report: Outline steps to take in case of a data breach.

Auditing and Monitoring draft Procedure: Maintain data protection compliance through regular checks.

Drat Data Subject Access Request (DSAR) Form: Efficiently handle requests for personal data.

Draft Data Protection Impact Assessment (DPIA) Form: Assess the potential risks of data processing activities.

While these may be a handy starting point, remember, that data protection is about more than just paperwork. To really protect your donors’, your employees’, your vendors’, and customers’ info, you’ll need to build a solid system that covers everything from training your staff to dealing with data breaches to having a process to report incidents, investigate and draw up an incident report and understanding the data you have and know if you have any risks if that data leaks out somehow.

  • Data protection impact assessments: You need to start out by identifying and managing high-risk data processing activities and making sure you address any high risks you identified in the process. Conduct regular assessments (maybe once a year) to identify potential vulnerabilities and implement appropriate data protection safeguards. [There is a draft form for that in the templates.]
  • Employee Training: Regular training to ensure staff understands their data protection responsibilities and can identify and prevent potential risks.
  • Data Minimization: Collect and retain only the necessary personal data and give them examples to help them understand what personal data is.
  • Rights of those whose data you have: Implement procedures to handle data access requests – they generally have the right to erasure or update of data you store, and other rights include the right to ask to see the personal data you keep on them. [There is a draft form that people can use to request access to the personal data you have]
  • Supplier Management: Ensure data processors comply with data protection requirements through contracts and oversight.
  • Incident Response: Develop a clear plan for responding to data breaches, including notification procedures. And make sure everyone knows which number to call or which email to use to report a suspected data breach. [there is draft information in the templates for how to report an incident and also questions to ask when talking to someone reporting a potential data breach.]
  • Continuous Monitoring and Review: Regularly assess data protection practices to identify and address potential vulnerabilities.

By combining the templates with these additional measures, you can help your organization build a strong foundation for data protection compliance and protect the privacy of your data subjects.

Onboarding Plan Template


Onboarding Plan Template

One of the key reasons that companies lose new hires with some experience is that they fail to support these new hires adequately during their first few months. In some companies, it can be quite hard to understand how things work there, how to fit in and be successful, feel valued and included. Having a written onboarding plan from the start is a great way to bring more clarity to the person and also help them understand expectations during the crucial early months in their new roles in the new company.

The onboarding plan can be written as early as during the recruitment process. In one best-case scenario, it was shared with a senior executive right after his interview with the CEO. It was such an unexpected and appreciated action that the executive commented how refreshing he found the transparency and it made him see the hiring company as head-and-shoulders above the competition which led to him accepting the offer and joining the company a few months later.

The Process

While the plan can help clarify the set-up and structure for a new hire, it is important to set up review meetings with the newly hired managers or key hires. In some cases, reviews with an HRBP could be useful to understand for example how performance management is organized and how the process works. Such review moments could also clarify talent development programs and processes, which is useful to know for the new hire regarding his/her own career but also for helping the new hire manage the development actions for those who report to him/her.

Review meetings with the manager that the new hire reports to could help identify priorities and understand where to connect with more people or build additional internal or external relationships. The manager can also answer questions about activities planned to ensure desired outcomes are achieved after 30-days, 60-days, and 90-days as captured in the onboarding plan.

The people side of success

The template captures not only the tasks and activities needed to succeed in a new role but also identifies people with whom to build relationships. These are important relationships and contacts that the new hire would need to establish and maintain to ensure his/her success in the long run. They could be key client contact personnel or contacts from key suppliers or subcontractors. They could also be internal – people who know how things work and who can advise on the best course of action to get something done at that company.

And it is also important to identify people who can be trusted to keep things to themselves and who could advise on who to talk to before moving in specific directions for changes the new hire would like to implement. Either the HR Director/HRBP or the new hire’s manager may be helpful to identify who those contacts may be.

Note that confidants or advisors may also be external people such as professional coaches or consultants.

Accountability

While it is important from a company’s perspective to ensure key new hires are provided with onboarding plans, completing the details and setting priorities to accomplish the outcomes defined in the plan lie with the new hire. The success of the new hire is only partially dependent on helping him/her get up to speed faster by having review meetings and an onboarding plan and giving him or her access to professional helpers and advisors. The new hire remains accountable for his or her own performance and following through on the items recorded in the onboarding plan.

When both the process of onboarding works well and the new hire holds himself/herself accountable for the outcomes produced, the risks of failure due to onboarding gaps are lowered and retention success is more likely in the medium to long term!

Useful posts for new employee/ new manager onboarding and orientations :

https://jo-anngarbutt.org/2015/09/15/new-employee-on-boarding-checklist-template/

https://jo-anngarbutt.org/2016/03/01/starting-right-new-managerleader-and-team/

Manage Risks of Early Promotion


Staged Promotions – Accelerate role-readiness using focused development with check-ins

Leaders are not always ready the moment you need them to step into a new role. An inexperienced leader can increase risks in continued customer satisfaction, operational / execution risks, and employee satisfaction and retention. Using a a staged promotion could be a way to mitigate risks, while ensuring that leadership development is accelerated and monitored with defined targets on knowledge gained and skills and competencies gained during each period within a specified timeline.

Process and Timeline

The graphic below outlines the process and shows an example of running the process over a 9-month period. The duration of such a process can vary but watch out for making the period too long – longer than 12 months. It can lead to process fatigue and demotivation of the leader. It is important that the process starts with an orientation to ensure the leader understands how the process will work and what is on the other side of the development period. The leader should be clear on what he/she is signing up for.

Defined learning path

During the development period, there needs to be a few concrete check-in points whereby the leader is demonstrating knowledge, skills and insights gathered and learned over the period. Instead of making the check-in points being general discussions, it is useful to select a few key focus areas for a presentation to be delivered at the end of each of the development periods.

Each check-in event needs to result in specific feedback being captured and shared with the developing leader. The feedback helps him/her to further focus and improve on their learning approach for the remaining learning periods.

The final check-in is usually the final decision-point where the executives present are willing to confirm the promotion of the leader – ending the interim nature of the assignment.

The example below shows how a project or facility leader can be assigned specific areas to learn about over the 9-month period. Each of the areas are important for the normal day-to-day activities of the developing leader and the focus simply means nothing is missed in helping the leader perform well in the role in future. It helps to include the strategic and the “why” part of a role since a new role is often mostly or mainly about the “what” to get done.

Notes

  • The orientation step which helps the leader understand the design of the development path, the role he or she has and also how to ensure his/her own success making use of available internal and external development resources. Before the orientation session, a leader has typically already understood from his/her manager that they are offered the development opportunity on an interim basis and the leader has agreed to proceed. The leader also needs to know what happens if he/she does not succeed at the end? Will they get a different assignment and what might that be?
  • Preparing the executives before the check-in events (when check-in events are set up to be a presentation followed by questions and answers). Executives need to understand the design of the development path, the purpose of the focus areas, the development needs of the leader and how they are to capture their feedback to be presented back to the leader after the event.
  • Feedback to the leader should be specific and be a balance of activities that are good to maintain, which ones to develop further and which ones to start or stop going forward. Specific examples of desirable behaviors or results should be highlighted. A discussion on risk identification and management may also be useful to help the developing leader understand how to adjust own focus to best mitigate and manage risks associated with own development as a leader as well as risks associated with the role..
  • This process is very useful to help a leader understand what the new role would include when they are meeting all expectations of stakeholders. A leader who feels uncomfortable meeting all those expectations will typically ask to be taken off the development path before the end having realize it is not for him or her. And this allows for re-assignment and solving the leadership vacancy in a different way.

Listening to a presentation by the leader on the assigned topics goes a long way towards providing executives with a sense of comfort (or alarm!) in terms of what can be expected from this leader in this role going forward. While these check-in points should not be the only determinant of how the leader is performing in the new role or estimating future behavior, it is a great way to understand the reasoning a leader applies in making business determinations and decisions and how the leader approach problem-solving when faced with adverse situations.

4 Common Disconnects on Multi-Cultural Teams


Working on multicultural teams you may have had moments of wondering what he or she just meant by that comment? Or why will he or she not make a key decision so an activity can move forward? Cultural perspectives and ways of life may be one of the reasons that could explain those incidents.

It is fun to meet people from other cultures and learn about their lives and experiences. And at first it may be interesting to learn how their cultures vary from your own, but once you work on a project together and it is remote working, including long hours and tight deadlines those differences can start to cause friction on the team. This can slow down progress and impact team morale. Being aware of the most common inter-cultural disconnects can prevent team members from blaming it on a person and instead enter into a discussion to unpack the root cause of a lack of action, lack of decision-making or the exact opposite – too many fast actions without thinking or making decisions without considering consequences.

4 Areas of misunderstanding that can impact inter-cultural teams

Some things are smart to do in order to ensure the team understands required project outcomes and approaches to use. Aspects would include clarifying the definition of done, outlining project phases and deadlines, assigning roles and responsibilities and having regular meetings to monitor and understand progress and resolve issues that are hindering progress or pose a risk.

Some aspects may need additional attention if your team consists of a few members from very different cultures.

1. Managing to deadlines

This relates to how important team members believe deadlines are. Some may see them as a guideline while others will suffer anxiety and will work longer hours to make sure the are met. In some cultures, there is a strong emphasis on being for example exactly on time for an appointment while in other cultures it may be okay to be a few minutes late for business meetings and perhaps even a few hours late for a social engagement.

Cross-cultural impact:

  • Make sure all team members understand the consequences, knock-on effects and penalties which may be triggered if the team missed deadlines. Monitor progress and have follow-up conversations if team members are falling behind to ensure they understand the importance of their activities being completed on-time.
  • Ensure team members understand the priorities they should place on various aspects of the work that needs to be done by the deadline. Ensure it is also clear exactly what “done” means. Do you expect quality checks to be done too or just a first draft of the outcome to be available? Should it be print-ready or just ready for an internal review or further discussions?

2. Clear Role Expectations

There are differences in cultures around the meaning of “in charge” or the Subject Matter Expert (SME). In some cultures, it is customary to take the word of such a person as a mandate to perform a specific task or action exactly according to what he/she said. In other cultures, SMEs and leaders are considered more “accessible”, and dialogue is welcomed when one does not agree with a requirement or task assigned by the one “in charge.” This difference can cause confusion on teams including many different cultures. To what degree can and should instructions be discussed and challenged vs accepted? Are those in expert roles or roles with authority prepared to deal with challenging discussions and comments – if the project team will operate in a culture of open discussions?

Cross-cultural impact:

  • Have a role discussion at the start of the project and include what would be great questions to ask each role and how interaction is expected to take place on the project to maximize positive team outcomes.
  • Be sure to have further discussions highlighting best-practices during the project and as new team members join, who may have missed the original discussions around the different project roles and how to best interact with them.

3. Conflict resolution

Conflict shows up differently in each person – some people speak up and go to the “max ” to be heard and understood while others take their thoughts, feelings and especially resentment underground and do not speak out. This means that conflict can be hard to resolve and to feel comfortable that all thoughts and concerns are on the table and discussed before decisions are made. Some cultures are more likely to speak up and make sure their opinions are voiced while others might patiently and politely wait to be asked for an opinion and speaking out of turn (from their perspective) may be seen as impolite or disrespectful. In some cultures open disagreements are best avoided to maintain a cordial/good relationship with others on the project.

Cross-cultural impact:

  • Use more than one channel to check in with team members and get feedback – ask in meetings, but also check in with individual team members between meetings to understand if there is any part of the path forward chosen which concerns them.
  • If any team members are especially aggressive in voicing opinions, perhaps a quiet word might help that person to still voice opinions, but possibly in a less forceful way to avoid antagonizing anyone from a culture where a forceful (overly enthusiastic ) communication style might cause discomfort.
  • Provide training in non-violent communication and voicing messages with a healthy balance between listening and advocating. Help team members to constantly improve in understanding each other’s styles to help communication and collaboration efforts on the project.
  • When a conflict does occur, address it in a culturally-sensitive way if the disconnect could be related to a cultural difference in perspective. The objective should be to solve and address project issues in a helpful way without causing negative impacts to collaboration on the project.

4. Navigating with many languages

We all know of situations where people from the same country with the same language find it hard to communicate successfully with understanding and openness. When a team consists of many different cultures, this can be so much more confusing and frustrating.

Cross-cultural impact:

  • Agree from the start of the project to follow a few guidelines such as: For the chosen project language, native speakers are to slow down and use simple ways to bring their points across. And native speakers of the main project language will be patient with non-native speakers trying to get their thoughts across. If there is a large language ability gap between the native-speakers and other team members consider some language classes to bridge the gap.
  • Consider asking presenters/speakers at planned meetings to send out specific agenda items and a summary paragraph of the issues to be raised and discussed at least a day before the meeting. That would help non-native speakers to prepare ensuring they understand the issues and are able to fully participate in the conversation at the meeting.
  • When there are significant differences in levels of language abilities on the team, meetings may take longer, and collaboration may also be a little harder especially in a virtual/remote environment. Be sure to take this into account when planning project timelines and deadlines.

Plan ahead to succeed

Knowing you may be starting up a project with a multi-cultural team, schedule team-building activities for team members early on. This will help them get to know each other as humans/people. Establishing trust early on, can avoid frustration turning into conflict and delays in reaching project team deadlines.

Create team opportunities to get to know more about each other’s cultures. This could bridge the gap in understanding each other’s perspectives and avoid labeling, misunderstandings, and internal team misalignments..

Set continuous learning as one of the core values of the team and live it, encourage it and keep bringing the team back to what can be learned from successes and failure as the project progresses. Having a curious and learning mindset is a great way to avoid major disconnects between team members as they will engage in inquiry and advocacy vs judgment and labelling as a default behavior.

Avoid Leader Derailment


The Center for Creative leadership’s (CCL) research on executive success and failure identified the significance of “derailers”, and how they differ from just mere weaknesses. They studied leaders who made it to at least the General Manager level, but then their careers had involuntarily stalled, or they had been demoted, dismissed, or asked to take early retirement.

A derailer is not just a weakness. We all have many weaknesses that we may never choose to improve, and some weaknesses do not impact our career success in a major way. A derailer is a weakness that requires improvement if employees wish to realize their full potential in their careers and especially as leaders.

Why do leaders fail?

Leaders most often fail due to unaddressed weaknesses, derailers, and if left unaddressed for long enough these become habits that start to shape a leader’s style of interacting with others. The steady number of reported incidents involving significant leadership behavior issues in companies of all sizes and across industries is a strong reminder not to think that it cannot happen in your company.

Most leadership derailers will not cause the fall of an entire organization. But they can certainly lead to a failed career. The question you need to ask yourself is: “What type of derailers would cause a leader in my organization to fail?” Or, as a leader, “Which derailers am I prone to and how can I address them?”

How do successful leaders avoid derailment?

  1. They seek feedback throughout their careers from people at various leadership levels and from various functions both within the organization and external to the organization (as appropriate).
  2. He or she seeks developmental opportunities that can help overcome flaws and ask for developmental advice from other trusted leaders, coaches, or confidants.
  3. They seek extra support and coaching during transitions and especially when a possible “trigger” event occurs, which they do not cope well with.
  4. They remain aware that new jobs require new approaches and behaviors and successful leaders not only recognize this but reach out to ensure they have the right support and advice to successfully navigate through a transition into a new role.

How can the organization help to avoid a leader from derailing?

Organizations can take actions to ensure that leaders are aware of weaknesses which could derail them in the future and the following cautions can help with that:

  • Consider career paths that include time spent in various different groups, business units, or functions instead of a career path that simply moves in a straight vertical line within the organization.
  • Encourage and promote feedback to employees that focuses on “how you did it” instead of “what you did” only.
  • Beware to not consider one failure by a leader as a sign that he or she is completely “off the track” and using it as a critical development need to address instead.
  • Avoid moving managers to new roles too fast and instead allow them to remain in a role long enough to experience the consequence of business decisions and learn from it. A strong culture of learning and “failing forward” is a great environment for leaders to address high-risk weaknesses at an early stage of their careers.

Identify possible derailers – Self Assessment for leaders

This self assessment can be done between a leader and his or her coach to open up conversations about “what can stop me from reaching my leadership goals and ambitions?”

An honest look at the listed factors can help a leader identify perhaps the one or two behavioral traits that could possibly derail him or her in the future. Working with a coach, a leader can explore different ways to handle some of the situations which they had not handled well in the past.

Both organizations and leaders within the organization need to take responsibility for identifying signs of weaknesses that could derail a leader in future and then commit to addressing the issue before it becomes a derailer. The costs of failure in this area is not only public humiliation for the leader and a public relations challenge for companies, but also has tangible costs when one considers for example costs associated with a high staff turnover, which often accompanies groups where the derailed leader has worked over the years.  

Reference checks


After interviews have taken place you will want to take a few more steps before you decide whether to make an offer to one of the job candidates you have for a vacancy. You may want to ask candidates to complete assessments or you may want to get the perspectives of their former colleagues before you make a decision.

Additional steps after initial interviews or between rounds of interviews could include:

  • Tests or assessments.
  • Practical exercises like a business case or even a presentation to be made to some senior leaders or experts at your company.
  • Reference checking with former colleagues, former direct reports or former supervisors of the candidate(s).

Checking References

The (download) template I am sharing below contains a few questions to help you understand whether one candidate may be preferred compared to another given their experiences and approaches.

Background checks are used in some countries but can be harder to obtain in countries or regions where data and privacy protection laws exist. In most cases, criminal background and/or financial history information can only be obtained if the prospective employer can show a direct link between the requirements of the role and the information it wishes to obtain. Reference checks are typically easier to conduct in most countries, but be mindful of the kinds of information that you would be reasonably able to obtain given local laws.

Be mindful to:

  • Ensure that you notify any impacted job candidates (i.e. in areas such as Europe) about the data you wish to obtain and how you would process this data to avoid the risk of non-compliance. Job candidates need to know this at the start of the process and they must (actively) agree with your proposal for collecting data before you are able to proceed.
  • Ensure that all data obtained during the recruitment process is archived or destroyed after the process has been completed for a specific vacancy. All HR personnel who deal with such data would need to understand that this also includes any data that have been saved to their individual computers during the process.
  • Make sure the data you wish to obtain is relevant to the hiring decisions you wish to make. And make sure that those who would speak with candidates or possible referees can explain the connection.

Assuming that you have taken all precautions to ensure you are not incurring any risks with your planned reference checking approach, use the questions you have selected (the download template above can help) when you contact the list of referees provided by the job candidate.

You can use the template in a few ways:

  • Set up a time to talk to each referee via phone or Skype and go through the questions, capturing his or her responses.
  • Send each referee a form and ask him/her to complete it and return it to you – typically via email. Be aware that this approach does not offer you much opportunity to ask further questions to clarify without creating a few extra emails to the original string.
  • Set up the questions as an online survey (for example using www.surveymonkey.com) and share the link with referees. Note that data interpretation may be an issue here – not knowing what a referee meant by a specific score or comment. This also means you would have to contact referees again to clarify feedback. One way to improve data interpretation is to build in comment fields to explain scores.

Finally, it is important to understand that a reference check is just one of the data points that could support decision-making related to hiring the best candidate for the vacancy.

Feedback may be incomplete for a number of reasons:

  1. The referee wishes to avoid any unpleasant situation with the former employee and wishes to be cautious in his/her responses.
  2. There may be laws in the country which specifies what referees can or should say and what they cannot comment on.
  3. The previous company may have clear policies about what can be shared by referees, which may be limited to job title and years of employment at the company.

Getting feedback from those who previously worked with a job candidate can still be valuable – understanding how the candidate’s knowledge or work methods would fit in with the job requirements or the company culture. For this reason, it can be good to get more perspectives. Just be aware of possible risks given the changing legal environment as you obtain feedback from referees.

Risk Management TEMPLATE


Considering risks is a high priority for any project execution planning activity. It is important to also frequently re-assess during the project life-time. The project team should check the status of the risk plan against reality at various moments in time to ensure all risks are captured and accurately reflected along with mitigation or risk avoidance plans as required.

A risk plan is simply a plan that helps you identify where obstacles to successful outcomes could appear and what you could do about it. In some cases a potential risk can be avoided by taking some preventative actions in time. Some risks or obstacles could be things that can happen at any moment and some would only occur under specific circumstances. The project team should consider the key elements of the  project plan – where would the project plan have the highest risk of failing if key milestones or achievements are not met? That is the starting point of the template that I am sharing with you.

The risk mitigation template  shows you how to identify risks, identify the risk level of a possible obstacle to project success, determine what can be done to avoid or mitigate an issue/obstacle to success  and of course select who exactly should take the actions in the event that the risk is realized or upfront as a preventative measure.

Just download the attachment and complete the sections in yellow for each of the key elements of your project plan. Then answer the questions as outlined at the top of each column for each of the key parts of your plan.

When you review the plan look at the elements that were rated as “high risk” that it could occur and also a “high impact” if that risk did materialize. Focus your attention more on those items, but it is also true that sometimes a “low risk” obstacle could have a high impact on the project so be sure to review every element of the risk plan when you do your regular risk plan checks.

Every plan has risks and great returns on investments are often associated with a higher level of risks. The objective is not to avoid risks completely since the ability to manage risks well and willingness to accept and manage risks can be a competitive advantage in the marketplace. This template can help you increase your awareness of risks and learn how to manage them throughout your project. Becoming better at risk management will make you a valuable project member and business partner.