In a system driven by centralized review of risk, it makes sense to summarize and prioritize so that decisions can be made that address the “most critical” risks to the enterprise as a whole. Unfortunately, this approach can leave the concerns of many individual departments, schools or even colleges out of the final risk analysis. George Mason University recently took a different approach to evaluating risk by implementing a series of in depth personal interviews with key stakeholders whose operations were determined to present the highest risk to the university should they fail or be severely compromised.

SACUBO Effective Practices