Welcome to RIMScast. Your host is Justin Smulison, Business Content Manager at RIMS, the Risk and Insurance Management Society.

In this episode, Justin interviews SERMC members Suzanne Christensen and Trisha Sqrow about the new RIMS Executive Report they co-authored with Joe Pugh, also of the SERMC, "Board Risk Reporting: How to Deliver Insights that Matter." Suzanne and Trisha share tips for preparing to report to your board, how frequent reporting should be, and the difference between the board's oversight and the executive team's management. Trisha also shares descriptions of her two upcoming RISKWORLD presentations on May 6th.

Listen for insight on providing the board with the information they need to support the organization's objectives and strategies.

Key Takeaways:

[:01] About RIMS and RIMScast.

[:14] Public registration is open for RISKWORLD 2026, which will be held from May 3rd through 6th in Philadelphia. Visit RIMS.org/RISKWORLD to register.

[:27] About this episode of RIMScast. Our topic is board reporting and ERM, and our guests are Trisha Sqrow and Suzanne Christensen of the RIMS Strategic and Enterprise Risk Management Council. They've co-authored a new Executive Report. We're going to talk all about it. But first…

[:58] RIMS Virtual Workshops. The next RIMS-CRMP Exam Prep Course will be on April 21st and 22nd, and then again on June 9th and 10th. Registration links are in this episode's notes.

[1:14] Webinars. On April 16th, Zurich and World Travel Protection will present "Navigating the New Global Risk Landscape: Lessons for Business Travelers in Unstable Times".

[1:24] On May 14th, Origami Risk will return with a new session, "Future-Proofing Your Risk Program: Keeping Pace with Scale, Complexity, and Visibility." Register for webinars at RIMS.org/webinars and through the links in this episode's show notes.

[1:39] Folks, for more RIMS content, head over to YouTube and subscribe to @RIMSOfficialChannel. There you will find video podcasts, RIMScast Canada video podcasts, and other informative and entertaining content from RIMS.

[1:55] Head over to RMMagazine.com for the Q1 Edition of the Azbee-Award-winning publication, RIMS Risk Management Magazine.

[2:06] On with the Show! Our guests are Suzanne Christensen and Trisha Sqrow. As members of the RIMS Strategic and Enterprise Risk Management Council, they co-authored the new RIMS Executive Report, "Board Risk Reporting: How to Deliver Insights that Matter."

[2:24] Co-authored by Joe Pugh of the AARP, a RIMS Strategic and Enterprise Risk Management Council member, the report provides practical insights and guidance to risk practitioners who report to their organization's board of directors or overarching governance committees.

[2:38] The report provides guidance on aligning this reporting with the board's role and expectations, the steps that should be taken to sustain the alignment, and how to ensure reporting provides the board with the appropriate level of detail.

[2:52] The link to the report is available in this episode's show notes. You can also visit the Risk Knowledge section of RIMS.org. If you like what you read and you like what you hear today, be sure to hear Patricia and Joe at RISKWORLD on May 6th at 11:30 a.m. in Room 119-AB.

[3:11] They will extend the dialog with the session "From Risk Aware to Risk Savvy: Elevating Board-Level Risk Reporting and Engagement." It will undoubtedly be a fantastic session!

[3:21] Let's talk about board reporting right now!

[3:23] Interview! Suzanne Christensen and Trisha Sqrow, welcome back to RIMScast!

[3:31] Suzanne Christensen and Trisha Sqrow have been carrying the torch for the Strategic and Enterprise Risk Management Council at RIMS for years. Now, they are rejoining us on RIMScast. It's a delight to welcome them both back.

[3:57] The new RIMS Executive Report, "Board Risk Reporting: How to Deliver Insights that Matter," was co-authored by Suzanne Christensen and Trisha Sqrow, with Joe Pugh, who is also on the Strategic and Enterprise Risk Management Council.

[4:15] This paper is available for a limited time exclusively to RIMS members. It will then be open to the public. There's a lot of great information in it, and it gets right to the point.

[4:40] Research shows that while many risk professionals believe their reporting supports board decision-making, most boards are still asking for more information and deeper analysis.

[4:47] Trisha says, boards are becoming more interested in understanding the risk profile of the organization, what's being done, and how leadership is managing risk, because we are in a complex time. There are so many risks that are not internal.

[5:33] The board is asking: How do we look at this, how can we manage what we can, and prepare for and respond to those things that we can't manage, but that could come and hit us? [5:47] Boards are more interested. They have regulatory concerns and requirements, potential liability, and things of that nature.

[6:07] Suzanne agrees with Trisha about the complexity in our post-COVID world with the interconnectedness of risks and the unexpected. Regarding the pace of change, Suzanne says hang onto your seats right now, particularly with AI!

[6:30] Boards serve a lot of constituents and stakeholders, and they're feeling pressure. They're looking for more insightful analysis. The report gets into how to figure out what is insightful to a board. Justin notes that each board will have a different definition of insightful.

[6:58] One board can change over time as different board members bring different dynamics and expectations to the board. The paper has a point about keeping pace with the board.

[7:18] The paper makes the point that effective board reporting is not about what risk teams want to say but about what boards need to hear.

[7:43] Suzanne breaks down the difference between the need that the board knows and understands, and articulates, and the things they should also know, to be good board members. That takes exploration. There are things the board might not know to ask.

[8:10] Risk professionals have knowledge and context. They need to lean in and say, "You're asking for this, and that's super important, but in addition, here are some other things to be aware of." You need to start with a mutual understanding. There's a process to go through.

[8:31] Trisha says the risk practitioner has the largest view of the risk profile of the organization. The board is thinking more of strategic goals and objectives, but they do want to know about the risk. Board risk reporting is a matter of working to connect strategy with risk management.

[9:07] The risk practitioner can develop a culture of discussion and openness to discuss risks, mitigations, and possible blind spots.

[9:26] Suzanne says one of the primary roles of the board is to make sure the firm has the right strategy and they're executing it appropriately. The biggest risk to the board is becoming irrelevant to constituents and clients. Not all key risks to the organization are equal to the board.

[9:59] The board spends more time on the strategic risks. When reporting, you can't forget the operating risks. You can summarize them as "Here are some things to look at that we've got covered. So, let's spend more time over here."

[10:46] If you don't first build alignment with executive management before engaging with the board, Suzanne says you'll end up with a modern-day Babylon. You won't end up with support from the key risk owners on the strategic side. The owners of the risk are the decision-makers.

[11:02] The decision-makers are management and executive management. It has to be their story, and they have to buy in. Risk practitioners are the facilitators to create that alignment so those conversations can be robust, open, and transparent.

[11:44] Trisha says the executive leadership team (ELT) is the liaison and connection to the board. Most risk practitioners may not be in all of the board meetings or interacting with the board regularly. The executive leaders probably are.

[12:05] The ELT can bridge the gap. They have the relationships and know the personalities of the board members. They understand how the board likes to receive information and can help the risk practitioner develop reports in that way. They can open the line of communication more.

[12:28] Trisha says that in her previous work for DFW Airport and others, they did this through the structure of the Enterprise Risk Management program, having a risk council report periodically to the ELT, so they have the information and can go forth with it.

[13:17] Suzanne says the best practice is to spend some prep time to get some baseline knowledge and level-setting across, so when you go into those m...