FY 2025 Risk Assessment Template.docx

RISK ASSESSMENT TEMPLATE

Note: Delete instructions, suggested examples, and links from your submission.

Risk Assessment Instructions The purpose of the risk assessment is to identify internal and external risks related to the proposed project, assess the likelihood and potential impact of these risks (“high”, “medium”, or “low”), and identify actions to mitigate each identified risk. The risk assessment should describe your organization’s country/regional-specific mitigation strategy (including for sub-recipients) and include, but not be limited to, the following categories of risk:

Safety and security (including sexual exploitation and abuse) Programmatic Fiduciary and legal Information technology Reputational Provide additional analysis of a program’s legal exposure if operating in locations where U.S. designated Foreign Terrorist Organizations (FTO) or sanctioned actors live, operate, or control territory (see “Analysis for Environments with Sanctions or Terrorist Actors” below). Finally, the risk assessment should be treated as a living document. PRM expects partners to conduct risk analysis and remediation throughout the program’s life, revise risk-related analysis and processes, and promptly share updates with PRM.

Table: Suggested Risk Assessment Format

Impact of Risk Risk Mitigation Plans/Actions

Discuss planned risk-specific reporting, monitoring, and standard operating procedures, such as counselling services, human resource policies, and/or other controls.

HIGH, MEDIUM, or LOW

Discuss planned risk-specific reporting and monitoring, standard operating procedures, such as ethics training, whistleblower policies, screening of potential employees and sub-recipients, and/or other controls.

HIGH, MEDIUM, or LOW

Discuss standard operating procedures, such as cyber/digital security, protection of program participants’ personal data, and/or other controls.

HIGH, MEDIUM, or LOW

Discuss planned risk-specific reporting and monitoring, standard operating procedures, such as conflict of interest policy, ethics training, and/or other controls.

Analysis for Environments with Sanctions or Terrorist Actors PRM recognizes that some programs operate in locations where FTOs and/or other sanctioned actors operate. Exposure to FTOs and/or sanctioned actors can introduce potential legal, reputational, and programmatic risks. Applicants should identify and explain context-specific safeguards and risk mitigation strategies.

The annex should:

Analyze the operating environment in the geographic areas where your organization plans to work. Identify FTOs and/or other sanctioned actors present in or controlling territory and explain how they interact with humanitarian organizations and programming.

Describe the controls and systems the organization uses to ensure that procurement and hiring do not benefit FTOs and/or other sanctioned actors. This should include searches of potential employees, partners, vendors, and consultants through widely recognized commercial screening software and/or public databases like SAM.gov, the Department of the Treasury’s Office of Foreign Assets Control’s (OFAC) Sanctions List Search Tool, UN Security Council Sanctions Lists, the Terrorism Exclusion List. Please also explain any additional internal processes for screening staff and vendors.

Explain the safeguards you will put in place to prevent interference or influence by, transactions with, or provision of benefits to FTOs and/or other sanctioned actors during all phases of program implementation. Clearly articulate triggers for action and specify organizational processes for decision-making.

Describe how you will prevent direct or indirect benefits to sanctioned groups and individuals through commercial activities including the movement of equipment or supplies into proposed areas that result in the payment of taxes, fees, tolls, etc., to a sanctioned group or individual.

If the host government is subject to comprehensive sanctions (i.e. Syria, Venezuela, et al), describe your plans to avoid or limit incidental provision of salaries, stipends, per diem, import/export or other taxes or tolls, security escort fees, other fees, or provide incentive payments to, or purchase in-kind goods or services from, the host government (including ministries, local affiliates, government security actors, or de facto government authorities).

Describe measures to mitigate the risk that a sanctioned group or FTO would receive reputational benefit from the proposed program, such as a sanctioned group claiming credit for the assistance or services provided.

Explain how participant and recipient targeting, and registration ensure that program participants are not sanctioned group members or affiliates, or designated terrorist organizations.

Describe how you will verify that assistance reaches the intended participants and is not diverted following distribution or service.

Include any other additional internal controls and oversight mechanisms you will put in place with respect to mitigating sanctions risk.

Helpful Links General Services Administration’s System for Award Management (SAM) U.S. Department of the Treasury Office of Foreign Assets Control Sanctions List Search Tool | Office of Foreign Assets Control (treasury.gov) Frequently Asked Questions | Office of Foreign Assets Control (treasury.gov) UN Security Council Sanctions List U.S. Department of State’s Terrorist Exclusion List