The University of Waterloo Risk Management (URM) Program is institutional-level and overarching. Reporting is done by senior administration, as set-out in Policy 11 - University Risk Management. This is why there is one Institutional Risk Appetite intended mainly for senior administration but other managers may refer to the URM Program to support senior administration in that regard.
The Chief Risk Officer performs a survey on a periodic basis to identify and rank the top thirty Risks for the University of Waterloo. The top ten Risks identified in this process are given priority in the development of mitigation plans and reporting to the Audit & Risk Committee of the Board of Governors.
See the Risk Management Reporting Guideline for more information.