February 28, 2025
Navigating the World of Uncertainties Impacting Nonprofit Organizations
On February 20, 2025, GRF and NC State University’s Enterprise Risk Management Initiative held their 6th annual ERM in Nonprofit Organizations Workshop, Navigating the World of Uncertainties Impacting Nonprofit Organizations. Nearly 100 nonprofit executives and board members attended to discuss strategies for enterprise risk management. Here are key takeaways from the event.
Key Topics
- Highlights from Executive Perspectives on Top Risks for 2025
- The Complex Risk Environment for Nonprofits in 2025
- Beyond Risk Identification and Assessment: Competency-based Training for Risk Owners
- Escaping Common Risk Management Traps
- How Foundations Are Thinking About ERM
Highlights from Executive Perspectives on Top Risks for 2025
Presenter: Mark S. Beasley, NC State University
- The report surveyed 1,215 executives and board members about near-term (2-3 years) and long-term (a decade) risks.
- Top near-term risks included economic conditions, cyber threats, talent management, and labor costs.
- For nonprofits specifically, top risks were cyber threats, regulatory changes, and third-party risks.
The Complex Risk Environment for Nonprofits in 2025
Presenters: Amy Boland, Tricia Katebini, Max Manley, and Leslie Zeid from GRF CPAs & Advisors
- Diversity, Equity, and Inclusion (DEI) initiatives are significantly impacted by executive orders.
- Organizations should review HR policies for compliance and be prepared for investigations.
- Nonprofits must document all costs related to stop work orders and ensure compliance with relevant laws during furloughs or terminations.
Beyond Risk Identification and Assessment: Competency-based Training for Risk Owners
Presenter: Paul Miller, National Institutes of Health
- Risk Management Champions at NIH are trained using a competency model addressing both technical and soft skills.
- The ADDIE Model is used for training development: Analysis, Design, Development,
Implementation, and Evaluation. - Soft skills training includes conflict resolution, emotional intelligence, and change management.
- Quality of risk data at NIH improved from 44% in 2022 to 64% in 2024.
Escaping Common Risk Management Traps
Presenters: Ruth Rhoads Allen, Lindsay Hamsik, and Kim Valente
- Common traps include focusing more on systems than people and disempowering staff.
- Effective practices include building trust within ERM committees, clearly delineating risks, and integrating risk into other management processes.
- Recommendations include using risk scorecards, facilitating discussions on causal factors, and using tabletop exercises.
How Foundations Are Thinking About ERM
Presenter: Kim Matheson, retired from Margaret A. Cargill Philanthropies
- ERM involves making intentional decisions on which risks to take to achieve the mission.
- Creating a broad-based risk infrastructure and culture is crucial.
- Transparency and collaboration between funders and grantees are essential.
- Risk appetite statements should empower staff with clear guidelines and decision-making processes.
Presenters
Ruth Rhoads Allen – President and Chief Collaboration Officer at CDA Collaborative Learning
Lindsay Hamsik – Senior Director for Risk Management at HIAS
Kim Matheson – Retired Director of Enterprise Risk Management at Margaret A. Cargill Philanthropies
Paul Miller – Management Analyst at National Institutes of Health
Kim Valente – Chief Financial Officer at StrongMinds
From NC State Poole College of Management
Mark S. Beasley – Alan T. Dickson Distinguished Professor of Accounting, Director of the
ERM Initiative | Poole College of Management at NC State University
Ericka Kranitz — Professor of Practice & Director, Master of Management, Risk & Analytics Concentration | Poole College of Management at NC State University
From GRF
Andreas Alexandrou – Partner, Audit Services | GRF CPAs & Advisors
Amy Boland – Partner and Director, Audit Services | GRF CPAs & Advisors
Jackie Cardello – President and Managing Partner | GRF CPAs & Advisors
Tricia Katebini – Partner, Audit Services | GRF CPAs & Advisors
Max Manley – Partner, Audit Services | GRF CPAs & Advisors
Melissa Musser – Partner and Director, Risk & Advisory Services | GRF CPAs & Advisors
Ricardo Trujillo – Partner, Audit Services | GRF CPAs & Advisors
Amy Wares – Enterprise Risk Management Specialist, Risk & Advisory Services | GRF CPAs & Advisors
Leslie Zeid – Principal, Outsourced Accounting Advisory Services | GRF CPAs & Advisors
Stay up to date on plans for our next workshop!
