Risks are categorised into low, medium and high, and a likelihood and impact score are determined. Click any block to open the full detail for that risk.
All material matters in full
Implementing projects and/or Cotlands programmes in poorly resourced areas and/or far distances from the Head Office.
Why it matters: Implementing projects and/or Cotlands programmes in poorly resourced areas and/or far distances from the Head Office.
Impact on 2026: Risk level: High.
Response:
- Have all multi-year and complex first-time contracts reviewed by an external contract specialist.
- Negotiate a no-cost extension with the donor.
- Build in a time buffer in the project implementation plan.
- Have an internal contract management process.
- Adjusting our costing.
- Include a clause to recruit outside the local area if we can’t find a suitable candidate or do an internal transfer.
- Regular communication with funders.
Stakeholder importance: Likely — Likelihood of the risk occurring.
Organisational impact: Significant — Impact on the organisation if realised.
Cyber attack resulting in loss or compromised data.
Why it matters: Cyber attack resulting in loss or compromised data.
Impact on 2026: Risk level: Medium.
Response:
- Staff training on Cyber risk and data security.
- Annual review and update of Anti-virus protection on all laptops and consider more secure protection for the management team hosting sensitive software.
- Engage a third party to evaluate the cyber risk of the organisation.
Stakeholder importance: Possible — Likelihood of the risk occurring.
Organisational impact: Significant — Impact on the organisation if realised.
Lack of skills and/or affordability to fulfil the organisation’s strategic goals.
Why it matters: Lack of skills and/or affordability to fulfil the organisation’s strategic goals.
Impact on 2026: Risk level: Medium.
Response:
- Implement internal training.
- Recruitment for vacant positions.
- Use social media to boost the advertisements for new positions.
- Reviewed salaries for certain roles to align with market-related salaries.
Stakeholder importance: Possible — Likelihood of the risk occurring.
Organisational impact: Major — Impact on the organisation if realised.
Loss of Executive Management Team and critical roles.
Why it matters: Loss of Executive Management Team and critical roles.
Impact on 2026: Risk level: Medium.
Response:
- Targeted profiling of potential successors.
- Review the succession plan.
- Budgetary provision for succession.
Stakeholder importance: Possible — Likelihood of the risk occurring.
Organisational impact: Major — Impact on the organisation if realised.
Loss of life or serious injury within Cotlands’ jurisdiction.
Why it matters: Loss of life or serious injury within Cotlands’ jurisdiction.
Impact on 2026: Risk level: Medium.
Response:
- Maintaining an accessible policies repository.
- Regular training of employees on relevant policies and procedures.
- Periodic review of the relevant policies and procedures.
- Risk audit by OHS specialist.
Stakeholder importance: Possible — Likelihood of the risk occurring.
Organisational impact: Major — Impact on the organisation if realised.
