We use cookies to help us provide you with the best experience, improve and tailor our services, and carry out our marketing activities. For more information, including how to manage your cookie settings, see our privacy notice.


Skip to content. | Skip to navigation

Community-made content which you can improve Case study from our community

13. Risk map

This page is free to all
Guidance on writing the 'Risk map' section of your business plan.


You’ve referred to risks throughout the business plan – you can summarise them here.

If you’re a charity, it’s your trustees’ responsibility to make sure that risks to the organisation are identified and managed. Risk mapping is a useful exercise and easy to do with your board or management team using a flip chart and some pens. You can also use our risk register template.

You could include a full risk register in an appendix.

Set out your main risks in a table

Try to think about risk across everything that you do, including:

  • governance risks, eg conflicts of interest, failure of leadership
  • external risks, eg changes to the policy environment, a public complaint or bad press coverage
  • regulatory or compliance risks, eg failure to meet necessary standards
  • financial risks, eg loss of major income source
  • operational risks, eg loss of key staff, poor quality of support given to vulnerable beneficiaries, failure to deliver products on time.

For each risk, decide how likely it is to happen, what impact it will have on your organisation and what you can do to reduce or manage the risk.




Mitigation tactics

Chief executive resigns



Make sure knowledge transfer to heads of department; assign secondary staff contact to all key networking contacts of the chief executive.

Page last edited Oct 12, 2020

Help us to improve this page – give us feedback.