Shaping Our Future: Modernizing Risk Management at Regis

Welcome to the central hub for the Regis University Risk Management Revitalization Initiative. This page provides transparency into how we protect our campus community, optimize our resources and elevate your collective voices to build a more resilient institution.

What is Risk Management?
Risk management is the proactive process of identifying, assessing and preparing for potential threats to our institution's operations, finances and reputation. Instead of simply reacting to crises after they happen, an effective risk management system allows Regis to foresee obstacles—ranging from cybersecurity vulnerabilities and compliance requirements to academic disruptions—and implement strategic plans to minimize their impact.

Why Are We Revising Our Approach?
To date, Regis has maintained a highly detailed, traditional register of over 150 individual risks. While thorough, managing 150 separate threats simultaneously dilutes our organizational focus and spreads our valuable institutional resources too thin.

We are moving away from this legacy model to build a modern, high-impact framework:

  • From 150 to Core Focus Areas: We are consolidating and prioritizing our efforts down to a critical set of 3 to 10 core institutional risks.
  • Targeted Resource Allocation: Narrowing our focus ensures Regis can dedicate meaningful budget, time and personnel to effectively mitigate the threats that matter most.
  • An Inclusive Change Model: We are shifting from closed, top-down administrative reviews to an open, inclusive model. True institutional resilience requires ground- level insights from the faculty and staff who manage our day-to-day operations.

Our Progress and Next Steps
Through our recent campus-wide Risk Management Survey, faculty and staff across all departments shared their expertise to help review, rank and draft the risks facing our university.

The Risk Management Committee is currently using this stakeholder feedback to finalize our core focus areas. By honoring the collective voice of our campus, we are moving Regis from passive risk awareness to active, community-wide ownership of our strategic security.


Frequently Asked Questions

What happens to the remaining risks from the original list of 150?
They are not being ignored. Risks that do not rise to the level of the top 3–10 institutional focus areas will be reassigned to the specific departments, colleges, or operational units best equipped to manage them daily as standard operational procedures.

How will the final 3–10 core risks be managed?
Once finalized, each core risk will be assigned to a dedicated institutional steering body. These teams will receive direct university resources to draft, fund and execute comprehensive mitigation plans.