Reporting of risks is an inherent part of risk management. The reporting of risks in UNDP creates risk awareness at all levels of the organization, and ultimately builds a transparent and improved decision-making process. Reporting on risks in UNDP follows established organizational reporting lines. Part of reporting is documenting the risk management process where the Risk Log is the primary document. In addition to the regular reports, and in line with the risk acceptance guidelines, the occurrence of red and orange risks (as per the risk acceptance guidance in UNDP Enterprise Risk Management (ERM) policy) should also be reported on an ad hoc basis. The ad hoc reports should simply include a description of the risk, the initiated treatment/status and (possibly) call for action or request for assistance.
In the context of the Global Fund-financed projects the Principal Recipients (PRs) are expected to report on risks during regular reporting (i.e. when submitting a Progress Update). Section 3 of the Progress Update requires PRs to report on risks of stock-out or expiry of key pharmaceuticals and health products. Section 5 of the Progress Update requires PRs to report on external factors beyond their control that have impacted or may impact the programme.
Example A: In the example of the risk of poor programmatic data quality, after implementing risk mitigation measures the team undertook targeted monitoring visits to three regions and analysed the actual under-reporting in order to assess whether risk mitigation measures were effective. The implemented risk mitigation measures were recorded in the Risk Log. In the first Progress Update to the Global Fund the team reported on implementation of the capacity building activities and their effects.