Problem
I. Recall the non-profit case studies (BSA, Catholic Church, CAN Red Cross, USA Gymnastics). Choose one of them to answer the following questions.
i. How should risk tolerance be thought about for a non-profit? For example, we can afford to lose at most ....
ii. Where was the risk failure in this case? From an ERM quadrant perspective, how would you classify it? Could it fall into more than 1 category?
iii. What type of risk financing would the organizations need for the future?
iv. What types of risk control might be beneficial?
v. Would it make sense for the organization to become a for-profit entity? Give a reason for your answer.
II. Grocerycart, LLC an online grocery delivery service, is considering an IPO. It has submitted a shelf-registration statement to the SEC that will allow it to pick and choose the right time to make the IPO. In the run-up to the IPO, one of their inside investors told Grocerycart's management that they needed to beef up their risk management. The company has a strong IT focus and is run by engineers.
The CIO, Marie Toolan, is resistant to ERM as she thinks it is too costly. Her approach is to manage risk by ensuring that the risk of a cyber-attack or an IT failure is 0. She believes that she can manage all the firm's risks.
The CEO, Mike Gautier, is an engineer but has an MBA. He is worried about the cost of a risk management program right before an IPO. He knows you had an ERM class in school and wants a memo explaining what ERM is and how Grocerycart, LLC might benefit from risk management. He specifically mentions that he wants you to compare a CIO-focused risk management plan to something more like an ERM plan.