Risk Register

Purpose

This document is the formal Risk Register for Towerblock Radio CIC, maintained as a living record of identified risks, their assessment and mitigation.

Scope

This register covers all categories of risk facing Towerblock Radio CIC.

Definitions

See Risk Management Policy for definitions of risk, inherent risk, residual risk and risk owner.

Responsibilities

The board reviews the risk register at each meeting. The Operations Lead maintains the register. Risk owners manage their risks.

Policy Statement

Towerblock Radio CIC maintains a comprehensive risk register that is reviewed at every board meeting, updated as risks change, and used to inform strategic and operational decisions.

Detailed Procedures

Governance and compliance risks

• Risk: Failure to meet CIC Regulator or Companies House filing requirements. Inherent: Medium. Residual: Low. Controls: Annual filing calendar, Finance Lead monitoring. Owner: Board chair.

• Risk: Breach of UK GDPR. Inherent: Medium. Residual: Low. Controls: Privacy Policy, Data Protection Contact, staff training, access controls. Owner: Data Protection Contact.

Financial risks

• Risk: Loss of funding or income. Inherent: High. Residual: Medium. Controls: Diversified income strategy, reserves policy, funder relationships. Owner: Finance Lead.

• Risk: Fraud or financial mismanagement. Inherent: Medium. Residual: Low. Controls: Segregation of duties, dual authorisation, Fraud Prevention Policy. Owner: Finance Lead.

Safeguarding risks

• Risk: Safeguarding incident involving a child or adult at risk. Inherent: Medium. Residual: Low. Controls: Safeguarding Policy, DBS checks, training, Safeguarding Lead. Owner: Safeguarding Lead.

Operational risks

• Risk: Loss of broadcast infrastructure or platform. Inherent: Medium. Residual: Low. Controls: Backup equipment, Business Continuity Plan, streaming redundancy. Owner: Operations Lead.

• Risk: Key person dependency. Inherent: Medium. Residual: Medium. Controls: Cross-training, documented procedures, succession planning. Owner: Board chair.

Reputational risks

• Risk: Inappropriate content broadcast by DJ or contributor. Inherent: Medium. Residual: Low. Controls: DJ Code of Conduct, Editorial Standards Policy, Complaints Policy. Owner: Programming Lead.

Technology risks

• Risk: Cyber attack or data breach. Inherent: Medium. Residual: Low. Controls: Cyber Security Policy, backups, access controls, training. Owner: Operations Lead.

People risks

• Risk: Loss of volunteers or staff. Inherent: Medium. Residual: Medium. Controls: Volunteer Policy, support, training, recognition. Owner: Volunteer Coordinator.

Reporting Process

The risk register is presented at every board meeting with current scores, changes since last review and any new risks.

Compliance Requirements

• Companies Act 2006.
• Community Interest Company Regulations 2005.
• Charity Governance Code (best practice).

Monitoring

The register is reviewed at every board meeting. An annual risk workshop is conducted.

Review Cycle

This register is reviewed at every board meeting and updated as risks change.

Version Number

Version 1.0

Approval Section

Approved by: Towerblock Radio CIC Board Date: July 2026 Next review: July 2027

Related Policies

• Risk Management Policy
• Business Continuity Plan
• Safeguarding Policy
• Finance Controls Policy

Website URL slug

/policies/risk-register

Meta Title

Risk Register | Towerblock Radio

Meta Description

Towerblock Radio CIC's risk register covering governance, financial, safeguarding, operational, reputational, technology and people risks with assessments and mitigation controls.

Suggested menu category

Governance

Suggested search keywords

risk register, risk assessment, risk management, governance, controls, CIC