The Haunted Handbook: Demystifying Governance & Risk Management

Governance and risk management. 

Two words that make many grassroots and community groups shiver. They sound scary. Complicated. Maybe even a little….haunted. When you’re busy running community projects and creating change, it’s easy to see these as formalities to get out of the way, something only “big charities” have the time and resources for. 

 

When speaking to our groups, we often hear concerns like:

  • “We don’t have time to think about governance”
  • “We’re too small to need policies”
  • “We don’t know where to start”

 

But here’s the twist: Most groups already have some form of governance and risk management in place; they just don’t call it that. 

 

So let’s turn on the lights, clear away the cobwebs, and take a look at what governance and risk management really mean, why they matter, and how your group is already putting them into practice.

Unmasking Governance and Risk Management

Governance means different things to different people, but you can think of it as your ‘how to’ guide, helping you understand the purpose of your group, everyone’s role within it, and how decisions are made. 

 

It also includes having clear policies that help protect the group and the people you work with, including safeguarding, data protection, and equality and inclusion policies. They don’t need to be overly long or complicated, just detailed enough to show how your group safely handles tricky situations. 

 

Governance keeps your group alive and well because:

  • It guides your group towards fulfilling its aim
  • Funders can see your group is accountable and well-managed
  • Keeps everyone on the same page while making sure that the group runs fairly and transparently
  • It creates clear processes which make operations easier and improve efficiency.

 

Risk management goes hand-in-hand with governance, like two parts of the same spell. Good governance gives you the resources to be able to mitigate risks once they appear, while risk management helps you think ahead about those risks before they grow. 

 

So what exactly is risk management?

 

Risk management is thinking about things that could possibly go wrong and preparing yourself for the “what ifs”.

 

This doesn’t need to be complicated. Say you have a group meeting at a particular venue. After the meeting, a designated person locks the room behind them so nothing gets stolen. That’s already risk management in action. 

 

It’s your group’s protective charm because:

  • It protects your people and your resources
  • Helps you plan ahead and reduce harm
  • It shows funders you are responsible
  • It reduces financial loss and stress.

The Tricks You’re Already Mastering

Did anything from the previous section sound familiar to you? Maybe you’re thinking, “hey, we’ve already thought of that”, or “that’s something we do in every one of our meetings.” 

 

We see it all the time with the groups we work with, who’ve already built strong structures without even realising it. The ‘About Us’ section on your website, the roles you’ve assigned to the different members, storing notes in a shared folder, and agreeing on how decisions are made in the group are all a part of your governance and constitution. You’re already doing it, just not in its formal language. 

 

Governance can also come in the form of having a process for business-related spending and reimbursements, having a plan for keeping people safe during events and asking them about access needs, and looking after each other regardless of race, gender, or religious background. 

 

When writing these down, you don’t need to use overly legal jargon. We encourage you to use plain language, laced with your values and reflecting the care that you take in your work. What matters most is that the policies make sense to the people using them. After all, a policy that doesn’t make sense is of no use to anyone. 

 

But what about risk management? 

 

To many groups, risk management comes naturally (even if you haven’t realised it). 

 

No one can predict every disaster; it’s about making sure you’re prepared enough for when unwelcome surprises come knocking at your door. 

  • Have you ever made sure that your equipment is stored safely? 
  • Do you keep your passwords secure? 
  • Do you keep receipts and transparent money transfer records?
  • Do you get people’s consent before sharing their images publicly? 
  • Do you make sure you have things in writing before committing to something? 

If you nodded your head to most of these, then congratulations, you’re already managing risk!

 

These small actions prevent accidents, confusion, or conflict before they happen, keeping your people, resources, and reputation safe. 

 

Writing them down doesn’t need to be complicated. Having a list of who’s responsible for what, what to do when things go wrong, and guidelines the team can follow is enough.

Thinking about applying for funding? 

Showing funders your governance and risk management processes boosts their confidence in your group’s stability and organisation, showing them that you have the structures in place to responsibly handle funds that come your way. Having your policies and documents already written down also means that you won’t have to scramble to pull them together at the last minute to complete your application.


How We Can Help You

Have you ever heard of our Community Nest? It’s a space we have created to provide opportunities for help with admin, training, capacity building, and networking. We run workshops, drop-ins, and one-to-one conversations to answer any questions groups might have and give them the tools to build strong processes. 

 

We often host events such as Governance workshops and Drop-ins, giving groups the chance to bring their questions and concerns, from writing policies and decision-making to creating supportive structures. If this is something that interests you and your group, keep an eye on our events calendar to register for future sessions, or take a look at our free governance resources

 

At The Social Change Nest, we know Governance and risk management aren’t static, and neither are we. We know that different groups have different needs, and so we always try to tailor our services and resources based on what is needed the most. The questions and challenges our groups bring shape the resources, events, and guidance we create.

Is there something specific that your group needs?

Let us know, and we’ll try our best to make it happen.You can also get involved with The Community Nest, attend one of our events or suggest a topic that you would like to see us discuss next. We’d love to hear from you.

 

Happy Halloween - Governance Blog

Recommended reading from our blog

Paying People Fairly: Building Trust and Equity

How Grassroots Groups Are Countering Far Right Movements

The rise of far right movements is being met by powerful community resistance. Explore our list of organisations fighting hate and building solidarity from the ground up.