Project risk registers can miss portfolio-wide risks that only leadership or the board can see. A practical system helps leadership make the issue visible, assign responsibility and keep evidence current before a donor or auditor asks for it.
Start with the governance decision
Begin by track risks that cut across several awards. Define what the organization needs to know, who owns the decision and what evidence proves the control is operating rather than merely documented.
Focus on material areas
Review donor concentration, unrestricted exposure, key-person dependency, audit issues, safeguarding, partner risk and rapid growth. Prioritize gaps that could affect eligibility, donor confidence, financial exposure or the organization’s ability to manage a larger award. Not every administrative weakness deserves the same urgency.
Create one controlled record
Use a shared register or dashboard with owner, status, evidence link, review date and next action. Controlled records reduce reliance on individual memory and make staff handovers easier.
Define review triggers
Review after major staffing changes, new banking arrangements, policy updates, audit findings or significant grants. A fixed annual review is useful, but event-triggered updates prevent the system from becoming stale between cycles.
Useful fields
- Control or evidence area.
- Current status.
- Owner.
- Approval authority.
- Evidence location.
- Last review date.
- Next review date.
- Open action.
Example
Leadership notices that three major grants depend on one finance manager. The governance register flags key-person risk and triggers succession planning. This is the difference between a governance process that exists on paper and one that can be demonstrated under donor review.
Common weaknesses
Common failures include outdated records, unclear ownership, missing approval evidence and actions that are discussed but never closed. Keep the process proportionate and link significant gaps to leadership follow-up.
What to do next
Use the Award Absorption Capacity Check to identify the next readiness action and keep closure evidence with the organization’s grant-readiness records.
For practical funding intelligence, subscribe to Africads Grant News.
Frequently asked questions
What belongs in a grant governance risk register?
Include risks that require leadership or board oversight, such as major financial exposure, legal obligations, partner failure, safeguarding, donor concentration, and reputational threats.
How is this different from a project risk register?
A project register focuses on delivery risks within one grant. A governance register highlights cross-portfolio or high-severity issues that may affect the organization as a whole.
Who should own the register?
Executive leadership can coordinate it, while the board or a committee reviews risks within its governance mandate.
How often should it be reviewed?
Review it on a regular governance cycle and whenever a material incident, new award, partner issue, or funding concentration risk emerges.
What should happen to high-severity risks?
They should have clear mitigation, owners, escalation triggers, and documented board or leadership attention rather than simply appearing on a list.
Conclusion
A governance risk register helps boards see beyond individual projects. Your organization should use it to surface cross-portfolio financial, legal, partner, safeguarding, and reputation risks early enough for leadership to act.
