regulation risk management
play

Regulation & Risk Management Susanna Lyons Head Of Regulation - PowerPoint PPT Presentation

Regulation & Risk Management Susanna Lyons Head Of Regulation Governance in a Growth Environment Alex Hotel, Dublin 2 24 th September 2019 This presentation may not be used for any other purpose without the prior written consent of


  1. Regulation & Risk Management Susanna Lyons Head Of Regulation ‘ Governance in a Growth Environment’ Alex Hotel, Dublin 2 24 th September 2019 This presentation may not be used for any other purpose without the prior written consent of the Regulation Office

  2. Regulatory Focus Our mission is to protect AHB assets and safeguard the interests of their current and future Our Regulatory tenants by regulating for a Focus well governed, well managed and financially viable sector.

  3. What do we look for… ✓ Good Governance o Fully functioning Boards o Skills, expertise & diversity o Strategic direction & oversight o Risk Management ✓ Financial Management o Financial Viability o Strategic & Business Planning o Detailed Financials & Forecasting ✓ Performance Management o People o Property o Performance 3

  4. Stock • Small number of AHBs own/manage majority of stock • Complex & diverse sector encompassing housing, supports and services • Growth envisaged from small number of AHBs 33,945 19 Tier 3 AHBs Owned 26,248 Leased 4,213 account for Managed 3,483 75% of Entire Totals 33,945 Stock

  5. Regulatory Framework 18 th July 2017

  6. Evolution of Regulation • Voluntary Regulatory Code: July 2013 • iRC & Regulation Office established: Feb 2014 • Financial Standard*: July 2015 • Funding Eligibility: Circular 15/2016 • Governance Standard: Dec 2017 • Performance Standard: Dec 2018 • Bill Published : July 2019

  7. Regulatory Framework: VRC + Financial Governance Performance Proportionate Standard Standard Standard • People Financial Viability Fully Functioning Board • Surplus/Deficit • Tenant Policies • Liquidity • Transparent Allocations Oversight, Direction & • Cashflow • Income Mgmt. Control • Communication • Property Strategy/Leadership • L-T Viability Voids Risk Based • Strategy • H&S Outcomes Focused • Business Planning • Sinking Fund • Annual Financial • Stock Condition Transparency Comply or Return Surveys • 30-year Extrapolated • Repairs & Explain Skills, Expertise & Diversity Financials Maintenance • Stress Testing & • Asset Mgmt. • Performance Mitigations Financial Governance & • Key Financial Ratios Risk Management • KPI • Asset Management • VFM • Risk Management • Management & Maintenance Costs • Planning & Oversight ISSUED: NOV 2017 ISSUED: DEC 2018 Standards are not standalone…..they are significantly interlinked ISSUED: JULY 2015

  8. Risk Based Regulation: Context 18 th July 2017

  9. Sector Context • Significant ‘concentrated ’ Growth • Balance Sheets & Debt Profiles changing • Substantial investment in Operational, HR & Infrastructure • Changing Environment & Delivery Structures • Risk Management and robust challenge needs to be fully integrated • Understanding & application of Risk is KEY Risk is NOT just about Finance

  10. Growth Context – AFR (17 T3 AHBs) The Financial Standard • Tier 3 AHBs – significant growth forecasted • Change in debt profiles • Risk Management critical in growth environment • Liquidity • Cashflow forecasting • Project Financial Feasibility • Loan repayment 2018 2019 2020 scheduling • Covenants 2,392 3,670 3,870 • Sinking Fund provision 9,932 • Delivery is KEY but needs to be sustainable Figures are not audited, consolidation for directional purposes only

  11. Projected Growth- T2 AHBs 2018 2019 2020 288 441 471 1,200 Projected Units • Modest growth forecasted 7,000 6,540 6,069 5,628 6,000 • Growth concentrated small 5,340 5,000 number of AHBs 4,000 • CAS and loan financing 3,000 2,000 • Debt profile of BS not changing 1,000 significantly 0 2017 2018 2019 2020 Figures are not audited, consolidation for directional purposes only

  12. Identified Risks • • Delivery & Execution Complexity of Sector • • Purchase V Build Classification • • Capacity Funding • • Infrastructure Government Policy EXTERNAL RISK INTERNAL RISK • • BAU V Growth V Transition Housing & Land: Availability • • Managing Change Environment Economic & Market Risk • • Liquidity/Cash/Debt Profiling Legislation • • Tenant Management Inflationary Pressures • • Asset Management Concentration Risk • • Development Management Alternative Funding • • Alternative Funding Regulatory Environment

  13. Risk & Governance 18 th July 2017

  14. Risk Maturity Ladder Where is your organisation?

  15. Risk Management • Have the right risks been identified? • What operational assurances and internal controls are in place? • What’s your Risk Appetite? • Is your Risk Management? • Strategic • Organisation specific • Manageable • Proportional • Integrated • Rigorous • Relevant & Updated A Risk Register does not constitute good Risk Management

  16. Governance & Risk • Understanding your organisation • Governance • Robust Discussion • Clear Objectives – Short & Long Term • Skills, expertise & composition • Board owns & understands risk • Risk Framework in place – who is responsible for what, when, where • What’s the Assurance Framework • Risks and decisioning • Risk Culture & Appetite • Understanding risks and controls ROBUST CHALLENGE AND COLLECTIVE DECISION MAKING

  17. Key Pointers for the Board 1. Stay out of the Weeds 2. Objectives - Risks – Appetite - Outcomes 3. Establish what are the real risks to your organisation 4. Ascertain who is responsible for what ……role of Executive, ARC…ToR 5. Differentiate between BAU, Transition and Growth 6. Ensure Risk is linked to Strategy, Objectives and Audit Outcomes 7. Don’t just kick the Tyres….…… Look under the bonnet Ask all the uncomfortable questions……seek Assurance

  18. What does a Regulator Look for • • Evidence & Assurance relating to Nature & Scale of Activities • Growth • • Investment Growth Plans • HR • • Change Management Clearly defined goals & objectives • Internal Controls • Defined Outcomes • Realistic plans & variances • Understanding of risks • Understanding of Controllable V Uncontrollable risk • Evidence of strong & embedded risk • culture Risk Policy, Risk Register, Audit & Stress Testing links • Alignment of plans, strategy, financials • Sense check: Are all risks low/medium? • BAU V Growth V Transition • Is there visibility on inherent & residual • Is it clear – who is responsible for what? risk? • Is Risk a standing item agenda? Evidence & Assurance that risk management is embedded & robust

  19. Director Questions • • Am I assured as a director that: What business are we in? • Have we identified the right risks? • Nature & Scale • The correct controls are in place? • Have we clearly identified our • Is the effectiveness of our internal strategic & operational objectives? controls realistic? • • Does the risk ranking accurately reflect What could go wrong? the organisation I am overseeing? • What must go right to succeed? • How are we managing • • What activities are most complex? BAU Risk • Growth Risk • • Do we have sufficient quality Change Risk • information to make informed Controllable v Uncontrollable Risk? decisions? • Is risk a standing item agenda? Is risk rotating? • Where do we spend the most money? • Am I clear about the gaps & roadmap for action • What’s our risk appetite/tolerance?

  20. Risk Framework • Horizon Scanning • Risk Categorisation • Emerging Risks • Owners • Mitigated Risks • Controllable/Non Controllable Identify • Change in Strategy/purpose • Prioritise • Impact • Communicate Monitor & Quantify & • Likelihood • Rank Report Assess • Inherent Risk • Standardisation • Prioritisation • Observation V action risk • Residual Risk* • Controls • Tolerate • Treat Challenge & • Process & Procedure Mitigate Evaluate • Substitute • Frequency Controls • Terminate • Accountability & • Consider re- Responsibility • Control Effectiveness assessment Risk is NOT static, its continuously evolving

  21. Final Thoughts 18 th July 2017

  22. Risk Maturity Ladder Now, really where are you?

  23. Key Takeaway’s • • Know your business Have an appropriate risk management model • Know your People, Know your • Assets Top Down, Bottom Up • • Identify REAL risks Ensure appropriate challenge • • Identify who is responsible for Risk mitigation & action what? • A risk register alone does NOT provide • Embed a risk management culture a comprehensive risk framework into your organisation • Risk is fundamental to future growth • Use risk framework to identify opportunities not just RISK Be Risk Enabled

  24. THANK YOU E: regulation@housingagency.ie Ph. 01 656 4170 www.housingagency.ie/regulation

Recommend


More recommend