Published in Presbyterian Record

New article on how churches--particularly ones that love committees--can use risk management as a means of steering away from uncertainty. Check it out:

http://presbyterianrecord.ca/2013/04/01/taking-risks/

What About Other Faiths?

This is just a quick note, really. The focus of this blog is on how churches can use risk management to face and deal with uncertainty. As someone who grew up in, and has done a lot of business-related work with, churches, my expertise relates best to them. That's not to say, however, that the information and advice provided here would not apply just as well to synagogues, mosques, temples, etc. When it comes to risk and religion, the particular faith doesn't play the largest role, as they all have to face the same uncertainties: a synagogue has to be just as concerned about keeping a steady revenue stream, a mosque has just as much reason to ensure its building is prepared for another storm season, and a temple is just as likely to experience infighting among its worshipers.

So if you're viewing this site from a non-Christian-church perspective--and traffic figures for this site indicate that quite a few people are--don't discount the writing because of its focus on churches. Risk surpasses all faiths and beliefs. And it's always better to be aware of it.

What's Your Risk Appetite?

One of the first, and most important, aspects of developing a risk management plan for any organization is to know how much risk it's overseers want to take on. While it's impossible to have no risk at all (an issue that will be covered in future entries), it is entirely possible to set a level of risk that an org is willing to face. This is called Risk Tolerance or a Risk Appetite.

Knowing a company's risk appetite is crucial to ensuring its uncertainties are managed properly. A company with a large risk appetite is one that will take on more risks as a part of its business, with the expectation of greater reward. A multinational corporation with a large appetite is one that will expand with aggression and attempt to enter new markets; there's an incredible amount of uncertainty to such business, but the payoff can be huge. By contrast, a company with a small risk appetite is going to be cautious when it comes to any form of uncertainty, and as a result will see diminished, but likely steadier, growth. Small businesses generally have a decreased risk appetite, especially for the first few years, since a few wrong steps can shut things down for good.

So where should churches be when it comes to risk appetite? Generally speaking, they should try to keep it petite. Given that churches are not trying to operate like a for-profit business, taking on large risks could prove hazardous for a church's health and standing. Doing such is also unfair to the numerous stakeholders each church has, from congregants to renters to those who receive support.

Of course, this doesn't mean a church should avoid risks at any cost, or be afraid of taking a larger one from time to time; there are countless stories of churches stepping outside their comfort zones and reaping great rewards from it. What's important is for the decision makers in the church to know how much risk they want to take on, and the best ways to deal with it. With a risk appetite established, the rest of the risk management process can flow much easier.

Risk thought: what's your church's risk appetite? Would other congregants agree with you?

Risk #4: Here is the Church, There Goes the Steeple

When I'm staying in a different city over a weekend, whatever the reason may be, I love to get up early on a Sunday and visit a local church. It's always nice to see the different customs and traditions each church brings to its services, and it often gives me great ideas to bring back home with me ("They all pray in small groups during Prayers of the People! We should try that!"). A few weeks ago I found myself in the middle of downtown Toronto for the weekend, and I was up bright and early on Sunday morning to attend a service in a large, old Presbyterian church.

The service itself was great, with a powerful sermon about forgiveness and an organist who really knew what he was doing, but the most-provocative moment for me was at the very beginning, during announcements, when one of the church's elders informed the congregation that a pipe had burst overnight, causing massive flooding in half a dozen rooms. As a result, the rooms were entirely inaccessible and the congregation now faced two large bills: one for fixing the pipe, the other for the cleanup of all the water damage.

The impact of this would undoubtedly be felt well beyond the walls of that church. A quick look at the church's bulletin revealed a long list of community events and activities scheduled to be held that week, but would now likely have to be cancelled. Being in the heart of Toronto, this church was clearly a gathering spot for many different groups, particularly those focused on helping the lonely and needy. One burst pipe may have put all those ministries on hold.

Though it lasted no more than a minute, this announcement served as a great reminder of the risks associated with the physical church building. Many churches in North America are well over fifty years old and have not had serious updates or renovations since they were built. Add to that their large, exposed structures and the increasingly-erratic weather we've been seeing, and you have some serious threats to a House of Worship.

Thus, when it comes to thinking about the risks a church is facing, the physical structure has to be considered and should be a priority, especially as the seasons change. Can the sanctuary roof survive another winter (or hurricane season)? Has the electrical wiring been inspected at the appropriate time? Have any complaints about leaky or frozen pipes been made? Who is responsible for ensuring the church stays clean, and do they have a way to report any problems they find?

Staying on top of the building's condition can save the church thousands of dollars in avoided repairs and replacements. More importantly, it keeps the church's doors open and the surrounding community active. As the church I attended on that Sunday learned, the inability to host other support groups can be devastating. Especially when it could have been avoided.

Risk thought: Does your church have a plan for the upkeep of its building? How closely is that plan followed?

What about other types of risk?

So far, this blog has covered three overarching types of risk: financial, operational and reputational. These three are by-far the most predominant in a church's everyday business, and need the most focus. There are, however, other types of risk that could arise, but for the most part are not going to be a huge hazard to a house of worship.

For most companies and corporations, which make money from selling goods or services, market risk is important to pay attention to. This is the risk that fluctuation in prices and costs can have an effect on the overall bottom line. For example, commodity prices could rise, causing greater expenses to the organization, or interest rates could go up, resulting in a greater cost of debt. There's also currency risk, which happens when a multinational company deals with money from different countries, and equity risk, where stock and security prices constantly fluctuate. Going even deeper, some organizations pay a lot of attention to volatility risk, which is focused on primarily with derivatives trading, and are also focused on systemic risk, another securities-related term which describes risk that is impossible to mitigate.

So what should churches think of these risks? Ultimately, probably not too much, because there isn't a whole lot that can be done about them from an individual congregation's perspective. Take market risk: it's unlikely to cause too much trouble, because churches typically won't have their budgets wiped out by a few rising prices. Interest rate risk also exists for a church that's carrying debt, but not to the extent that it would affect a multi-billion dollar corporation. And equity and currency risk may affect pensions, but most denominations keep a pension plan that is well outside the decision power of each congregation.

When discussing risk, it's important to have scope. Financial, operational and reputation risk are all important to a church, and more importantly, are manageable from the congregational level. The fluctuation of commodities and stock markets are most-definitely not. Knowing all the risks the church faces is immensely valuable, but even more so is knowing where, and where not, to focus the attention.

Published in L Magazine

I've recently had several articles published in church magazines and journals, including the United Church of Canada's The Observer in Nov 2012. Now L Magazine (formerly The Clergy Journal), a Lutheran publication in the States, has printed another article. You can check it out here:

http://www.lmagazine.net/wp-content/uploads/LMagazine-Jan-Feb2013.pdf#page=29

Risk #3: Reputation Risk: An Overview

Reputation risk can be tricky for any organization. It essentially examines the uncertainty surrounding how much the general public trusts an org, and what the general perception of that institute is. There are few businesses that can thrive despite strong public disapproval (one may think that energy companies are the exception to this rule), which makes a positive reputation crucial to the survival of any company. For churches--whose ultimate goal is to minister to those outside its doors--a negative image can be devastating.

Building and maintaining a good reputation in the community is challenging enough, but churches these days seem to have the deck stacked against them. There is a growing distrust of organized religion in North America, and a rise in people identifying as irreligious. Those outside the church frequently view it as being narrow-minded, homophobic and too involved in politics; without the amount of media attention given to "religious leaders" who sound more like political pundits, this is hardly a surprise. On top of all that, hardly a week goes by without a story breaking about a scandal in the church, or a viral video of a crazed pastor calling for the death of a minority group, or a secularism advocate condemning the general church in the harshest of terms. The end result is a society that looks at the church uneasily and keeps its distance whenever it can.

This, of course, is unfair to individual churches and their congregations, who get a completely inaccurate perception cast upon them due to the actions of a few people who could be as far away as the other side of the world. Unfair as it may be, it's nevertheless an unfortunate reality, one that churches need to be aware of.
Then there are the reputation risks that individual churches are in control of. Members and leaders should be asking themselves how they are viewed within their community, and should be taking into account their outside perception when making decisions. Projects like church renovations, meetings and parties, and third-party rentals can all have an effect on the surrounding area; if done without consideration for neighbours, they can create a backlash against the church.

At the same time, there is great upside to reputation risk. Since the church is meant to be a light in a world of darkness, there is incredible opportunity to build bridges and form relationships with those in the community. When a church's outreach is focused on being a beacon to those around it, and when its acts mirror those of Jesus and the early Christians, it will undoubtedly gain a reputation as being a place for joy and celebration, as well as care and healing. While the general outsider perception of churches may be of distrust and skepticism, a taking into account of reputation risk can open a church's doors wider than ever before.

On the topic of financial risk...

In the post covering financial risk, I discussed how churches need to think about the risks facing both their revenue and expenses. This week, another risk for an org's finances came painfully apparent to me.

For the last month-and-a-bit I've been managing a retail pop-up store along the outskirts of Toronto. The store itself is owned by a huge publishing company, and it sells cheap books, Christmas gifts and decorations, DVDs, and children's toys. It's nothing fancy (I was given a large, empty room and turned it into a nice little place in under a week), but shoppers seem to like it enough and our sales have been pretty strong. With the exception of a few isolated incidents involving irate customers or absent employees, the job's been pretty fun.

Last week, however, we all suffered a bit of a jolt. After doing some basic forensic accounting, I determined that hundreds of dollars had gone missing from the store's cash registers over the course of a few weeks. Evidence points to one of my (former) employees, but it's likely not going to be enough to have him charged with theft. The whole incident has left myself and the other employees frustrated and downhearted; we all trusted this guy, and he betrayed us.

Theft is going to happen in any business and industry: just today there was a story of Apple, one of the tightest-run organizations in the world, getting robbed during New Years' celebrations. From shoplifting to corporate embezzlement, money can easily go missing, never to be seen again. This is even easier when accounting methods are lax: the cash machines at my store are very rudimentary, allowing for money to be removed every day without appearing suspicious (it was only when I looked back at weeks' worth of data that I saw the trends). And for companies with billions of dollars of assets, is it any wonder that there are frequently stories of top-level managers getting caught with their hand in the cookie jar?

Churches need to be just as aware of this. As great as it would be to trust that all congregants will worship at a church will obey the eight commandment, it's still imperative to have a system in place that reduces the risk of theft. Simple initiatives, such as having two or three people count the collection money after each service, and minimizing how long cash stays within the church walls (or investing in a quality safe should it need to be there for a few days), can go a long way in eliminating any "sticky fingers." Similarly, routine audits of assets, and an atmosphere that encourages someone to speak up if something seems wrong, are great ways to stop embezzlement or mismanagement of funds.

I've learned the hard way that theft can happen anywhere, even at a small pop-up store with a handful of employees. Does your church have a plan to ensure that all the money given to it is used properly, and not pocketed by some unscrupulous hands?

Risk #2: Operational Risk: An Overview

One of the benefits of implementing risk management in a church is that many aspects will already be familiar to congregants. For example, much like religion, risk management is open to a wide variety of ideas and interpretations, with some pushing practices and protocols forward, while others seem to just create confusion. Even simple words can have many different definitions and meanings, with each thinker arguing that they are in the right. For Christian churches, this is nothing new.

Operational risk is one of those terms that no one can seem to agree on. The size and scope of an organization's "operations" is up for debate and is unlikely to be resolved anytime soon. Fortunately, just like theological differences, not everyone had to agree on everything to still move forward. What is important here is that, though there may be some differences, the general definition of operational risk is the uncertainty surrounding, and likelihood of non-ordinary events occurring out of, an organization's internal processes and systems, its people and human resources, and external happenings.

That's one heck of a definition, so vast that almost anything could count as operational risk. For those not steeped in risk management understanding (and, really, even for those who are), defining and managing an organization's operations can be incredibly intimidating. For a church committee, it may appear nigh-impossible.

Of course, it really isn't. Using the above definition of operational risk can help open up the risks that have been hiding in the church. The first part, processes and systems, raises questions about the decision-making processes used: are they effective and efficient? could they allow for unfair manipulation? what would happen if a member of the process suddenly became unavailable? Similarly, the church's people and human resources are a key (if not the key) factor in its success. Are the staff enjoying their jobs, or do they feel stressed and worn-out? Does the church have a plan should someone decide to leave? And finally, external happenings ask congregants to consider what outside events could affect the church--this can range from weather to roadwork and construction to political legislation.

Analyzing operational risk isn't always easy, or fun, but is crucial to keeping the church running smoothly. As this blog will show in near-future, there are many large-but-accessible operational uncertainties that can be analyzed and improved upon. Even just a few quick changes can put a church on the right path, away from unnecessary risk and towards better, more-efficient operations.

Risk #1: Financial Risk--An Overview

Risk management is not entirely about financial risk. In fact, when it comes to churches, financial risk is likely not even the biggest type that clergy and congregations face. And yet, within a house of worship, financial risk is ubiquitous. Budgets dictate just about every congregational activity, from outreach to parties. Costs are a frequent worry of anyone looking to endeavour on a major project. Offering is collected right after a fiery sermon. The most emotional use of the Lord's name comes when calculating revenue and expenses. If a church wants to keep its doors open, it has to be able to pay.

Some of the risks associated with finance are obvious: there is always a good deal of volatility to congregational donations, which make up the vast majority of a typical church's revenue. Such a financial model is particularly risky because there are several factors that influence it's uncertainty: both overall attendance and the generosity of those who attend are key elements in keeping revenue up, and both are susceptible to extreme change each week. Many churches find that givings ebb and flow, decreasing in the summer and spiking close to Christmas and other holidays, which can create difficulty in paying the steady expenses.

This leads to another, equally-important risk. A church's expenses determine how efficiently it can run and how much of its money can be used for external missions and outreach. Despite this, it is often given a secondary focus to revenues, perhaps because revenues are easier to approach from a full congregational standpoint. This can be dangerous for a church to do: expenses, from salaries to utilities to physical materials, are as much a concern for everyone as are revenues. Failing to see and address this risk can wreak havoc on a church's budget.

When a church starts openly discussing the uncertainties that surround its cash inflows and outflows, numerous smaller risks will come to the surface. Have certain expenses been rising too quickly for comfort? What sort of contracts has the church locked itself into, and what problems may arise from that? What has happened to average givings over the course of one, three and five years? What possibilities are there to cut expenditures? These are not always easy, or pleasant, questions to answer, but are far better being asked than ignored.

Evidently, financial risk goes deep in any organization, leading to numerous elements and particulars that need to be discussed. But it's never too early--or late--for a church to start looking at its finances and asking the tough questions. A few years down the road, it may be very glad it did.

Why Do Churches Need Risk Management?

Here lies the huge question: do churches actually need a risk management plan? Does taking into account the uncertainties surrounding a church's organization actually have benefit, or is it a waste of time and resources? This is crucial for a church to answer, and can be the difference between having a vibrant, enriching existence and having to close the doors for good.

In this day and age, any corporation that wants to see a future beyond the next few quarters is actively engaging in identifying its risks and determining how best to manage them. This is not just limited to financial institutions looking to minimize risk on an investment; these companies can be focused on consumer goods or services, resource development, transportation or entertainment. Even governments and non-profits are looking into managing their risks, because they know they're better off being aware of what uncertainties they face than being blind to them. Credit rating agencies like Moody's, S&P and Fitch are now actively looking for risk management plans when evaluating a company--they know that a corporation that takes risk seriously is one that is prepared to weather difficult storms and thrive in positive times.

The reality is that simply identifying risks can be incredibly beneficial to an organization. It aids with decision making, gives a clearer picture of overall health, and helps manage the likelihood of any sort of event, be it positive or negative. Because of this, churches could gain an incredible amount from starting to focus on their risks, instead of remaining unaware of what uncertainties they may be facing.

With every service, every outreach activity, and every meeting, there are inherent risks that a church faces. These can range from physical, such as a sanctuary's structure and the heating and plumbing, to the financial, such as offerings and expenses, to the relational, such as feelings and opinions between members and the leadership team. These risks aren't impossible to identify, and once they are they can be taken into account as a part of the church's business. Will the roof hold up for another winter? Better to find out than to be caught off-guard. How much would offerings have to drop before the budget would be in serious jeopardy? It wouldn't be difficult to calculate, and can lead to contingency plans should the event occur. How have members been reacting to a new worship leader or style? Knowing this may help boost turnout to services.

So, then, do churches NEED to engage in risk management? Of course not. Clearly, many have been able to get along fine without it. But are there benefits to doing it? Absolutely. Just look at the corporate world, or ask a worshiper whose church had one traumatic event and ended up losing half the congregation. Identifying and managing risk can help churches avoid negative outcomes, increase the likelihood of positive ones, and run a better, more-efficient overall.

With those three introductory entries out of the way, let's dive in to the different types of risks churches face.

About Me

So who am I, and why am I so interested in risk management and the church?

Let's start with me: I'm a recent MBA graduate from Dalhousie University in Halifax, NS. I'm also a lifelong churchgoer, having been raised in a Presbyterian church before moving over to the United Church for a few years; I also have Anglican, Roman Catholic and Evangelical experience. I've sat on a variety of committees and councils within those denominations and done everything from singing in choirs to leading entire services. I genuinely like church, for a variety of reasons: in addition to the spiritual nourishment and great fellowship every week, I'm a complete sucker for a traditional hymn played on an organ and can't help but be amazed when inside a large cathedral with gorgeous stained-glass windows.

It was this interest in church that led me to do an independent study as part of my MBA, focusing on church management and consulting, and investigating the ways that business practices can be implemented in religious institutions. Working with a local church in Halifax, I analyzed its operations and finances to determine ways that it could increase revenues, lower expenses and run more efficiently; most of this focused on the church using its excess space for rental income, as well as cutting unnecessary expenditures from the budget. When I was finished, I submitted a hearty report to the church's council and stayed around to help with some outstanding budget work.

The next semester I signed up for a class in Enterprise Risk Management, where I was required to write a journal-worthy paper for a final assignment. My professor--a tough, demanding genius in the field of risk--knew of my interest in church management and encouraged me to write about risk in the church. I thought it was a great idea, so I took to the internet to find other journal articles on the subject, only to find that there weren't any.

Despite the prevalence of churches and the clear need for risk management in any sort of institution, there has been an incredibly minuscule amount of writing done on the two. A search of online journals and databases yields nothing; journals that focus on risk management have no interest in the church, and vice versa. Having read published papers on ridiculously-detailed topics ("Feminist-structured group leadership in a post-modern world: An equatorial supply-side economic developing nation case study," for example), this came as a large surprise for me.

So I wrote a 2000-word paper of my own, giving an overview of risk management and how it would apply to churches, and submitted it to my professor. He loved it, gave it a good mark, and told me to get it published.

That brings me to where I am now: having reworked the paper several times for different publications, I have a handful of articles set to be printed in national magazines and journals in the next few months. I plan to write several more, with a greater focus on particular areas of church risk management. But the conversation can't stop there, which is why I've created this blog. It's time that we really started thinking about how we manage risk in the church. And in the next entry, I'll explain just why it's so important.

And that's me: I love church, I love risk, and I love the idea of throwing them together and seeing what happens.

The Church at Risk

There are thousands--maybe even millions--of blogs devoted to churches. A quick search can bring you to blogs on church growth, church marketing, church planting, and churches that focus on a particular niche or demographic. Then there's blogs on church and culture, church and state, church and business, and even church and other churches. Plus, there are countless personal sites from church leaders, church members and church adherents alike, with plenty of inspiration and opinion to share. Regardless of the topic, if it relates to the church, someone's bound to be talking about it.

Except, it seems, when it comes to risk.

It's not that people fail to mention risk in context of the church. It's hardly a challenge to find someone discussing the risk of the church becoming irrelevant, or losing members, or even falling from God's graces over some doctrine or theology. In this case, though, risk is synonymous with the chance or likelihood of a negative event occurring, and is almost always used in relation to a solitary event or action. What the church is missing out on is risk as uncertainty: despite the overwhelming prevalence, it's difficult to find anyone talking about, let alone planning for, the numerous uncertainties churches face every single day.

And yet, considering that these uncertainties can make or break a church's activities and functions, it's time that leaders and members started having a conversation about them. Ignoring risk isn't going to make it go away--if anything, it can make things much, much worse. But when churches open up about the challenges and uncertainties they face, there is incredible potential for growth, security and better everyday operations.

That's what this blog is about: identifying the risks churches face and bringing them into the light. In doing so, the writings here may incorporate some of the topics listed above; membership and demographics, the relationships churches have with other entities, and the personal opinions of clergy and members all contribute to the uncertainty surrounding a church's activities. But risk management goes deeper than that. Risk management takes a critical viewpoint, asks difficult questions and isn't afraid of what it may find. Risk management leaves no stone unturned.

Thus, JeRISKo, the product of a recent MBA grad with a passion for the church and its mission, as well as a strong interest in risk management, will cover, from the ground up, what risk is, how it affects the church, and what the church can do in response. Most importantly, it will do this in a fun, easy-to-understand and interactive way. Because anyone involved with a church needs to be aware of its uncertainties and how to deal with them, and anyone, be they clergy or member, business executive or construction worker, can play an important role in risk management.

Isn't that at least a bit more useful than reading one more blog about how churches can be hip?