Key Takeaways from the 2026 NC State ERM Workshop for Nonprofit Executives
Each year, GRF and NC State University’s Enterprise Risk Management Initiative bring together nonprofit executives from across the country to exchange practical ideas for strengthening governance, building resilience, and improving decision-making in times of uncertainty. The 7th annual workshop was held on February 19, 2026, and hosted nearly 130 executives.
The workshop covered how enterprise risk management (ERM) is most effective when it is integrated into how the organization operates, when it is supported by leadership and the board, and it is translated into clear actions, metrics, and culture.
Key takeaways include:
Plan for higher risk severity and uncertainty. Leaders noted a significant rise in overall risk severity for 2026, reinforcing the need for scenario planning and a broader “system view,” so organizations are prepared if risks materialize.
Prioritize near-term risk themes that can disrupt mission delivery. Prominent themes included cyber/data security, third-party reliance, talent attraction/retention, AI transformation, and economic/regulatory volatility.
Move from silos to shared accountability for risk. The updated “Three Lines” model reinforces collaboration and integrated governance, reinforcing the mindset that “everyone is a risk manager.”
Use governance guardrails when ERM and Internal Audit are closely linked. A management-level Risk Council and appropriate roles for Internal Audit can support ERM while protecting independence and objectivity.
Start simple, build momentum, and show sustained value. Establishing an ERM review committee, securing executive/board buy-in, and keeping early steps simple were presented as key success factors for maturation over time.
Build risk culture alongside structure. A holistic approach – supported by a strong risk culture, risk appetite, and practical training –helps ERM become an organizational habit rather than a one-time exercise.
Use KPIs/KRIs and clear board reporting to make risk actionable. Developing indicators from the bottom-up and reporting in a sequence from risk environment to results to financial performance can improve board understanding and engagement.
Balance mission urgency with operational sustainability. Leaders emphasized aligning new initiatives to realistic capacity, partnering when needed, and embedding risk thinking before launching new programs.
Plans for the 2027 ERM for Nonprofits Workshop are underway. Let us know if you’d like to be updated when registration opens.
Send me updates! More in the ERM Library
Workshop Presenters:
- Mark S. Beasley, Director of the ERM Initiative | NC State University, Poole College of Management
- Melissa Musser, Partner & Director, Risk & Advisory Services | GRF CPAs & Advisors
- Jay Alverson, SVP, Enterprise Risk Management & Internal Audit | Alzheimer’s Association
- Emmanuel Omondi Ogutu, Vice President of Risk & Assurance | Food for the Hungry
- Brian McEvoy, General Counsel, Chief Compliance Officer & Corporate Secretary | Momentus Capital
- Keith Cureton, CEO | Bethany Christian Services
- Alex McNeill, ERM & ESG Advisor | GRF CPAs & Advisors
