Johns Hopkins University utilizes an enterprise risk management (ERM) program to manage its strategic and operational risks in a holistic integrated fashion. The effort, dubbed the Institutional Risk Management (IRM) program, was launched at the beginning of 2011, and is based on the COSO 2004 and 2017 frameworks.
The program is overseen by an IRM Committee with representation from key business units throughout the university and additional representation from Johns Hopkins Medicine. As the university’s Chief Risk Officer, Dr. Jonathan Links works closely with the Chief Compliance Officer, Stephanie Shea.