Terms of Reference for Consultancy to Evaluate Organizational Risk Management at Hand in Hand Eastern Africa (HiH EA)

OBJECTIVE OF ORGANIZATIONAL RISK ASSESSMENT

The risk assessment exercise is aimed at improving risk management processes within the organization, its governance processes and internal control system so as to effectively execute its mandate.

Specifically, the main objectives of this exercise are:

• Outline the strengths and weaknesses of HiH EA’s organizational, strategic and operational structures and processes.
• Evaluate the level of HiH EA’s organizational skills and capacity to support HiH EA’s expansion both in Kenya and across Eastern Africa, and ability to reach set targets.
• Assist in the identification and assessment of significant risks, which may affect HiH EA’s organizational performance today and in the future. This will cover the full spectrum of risks such as strategic risks, reputational risk, regulatory compliance risks, financial risks, projects risks, business process risk, technology and systems risk, human resource management risks, and business continuity risks;
• Rank or evaluate the risks;
• Propose suitable risk mitigation measures;
• Document the identified risks in a risk register;
• Design and implement practical tools and techniques for risk management (key risk indicators, incident management, risk quantification, compliance, and action point tracking and monitoring and reporting).
• Develop and document strategies aimed at reducing risk to acceptable level.

KEY DELIVERABLES

1. Successful performance of this assignment will be based on production and timely submission to HiH EA of the following deliverables within 4 weeks:
2. Inception report, completed within two weeks of commencement of assignment.
3. Facilitate a one day dissemination and action planning workshop with management based on the risk assessment
4. Draft report presented to the Finance, ICT Audit and Risk Committee within four weeks of commencement of the assignment.
5. Final report.

WORK PLAN

• Consultants are expected to provide a clear work plan depending on their interpretation of these terms of reference.

CONSULTANT’S SKILLS AND EXPERIENCE

• HiH EA is looking for a team of consultants with the following skills and experience:
• Experience in conducting and facilitating similar risks assessments with international NGOs
• At least five (5) years relevant auditing or consulting experience in conducting organizational reviews and/or risk assessments;
• Experience of operations and/or evaluations in Eastern Africa;
• Strong research and analytical skills, including on data collection and analysis tools;
• Solid project management and implementation experience;
• Fluency in spoken and written English and Swahili, and ability to interact with beneficiary groups.
• Strong understanding of cyber security vulnerability assessment.