SmartSuite for the Board Risk Committee Chair
The Board Risk Committee Chair leads the board committee that oversees risk appetite, the risk framework and management's handling of principal risks. They challenge the CRO and executive team, set the committee's agenda and report risk oversight to the full board.
Reports to:
What you own
The Board Risk Committee Chair leads the board committee that oversees risk appetite, the risk framework and management's handling of principal risks.
- Chair the board risk committee and set its agenda
- Approve the enterprise risk appetite statement and tolerance limits
- Oversee the adequacy of the risk management framework and second line
- Review principal and emerging risks and management's responses
- Challenge executive risk reporting and assumptions
- Report committee conclusions to the full board
At a glance
The GRC processes this role owns, touches and depends on.
Owns
accountable for the process
Touches
contributes or approves
Depends on
consumes its output
How the GRC processes connect
Three lines of defense set the frame; the chain shows where each process hands off to the next. Colors follow the role: navy is owned, blue is touched, gray is depended on.
Reporting lines
Who this role reports to, who reports to them, and the peers they work with most.
Reports to
Direct reports
Works closely with
How SmartSuite supports this role
Lead
Risk management. Gives committee members a read-only view of the live risk register, top risks and appetite breaches, so the pack is current on the day of the meeting.
Operational resilience. Shows important business services, impact tolerances and test results so resilience oversight is evidence-based.
Issues and actions. Shows which agreed management actions are overdue without asking for a status report.
Reporting. Delivers board-ready risk summaries and trends generated from source records.
Products this role uses most
Industry reference
The UK Corporate Governance Code (2024) makes the board responsible for risk management and internal control and expects a committee structure to oversee it. The Basel Committee's corporate governance principles (2015) require board committees, including a risk committee, at systemically important banks.
In the United States the Dodd-Frank Act and the Federal Reserve's Regulation YY require bank holding companies above the asset threshold to maintain a risk committee with at least one risk-management expert. Insurers describe their oversight under the NAIC's Corporate Governance Annual Disclosure, and NACD guidance frames the chair's duties for other sectors.
Related roles
Explore Further
Guides and definitions from the GRC Knowledge Center and the What-is glossary, chosen for this role.
Frequently asked questions
What is the Board Risk Committee Chair accountable for?
The Board Risk Committee Chair leads the board committee that oversees risk appetite, the adequacy of the risk management framework and second line, and management's handling of principal and emerging risks. They set the committee's agenda, approve the enterprise risk appetite statement and tolerance limits, challenge the executive team's risk reporting and assumptions and report the committee's conclusions to the full board.
How does SmartSuite give a Board Risk Committee Chair a current view of risk?
SmartSuite gives committee members a read-only view of the live risk register in Enterprise Risk Management (ERM), including top risks and appetite breaches, so the pack is current on the day of the meeting rather than frozen when it was compiled. The chair can see which risks have moved against the appetite the committee approved, and ask the Chief Risk Officer about a change with the record in front of both of them.
How does the committee oversee operational resilience with evidence?
Operational Resilience shows the committee the important business services, their impact tolerances and the results of tests against them, so resilience oversight rests on evidence rather than assurance by assertion. The chair can see which services have been tested, which failed to stay within tolerance and what management has committed to do, which is the basis for challenge when management reports that resilience is adequate.
How does the chair see whether management actions are overdue?
Issues Management shows which agreed management actions are overdue without the committee having to ask for a status report. Each action carries an owner and a due date, and the chair can see slippage before the meeting rather than hearing about it in the room. That changes the quality of challenge: the question becomes why an action slipped and what has been done about it, not whether it slipped at all.
How does the Board Risk Committee Chair report to the full board?
The chair reports to the full board with board-ready risk summaries and trends that SmartSuite generates from the source records, so the board's picture matches what the committee examined. The same records serve the chair's work with the Chief Risk Officer, who presents from them, with the Chief Executive Officer, who is accountable for the responses, and with the Audit Committee Chair, where risk and control findings overlap.
What does a board committee need to begin using SmartSuite?
Committee members need read access to the risk register, resilience and action views, which the risk function configures; no member operates the system. The committee gets value as soon as the enterprise register, appetite limits and management actions are recorded; new customers can begin that recording in SmartSuite Onboarding, a guided four-week program around one or two priority workflows. Between meetings members see the same live data, so the chair sets the agenda around what has changed and the Risk Committee Members arrive prepared.
See SmartSuite for your role
Start a free trial, or book a demo and we will walk through your role's workflows in SmartSuite.