Nonprofit Risk Assessment Template for Canada

A Nonprofit Risk Assessment is an essential governance document that helps your organization systematically identify, evaluate, and manage the various risks that could impact your mission, operations, and sustainability. Under Canadian law, nonprofit boards have fiduciary duties to exercise care, diligence, and skill in overseeing organizational risks, making formal risk assessment a critical component of good governance.

When do you need this document?

You need a comprehensive risk assessment when your nonprofit faces significant organizational changes, such as launching new programs, expanding operations, or experiencing leadership transitions. It's also required when applying for major grants, renewing insurance policies, or preparing for regulatory reviews. Many funders and insurance providers now require evidence of formal risk management processes before approving applications. Additionally, if your organization has experienced incidents, complaints, or near-misses, a thorough risk assessment helps identify vulnerabilities and prevent future occurrences. Annual risk assessments are considered best practice for maintaining strong governance and demonstrating accountability to stakeholders.

Key legal considerations

Your risk assessment must address governance risks related to board oversight, director liability, and fiduciary duties under Canadian nonprofit legislation. Financial risks require careful evaluation of internal controls, funding dependencies, and compliance with accounting standards. You should assess operational risks including program delivery, human resources, and health and safety obligations. Reputational risks need consideration given their potential impact on funding and community support. The assessment should identify legal and regulatory compliance risks across federal and provincial jurisdictions, including employment standards, privacy laws, and sector-specific regulations. Document retention policies and cybersecurity measures are increasingly important risk areas that require formal evaluation and mitigation strategies.

Legal requirements in Canada

Under the Canada Not-for-profit Corporations Act (CNCA), federal nonprofits must maintain proper books and records, and directors have statutory duties to act honestly, in good faith, and in the organization's best interests. Provincial nonprofit acts impose similar obligations with jurisdiction-specific requirements. The Income Tax Act requires registered charities to maintain their charitable status through compliance with operational and administrative requirements. Employment-related risks fall under federal or provincial jurisdiction depending on your organization's classification. Privacy legislation requires assessment of personal information handling practices. Your risk assessment should demonstrate how your organization identifies and manages these legal obligations, with particular attention to director and officer liability exposure, which can be significant in the nonprofit sector.