The mission of the Office of Risk Management and Compliance (ORMC) is to collaborate with campus stakeholders to offer guidance and support in proactively identifying, mitigating, or preventing risk exposures across a wide range of areas, including campus safety, compliance, ethics, and a number of other areas. ORMC seeks to promote an organizational culture that encourages ethical conduct and a commitment to compliance with the law.

The ORMC encourages collaboration and communication across campus groups, and will assist with the development of internal controls, mitigation efforts, and investigative procedures concerning high risk compliance areas that proactively detect compliance issues before they cause harm.

ORMC is responsible for oversight of UAH insurance and risk mitigation programs, emergency management, and regulatory, ethics, and policy compliance matters. ORMC oversees the Policy on Policies process and administers the Youth Protection Program, Institutional Conflicts of Interest and Conflicts of Commitment Program, Vehicle Safety Management Program, and On-the-Job Injury (OJI) Program.

Quick Links

Universities are exposed to a wide variety of risks, much like a business enterprise. These risks may include a variety of potential harms, such as financial loss, reputational harm, adverse governmental action, etc. Realistically, few activities are completely insulated from risk, and the relevant question is not whether risks are present but how much risk is tolerable in the context of the expected benefit from the activity. The assessment of risk and the development of appropriate responses define the role of risk management. Risk treatments include risk transfer (e.g., through contractual obligations), risk mitigation (reducing the likelihood of a risk), risk finance (such as purchasing insurance), risk avoidance (not engaging in an activity), and risk acceptance.

The ORMC works in cooperation and coordination with a number of stakeholders, including the Office of Counsel, Business Services, campus departments/units, and UA System risk and compliance offices. One of the primary roles of the ORMC is to participate in the process of securing insurance as a means of mitigating risks of loss and liability for the institution and its employees. Decisions about the placement of insurance (including self-insurance programs) are generally made by a group of officials from all three campuses operating through a University of Alabama System (UAS) committee. The majority of insurance programs at UAH are approved and purchased through this UAS group, though some policies are procured by this campus on its own.

One of the functions of ORMC is to assess institutional risk. This includes reviewing the nature and extent of risk in a proposed or ongoing program or action. The ORMC conducts risk assessments in a variety of circumstances, including contractual matters. These reviews may include recommendations, suggestions as to how to minimize risk, advice regarding the purchase of insurance, or other recommendations including not to proceed with the proposed project or activity.

Another function of ORMC is the monitoring of incidents, claims, near misses, and losses as a means of identifying patterns of conduct or areas of institutional activity that may be generating more than an acceptable level of risk.

The work of other University offices and groups touches the risk, compliance, and ethics functions of ORMC, including auditing, legal, environmental health and safety, occupational health and safety, behavioral threat assessment, physical security, campus safety, etc. Cooperation among the officials who are active in these areas is obviously a most important link to positive risk management outcomes for the campus.

Questions about specific insurance coverages, claims monitoring, or other risk management activities should be directed to riskmanagement@uah.edu. Questions regarding litigation or other legal concerns should be directed to the Office of Counsel.