Enterprise risk management: protecting your mission in uncertain times
Updated: Oct 23
Uncertainty is part of running any organization. Financial pressure, regulatory changes, operational problems, and unexpected crises are always around. For mission-driven organizations, especially in healthcare and nonprofits, the stakes are even higher. That’s why enterprise risk management (ERM) is about more than compliance. It gives you a steady foundation for the long haul.
At Timshel Tarbet Consulting, I help organizations build practical ERM frameworks that get ahead of problems and last that protect operations and reputations and support growth. With executive experience in risk management across healthcare systems and the discipline I learned in the military, I know how to turn risk into resilience.
Why enterprise risk management matters
Without a clear approach to risk, organizations face:
Financial instability from unexpected costs or weak compliance.
Reputational damage when crises are handled badly or ethical standards are unclear.
Operational breakdowns from gaps in planning or workforce systems.
Regulatory penalties due to noncompliance.
Strong risk management turns these weak spots into strengths, so organizations can ride out uncertainty and keep serving their mission.
The core parts of enterprise risk management
1. Risk identification and assessment
Understanding risks across finances, operations, compliance, and the workforce lets organizations make good decisions before a crisis hits.
2. Framework and policy design
Risk management must be more than a binder on a shelf. It should be part of everyday decisions.
3. Compliance and ethics
Organizations with strong accountability and ethical practices earn stakeholder trust and face fewer penalties.
4. Crisis preparedness and response
From cyberattacks to natural disasters, having response plans ready lessens the damage and speeds recovery.
5. Executive and board reporting
Clear reporting makes sure leadership understands the risks, the priorities, and how mitigation is going.
My risk management experience
Timshel Tarbet, MBA : I’ve led enterprise risk management work that protected millions of dollars and made organizations more resilient.
Providence Health Plan: Oversaw risk adjustment and compliance work, including a Risk Adjustment overhaul that delivered $84M, helping the organization stabilize and improve performance.
Cambia Health Solutions: Built an award-winning Ethics and Compliance program recognized by Ethisphere as one of the “World’s Most Ethical Companies” five years in a row.
U.S. Air Force: As a Personnel Specialist, supported joint operations across several military branches, with a focus on accountability and compliance when the stakes were high.
These experiences shape my risk management consulting, which combines strategy, discipline, and hands-on follow-through.
Who ERM consulting helps
Healthcare providers and health plans: Protecting revenue, compliance, and patient experience.
Nonprofit organizations: Staying accountable to donors, boards, and the communities they serve.
Businesses and social enterprises: Building frameworks that support growth while keeping operational risk in check.
Why work with me
C-suite experience: I’ve directly led organization-wide risk management and reported to boards.
Award-winning programs: I’ve built risk frameworks that earned national recognition.
Veteran leadership: My military background in HR and accountability systems keeps integrity at the center.
Proven results: A track record of reducing multi-million-dollar risks while building trust.
Getting started with ERM
Every organization faces different risks. To start building resilience:
Assess risks across all departments.
Find where your biggest financial or reputational exposure is.
Bring leadership and staff into planning.
Build clear frameworks that can grow with you.
Commit to regular reviews and updates.
Is your organization prepared for the risks ahead? Don’t wait for a crisis to force your hand. Start building resilience now.
Schedule a consultation or join my newsletter for ideas, examples, and strategies on risk management and resilience.
Comments