What's the difference between contingency and scenario planning? Where can I learn more about risk management?

Both contingency and scenario planning are structured ways for organizations to think about the future.

Although the terms sometimes are used interchangeably, contingency planning is a specific type of scenario planning. Scenario planning usually anticipates gradual change, such as a loss of revenue over time. Contingency planning is for a sudden, drastic turn of events.

Scenario Planning

In simple terms, an organization might come up with three or four future scenarios, both good and bad. By studying imagined positive and negative outcomes, it can make real decisions about the future--whether that's next week or years from now.

According to consulting giant Deloitte, which provides scenario-based consulting and training to all types of organizations:

Scenarios are stories about how the future might unfold for our organizations, our communities, and our world. Scenarios are not predictions. Rather, they are provocative, plausible, and data-rich accounts of how relevant external forces -- such as the future political environment, scientific and technological developments, social dynamics, and economic conditions -- might interact and evolve, providing our organizations with different challenges and opportunities. The purpose of scenario planning is to stretch our thinking about emerging changes and the opportunities and threats that the future might hold.

The following six steps for creating an effective scenario plan are quoted from  Mal Warwick's Fundraising When Money is Tight:

  • What is the question? What keeps you up at night?
  • What don't you know? What are the strategic uncertainties (ex. how long a recession will last) about which you need more information?
  • Gather the necessary information
  • Explore broad trends (ex. social dynamics, economic forces, political issues, technological developments)
  • Write stories to illustrate what the world will look like if the worst--or best--happens
  • Test strategic choices. How will they play out in the context of the scenarios you've written?

 

Contingency Planning

A contingency plan is your organization's "Plan B" or "worst case scenario" plan. Also called a business continuity plan or disaster recovery plan, it creates an organized and coordinated set of steps to be taken if an emergency or disaster strikes. Examples of emergency or disaster include: natural disasters, like hurricanes; crime, like arson; or economic conditions, like a recession.

Contingency planning is done to avoid or minimize damage, loss or injury, and to ensure that the organization's key operations continue. Planning for a tornado strike or broken water pipe, or any other rare but organization threatening event may seem like an unnecessary use of an nonprofit's limited time, but it's like an insurance policy or an umbrella on a cloudy day.

 

Risk Management

According to Jesse Feiler in The Nonprofit Risk Book: Finding and Managing Risk in Nonprofits and NGOs, “[…] risk can be regarded as any issue that may cause an organization to lose sight of or divert from its mission, purpose, or daily operations. Risk can come from a single event or from multiple vulnerabilities interacting across some or all of an organization’s departments, divisions, or functions.”

For nonprofits, risk management may refer to assessing finances or insurance coverage, but it also may refer to screening volunteers, training employees and reducing liability, to name a few.

Developing a risk management plan is key to ensuring that your organization is not caught off guard by unforeseen events or oversights. Risk management may involve any of the following actions:

  • purchasing Directors' and Officers' insurance for your board members
  • implementing a volunteer screening process
  • developing a disaster plan

To learn more about risk management, check out the staff-recommended resources list at the bottom of this page.

 

See also our related Knowledge Base articles:

 

A Call for Nonprofit Risk Management
Stanford Social Innovation Review

Nonprofits have a duty to apply risk management principles—a look at when organizations should adopt a risk management program and how they can begin. July 2016. The author, Ted Bilich, also has a series of free downloadable materials, including a step-by-step guide to risk management, at https://riskalts.com/free-nonprofit-risk-management-materials/. (Registration required to download.)

Nonprofit Insurance Coverage: You Need More Than a Directors and Officers Policy
Venable LLP

Discusses what kinds of insurance a nonprofit needs and who or what it should cover. Links to a longer article and webinar. March 2014.

Public Entity Risk Institute

The Public Entity Risk Institute (PERI) is a dynamic, forward-thinking organization that serves as a resource to enhance the practice of risk management throughout organizations and communities. Serving public entities, small businesses, and nonprofit organizations, PERI provides relevant and high quality enterprise risk management information, training, data, and data analysis.

Disaster Planning and Recovery Guide
TechSoup

TechSoup provides the resources in this toolkit with the goal of preparing nonprofits for a crisis, but also to deepen their impact in times of health.

Data Backup Best Practices for Nonprofits
TechSoup

TechSoup provides guidance to help you create a data backup and recovery plan.

Heritage Preservation
Heritage Emergency National Task Force

Useful information and tools to help your institution plan and prepare for emergencies by becoming familiar with possible hazards, developing an emergency plan, training staff and volunteers, and getting to know local emergency responders.

Alliance of Nonprofits for Insurance, Risk Retention Group (ANI)

Nonprofits Insurance Alliance Group provides liability insurance coverages, as well as helpful risk management tools, all tailored for 501(c)(3) nonprofits.

Disaster Planning, Emergency Preparedness & Business Continuity
Nonprofit New York

Guideline of what an organization needs to consider in order to prepare its own disaster recovery plan so it is able to resume operations if an interruption occurs. Contents were drawn from a series of disaster planning and recovery seminars given for NPCC.

The Resilient Organization: A Guide for Disaster Planning and Recovery
TechSoup

TechSoup created the first version of this guide shortly after Hurricane Katrina struck the southern United States and left numerous nonprofits and public libraries scrambling for solutions.