This article was written before the COVID-19 pandemic, and while this has totally overwhelmed all other risk considerations in the period, the risk process described below is more valid than ever. Charities with a rigorous risk management process will have been much better prepared for the impact of the pandemic, even if the pandemic had not been previously considered as a risk factor.