Enterprise Risk Management Task Force
The Enterprise Risk Management Task Force’s mission is to implement a comprehensive enterprise risk management strategy that addresses strategic, operational, financial, and reputational risks of this integration.
Task Force Updates
Enterprise Risk Management – March 2026
- HSCAlert/Omnilert Systems & Processes Working Group – Work completed in March to automate process for integrating employee and student data into Omnilert and transition from a manual “opt-in” model to an automated “opt-out” for text alerts. Additional discovery work may be activated for the possibility of one platform for both campuses.
- Cross Campus Incident Escalation Working Group – Debriefing for lessons learned and future action conducted after inclement weather communications sent in January. Logistics Subgroup is planning March Exercise and finalizing Timely Warning processes. Communications Subgroups is finalizing emergency contact list to ensure confidentiality and updating alert system scenarios based on executive feedback.
- Compliance Working Group – Developing institution-wide communication plan for interim policy review process & procedures. Researching archives of policies and uploading to online policy repository. Meeting to discuss Compliance Accessibility standards.
Enterprise Risk Management – January 2026
- Launched HSCAlert Working Group with subgroups focused on communication, program processes and workstream. Subgroups met with the vendor for the Omnilert system used on the health campus about proposed technical modifications to maximize use of the system and explore an automated opt-in process for adding mobile numbers for employees to receive texts.
- Successfully executed Inclement Weather Business Continuity Exercise (Police Dept./Business Continuity Emergency Management (BCEM) Subgroup).
- Compliance Working Group is implementing approved recommendations and developing roadmap for next phase of work.
- Mandatory Reporting Working Group distributed survey to mandatory report owners across both organizations to assess current status and plans for combined reporting and will coordinate with report owners across both campuses.
Enterprise Risk Management – September 2025
- Kicked off next phase of work for Mandatory Reporting WG focused on compliance and joint reporting efforts.
- Launched new Compliance Working Group with subgroups focused on policy harmonization and compliance training.
- Cross Campus Incident Escalation (CCIE) WG completed initial phase of work with recommendations and inventory of next steps. Work Group is completing final confirmation and testing of cross campus incident escalation process and protocols.
- The Legal Structure, Institutional Reporting and Compliance Initial Discovery working groups finalized charters and activated work on high priority reports under ERM.
- The Incident Escalation and Communication working group finalized the Incident Escalation Initial Inventory of Alignment and Coordination Opportunities and Incident Escalation Guidance Matrix to ensure a combined approach to incident escalation and communication on day one.
- In February 2025, the task force launched two new working groups: Legal Structure, Institutional Reporting and Compliance and Incident Escalation and Communication.
Task Force Team
Working Groups
The Compliance Working Group provides oversight and coordination of key compliance activities across the institution on both the academic and health campuses. Its work is supported by the Policy Harmonization and Compliance Training Subgroups that are focused on advancing alignment and regulatory readiness in their respective areas.
The Incident Escalation and Communication Working Group is charged with documenting a coordinated law enforcement approach and incident escalation and risk mitigation structure for Day 1, including outlining a timeline for implementation. The working group will develop near-term coordination strategies for communicating with executive leadership and campus communities in cases of emergency (criminal incidents, weather events, environmental hazards, protests, etc.).
This group’s initial discovery efforts will aim for the integrated institution to maintain the timely collection or submission of institutional data as required by third parties on Day 1. Co-chairs will launch recommended working groups for mandatory external reporting and compliance requirements, as well as near-term solutions for integrated reporting.
This group’s initial discovery efforts will aim for the integrated institution to maintain the timely collection or submission of institutional data as required by third parties on Day 1. Co-chairs will launch recommended working groups for mandatory external reporting and compliance requirements, as well as near-term solutions for integrated reporting.
Completed Working Groups
These working groups have successfully completed their initial scope of work. Expected deliverables have been presented to the Enterprise Risk Management Task Force to inform future integration efforts.
The charge of this working group is to strengthen emergency communications readiness at UT Health San Antonio by improving participation in the HSC Alert (Omnilert) system.