Risk Management
The Derbyshire, Lincolnshire and Nottinghamshire Integrated Care Boards are committed to identifying, assessing and managing risks that could affect the achievement of organisational objectives, statutory responsibilities and the delivery of high-quality services.
Risk management arrangements are supported through the Joint Risk Management Policy and the Board Assurance Framework (BAF), which provide the structure for identifying, managing and monitoring strategic and operational risks across the organisations.
Joint Risk Management Policy
Board Assurance Framework (BAF)
The Board Assurance Framework sets out the principal strategic risks facing the ICBs and provides assurance that appropriate controls and mitigations are in place to manage these risks. The current strategic risks for the ICB are:
- Risk 1 – Failure to develop and maintain a comprehensive, evidence-based understanding of local population health needs
- Risks 2–5 – Failure to deliver a coordinated transformation of commissioned services, including prevention, community care models, and digital enablement
- Risk 6 – Failure to involve people and communities meaningfully in commissioning and service design
- Risk 7a – Failure to allocate resources effectively and shape provider markets to deliver value, productivity and system priorities
- Risk 7b – Failure to commission services through effective procurement and contract management arrangements, compromising financial sustainability
- Risk 9 – Failure to systematically improve the quality of healthcare services
- Risk 10 – Failure to ensure timely and equitable access to healthcare services in line with national and local performance standards
- Risk 11 – Failure to develop and implement an effective operating model and workforce capability to support the transition to a merged ICB
- Risk 12 – Failure to maintain cyber resilience

