Risk Maturity Assessment - Your questions answered

To help you get started, we've answered some frequently asked questions below.

Risk maturity

Risk maturity is a measure of how well an organisation identifies, assesses, manages and monitors risks.  It also examines how well risk management is embedded within the organisation with a particular focus on strategic risks.

A risk maturity assessment will help an organisation understand its current risk management arrangements and where improvements need to be made to support the achievement of strategic objectives, decision making and good governance.

We recommend doing it annually or following a material change within the organisation, or in response to ad-hoc requests. Previous assessment outputs will be stored within the tool for comparison purposes.

Risk Maturity Assessment tool

The Risk Maturity Assessment is a quick and easy-to-follow tool to help an organisation to understand its current risk maturity level and what action it should take to work towards the next level of risk maturity.  The more mature the risk management system of an organisation is, the more effective it will be in making decisions, taking the right risks, and achieving better outcomes.

By answering a series of questions (in no particular order) a user will find out the risk maturity rating for their organisation. Ratings range from Developing, Integrating, Embedding to Optimising.  These are supported by some actions to help strengthen its risk management approach.

There is no charge, the tool is readily available on the Ecclesiastical website.

Yes, the tool is available to both existing and non-Ecclesiastical clients. 

If there are key developments within the risk management field the questions will be updated accordingly.

Yes, the assessment can be undertaken on a laptop, tablet, or mobile phone.

Sign in process

Once registered, the user can sign in using their email address and password.

Don't have an account? Sign up now. Signing up for a new account requires a 2-step verification where the user will be sent a verification code via email.  If they do not receive this email in their inbox – they should check their junk mail.

The assessment is registered to the person who originally registered to use the tool.  Registrations cannot be transferred or shared with any other member of the organisation.  We recommend users download reports so they can be shared accordingly to measure changes in risk maturity over time.

Completing an assessment

It will take approximately 60 minutes to complete the assessment if the user has access to all of the data required. The user can stop, start, and save an assessment at any time.

The user must click on the ‘Next Question’ button to move through the assessment.

The user will not be able to progress any further in this element.  The tool will direct them back to the Summary Overview to continue the assessment within the next element.  A 'No' answer will be converted into an action and will be included in the output report.

Data management

If the user provides consent to share the data collected, this can be accessed by the Ecclesiastical Risk Team. If the user does not want to share the data, it will not be available to the Ecclesiastical Risk Team.

The data is managed in line with Ecclesiastical’s Privacy Policy and GPDR requirements.

The information submitted will not be shared with Ecclesiastical’s underwriting department and will not impact individual premiums or insurance cover.


Following completion of the assessment, the user submits their response and will receive an email confirming their PDF Report is ready to access online, via their registration login details.

Ecclesiastical clients can access our dedicated Risk Advice line and certain clients may be offered additional value-added support through the ERM Team based on their agreement. Other organisations could approach their Broker who may be able to help through their risk management proposition or they may contact an external third party for support.


Whilst guidance text is provided, users can request support by emailing ERM@ecclesiastical.com