Aiming at strengthening the organisation's risk management capacity, in 2019 NRC decided to establish a Risk Management and Compliance (R&C) function across the organisation. This function is responsible for: i) enabling NRC to manage risks by supporting organisational efforts to identify, assess, prepare for and respond to risks; ii) fostering a risk management culture by institutionalising processes and systems that embed risk management into operations and build capacity and awareness on risk throughout NRC; and iii) improving organisational effectiveness by streamlining compliance practices and enabling better prioritisation of support resources to highest-risk issues

At country office (CO) level, the R&C function has been tasked with supporting risk owners in their efforts to manage risks, providing assurance to the Country Management Group (CMG) on CO compliance within high risk areas/issues, promoting a risk management culture in the CO through training and communication, ensuring CO’s compliance with standards and regulations that fall outside the scope of existing CO functions (Protection from Sexual Exploitation and Abuse (PSEA), Data Protection (DPR), Code of Conduct, Securing Supporting Documentation, COTER and sanctions) and ensuring that complaints from external and internal stake holders are properly handled and responded to.