Risk Register Guide for Canadian Community Sports Clubs

Risk registers in community sports clubs go through a predictable life cycle. Someone — usually a new board member with a corporate background — proposes one at the second meeting they attend. The board agrees enthusiastically. A template gets adopted. Twelve risks are listed across four categories (financial, operational, reputational, legal) with likelihood and impact ratings on a 1-to-5 scale. Mitigations are sketched. The document is filed. It is never opened again.

A year later, the same new board member asks if the risk register has been reviewed. Awkward silence. Someone says it should be on the next agenda. It is not on the next agenda.

The reason this happens is that nobody in a community club has a job that involves consulting the risk register. There’s no compliance officer. There’s no enterprise risk function. The board does not think in twelve-risk grids — they think in “what’s happening this month and what could go wrong with it.”

There is, however, one person whose job does involve risk in your club. Your insurance broker. They write a policy every year. They want to know what’s changed. They will price the policy partly based on what you tell them and partly based on what they observe (or fail to observe) about how the club operates.

So: write the risk register for your broker. Forget the board. The broker reading the register is the actual user, and writing it for that audience produces a document that does real work.

What the broker actually wants to know

Most of the corporate risk-register categories don’t apply to a community sports club. Strategic risk, reputational risk, regulatory risk — these are not what your premium turns on. The broker wants to know about four specific things.

Where the people are, and what they’re doing. How many participants, what age range, what activities. A risk register for a community ice hockey club says “350 registered players age 5-65, weekly games and practices, body-checking permitted in U15+ Men’s divisions, no contact in women’s or U13 below.” The broker can quote a policy from that paragraph alone.

Facilities and equipment. What you own, what you rent, who maintains it, when it was last inspected. Sports clubs that own significant infrastructure (a clubhouse, a turf, lights) get a different premium than clubs that rent municipal facilities. The broker needs to know which you are.

Money flow. Annual revenue range, how it comes in (membership fees, grants, fundraising, gaming), how it’s controlled (cheque signing rule, monthly reconciliation, audit cadence). This determines your fidelity coverage.

Incidents in the past three years. Anything that resulted in a claim, an injury report, a complaint to the PSO, or a discussion with a lawyer. Honesty here matters — the broker is going to find out anyway when they renew, and the relationship is worth more than the small short-term saving from omitting.

That’s it. Four sections, two pages, written in plain English. Updated annually around renewal time. The broker reads it, asks two clarifying questions, writes the policy. Your premium reflects what you actually do, not what the broker assumed because you didn’t tell them.

What changes for the board

The board doesn’t need to know the contents of the four sections in detail. The board needs to know two things: who owns the risk register (typically the treasurer or president), and when the broker meeting is happening (typically once a year, between September and November for most Canadian community clubs). That’s enough.

When the board does want a risk conversation — which happens organically, not on a schedule — it’s almost always one of three topics:

• A specific upcoming event that’s bigger or different than usual (“we’re hosting the provincial championship in March, what do we need to think about?”)
• A change in circumstances (“the city is renting the rink to a new league that conflicts with our practices, what’s the financial exposure?”)
• An incident in another club that’s prompted reflection (“the club in the next town just had a board member resignation over a safeguarding thing, are we exposed?”)

These conversations are useful. They are not the risk register conversations. They’re operational decisions the board makes in the moment, with the broker available if a financial or insurance question is in scope. A formal twelve-risk register doesn’t help these conversations because the right discussion is more specific than any pre-written entry.

What this looks like in practice

The two-page register lives in the same Drive folder as the financial policy and the complaints policy. It gets updated each September when the treasurer is preparing for the annual renewal conversation with the broker. The broker meeting takes thirty minutes, results in a quote, and the policy is bound by mid-November.

That’s the entire risk register process for a community sports club. It produces an accurate insurance arrangement, a clear understanding of where your real exposures sit, and a board that isn’t pretending to manage risk through a spreadsheet they don’t read.

The corporate version with the twelve-by-five grid is fine for organisations that have a chief risk officer. You don’t. Write the document for the person who is actually going to use it, and let the rest of the corporate risk vocabulary go.