2020 taught us that major risks can come at us from any direction and with barely a warning. All organizations operate in a risk environment, but all too often, they either don't realize it or they don't develop a strategy to deal with the risks. In this session, we will explore how risks work in both for-profit and not-for-profit organizations and how they can develop a strategy to identify, evaluate, and mitigate those risks. This program will not teach how to eliminate risks, but how to strategize how to reduce their total effect. We will liberally use case studies of both for-profit and not-for-profit companies to bridge the gap between concept and actual implementation. In each area we will explore what our experiences of the pandemic have taught us about this part of risk management.