RISK ASSESSMENT MATRIX GUIDANCE NOTES
|
|
- Charlotte Carroll
- 8 years ago
- Views:
Transcription
1 RISK ASSESSMENT MATRIX GUIDANCE NOTES 1. Introduction Risk Assessment matrices provide a powerful and easy-to-use tool for the identification, assessment and control of business risk, via treatment plans. It enables managers to consider the whole range of categories of risk affecting a business activity. The various categories of strategic and operational risks are detailed in Appendix A. The technique can assist in the prioritisation of risk and decisions on treatment plans, identification and allocation of resources; determine the adequacy of existing control measures and the need for further action. The technique can be directed at the business activity as a whole or on individual departments / sections / functions or projects. 2. Identifying risks Key questions should be asked to aid identification of risk. For each specific area knowledge of what the business activity/objective is and how it is achieved will be key to identifying any risks. Information on processes, people, skills and external risk will be essential e.g. Process Street Sweeping, tools required, equipment issued. People How many are involved in this process? Skills Specific skills or knowledge required for this process, such as local knowledge of roads. External risk traffic, hazardous waste. 3. Analysing Risks Once sufficient knowledge of the process/activity/objective has been obtained risks analysis can be carried out. Key Questions could include: What could go wrong? How could it go wrong? Has it happened before? (Look to other local authorities/organisations who may have the same or similar risks for evidence as well as internally) What other processes/objectives could be affected? (This will allow analysis of links to other risks) Is the risk to a strategic objective (Affecting 3-5 year planning) or to an operational objective (Affecting the day to day activity)? Consideration should be given to whether the risk could be both strategic and operational e.g. an operational risk that if not controlled will stop the Council achieving a strategic objective. 4. Profiling of Risk Risk profiling uses data collected on risk through identification processes to score the level of risk posed by the process/objectives. Risk is profiled according to its likelihood and severity: 1
2 Likelihood Remote - Unlikely - Likely - Very likely - Little or no likelihood Some likelihood Significant likelihood Near Certainty Severity Major - Serious- Significant- Minor- Total service failure, high financial loses, possible national media criticism, local media interest or possible fatalities/severe injuries. Short-term total service failure or prolonged partial failure, possible local media interest, possible financial losses or injuries. Short-term partial failure, no media interest, limited financial losses or disruption to service provision. An annoyance that does not disrupt service provision or has only a localised impact contained within the council/service affected. No media or public knowledge of incident. 4 Major LOW MEDIUM HIGH HIGH 3 Serious LOW MEDIUM MEDIUM HIGH 2 Significant LOW LOW MEDIUM MEDIUM 1 Minor LOW LOW LOW LOW Severity Likelihood 1 Remote 2 Unlikely 3 Likely 4 Very likely Once the likelihood and severity of the risk have been assessed they are plotted on the risk profiling grid above and the risk rating defined e.g. If a risk has a likelihood of 3 Likely and a severity of 4 Major, the risk rating will be 3 x 4 = 12. This would mean the risk is high and would require a treatment plan. Assessing the Risk Rating for each risk should: In the first instance be scored to show the level of risk with NO control measures in place this allows the assessor to see the base line risk. For all future assessment of that risk show the score with control measure in place. This will allow the assessor to see the true value of any control measures. 2
3 Completing the Risk Assessment Matrix The Risk Assessment Matrix can be found at Appendix B. (For the purpose of this document the Matrix in Appendix B has been colour coded, when filling in the document for risk assessment purposes please use an uncoloured version) SECTION 1 Date: Name: Post: Dept/Unit: Risk Assessment Number Risk type date the risk assessment was completed of person completing assessment (not necessarily the risk control owner) of person completing assessment that the risk has been identified as belonging to Consecutively from 1 (the first assessment) this allows for accurate version control and provides and auditable trail of treatment and effectiveness. define the category of risk: Strategic a risk to the 3 5 year planning/objectives of the Council. Operational a risk affecting day-to-day processes. Both an operational risk with a strategic impact. SECTION 2 Code: Risk: Categories of Risk: Likelihood: Severity: Risk Rating: sequential numbering of risks identified, this can be used with the dept/unit information to give each risk a unique code that for the Risk Register. (Please see Appendix D for coding details) describe the risk, what is it that is likely to happen? What are the triggers to this happening? identify which categories the risk falls into in appendix A Score from risk profiling grid Score from risk profiling grid Likelihood x Severity 3
4 SECTION 3 Control Measures in Place: Likelihood: Severity: Risk Rating: Further Controls Required: Review Frequency: Date of next Review: Owner: Describe all the controls currently in place. For greater details of controls, or for identifying further controls please complete the Risk Treatment Plan Matrix see Appendix C. Score of residual risk (with controls in place). Score of residual risk (with controls in place). Likelihood x Severity (with controls in place). Yes/No. Further controls will be required if the residual risk rating is still 9 or above. Where further controls are required a treatment plan matrix should also be completed. Please see Appendix C for a copy of the plan matrix How often will this risk be reviewed? Review dates have a number of criteria. How high is the risk rating? How important is it that this risk is controlled? What are the cost implications of this control? If there is a significant cost to the control review may be delayed until a budget for the control is identified. Similarly the cost of a control may mean that more frequent reporting on the risk is required as part of budget monitoring. Low-level risks may only require monitoring on a yearly basis if the level of risk is not likely to change. A = Annual, Q = Quarterly, M = Monthly. Plot realistically when you should next review the risk rating to assess the adequacy of the controls This is the person responsible for implementing the risk control measure, not necessarily the person filing in the form. If a risk requires further controls these will need to be agreed the risk should then be moved to a new Risk assessment Matrix labelled number 2 to be able to plot how long this control should take and when to measure effectiveness at the next review date. Ongoing monitoring of risks and treatment will ensure that actions are updated as required and that the risk control is always under the most appropriate ownership. Reassess the risk and controls every time that ongoing monitoring shows there is a significant shift in the rating e.g. if a medium level risk becomes high or a low level risk becomes medium. 4
5 5. Completing the Risk Treatment Plan A copy of the Risk Treatment Plan is in Appendix C. Header Section: Insert the department this risk relates to. Column 1: Column 2: Column 3: Column 4: Column 5: Column 6: Column 7: Column 8: The number here will be the same as the identifying number n the Risk Assessment Matrix. The risk as described in the Risk Assessment Matrix. Final rating (Residual risk). What actions need to be taken? What is the control? (Either in place or required). Owner of control measure How will we know the control is successful? What are the benefits of controlling the risk in this way? All key dates that may affect the control. The agreed date for review and frequency. This should take into account how important it is to monitor and control the particular risk. 6. Summary Risk assessment is easy to use and will provide an overall and graphic views of risks, which are affecting the business activity. The process involves all staff; being driven by managers. It should be repeated to monitor the effectiveness of the risk control measures implemented. It is not a purely quantitative method but relies on the judgements and informed decisions of the person / team conducting the assessment. Training will be provided to all involved, to lay a common grounding and understanding of the technique. It is vital to avoid the temptation to alter the results of an assessment to give a more positive result this will not give a true value to any controls used and defeats the purpose of the exercise. Extra vigilance should be taken assessing the level of residual risk after risk control measures have been implemented as this allows us to understand which controls work best and how well we are working toward reducing risk. The assessment of residual risk will be almost worthless if based on risk control measures, which have not been accurately assessed for effectiveness. The effectiveness of treatment plans will be reviewed at Risk Management Steering Group meetings and/or the proposed risk management clinics. 5
6 5. Supporting Documentation HERTSMERE BOROUGH COUNCIL Risk Management Policy statement Risk Management Strategy v 1.5 Risk Management Steering Group Terms of Reference Risk Assessment Matrix v 1.5 Risk Treatment Plan v 1.1 6
7 APPENDIX A The Categories of Risks Facing Hertsmere Borough Council Hazards and risks need to be taken into account in judgements about the medium to long-term goals and objectives of the organisation, as well as the day-to-day operations of the Council. These may be: - Political: Economic/Financial: Social: Technological: Legislative/Legal: Environmental: Reputational: Competitive: those associated with failure to deliver either central Government policy or meet the administration s manifesto commitments those affecting our ability to meet financial commitments. For example, internal budgetary pressures, the failure to purchase adequate insurance cover, external economic changes or the consequences of proposed investment decisions. Monitoring of financial planning and control and internal funds. those related to the effects of changes in demographic, residential or socio-economic trends on the organisation s ability to deliver its objectives. those associated with the capacity of the organisation to deal with the pace / scale of technological change or its ability to use technology to address changing demands. They may also include the consequences of internal technological failures affecting the organisation s ability to deliver its objectives. (e.g. IT systems, equipment or machinery). those associated with current or potential changes in national or European Law (e.g., the appliance or nonappliance of TUPE Regulations, Human Rights Act, Data Protection Act, Disability Discrimination Act, etc.,). Risk related to possible breaches of legislation. those related to the environmental consequences of progressing the organisation s strategic objectives (e.g., in terms of energy efficiency, pollution, recycling, landfill requirements, emissions, etc.,). Those related to pollution, noise or energy efficiency of ongoing service operations. those related to the organisation s reputation and the public perception of the organisation s efficiency and effectiveness. those affecting the competitiveness of the service (in terms of cost or quality) and / or its ability to deliver Best Value. 7
8 Customer/Citizen: Professional: Physical: Contractual: those associated with failure to meet the current and changing needs and expectations of our customers and citizens. those associated with the particular nature of each profession those related to fire, security, accident prevention and health and safety (e.g., hazards / risks associated with buildings, vehicles, plant and equipment, etc.,) those associated with the failure of contractors to deliver services or products to the agreed cost and specification. 8
9 APPENDIX B DATE: NAME: POST: DEPT/UNIT: RISK ASSESSMENT MATRIX RISK ASSESSMENT NUMBER: BUSINESS OBJECTIVE: RISK TYPE: STRATEGIC / OPERATIONAL / BOTH (delete as necessary) CODE: RISK ASSESSMENT OF RISK (no controls in place for first assessment and controls in place thereafter) Categories of risk SEVERITY LIKELIHOOD RISK RATING ASSESSMENT OF RISK (With controls in place Residual Risk Rating) Control measures in place? (Please see Treatment Plan for more detail) SEVERITY LIKELIHOOD RISK RATING FURTHER CONTROLS REQUIRED REVIEW FREQUENCY (A, Q, M) DATE OF NEXT REVIEW OWNER 9
10 APPENDIX C DEPARTMENT: RISK TREATMENT PLAN (version 1.1) DATE: NUMBER: RISK RISK RATING CONTROL MEASURE OWNER CRITICAL SUCCESS FACTOR KEY DATES REVIEW DATE/S As described in the Risk Assessment Matrix As identified in the Risk Assessment Matrix What control will be implemented? Officer responsible for managing the risk control What evidence will there be that the control is working? Any dates/ milestones that could affect the control or risk? Agreed date of review and frequency 10
11 APPENDIX D Risk Register Coding Three letters and two numbers. The first two letters relate to the service: CR = Corporate Risks WS = Waste and Street Scene CS = Corporate Support CC = Corporate Communications LD = Legal and Democratic FI = Finance, Revenues, Benefits and ICT HH = Health and Housing IA = Internal Audit HR = Human Resources and Customer Services PB = Planning and Building Control The third letter relates to the specific work area within the service: CR: WS: CS: CC: LD: C = Chief Officers Board M = Management Board W = Waste Management E = Engineering C = Communications P = Parks S = Performance and Community Services C = Communications B = Buildings D = Democratic E = Electoral L = Land Charges 11
12 FI: F = Finance R = Revenues B = Benefits I = ICT HH: E = Environment H = Housing IA: A = Audit B = Benefit Fraud HR: P = Print and Design C = Customer Services H = Human Resources PB: C = Car Parking B = Building Control The two numbers start from 01 and continue sequentially to 99 12
MARCH 2012. Strategic Risk Policy Update March 2012 v1.10.doc
MARCH 2012 Version 1.10 Strategic Risk Policy Update March 2012 v1.10.doc Document History Current Version Document Name Risk Management Policy Statement and Strategic Framework Last Updated By Alan Till
Shepway District Council Risk Management Policy
Shepway District Council Risk Management Policy Contents Section 1 Risk Management Policy... 3 1. Updates and amendments... 3 2. Definition... 3 3. Policy statement... 3 4. Objectives... 3 Section 2 Risk
Risk Management Strategy
Risk Management Strategy 2010 RISK MANAGEMENT STRATEGY 1 INTRODUCTION 1.1 What is Risk Management? 1.1.1 Risk can be defined as uncertainty of outcome (whether positive opportunity or negative threat).
The Risk Management strategy sets out the framework that the Council has established.
Derbyshire County Council Management Policy Statement The Authority adopts a proactive approach to Management to achieve Best Value and continuous improvement and is committed to the effective management
Bridgend County Borough Council. Corporate Risk Management Policy
Bridgend County Borough Council Corporate Risk Management Policy December 2014 Index Section Page No Introduction 3 Definition of risk 3 Aims and objectives 4 Strategy 4 Accountabilities and roles 5 Risk
Bedford Group of Drainage Boards
Bedford Group of Drainage Boards Risk Management Strategy Risk Management Policy January 2010 1 Contents 1. Purpose, Aims & Objectives 2. Accountabilities, Roles & Reporting Lines 3. Skills & Expertise
River Stour (Kent) Internal Drainage Board Risk Management Strategy and Policy
River Stour (Kent) Internal Drainage Board Risk Management Strategy and Policy Page: 1 Contents 1. Purpose, Aims & Objectives 2. Accountabilities, Roles & Reporting Lines 3. Skills & Expertise 4. Embedding
Waveney Lower Yare & Lothingland Internal Drainage Board Risk Management Strategy and Policy
Waveney Lower Yare & Lothingland Internal Drainage Board Risk Management Strategy and Policy Page: 1 Contents 1. Purpose, Aims & Objectives 2. Accountabilities, Roles & Reporting Lines 3. Skills & Expertise
Revised Risk Management Policy and Framework. Report by Head of Finance
Audit Committee 29 April 2010 Item No 7 Revised Risk Management Policy and Framework Report by Head of Finance Summary A substantial review of our current Risk Management Strategy has been carried out.
Maintenance Strategy 2015 Owner: Kevin Bullimore Head of Infrastructure Next review 2020
Maintenance Strategy 2015 Owner: Kevin Bullimore Head of Infrastructure Next review 2020 Page 1 of 7 Maintenance Strategy Introduction The requirement for maintenance of premises, plant and equipment arises
DERBYSHIRE COUNTY COUNCIL AUDIT COMMITTEE. 30 July 2007. Report of the Deputy Chief Executive and Head of Corporate Finance
In preparing this report the relevance of the following factors has been considered: prevention of crime and disorder, equality of opportunity; and legal, financial, environmental, health, respect for
RISK MANAGEMENT STRATEGY
RISK MANAGEMENT STRATEGY 1 Introduction The purpose of this document is to outline a which facilitates the effective recognition and management of risks facing the University. The Combined Code on Corporate
Business Continuity Management For Small to Medium-Sized Businesses
Business Continuity Management For Small to Medium-Sized Businesses Produced by NORMIT and Norfolk County Council Resilience Team For an electronic copy of this document visit www.normit.org Telephone
HERTSMERE BOROUGH COUNCIL REPORT TO EXECUTIVE
HERTSMERE BOROUGH COUNCIL REPORT TO EXECUTIVE Item no: 7.2 Document Reference no: EX/10/30 Date of Meeting / Decision: 10 March 2010 This is not a key decision Urgency: The proposals are not exempt from
Risk Management. Policy
Policy Risk Management Endorsed: 26 February 2014 Brief description The GPC Risk Management Policy and its supporting standards and procedures provide a framework to ensure that risks arising from our
V1.0 - Eurojuris ISO 9001:2008 Certified
Risk Management Manual V1.0 - Eurojuris ISO 9001:2008 Certified Section Page No 1 An Introduction to Risk Management 1-2 2 The Framework of Risk Management 3-6 3 Identification of Risks 7-8 4 Evaluation
GUIDANCE ON THE COMPILATION OF BUSINESS CONTINUITY PLANS. Front cover Add your logo, company name and the date the plan was last amended.
LINCOLNSHIRE SUPPORTING PEOPLE GUIDANCE ON THE COMPILATION OF BUSINESS CONTINUITY PLANS Front cover Add your logo, company name and the date the plan was last amended. Distribution list List who has a
Northern Ireland Blood Transfusion Service
Northern Ireland Blood Transfusion Service Risk Management Strategy Northern Ireland Blood Transfusion Service Lisburn Road Belfast BT9 7TS Telephone No. 028 9032 1414 www.nibts.org Page 1 of 12 CONTENTS
WHS Risk Assessment and Control Form
WHS Risk Assessment and Control Form Step 1: Who has conducted the Risk Assessment Risk Assessment completed by (name): Staff / Student Number: Signature: Date: Step 4: Documentation and initial approval
Risk Management Strategy and Policy. The policy provides the framework for the management and control of risk within the GOC
Annex 1 TITLE VERSION Version 2 Risk Management Strategy and Policy SUMMARY The policy provides the framework for the management and control of risk within the GOC DATE CREATED January 2013 REVIEW DATE
POLICY : CORPORATE RISK MANAGEMENT
APPENDIX 5 POLICY : CORPORATE RISK MANAGEMENT 1 Scope This is a Service wide policy. 2 Aims and Objectives Lancashire Combined Fire Authority provides services to a diverse range of people and organisations,
Risk Management Framework
Risk Management Framework Category or Type Originally approved by, and date Administration and Management Vice Chancellor at VCAG on December 2008 Last approved revision October 2011 Sponsor Chief Operating
Compliance Management Framework. Managing Compliance at the University
Compliance Management Framework Managing Compliance at the University Risk and Compliance Office Effective from 07-10-2014 Contents 1 Compliance Management Framework... 2 1.1 Purpose of the Compliance
UNIVERSITY OF LONDON GUIDE TO RISK MANAGEMENT. Purpose of the guide... 2
UNIVERSITY OF LONDON GUIDE TO RISK MANAGEMENT Purpose of the guide... 2 Risk Management The Basics... 2 What is Risk Management?... 2 Applying Risk Management... 2 The Use of Risk Registers in Risk Management...
Essex Fire Authority. Fleet Management. Internal Audit Report (4.12/13) 28 February 2013 FINAL. Overall Opinion
Essex Fire Authority Fleet Management Internal Audit Report (4.12/13) 28 February 2013 FINAL Overall Opinion Essex Fire Authority Fleet Management 4.12/13 CONTENTS Section Page Executive Summary 1 Action
NSW Government Digital Information Security Policy
NSW Government Digital Information Security Policy Version: 1.0 Date: November 2012 CONTENTS PART 1 PRELIMINARY... 3 1.1 Scope... 3 1.2 Application... 3 1.3 Objectives... 3 PART 2 CORE REQUIREMENTS...
Generic risk assessment form. This document forms part of Loughborough University s health and safety policy Version 3 February 2014
Generic risk assessment form Date: (1) Assessed by: (2) Checked / Validated* by: (3) Location: (4) Assessment ref no (5) Review date: (6) Task / premises: (7) Activity (8) Significant hazard (9) Who might
Performance Detailed Report. Date. Last saved: 12/10/2007 13:18:00. Property asset management. Bristol City Council. Audit 2006/07
Performance Detailed Report Date Last saved: 12/10/2007 13:18:00 Property asset management Audit 2006/07 - Audit Commission descriptor to be inserted by Publishing- Document Control Author Filename Bob
Title: OHS Risk Management Procedure
Issue Date: July 2011 Review Date: July 2013 Page Number: 1 of 9 1. Purpose: To outline the methodology by which Department of Education and Early Childhood Development (DEECD) identifies, assesses, controls
Risk Methodology. Contents. Introduction... 2. The Risk Management Structure... 2. The Risk Management Cycle... 2. Methodology...
Risk Methodology Contents Introduction... 2 The Risk Management Structure... 2 The Risk Management Cycle... 2 Methodology... 3 Appendix 1...5 Definition of Controls... 5 Appendix 2...6 Definition of Impact...
Version: 3.0. Effective From: 19/06/2014
Policy No: RM66 Version: 3.0 Name of Policy: Business Continuity Planning Policy Effective From: 19/06/2014 Date Ratified 05/06/2014 Ratified Business Service Development Committee Review Date 01/06/2016
How To Ensure That Sovini Is A Successful Business
Group Risk Management Policy Originator: Approval date: Policy and Strategy Team Sovini Board PCHA Board OVH Board/EMT 6 th December 2013 31 st October 2013 14 th October 2013 Review date: December 2014
Risk Management Policy
Risk Management Policy Responsible Officer Author Ben Bennett, Business Planning & Resources Director Julian Lewis, Governance Manager Date effective from December 2008 Date last amended December 2012
RISK MANAGEMENT TOOLKIT
RISK MANAGEMENT TOOLKIT (OPERATIONAL) This toolkit has been adapted from the toolkit prepared by the Finance Facilities and Planning Services Branch of the Department of Education and the University of
Risk assessment. made simple
Risk assessment made simple July 2015 1 Sayer Vincent LLP Chartered accountants and statutory auditors Invicta House 108 114 Golden Lane London EC1Y 0TL Offices in London, Bristol and Birmingham 020 7841
Risk Assessment Tool and Guidance (Including guidance on application)
Risk Assessment Tool and Guidance (Including guidance on application) Document reference number Revision number OQR012 Document developed by 5 Document approved by Revision date October 2011 Responsibility
Risk Management Strategy 2014-2017
Appendix 1 London Fire and Emergency Planning Authority London Fire Brigade Risk Management Strategy 2014-2017 Our Risk Management Strategy, together with our underpinning risk management framework and
RISK MANAGEMENT POLICY
RISK MANAGEMENT POLICY Nuffield College s Risk Management Policy defines the College's approach to risk and how risk management should be embedded into management processes to ensure that the major risks
Group Risk Management Policy
Group Risk Management Policy Our Commitment Argyll Community Housing Association is committed to provide equal opportunities across all services and avoid discrimination. This policy is intended to assist
RISK ASSESSMENT EXPLANATORY NOTES FOR OUTDOOR EVENTS
RISK ASSESSMENT EXPLANATORY NOTES FOR OUTDOOR EVENTS 1. For every event a responsible person should carry out a suitable and sufficient risk assessment of safety covering all aspects of the event applicable
Managing Risk in Procurement Guideline
Guideline DECD 14/10038 Managing Risk in Procurement Guideline Summary The Managing Risk in Procurement Guideline assists in the identification and minimisation of risks involved in the acquisition of
Nova Scotia EMO. Hazard Risk Vulnerability Assessment (HRVA) Model. Guidelines for Use. October, 2010
Nova Scotia EMO Hazard Risk Vulnerability Assessment (HRVA) Model Guidelines for Use October, 2010 EMO NS Hazard Risk Vulnerability Assessment Model Page 1 of 10 Table of Contents 1. Background 2. Definitions
Business Continuity Planning
Business Continuity Planning Assistance for Young Enterprise Business Continuity Planning for small to medium-sized businesses This information will guide you through some steps that could help your business
Risk Management within Chief Executives and Corporate Finance
Report to Corporate Affairs Review Panel 21 November 2007 Item No 11 Risk Management within Chief Executives and Corporate Finance Report by the Chief Executive, Director of Corporate Resources and Cultural
Guidance on Risk Assessment and Control
Guidance on Risk Assessment and Control Page 1 of 18 CONTENTS Section Page Executive Summary 2. FLOWCHART 4. 1. Introduction and Scope 5. Hierarchy of risk control 5. Definitions 5. 2. Related Documents
APPENDIX 4. Risk Tables
APPENDIX 4 Tables Preliminary Qualitative Criteria The qualitative risk assessment criteria have been developed to identify key risks to the environment, society, heritage and business reputation. The
Version Adoption by Council: 2013 Resolution Number: 2013/177 Current Version: V1.0 Administered by: Governance Coordinator
Risk Management Framework Version Adoption by Council: 2013 Resolution Number: 2013/177 Current Version: V1.0 TRIM CON: 12/1132 Administered by: Governance Coordinator Last Review Date: 2013 Next Review
Introducing and Managing Process Safety Key Performance Indicators (KPIs)
Introducing and Managing Process Safety Key Performance Indicators (KPIs) Place your chosen image here. The four corners must just cover the arrow tips. For covers, the three pictures should be the same
Preferred Practice Notes
Preferred Practice Notes for organisers proposing events or filming activities in Birmingham on the public highway or in council managed areas of the City. Film Birmingham Birmingham Museum & Art Gallery
Car Parking. A Health and Safety Perspective. David Bone
Car Parking A Health and Safety Perspective David Bone Contents 1: Introduction 2: Legislation 3: Management Systems 4: Common Workplace Hazards Introduction HEALTH AND SAFETY Is a condition free from
BUSINESS CONTINUITY POLICY
BUSINESS CONTINUITY POLICY Last Review Date Approving Body n/a Audit Committee Date of Approval 9 th January 2014 Date of Implementation 1 st February 2014 Next Review Date February 2017 Review Responsibility
CORP 600 00 RISK MANAGEMENT POLICY & METHODOLOGY
CORP 600 00 RISK MANAGEMENT POLICY & METHODOLOGY CORP 600 RISK MANAGEMENT POLICY Purpose In March 2003, the Australian Stock Exchange (ASX) Corporate Governance Council released the first version of its
COMPANY NAME. Environmental Management System Manual
Revision No. : 1 Date : DD MM YYYY Prepared by : Approved by : (EMR) (Top Management) Revision History Revision Date Description Sections Affected Revised By Approved By Table of Content 0.0 Terms and
Risk Management Strategy and Guidelines
Swale Borough Council Risk Management Strategy and Guidelines Status: Final Originating Date: January 2008 Date Ratified: February 2008 (Audit Committee) Next Review Date: January 2009 Accountable Member:
RISK MANAGEMENT POLICY
DOCUMENT TYPE: DOCUMENT STATUS: POLICY OWNER POSITION: INTERNAL COMMITTEE ENDORSEMENT: APPROVED BY: Council policy Approved Manager Organisational Development Risk Management Committee Council DATE ADOPTED:
NSW Government Digital Information Security Policy
NSW Government Digital Information Security Policy Version: 2.0 Date: April 2015 CONTENTS PART 1 PRELIMINARY... 3 1.1 Scope... 3 1.2 Application... 3 1.3 Objectives... 3 PART 2 POLICY STATEMENT... 4 Core
TRANSPORTATION AND SUSTAINABILITY-THE TRIPLE BOTTOM LINE
TRANSPORTATION AND SUSTAINABILITY-THE TRIPLE BOTTOM LINE A sustainable transportation system does the following: Allows the basic access needs of individuals and societies to be met safely and in a manner
The Lowitja Institute Risk Management Plan
The Lowitja Institute Risk Management Plan 1. PURPOSE This Plan provides instructions to management and staff for the implementation of consistent risk management practices throughout the Lowitja Institute
Greater Wellington Regional Parks Health and Safety Plan
Greater Wellington Regional Parks Health and Safety Plan Health and Safety template Health Safety in Employment Act 1992 The Health Safety in Employment Act 1992 requires that all employers develop emergency
Risk Management: Coordinated activities to direct and control an organisation with regard to risk.
POLICY CG01 RISK MANAGEMENT Document Control Statement This Policy is maintained by the Governance and Organisational Strategy. Any printed copy may not be up to date and you are advised to check the electronic
Hazard Management Tool
Developed by the Health and Safety Ontario members: Infrastructure Health and Safety Association Public Services Health & Safety Association Workplace Safety North Workplace Safety & Prevention Services
BUSINESS CONTINUITY PLAN
BUSINESS CONTINUITY PLAN [Name of Team/Service/Organisation] [Insert Building Name and Address] [Insert date] Detailing arrangements for: Incident Management Business Continuity Recovery and Resumption
Risk assessment. made simple. sayer vincent consultants and auditors. Introduction 3. step1 Identifying the risks 4. step2 Assessing the risks 7
Risk assessment made simple Introduction 3 step1 Identifying the risks 4 step2 Assessing the risks 7 step3 Establishing action points 11 step4 Developing a risk register 13 Monitoring and assessment 14
The F Word - Why Facilities Matter
The F Word - Why Facilities Matter By Martin Pickard Leaders of businesses and organisations don't want to talk about Facilities. It's a dirty word associated with cleaning, maintenance and other non-core
CORPORATE RISK MANAGEMENT POLICY
CORPORATE RISK MANAGEMENT POLICY 1. INTRODUCTION 1.1 The North Wales Fire & Rescue Authority provides services to a diverse range of people and organisations. It operates in an ever-changing environment,
Six steps to Occupational Health and Safety
Six steps to Occupational Health and Safety This booklet gives basic guidelines for workplace health and safety systems to help industry in NSW comply with the "duty of care" principle outlined in the
CAVAN AND MONAGHAN EDUCATION AND TRAINING BOARD. Data Breach Management Policy. Adopted by Cavan and Monaghan Education Training Board
CAVAN AND MONAGHAN EDUCATION AND TRAINING BOARD Data Breach Management Policy Adopted by Cavan and Monaghan Education Training Board on 11 September 2013 Policy Safeguarding personally identifiable information
Risk Assessment Tool (example only)
HAZARD IDENTIFICATION & RISK ASSESSMENT TOOL Hazard identification You have an obligation to identify, assess and control any foreseeable hazards that may result as a consequence of your actions. If it
The impact of the personal data security breach notification law
ICTRECHT The impact of the personal data security breach notification law On 1 January 2016 legislation will enter into force in The Netherlands requiring organisations to report personal data security
Information Governance Strategy and Policy. OFFICIAL Ownership: Information Governance Group Date Issued: 15/01/2015 Version: 2.
Information Governance Strategy and Policy Ownership: Information Governance Group Date Issued: 15/01/2015 Version: 2.0 Status: Final Revision and Signoff Sheet Change Record Date Author Version Comments
CHAGUARAMAS TERMINALS LTD.
POLICY MANUAL All rights reserved to CrewsInn Limited. No part of this document may be reproduced in any form or by any means, without permission in writing from the company CHAGUARAMAS TERMINALS LTD.
ERM Program. Enterprise Risk Management Guideline
ERM Program Enterprise Management Guideline Table of Contents PREAMBLE... 2 When should I refer to this Guideline?... 3 Why do we need a Guideline?... 4 How do I use this Guideline?... 4 Who is responsible
Procurement driving better value for money. Guide 7 to Sustainable Procurement. Manage the contract and disposal route
Procurement driving better value for money Guide 7 to Sustainable Procurement Manage the contract and disposal route A guide for agencies July 2010 This guide is part of a series of documents focussed
Corporate Health and Safety Policy Issue 9
Corporate Health and Safety Policy Issue 9 July 2011 1 Contents Foreword by the Chief Executive 3 1. General health and safety policy statement 4 a Our responsibilities 5 b Health and safety management
Managing Risk Control Environment and Responsibilities
Managing Risk Page 1 of 8 Contents Introduction...3 Risk...3 Risk management - using the framework...3 Source of risk...3 Likelihood and impact...3 Inherent risk...4 Risk-reducing measures...4 Effectiveness...5
Contractor Environment, Health and Safety Management Plan
EHSMS10 Contractor and Supplier EHS Management Contractor Environment, Health and Safety Management Plan Purpose Guidelines Record Keeping This template provides an example to Santos Contractors of the
6. Risk management plans for high risk activities and special events
6. Risk management plans for high risk activities and special events What is a high risk activity or special event? The answer to this question will be different for every organisation. A high risk activity
WHS DOCUMENT MANAGEMENT PROCEDURE
1. OVERVIEW The purpose of this procedure is to provide minimum standards for how The Flinders Ranges Council will maintain its WHS management system documentation so that documents are drafted, maintained,
Risk Management Policy and Framework
Risk Management Policy and Framework December 2014 phone 1300 360 605 08 89589500 email info@centraldesert.nt.gov.au location 1Bagot Street Alice Springs NT 0870 post PO Box 2257 Alice Springs NT 0871
Hazard Identification, Risk Assessment and Control Procedure
Hazard Identification, Risk Assessment and Control Procedure 1. Purpose To ensure that there is a formal process for hazard identification, risk assessment and control to effectively manage workplace and
Discipline: Technical Services Category: Procedure. Risk Management RM-01 2013. Applicability. ARTC Network Wide. Interstate Network.
Discipline: Technical Services Category: Procedure Risk Management RM-01 2013 Applicability ARTC Network Wide Interstate Network Hunter Valley Document Status Version Prepared by Reviewed by Endorsed Approved
A Risk Management Standard
A Risk Management Standard Introduction This Risk Management Standard is the result of work by a team drawn from the major risk management organisations in the UK, including the Institute of Risk management
Healthcare risk assessment made easy
Healthcare risk assessment made easy March 2007 The purpose of this document is to provide: 1. an easy-to-use risk assessment tool that helps promote vigilance in identifying risk and the ways in which
RISK MANAGEMENT POLICY. Version 3
RISK MANAGEMENT POLICY Version 3 Version: Version 3 Version 3 Authors: Liz Hollman, Mary Klaus, Sarah Langan-Hart Approved by: Healthcare Governance Committee Trust Board Approved date: May 2009 Review
Business Continuity Management Policy
Governance 1 Purpose The purpose of this policy is to communicate Business Continuity Management (BCM) framework, responsibilities and guiding principles for Victoria to effectively prepare for and achieve
NORTH HAMPSHIRE CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY MANAGEMENT POLICY AND PLAN (COR/017/V1.00)
NORTH HAMPSHIRE CLINICAL COMMISSIONING GROUP BUSINESS CONTINUITY MANAGEMENT POLICY AND PLAN (COR/017/V1.00) Subject and version number of document: Serial Number: Business Continuity Management Policy
Policy 10.105: Enterprise Risk Management Policy
Name: Responsibility: Complements: Enterprise Risk Management Framework Coordinator, Enterprise Risk Management Policy 10.105: Enterprise Risk Management Policy Date: November 2006 Revision Date(s): January
Charnwood Borough Council. Corporate Performance Management Framework
Charnwood Borough Council Corporate Performance Management Framework Contents 1 Introduction... 1 2 Background... 1 3 Role of the Performance Team... 2 4 Charnwood Framework... 2 4.1 Corporate Plan...2
Risk Management Plan template <TEMPLATE> RISK MANAGEMENT PLAN FOR THE <PROJECT-NAME> PROJECT
RISK MANAGEMENT PLAN FOR THE PROJECT Prepared by: Approved by: Reference: Version: Date: INTRODUCTION This document is the Risk Management
DIT HEALTH AND SAFETY OFFICE
DIT HEALTH AND SAFETY OFFICE PROCEDURE TITLE Risk Assessment Procedure REVISION NO.: 5 NUMBER OF PAGES: 8 REFERENCE: Parent Health and Safety Statement Risk Assessment Template (DITRAT) Safety Inspection
BUSINESS CONTINUITY MANAGEMENT POLICY. October 2012
BUSINESS CONTINUITY MANAGEMENT POLICY October 2012 1 Policy Statement 1.1 PHSO s Business Continuity Management (BCM) arrangements aim to provide a mechanism for ensuring that any incidents affecting the
Risk Management Policy
Risk Management Policy June 2015 1 2 Contents 1. Policy Objectives and Background... 4 1.1. Policy Background... 4 1.2. Policy Objective... 4 1.3. Policy Sponsor and Maintenance... 4 2. Risk Types and
Hertsmere Borough Council. Data Quality Strategy. December 2009 1
Hertsmere Borough Council Data Quality Strategy December 2009 1 INTRODUCTION Public services need reliable, accurate and timely information with which to manage services, inform users and account for performance.
PRCA Communications Management Standard (CMS) for In-House Teams
PRCA Communications Management Standard (CMS) for In-House Teams PRCA Communications Management Standard (CMS) for In-House Teams Contents Introduction 4 The Communications Management Standard for In-House
Incident reporting procedure
Incident reporting procedure Number: THCCGCG0045 Version: V0d1 Executive Summary All incidents must be reported. This should be done as soon as practicable after the incident has been identified to ensure
Purpose of Report To present a revised corporate risk register as at May 2013
Report to Standards and Audit Committee Agenda Item 8 Report SAC 06/13 Date 25 June 2013 By Title of Report Director of Corporate Services Corporate Risk Register Purpose of Report To present a revised
Removal of Gender Restrictions on Australian Defence Force Combat Role Employment Categories
Removal of Gender Restrictions on Australian Defence Force Combat Role Employment Categories Risk Management Plan INTENTIONALLY BLANK 1. Introduction The purpose of this Risk Management Plan (RMP) is to
Information Governance Policy A council-wide information management policy. Version 1.0 June 2013
Information Governance Policy Version 1.0 June 2013 Copyright Notification Copyright London Borough of Islington 2012 This document is distributed under the Creative Commons Attribution 2.5 license. This
AUDIT COMMITTEE 10 DECEMBER 2014
AUDIT COMMITTEE 10 DECEMBER 2014 AGENDA ITEM 8 Subject Report by MANAGEMENT OF INFORMATION RISKS DIRECTOR OF CORPORATE SERVICES Enquiries contact: Tony Preston, Ext 6541, email tony.preston@chelmsford.gov.uk
BUSINESS CONTINUITY PLAN
>Insert Company Logo Here< >Insert Company Name Here< BUSINESS CONTINUITY PLAN Date Version Author Address Telephone (Landline/Mobile) E-mail Plan Approval Approved By (Please print) Signature Date Page