POLICY RISK MANAGEMENT AND REPORTING. Introduction
|
|
- Hope Webb
- 6 years ago
- Views:
Transcription
1 POLICY RISK MANAGEMENT AND REPORTING Introduction Managing risk is a part of our everyday responsibilities for all of us. It enables us to make decisions about what we do and how we do things both strategically and in day to day tasks. We expect everyone to consider risk when planning and managing activities from strategic planning, operational planning through to contract management, project planning and the implementation of these plans. Risk management does not just mean avoiding risks. We need to balance the risks we take with the achievement of our strategic goals if we take no risks at all we will never achieve these goals. This policy and guidance sets out when you need to report risks including when to discuss risk with senior management, the Board and the Council. It clarifies when a risk is significant enough to be reported to senior management and when it can be managed within a department or team. It is important that only significant risks are escalated. This document contains: Definition of risk; Guidance on how to identify risks; Clarification on how to set the priority of risks; Guidance on how to report risks and who to report them to; and Roles and responsibilities.
2 Definition of risk We define risk as an uncertain event, which will affect the achievement of objectives, if it occurs 1. A risk needs to be described as what might occur and what effect this might have. A good example of a risk is: The various oversight bodies and regulators (such as FRC (POB, AADB), AIU, UKLA and/or FSA, BoE) claim greater regulatory and licensing powers/influence resulting in reduced income and status for ICAEW. The uncertain event or what might occur is: the various oversight bodies and regulators claim greater regulatory and licensing powers/influence Things that are not risks The effect, if it occurs, is: reduced income and status for ICAEW Issues are not risks. An issue is something that has already happened. A risk is the potential for an issue to arise. A situation arising through inactivity is not a risk because we can predict that it will happen. This would be an issue. Worries are not risks. A worry is something that might happen but the likelihood is so remote that we cannot take any preventative or avoidance actions. Widespread disruption from whatever cause is too broad to assess for impact on ICAEW and it is not a well-defined risk. Risk management and risk reporting Risk management process Define objectives and priorities Identify risks Assess priority Manage risks Report Monitor Define objectives and priorities This is completed as part of the strategic and operational planning processes. Identify risks A risk is normally directly related to a core activity of the organisation and/or a business objective. It s easiest to think about and identify risks when operational activities and objectives are being defined and agreed, ie, during the operational planning process or when setting out the objectives for a project. Risks can, and should, be identified and acted upon at any time. 1 This is taken from the definition of risk of the Office of Government Commerce in their publication: Management of Risk: Guidance for Practitioners (TSO 2007) 2
3 Identifying risk begins with a clear understanding of the ICAEW strategic activities and objectives, and department objectives. For each activity and objective, we can then consider what might prevent us from achieving our goals. These are the risks. In most cases, this is an intuitive process and part of planning and management of any activity. For risk reporting, these risks need to be formally recorded so that they can be reported and monitored. Risks could come from many sources. We have grouped some risk sources under the strategic goals, but these are not the only sources of risk: Reputation and influence The regulatory environment: risks that affect our ability to influence and respond to UK, European and global agendas. The economic environment: risks that affect our ability to promote the work of ICAEW, members, firms and businesses. Risks to building our international presence and reputation, including building key relationships. Service by and for our members Risks that affect our ability to grow our membership base, increase awareness of the benefits of membership and evolve our brand. Risks that affect our ability to build relationships with our members. Risks that undermine our commitment to a sustainable global profession. Risks that affect our culture, reducing our ability to be truly international. Risks that affect the infrastructure required to support our strategy. Portfolio of qualifications Risks that affect our portfolio of qualifications and services, their fitness for purpose, their international reputation and our ability to explore and tap into new markets. Keep the focus of the risk assessment at the right level. If you try to cover too much detail you will be swamped with risks and unable to deal with them. Assess priority Each risk is assessed for its impact and likelihood. This will enable us to determine whether it is a priority risk or not. The assessment begins by specifically looking at the risk that remains after we have done all we can to mitigate it. The risk that remains is called residual risk. We then consider the possibility of occurrence despite mitigating actions and the likely impact if it did occur. Again, this would normally be an intuitive process you would know immediately if a risk was high priority, but for risk reporting we need to be able to assess priority on a scale that can be compared between departments and between activities. Even with this guidance, risk priority cannot be easily quantified. A significant amount of judgement is necessary. It is important that staff and management work together to ensure all the relevant risks are identified and prioritised as consistently as possible. If you are not sure, then it is better to escalate the potential risk so that staff and management can work together to ensure all the relevant risks are identified and prioritised as consistently as possible. Priority The overall assessment, or priority, is based upon the combination of the impact and likelihood: 3
4 Likelihood Impact Medium High High High 4 Low Medium High High 3 Low Medium Medium High 2 Low Low Medium Medium 1 Low Low Low Medium Impact To assist in measuring impact, we have described the impact of each risk in the following categories, which relate to the ICAEW strategic objectives: Reputation and influence Service by and for our members Portfolio of qualifications Infrastructure A risk that directly affects our position and reputation with the profession and our regulators around the world.. A risk that affects the services provided by our members. or A risk that affects the services we provide to our members. A risk that affects our qualifications. A risk that has a direct financial effect or that affects operations of ICAEW. It is possible that a risk is categorised in more than one way. It s important to consider all risks and not feel constrained by these categories. 4
5 The following guidance is there to assist in assigning an impact rating to the risk. The impact banding is set in terms of the impact on ICAEW as a whole and we are focusing on the more significant risks. 1 Minor 2 Significant 3 Major 4 Critical Reputation and influence Negative impact on our reputation and influence in a country outside of the UK or a contained area within the UK. Significant negative impact on our reputation and ability to influence in another region outside the UK. Major damage to UK reputation and influence. Negative national media, regulator or government attention for several days. Critical damage to global reputation and influence. Sustained, negative media, regulator or government attention. Service by and for our members Minor damage to our brand, or the reputation of the profession, or more significant damage in a localised area. Damage to the member experience for a small group of members or students, or a minor degradation for all members. Significant damage to our brand, or the reputation of the profession, in a region outside of the UK. Significant impact on member services affecting some members or significant degradation for majority of members. Major damage to our brand, or the reputation of the profession, the UK or an equivalent region. Major impact on member services that negatively affects a large number of members. Critical damage to our brand, or the reputation of the profession. Critical impact on member services in the long term leading to loss of major member firms or significant number of members. Portfolio of qualifications Damage to qualifications in specialist area or geographic region with limited take up. Significant impact on qualifications affecting specialist area or geographic region or degradation to qualifications affecting all students. Major damage to qualifications that affects the majority of students. Critical impact on qualifications leading to significant loss of students. Infrastructure Financial loss of less than 250k. Minor disruption to operations for a short period. Financial loss of up to 1m. Significant disruption to operations. Financial loss of up to 2.5m Major disruption to operations across a number of areas. Financial loss of 5m or more Critical disruption of operations affecting all areas or over a long period. 5
6 Likelihood The likelihood of a risk occurring is defined as follows: 5 Almost certain 4 Probable 3 Possible 2 Unlikely 1 Rare The event will occur in all but exceptional circumstances. 80% probability or more. The event is expected to occur in most circumstances. 50% to 80% probability. The event should occur at some time. 20% to 50% probability. The event may occur at some time. 5% to 20% probability. The event may occur at some time, but it would be exceptional. Up to 5% probability Risk appetite When reporting a risk we also need to determine whether the risk is being managed to an acceptable level or not. This is an assessment of whether the risk remaining, with all the controls and other risk management activity in place, is acceptable. In some cases we are seeking to limit or eliminate risk. In other cases we are taking on a risk in order to achieve a goal that has a significant benefit. Risk management is not about avoiding risk, it s about being conscious of what you are doing. Management must judge if a risk is acceptable. This will depend on the description of the risk, its priority and the management activity in place. If a risk is defined as high priority it is unlikely to be acceptable. Exceptionally a high priority risk can be acceptable if there are no possible additional remedial actions available to reduce the risk further. In this case a contingency plan may be necessary to manage the risk if it occurs. Medium priority risks may or may not be within tolerance this depends on whether the risk requires immediate remedial action or not, or whether the risk is outweighed by the benefits If the risk is defined as low priority it will normally be acceptable. Manage risks Risks can be managed in many different ways. This activity can include specific controls, insurance, contingency planning, etc. but it s just as likely to be managed by what you consider to be normal activities. When reporting a risk, it s important to describe this activity so that the reader understands what you do. Current management activity means activity that is already in place. This may be on-going activity, eg, a monthly reconciliation, or something you do on a reactive basis, eg, implement a contingency plan. If the risk is not within acceptable levels, you must provide details of the additional management activity necessary to reduce the risk further. This must be accompanied by a responsibility and due date (like an action plan). Report Medium and high priority risks must be documented as part of the following processes: Operational planning: When completing their operational plan, departments must consider risks that will affect their ability to achieve the key priorities for their department. 6
7 The response to these risks will be embedded in their operational activities, key priorities and budgets, but we also need the risks to be clearly specified to enable us to report them. With the operational plan guidelines, departments are provided with two templates to record these risks: o o The risk register The first contains the key risks to ICAEW as identified by the senior management team and they must describe how they contribute to the management of these risks. The second template is for the department to record the risks that they consider to be of significant priority to them. Strategic priority reporting: Following the approval of the operational plan, a quarterly update is provided in the strategic priorities report. This details progress made in achieving these key strategic objectives. As part of the reporting, departments must include reference to risks. If there is any deviation from target, a specific comment on how you are going to achieve the overall target for the rest of the year is required. This is a form of early warning report. Project approvals: Within the standard template for approval of any projects by the Board, there is a section on risk. This includes all kinds of risk to the project and not just financial risks. This section must be completed for all project proposals that go to the Board for approval. Once the project has been approved by the Board, the relevant director is responsible for completing a formal risk assessment and submitting this to the Executive Office by the end of the quarter. Other: Risk should also be considered as part of any other activity. Specifically, reports to the Board such as the quarterly reforecast and the monthly Executive Director reports should include significant changes in risk. The Executive Office will collate the risks reported in the above into a single risk register. The details required for each risk are: A description of the risk; The objective to which it relates; The priority of the risk; Current management activity. This can include: Activity to change the likelihood of it occurring, including outsourcing to a third party who can provide more resilience; Activity to change the impact when it does occur, including taking out insurance; and, Acceptance of the risk as it is (ie, no action). Any additional future management activity planned, along with a target date for implementation (an action plan); and, The owner of the risk. An example of a risk in the risk register is included below. At least twice a year, the senior management team will review all of the risks on the register and, using the priorities assigned to each of these risks, identify those risks that are of priority to ICAEW is a whole (eg, key risks). This will include any risks where the residual risk is not within tolerance and risks that combine to create a significant risk to ICAEW. The Executive Office will produce reports for the Board and Audit Committee on key risks to ICAEW. 7
8 Escalation procedures When risks are defined as high priority they are highlighted and reported to the Board and Audit Committee. In addition, any risks identified as not within tolerance are reported to the Board and Audit Committee. This will occur routinely twice a year once following the operational plan update and then again mid-year or more frequently should circumstances demand. Any low priority risks are not reported outside of the department. Monitor Internal Audit monitor whether the process is effective through regular reviews of the risk management process and the risk register reports. The results of these audits are reported to the Audit Committee. Internal audit also report on the completeness of the risk register through their regular internal audit programme. Roles and responsibilities Everyone at ICAEW has a responsibility for risk management: Internal audit: Provide assurance on the accuracy of the risk register, the effectiveness of the risk management and the risk management process. Audit Committee: Monitor effectiveness and compliance with the risk management process Executive Director, F&O: Coordinate risk reporting to the Board and Audit Committee. Own the risk management process. Council: Consider the effectiveness of the ICAEW s risk management process. Board: Ensure there is a process in place to identify, review and manage risks. Review the key risks with senior management to ensure that residual risk is acceptable to ICAEW. Own and manage risks Risk manager: Review the risk register from the Executive office and, on behalf of senior management, collate and refine the risks ready to report to the Board Management team: Consider the key ICAEW risks and how their departments contributes to managing the risk. Consider departmental risks and the effectiveness of activity being taken to manage them. Report on emerging risks and early warnings. Risk reporting. Own risk management process Assurance on risk management Executive Office: Create and maintain the risk register from the annual Operational Plans and quarterly Strategic Priority reports Managers and staff: Consider risk in all activities. Maintain information on risks relevant to their areas and understand when to escalate a risk. Risk reporting is the responsibility of the Executive Office and the Executive Director, Finance and Operations. The Executive Director, Finance and Operations, will present the risk register to the Audit Committee and Board following agreement with the Management Team. The Executive Office, with support from the Management and Finance Information team, will collate the risks reported in the operational plans, strategic reports and monthly Executive Director reports into a risk register. The risk register will be updated twice a year using these source documents. The Risk Manager will actively support departments to apply this policy. This will include: Providing training and advice Reviewing the risks reported and challenging them when they do not meet this policy 8
9 Considering any gaps in the risk register looking for left field risks or areas of risk that have been omitted or duplicated. Version 12 July 2011 Author Robin Fieth, Executive Director, Finance and Operations Next review July
10 THE RISK REGISTER Ref Risk Objective/ Strategic Priority Priority Current risk management activity Owner Additional risk management activity planned Responsibility and target date [Description of the risk and its potential effect on ICAEW] [The department objective or strategic priority to which this risk relates] [High, medium or low] [Current activity in place to manage the risk. May include internal controls, contingency plans, etc.] [Person responsible for managing the risk] [If the risk is not at an acceptable level, what additional risk management activity is planned?] [Responsibility and date to implement additional risk management activity] The European Commission review of the future of audit and competition and choice in the audit market results in a failure by ICAEW (a) to influence the outcome to demonstrate our relevant and achieve our policy goals as a professional body and/or (b) to reconcile divergent views among members and member firms and/or (c) to reconcile these views with our public interest role, resulting in a loss of confidence in ICAEW s ability to address key professional issues and to represent the profession adequately to key stakeholders. The regulatory and legislative environment High Communication around ICAEW response to Green paper. Programme of engagement with EU officials. Ongoing liaison with major firms including through PRG and ECG. Proactive projects to contribute to policy making particularly through faculties. Audit Quality Forum and joint working with Financial Reporting Council. ED TSD None 10
Nagement. Revenue Scotland. Risk Management Framework. Revised [ ]February Table of Contents Nagement... 0
Nagement Revenue Scotland Risk Management Framework Revised [ ]February 2016 Table of Contents Nagement... 0 1. Introduction... 2 1.2 Overview of risk management... 2 2. Policy Statement... 3 3. Risk Management
Risk Management Strategy
Risk Management Strategy 2016 2019 Version: 6 Policy Lead/Author & Deputy Director of Quality position: Ward / Department: Nursing Directorate Replacing Document: Version 5 Approving Committee Quality
South Lanarkshire College Risk Management Policy and Procedures
1. Purpose This policy and its procedures detail and communicate the College s approach to risk management. 2. Policy Statement South Lanarkshire College will effectively manage risk, taking all reasonable
RISK MANAGEMENT FRAMEWORK
Risk Management Framework RISK MANAGEMENT FRAMEWORK Purpose This Risk Management Framework introduces St. Michael s College s approach to risk management. It includes a definition of risk, a summary of
Nagement. Revenue Scotland. Risk Management Framework
Nagement Revenue Scotland Risk Management Framework Table of Contents 1. Introduction... 2 1.2 Overview of risk management... 2 2. Policy statement... 3 3. Risk management approach... 4 3.1 Risk management
RISK MANAGEMENT FRAMEWORK
RISK MANAGEMENT FRAMEWORK 1. INTRODUCTION (Company) acknowledges that risk is inherent in its business. The Company s risk management framework is an important tool to guide the organisation towards achieving
Version: th November 2010 RISK MANAGEMENT POLICY
Version: 1.2-25th November 2010 RISK MANAGEMENT POLICY Document History Document Location To be completed. Revision History Date of this revision: 17/09/2010 Date of next revision: N/A Revision Number
Kidsafe NSW Risk Management Plan. August 2014
Kidsafe NSW Risk Management Plan August 2014 Document Control Document Approval Name & Position Signature Date Document Version Control Version Status Date Prepared By Comments Document Reviewers Name
University of Greenwich Risk Management Guide Revised October 2017
University of Greenwich Risk Management Guide Revised October 2017 Purpose of the Guide 1. This document supplements the Risk Management Policy of the University of Greenwich. It explains why risk management
Market Oversight. Draft guidance for providers
Market Oversight Draft guidance for providers January 2015 Contents 1. Introduction to Market Oversight 4 What is Market Oversight for? 4 Why and how was the scheme developed? 5 How we have developed our
Risk Management at Central Bank of Nepal
Risk Management at Central Bank of Nepal A. Introduction to Supervisory Risk Management Framework in Banks Nepal Rastra Bank(NRB) Act, 2058, section 35 (a) requires the NRB management is to design and
Risk Management Strategy January NHS Education for Scotland RISK MANAGEMENT STRATEGY
NHS Education for Scotland RISK MANAGEMENT STRATEGY January 2016 1 Contents 1. NES STATEMENT ON RISK MANAGEMENT 2 RISK MANAGEMENT STRATEGY 3 RISK MANAGEMENT STRUCTURES 4 RISK MANAGEMENT PROCESSES 5 RISK
Risk Management Framework
Risk Management Framework Purpose: Scope: This Risk Management Framework introduces Central Queensland Christian College s approach to risk management. It includes a definition of risk, a summary of the
RISK MANAGEMENT POLICY AND STRATEGY
1 RISK MANAGEMENT POLICY AND STRATEGY Version No: Reason for Update Date of Update Updated By 1 Review Timeframe September 2014 2 Review June 2017 Governance Manager Governance Manager 3 4 5 6 7 8 Introduction
An Introductory Presentation for ECU Staff
Risk Management at ECU An Introductory Presentation for ECU Staff Phillip Draber Manager, Risk and Assurance Outcomes By the end of this session you should: Be able to complete and document risk management
Risk Management Policy
Risk Management Policy May 2018 Contents 1.0 Purpose... 3 2.0 Scope... 3 3.0 Risk appetite... 3 4.0 Risk management process... 4 5.0 Measuring success... 7 6.0 Review of policy... 7 Appendix A Definitions
Risk Management Policy and Framework
Risk Management Policy and Framework Risk Management Policy Statement ALS recognises that the effective management of risks is a fundamental component of good corporate governance and is vital for the
Scouting Ireland Risk Management Framework
No. SID 124A/15 Gasóga na héireann/scouting Ireland Issued Amended 20 th June 2015 Deleted Source: National Management Committee Scouting Ireland Risk Management Framework Revision Date Description # 20/06/2015
Risk Management. Policy and Procedures
Risk Management Policy and Procedures POLICY SCHEDULE Policy title Policy owner Policy lead contact Approving body Date of approval/review Related Guidelines and Procedures Review interval Risk Management
Risk Management Policy. September 2015
Risk Management Policy September 2015 Contents Policy Statement... 3 AA s Commitment to Risk Management... 3 Risk Management Principles... 4 Governance Framework... 6 Roles and Responsibilities... 7 Board...
Risk Management Framework
Risk Management Framework Anglican Church, Diocese of Perth November 2015 Final ( Table of Contents Introduction... 1 Risk Management Policy... 2 Purpose... 2 Policy... 2 Definitions (from AS/NZS ISO 31000:2009)...
RISK REGISTER POLICY AND PROCEDURE
RISK REGISTER POLICY AND PROCEDURE Lead Manager: Head of Clinical Governance Responsible Director: Board Medical Director Approved by: Date Approved: Date for Review: Feb 2012 Replaces Version: 1.0 Page
Executive Board Annual Session Rome, May 2015 POLICY ISSUES ENTERPRISE RISK For approval MANAGEMENT POLICY WFP/EB.A/2015/5-B
Executive Board Annual Session Rome, 25 28 May 2015 POLICY ISSUES Agenda item 5 For approval ENTERPRISE RISK MANAGEMENT POLICY E Distribution: GENERAL WFP/EB.A/2015/5-B 10 April 2015 ORIGINAL: ENGLISH
PST Board Assurance Framework
PST Board Assurance Framework 14 th January 2016 PST Board Assurance Framework Registered Address (No: IP030872) Fratton Park Frogmore Road Portsmouth PO4 8RA Prepared by Dr Mark Farwell PST Secretary
Risk Management Policy and Procedures.
Risk Management Policy and Procedures. Rev Date Purpose of Issue/Description of Change Date 1. June 2006 Initial Issue 2. November 2009 Revised and updated 6 th November 2009 3. September 2010 Revised
University of the Sunshine Coast (USC) Risk Appetite Statement
Vision and strategic goals University of the Sunshine Coast (USC) Risk Appetite Statement The University of the Sunshine Coast will be a university of international standing, a driver of capacity building
UNIVERSITY OF ABERDEEN RISK MANAGEMENT FRAMEWORK
UNIVERSITY OF ABERDEEN RISK MANAGEMENT FRAMEWORK 1 TABLE OF CONTENTS FIGURES AND TABLES... 3 1. INTRODUCTION... 4 2. KEY TERMS AND DEFINITIONS... 5 2.1 Risk... 5 2.2 Risk Management... 5 2.3 Risk Management
Effective Assurance Frameworks
Effective Assurance Frameworks NIGEL IRELAND, HEAD O F BARCUD S HARED S E R VICES @ barcudss w w w.barcudsharedservices.org.uk Today What an Assurance Framework is How an Assurance Framework can add value
APPENDIX 1. Transport for the North. Risk Management Strategy
APPENDIX 1 Transport for the North Risk Management Strategy Document Details Document Reference: Version: 1.4 Issue Date: 21 st March 2017 Review Date: 27 TH March 2017 Document Author: Haddy Njie TfN
West Coast District Municipality. Risk Management Policy
West Coast District Municipality Risk Management Policy TABLE OF CONTENTS Page No. RISK MANAGEMENT POLICY 5 1. OVERVIEW 6 1.1. Policy Objective 6 1.2. Policy Statement 6 1.3. Risk Management Approach 6
RISK MANAGEMENT POLICY
RISK MANAGEMENT POLICY 1. INTRODUCTION Seven West Media Limited (SWM) is the leading, listed national multi-platform media business based in Australia, which exposes the company to a wide range of risks.
Main Sections. Corporate Risk Policy Statement and Procedures AR-RMD-CR01. Executive Summary. Anglia Ruskin University Risk Management
Corporate Risk Policy Statement and Procedures AR-RMD-CR01 Executive Summary This document is intended to assist Anglia Ruskin University, its subsidiaries and Joint Ventures in controlling business risks,
Risk Management Policy
Version: 2.0 New or Replacement: Policy number: Document author(s): Replacement ULHT-MD-GOV-RM-PMIMSI Paul White, Risk Manager Contributor(s): Members of the Trust Board & Senior Leadership Team Approved
Day 2: Session 2 Tax governance, risk and control
Day 2: Session 2 Tax governance, risk and control The Westin, Singapore 26 February 2016 James Paul Deloitte 1 Agenda 1. The changing tax environment and business response 2. Focus on tax governance, policy
LONDON BOROUGH OF ENFIELD RISK MANAGEMENT STRATEGY
LONDON BOROUGH OF ENFIELD RISK MANAGEMENT STRATEGY JANUARY 2013 1 Version Control Reference Comments Approval date 05 09 12 19 11 12 10 01 13 2 FOREWORD Welcome to the Council s Risk Management Strategy.
Risk Management Framework
Risk Management Framework Risk Management Framework 1. The University views Risk Management as integral to the successful execution of its Strategy. In order to achieve the aims set out in our strategy,
Risk Management Strategy
Resources Risk Management Strategy Successful organisations are not afraid to take risks; Unsuccessful organisations take risks without understanding them. Issue: Version 3 - November 2011 Group: Resources
Integrated Risk Management Framework
Integrated Risk Management Framework Author Patient Safety Manager Version 4.0 Version Date May 2017 Implementation/Approval Date May 2017 Review Date May 2018 Review Body Governing Body Policy Reference
INTEGRATED RISK MANAGEMENT FRAMEWORK (STRATEGY AND POLICY)
INTEGRATED RISK MANAGEMENT FRAMEWORK (STRATEGY AND POLICY) Version 1.5 (DRAFT) RATIFIED DATE BY WHOM Fylde and Wyre CCG Governing Body Fylde and Wyre CCG (F&W CCG) is committed to ensuring that, as far
Policy No. Contact Brian Orpin Version 3.0 Issue Date 28/11/2014 Telephone Review Date IA Date 09/08/2013
Information Governance Management of Risk Policy Policy No. Contact Brian Orpin Version 3.0 Email Brian.orpin@nhs.net Issue Date 28/11/2014 Telephone 0131 314 5360 Review Date IA Date 09/08/2013 Change
Fundamentals of Project Risk Management
Fundamentals of Project Risk Management Introduction Change is a reality of projects and their environment. Uncertainty and Risk are two elements of the changing environment and due to their impact on
Risk Management. Seminar June Compiled by: Raaghieb Najjaar, Yaeesh Yasseen & Rashied Small
Risk Management Seminar June 2017 Compiled by: Raaghieb Najjaar, Yaeesh Yasseen & Rashied Small Defining Risk Risk reflects the chance that the actual event may be different than the planned / expected
Goodman Group. Risk Management Policy. Risk Management Policy
Goodman Group Contents 1. Overview... 3 1.1 Introduction... 3 1.2 Objectives of the... 3 1.3 Application... 3 1.4 Operative Provisions... 4 2. Risk Management... 5 2.1 Overview of Risk Management... 5
NATIONAL RISK MANAGEMENT SYSTEM
Scouts Australia NATIONAL RISK MANAGEMENT SYSTEM 2003 First Published 2003 Reviewed August 2006 in consideration of AS/NZS 4360-2004 and Organisational Performance Since First Published. Amendment by Chair
Risk Management Framework
Risk Management Framework Introduction The outgoing Corporate Strategy 2013-18 and incoming University Strategy 2018-23 continues on a trajectory towards Vision 2025 in an increasingly competitive Higher
Integrated Risk Management Framework Sept Page 1 of 17
Integrated Risk Management Framework 2017-2018 Sept 2017 Page 1 of 17 Reference: Title: Author/Nominated Lead: Approval Date: Approving Committee: Review Date: Target Audience: Circulation List: Cross
RISK MANAGEMENT FRAMEWORK
RISK MANAGEMENT FRAMEWORK 1 RISK MANAGEMENT FRAMEWORK... 1 INTRODUCTION... 3 AN EFFECTIVE ENTERPRISE RISK MANAGEMENT SYSTEM... 4 Guiding Principles... 4 RISK GOVERNANCE... 5 Mandate and Commitment... 5
M_o_R (2011) Foundation EN exam prep questions
M_o_R (2011) Foundation EN exam prep questions 1. It is a responsibility of Senior Team: a) Ensures that appropriate governance and internal controls are in place b) Monitors and acts on escalated risks
Risk Management Strategy
Risk Management Strategy Document Reference MLCSU CA_WL_V3 Version 3 Authors: Donna Bamber, Midlands & Lancashire Commissioning Support Unit Senior Risk Officer Smita Shetty, Service Redesign Manager,
NZ Transport Agency Page 1 of 23
NZ Transport Agency Page 1 of 23 NZ Transport Agency Page 2 of 23 NZ Transport Agency Page 3 of 23 f) NZ Transport Agency Page 4 of 23 NZ Transport Agency Page 5 of 23 NZ Transport Agency Page 6 of 23
Senior arrangements, Systems and Controls. Chapter 13. Operational risk: systems and controls for insurers
Senior arrangements, Systems and Controls Chapter Operational risk: systems and controls for insurers SYSC : Operational risk: Section.1 : Application.1 Application.1.1 SYSC applies to an insurer unless
Policy Number: 040 Risk Management August 2018
Policy Number: 040 Risk Management August 2018 Policy Details 1. Owner Manager, Business Services 2. Compliance is required by Staff, contractors and volunteers 3. Approved by The Commissioner 4. Date
CMP for Special Regs and Safety Issues. 1. INTRODUCTION Purpose Scope Submissions to Australian Sailing:...
CMP Policy - AS i Australian Sailing CMP for Special Regs and Safety Issues 1. INTRODUCTION... 1 1.1. Purpose... 1 1.2. Scope... 1 1.3. Submissions to Australian Sailing:... 1 2. CHANGE MANAGEMENT PROCEDURE
Risk Management. Webinar - July 2017
Risk Management Webinar - July 2017 Compiled by: Raaghieb Najjaar, Yaeesh Yasseen & Rashied Small Adapted and Facilitated by: Professor Enslin J. van Rooyen Risk Management - June 2017 2 Defining Risk
Approved by: Diocesan Council 17 December 2015
DIOCESAN COUNCIL POLICY 39 Risk Management Approved by: Diocesan Council 17 December 2015 1 PREAMBLE The Perth Diocesan Trustees under the authority of the Diocesan Trustees Statute 1952 have the responsibility
Risk Management Policy
Risk Management Policy 1 Document configuration control Policy Title Author/Job Title Policy Version Version 1.0 Status Reference and guidance Consultation Forum Risk Management Policy Jonathan Sutton
Guide to an ERM Risk Map and Working in Practice
Guide to an ERM Risk Map and Working in Practice Edith Pfister Chief Financial Officer & Chief Risk Officer RGA Reinsurance Company of Australia Ltd 2 nd ASHK Risk Management Regional Conference, February
RISK MANAGEMENT POLICY
RISK MANAGEMENT POLICY Approved by Governing Authority February 2016 1. BACKGROUND 1.1 The focus on governance in corporate and public bodies continues to increase. It resulted in an expansion from the
HSC Business Services Organisation Board
Paper BSO 25/2009 HSC Business Services Organisation Board Risk Management 1. Purpose of this report The purpose of this report is to brief the Board on the BSO Risk Management process. 2. Background HSC
Risk Management Strategy
Risk Management Strategy July 2004 Version 1 This document will be reviewed regularly. Printed copies should not be considered the definitive version. Contact the Risk Management Support Unit (RMSU x54645)
Risk Management Framework. Group Risk Management Version 2
Group Risk Management Version 2 RISK MANAGEMENT FRAMEWORK Purpose The purpose of this document is to summarise the framework which Service Stream adopts to manage risk throughout the Group. Overview The
Chapter 7: Risk. Incorporating risk management. What is risk and risk management?
Chapter 7: Risk Incorporating risk management A key element that agencies must consider and seamlessly integrate into the TAM framework is risk management. Risk is defined as the positive or negative effects
RISK MANAGEMENT FRAMEWORK
RISK MANAGEMENT FRAMEWORK Approving authority Approval date University Council 5 August 2013 (3/2013 meeting) Advisor Vice President (Corporate Services) vpcorporateservices@griffith.edu.au (07) 373 57343
Risk Management Strategy and Board Assurance Framework
Risk Management Strategy and Board Assurance Framework Version 1.1 Ratified by Health Commissioning Board Date ratified Audit Committee in Common: 10 th October 2017 Heath Commissioning Board: 8 th November
Risk Registers. Providing evidence, if required, that the Trust is compliant with the Management of Health and Safety Regulations 1999;
Risk Registers Appendix 1 What is a Risk Register? A Risk Register is a log of risks of all kinds that threaten the delivery of objectives and the delivery of services. It should be a live document which
Procedure: Risk management
Procedure: Risk management Purpose To outline the procedures involved for identification, assessment and management of risks. Procedure Introduction 1. This procedure outlines the University s Risk Awareness
ENTERPRISE RISK MANAGEMENT Framework
STANDARDS OF SOUND BUSINESS AND FINANCIAL PRACTICES ENTERPRISE RISK MANAGEMENT Framework January 2018 Ce document est également disponible en français. Notice This document is intended as a reference tool
GOV : Enterprise Risk Management Policy
Name: Responsibility: Complements: Enterprise Risk Management Framework Coordinator, Enterprise Risk Management GOV-080-005: Enterprise Risk Management Policy Draft Date: November 2006; January 2012 Revised
BERGRIVIER MUNICIPALITY. Risk Management Risk Appetite Framework
BERGRIVIER MUNICIPALITY Risk Management Risk Appetite Framework APRIL 2018 1 Document review and approval Revision history Version Author Date reviewed 1 2 3 4 5 This document has been reviewed by Version
RISK MANAGEMENT FRAMEWORK
RISK MANAGEMENT FRAMEWORK 1. INTRODUCTION (Company) acknowledges that risk is inherent in its business. The Company faces a broad range of risks as a listed entertainment organisation. The Company s risk
Bournemouth Primary MAT Risk Management Policy
Bournemouth Primary MAT Risk Management Policy 1. Introduction The Bournemouth Primary Multi-Academy Trust (the Trust) operates a risk management system in order to identify and manage key exposures and
RISK MANAGEMENT STRATEGY Version 3
RISK MANAGEMENT STRATEGY Version 3 Risk Management Strategy V3 - March 2018 1 Standard Operating Procedure St Helens CCG Risk Management Strategy Version 3.0 Implementation Date September 2014 Review Date
INSURANCE CORE PRINCIPLES, STANDARDS, GUIDANCE AND ASSESSMENT METHODOLOGY
INSURANCE CORE PRINCIPLES, STANDARDS, GUIDANCE AND ASSESSMENT METHODOLOGY Revised ICP 8 and the additional ComFrame material in ICP 8 for public consultation (redline version) This public consultation
Risk Management Policy Adopted by:
Risk Management Policy Adopted by: Infigen Energy Limited Infigen Energy (Bermuda) Limited Infigen Energy RE Limited in its capacity as Responsible Entity of Infigen Energy Trust Adopted: 17 December 2009
Fraud Risk Management
Fraud Risk Management Fraud Risk Assessment Part 2 2017 Association of Certified Fraud Examiners, Inc. Fraud Risk Assessment Frameworks Frameworks are helpful for performing, evaluating, and reporting
Network Rail Limited (the Company ) Terms of Reference. for. The Audit and Risk Committee of the Board
Network Rail Limited (the Company ) Terms of Reference for The Audit and Risk Committee of the Board Membership of the Audit and Risk Committee 1 The Audit and Risk Committee (the Committee ) shall comprise
RISK MANAGEMENT PROCEDURE GUIDANCE
RISK MANAGEMENT PROCEDURE GUIDANCE East and North Hertfordshire Clinical Commissioning Group Page 1 of 25 DOCUMENT CONTROL SHEET Document Owner: Director of Nursing and Quality Document Author(s): Company
ENTERPRISE RISK MANAGEMENT (ERM) GOVERNANCE POLICY PEDERNALES ELECTRIC COOPERATIVE, INC.
1. Purpose: 1.1. Pedernales Electric Cooperative ( PEC ) is committed to delivering low-cost, reliable and safe energy solutions for the benefit of our members. In order to improve the likelihood of achieving
TONGA NATIONAL QUALIFICATIONS AND ACCREDITATION BOARD
TONGA NATIONAL QUALIFICATIONS AND ACCREDITATION BOARD RISK MANAGEMENT FRAMEWORK 2017 Overview Tonga National Qualifications and Accreditation Board (TNQAB) was established in 2004, after the Tonga National
Documentation Control. Hazard Identification, Risk Assessment and Management Procedure. (This document is linked GG/CM/007- Risk Management Policy)
Documentation Control Reference: Date approved: 24 November 2016 Approving Body: (This document is linked GG/CM/007- Risk Management Policy) Trust Board (Medical Director) Implementation Date: 24 November
PILLAR 3 DISCLOSURES MERCER UK AUGUST 2016
PILLAR 3 DISCLOSURES MERCER UK AUGUST 2016 CONTENTS 1. Background... 1 1.1 Basis of Disclosures... 2 1.2 Frequency of Publication... 2 1.3 Verification... 2 1.4 Media & Location of Publication... 2 2.
UCISA TOOLKIT. Major Project Governance Assessment. version 1.0
UCISA TOOLKIT Major Project Governance Assessment version 1.0 Contents Introduction 1 Roles and responsibilities 2 Definition of a Major Project 3 Guidance for using the Toolkit 4 Governance elements 4
Risk Management Policy and Strategy
Risk Management Policy and Strategy Version: 2.1 Bodies consulted: Approved by: Directors and Managers responsible for risk Board of Directors Date Approved: 28 March 2017 Lead Manager: Lead Director:
RISK MONITORING COMMITTEE CHARTER
RISK MONITORING COMMITTEE CHARTER CONTENTS 1. OBJECTIVES 3 2. COMPOSITION 3 3. MEETINGS 3 4. ROLES AND RESPONSIBILITIES 3 5. OTHER PROVISIONS 5 1. OBJECTIVES The Board Risk Monitoring Committee (RMC) shall
Enhancing Our Risk Appetite Framework. A Case Study
Enhancing Our Risk Appetite Framework A Case Study Desired Outcomes 1. An approach to developing a risk appetite framework and risk appetite statement. 2. Understanding how a risk appetite framework can
RISK AND BUSINESS CONTINUITY MANAGEMENT
RISK AND BUSINESS CONTINUITY MANAGEMENT EFFECTIVE: 18 MAY 2010 VERSION: 1.4 FINAL Last updated date: 29 September 2015 Uncontrolled when printed 2 Effective: 18 May 2010 CONTENTS 1 POLICY STATEMENT...
Risk Management Policy
Risk Management Policy April 2017 1 Introduction 1.1 The primary objective of risk management is to ensure that the risks facing the business are appropriately managed. 1.2 Force is committed to ensuring
ISO/DIS 9001:2015 Risk-Based Thinking
ISO/DIS 9001:2015 Risk-Based Thinking Whittington & Associates, LLC 6175 Hickory Flat Highway, Suite 110-303, Canton, GA 30115 www.whittingtonassociates.com 770-517-7944 Version 1.0: 01/10/15 2015 Whittington
Risk committee. 1. Role. 2. Responsibilities. Terms of reference. Risk strategy. Culture and behaviour
Risk committee Terms of reference 1. Role 1.1 The Committee executes the powers delegated to it by NEST Corporation. It must ensure regular reporting back to the NEST Corporation governing body on these
Managing risk appetite for operational and non-financial risks
Managing risk appetite for operational and non-financial risks John Thirlwell IIA, Bodø, 27 May 2013 Agenda What do we mean by operational and nonfinancial risks? What do we mean by risk appetite? A framework
CITY OF JOHANNESBURG METROPOLITAN MUNICIPALITY GROUP RISK AND ASSURANCE SERVICES GROUP RISK MANAGEMENT POLICY
CITY OF JOHANNESBURG METROPOLITAN MUNICIPALITY Effective Date 1 July 2015 TABLE OF CONTENTS 1. POLICY STATEMENT... 3 2. POLICY CONTEXT... 4 3. PURPOSE... 5 4. POLICY SCOPE AND APPLICATION... 6 5. RISK
Section Defining Risk Management. 11. Principles of Risk Management
Section 2 10. Defining Risk Management Enterprise risk management is the process, affected by an entity's board of directors, management and other personnel, applied in strategy setting and across the
Tax risk management strategy
Vodafone Group Plc has a tax strategy focused on the following 6 key areas: Integrity in compliance and reporting Enhancing shareholder value Business partnering Influencing tax policy Developing our people
28 July May October 2016
Policy Name Risk Management Policy & Procedure Related Policies and Legislation AISWA Guidelines Risk Management Policy Category Planning & Management Relevant Audience Date of Issue / Last Revision All
Headline Verdana Bold Managing tax Balancing current challenge with future promise The EYE, Amsterdam, 30 November - 1 December 2016
Headline Verdana Bold Managing tax Balancing current challenge with future promise The EYE, Amsterdam, 30 November - 1 December 2016 Marvin de Ridder, Deloitte Netherlands Emmet Bulman, Deloitte UK Tax
Risks and uncertainties facing the business
Identifying and managing our risks The Board is responsible for the Group s system of risk management and internal control. Risk management is recognised as an integral part of the Group s activities.
W E L O O K A T T H I N G S D I F F E R E N T L Y. Supervision, Regulation & Risk Management
Supervision, Regulation & Risk Management Definitions Supervision one who oversees the works or tasks of another Regulation a rule or law designed to control or govern conduct Definitions Risk Management
Risk Management Policy
Risk Management Policy Date Published 6 th July 2016 Version 1 Approved Date 6 th July 2016 Review Cycle Annually Review Date June 2017 Learning together; to be the best we can be 1. Introduction 1.1.
Risk Management Policy
Risk Management Policy Version: 3 Board Endorsement: 11 January 2014 Last Review Date: 3 January 2014 Next Review Date: July 2014 Risk Management Policy 1 Table of Contents 1 Introduction... 3 2 Overview...
Solvency Assessment and Management: Stress Testing Task Group Discussion Document 96 (v 3) General Stress Testing Guidance for Insurance Companies
Solvency Assessment and Management: Stress Testing Task Group Discussion Document 96 (v 3) General Stress Testing Guidance for Insurance Companies 1 INTRODUCTION AND PURPOSE The business of insurance is