Activity 4A To provide you with an opportunity to identify how to determine and select from options for treating risks. Refer to Case Study E - Data breach 1. You must research the topic of a potential data breach and determine the different options that companies could take to treat such risks. From your findings from Question 1, identify the most appropriate option the company should take and explain your reason for this choice. 16 | ANIBT Assessment Tool Version 1.0 Date: January 2022 TADM BSBOPS504 Manage business risk | Assessment 1 Activity 4B To provide you with an opportunity to develop action plan for implementing risk treatment. Using Activity 4A as a guide and the template provided in Case Study E - Data Breach, develop an action plan for the implementation of your chosen risk treatment. Objectives (List of risks) Tasks (What you need to do to treat risk) Success Criteria (How you will identify your success Timeframe (By when you need to achieve the task) Resources What resources you10143 Procedures that are already Successful > The actions required to comply with regulations > The allocated time to ensure work is completed. Content must be accurate, concise, clear, and without spelling or grammatical errors. Activity 1D To provide you with an opportunity to communicate risk management process to relevant stakeholders. Refer to your findings from Activity 1C and effectively communicate the actions you must carry out in order to meet the requirements of the health and safety representative. Using your student email, you must draft an email to stakeholders addressing the points below The necessity to ensure health and safety notices are clearly visible in all work areas The requirement to clearly communicate that PPE will be available at all times within the store, including gloves and high visibility jackets The requirement to clearly communicate that actions taken to resolve issues such as lift maintenance work will be recorded and filed safely on the premises Must confirm that a cleaner will be employed to clean the stockroom area on a regular basis. You must take a screen shot of your drafted email and upload with this assessment as proof. Case Study C - Problem-solving groiect Spring Vale Primary School and The Springs Further Education College developed an innovative approach to problem-solving with a real-life project that utilised the help of a local restaurant. Teachers saw rst-hand how the restaurant operated and identied problem areas that existed. The restaurant manager explained the processes involved in the day-to-day running of the restaurant that could be used as part of the problem-solving activities for the students. The student visits were then organised to focus on different areas, and classroom work was conducted both before and after the visits. The visits engaged the interest of students and motivated them to engage in discussions. During the real-life project, students were exposed to many different tasks that required a variety of problem-solving strategies. Case Study D - Example risk assessment Staff who work in health and social care constitute a large and diverse workforce looking after a predominantly vulnerable population. Employees have the right to work in a healthy and safe environment, and the people using the services are entitled to care and support that is safe and takes their needs, freedom, and dignity into account. Managing the requirements of a care home can sometimes present unique and complex risks which can, if not effectively managed, result in serious harm to employees, people using care services, and others. The typical risks can include: Moving and handling risks Slips and trips Violence, aggression, or challenging behaviour Falls from windows and balconies Scalding and burning Bedrail entrapment Mistakes in medication administration Cluttered walkways PPHF'P'PP'P!' Damaged or broken equipment 10. Inadequate fire precautions and procedures. Sensible risk assessment in care settings - Health and social care - HSE (Accessed 08/03/21) Case Studies Case Study A - Health and safety regulations You are the manager of a food retail superstore, and your health and safety ofcer has confirmed to you that two members of staff have not been using personal protective equipment {PPE} correctly in the warehouse. This includes non-compliance in the use of high visibility vests, gloves, safety boots, and hard hats. The relevant policies and procedures within your organisation fall under the Model WHS Act, which has the main objective of providing a balanced and nationally consistent framework to secure the health and safety of workers. WWW.safeworkaustralia.gov.au Warehouse hazards can include: F Movingvehicles P Falling heavy items > Hazardous materials. Activity 3C Continuing from Activity SB, you must now evaluate and prioritise the risks for treatment. The means putting them in priority order In terms of urgency and Impact. Your answers should be In list order within the table provided below, with an evaluation for each. Priority 1 Priority 2 Priority 3 Priority 4 Priority 5 Priority 6 Priority 7 15 | ANIBT Assessment Tool Version 1.0 Date: January 2022 TADM BSBOP5504 Manage business risk| Assessment 1 Priority 8 Priority 9 Priority 10 Case Study E Data breach Clients were contacted by Greenway's Financial Services when they became aware of a potential data breach that could affect up to 10,000 clients. The managing director Tony Greenway has stated that they have contacted over 3,000 customers so far regarding potentially breached data. Although no bank account information has been stolen, it appears that it may be personal contact details that have been compromised. Such as: P Names of customers > Phone numbers > Addresses > Email addresses. Objectives Tasks Success Criteria Timeframe Resources (List of risks) (What you need to {How you will {By when you need { What resources do to treat risk) iden tify your to achieve the task) you need for each success) Activity 2A Imagine you have been asked to Invite stakeholders to assist you in the Identication of risks within your organisation. You must firstly devise five questions that you could ask them, and secondly, choose one of the questions and create an email template that you could send to them to seek their assistance. 1. Write a list of five questions that you could ask relevant stakeholders to gain insight Into business risk. 2. Choosing one of the questions you have devised in Question 1, create an email template that introduces your request for assistance. Ensure you communicate the purpose of your request and reiterate the need for honesty and transparency. You must take a screen shot of your drafted email and upload with this assessment as proof. Activity 23 R r -Pr lm- lvin r Carry out your own research into the potential risks of running a restaurant and in response to the case study, identify three potential risks that may apply to the scope of the problem-solving Activity 2C To provide you with an opportunity to document risks that apply to the scope, in consultation with relevant parties. Refer to Case Study C - Problem-solving project You have been asked by the teachers at the school and college to choose three risks that can occur in a restaurant that they could potentially use as problem-solving activities with the children. Document three potential risks and write them into a report for the teachers to consider. Your report must: Clearly outline three potential risks > Explain how these could be used for problem-solving activities Be presented clearly. Note: you may refer back to your response to Activity 2B. Activity 3A To provide you with an opportunity to assess likelihood of risks occurring. Refer to Case Study D - Example risk assessment You must number the chances of the following risks occurring within a care home environment 1-10. 1. Moving and handling risks 2. Slips and trips 3. Violence, aggression, or challenging behaviour 4. Falls from windows and balconies 5. Scalding and burning 6. Bedrail entrapment 7. Mistakes in medication administration 13 | ANIBT Assessment Tool Version 1.0 Date: January 2022 TADM BSBOPS504 Manage business risk | Assessment 1 8. Cluttered walkways 9. Damaged or broken equipment 10. Inadequate fire precautions and procedures.Case Study B - Risk assessment Date of assessment: 30/11/20 Name of Health and safety representative: Alan Crabtree Overview - Retail convenience store The store is a two-oor building with a stockroom located on the lower level and is situated within a busy city centre street. The company employs a total of 15 members of staff at this location and consists of one general manager, one assistant manager who both hold keys to the store, and 13 staff members who work in shift patterns. The store is one ofa national business franchise and follows the rules and regulations of their head ofce. Members of staff are given a full induction which includes a demonstration on health and safety procedures, and this is updated every 12 months with a refresher course consisting of a 10- minute video and an online quiz of 20 questions. Risk assessment reguirements Updates must be resolved and recorded within two months ofa scheduled revisit to the premises. Findings > There is minimal written health and safety procedure notices available within the store, apart from two located in the manager's office, which is out of view of staff members Staff were given full details of health and safety procedures on induction, and training had been given on lifting heavy goods and maintaining a clean and tidy stockroom Staff knew where to find information on health and safety in the manager's office Staff were spoken to on an individual basis and conrmed that they had been refreshed on the importance of health and safety practices within the last six months The lift located within the premises has a maximum capacity of 10 people and was last maintained 14 months before the visit of the health and safety representative. The store manager confirmed there had been reports of lift breakdown on two occasions over three months. The breakdowns had been recorded in an incident book located in the manager's office, but there is no record of the measures taken to fix and maintain the lift issues A cleaner is employed to clean the shop floor area for two hours before the store opening, but there is no current schedule for the cleaning of the stockroom It was noted that in the stockroom that there was no evidence of available health and safety equipment such as gloves, hard hats, high visibility jackets, or lifting equipment, such as pallet trucks. Boxes were stacked very high, and some appeared to be unstable, and the cleanliness of the area had not been maintained to the required standards. Papenivork evidence of reports of mice seen in the stockroom on two separate occasions. No evidence available to confirm that these incidents had been followed up with pest control. Activity 3B To provide you with an opportunity to assess impact or consequence if risk occurs. Referring back to Activity 3A, in your own words, assess the impact or consequence of each of the following risks Moving and handling risks Slips and trips Violence, aggression, or challenging behaviour Falls from windows and balconies Scalding and burning Bedrail entrapment AAAA Mistakes in medication administration Cluttered walkways V Damaged or broken equipment Inadequate fire precautions and procedures.Activity 1A To provide you with an opportunity to evaluate organisational processes, procedures and requirements and determine scope for risk management process. Refer to Case Study A - Health and safety regulations Based on the scenario, provide a brief outline on: How you would manage the situation The various ways you could reinforce the importance of PPE. Activity 1B To provide you with an opportunity to review strengths and weaknesses of existing arrangements. Refer to Case Study B - Risk assessment Take note of the assessment outcomes of the health and safety representative and explain in your own words, two strengths and two weaknesses of the current arrangements within the store.Case Study F Example documentation Hair by Jessie - Proprietor Jessica Mays GDPR - Organisational policies and procedures Dated 10th December 2020 The GDPR and the Australian Privacy Act 1988 share many common reguirements, including to: > V V VV V Adopt transparent information handling practices Data must be collected and used fairly and within the law The information held must be adequate for its purpose The information must be up-to-date Data must not be stored longer than needed The information must be safe and stored away from unauthorised access. Data must be used in line with the rights set out in the Data Protection Act The Act gives consumers several rights: > The right to access their personal data - you may wish to create an online log-in system so people can View their own data. If a consumer asks to see their information, called a 'subject access request', you have 40 days to show them The right to stop their data being used for marketing such as cold calling and junk mail you cannot use data for marketing purposes if the customer has refused. You may want to allow an opt-in or opt-out option, for example, "tick this box if you don't want to be contacted by other suppliers The right to stop their data from being used in a way that could cause distress The right to stop automatic decision-making with their data The right to compensation for any damages caused by the misuse of their data. Case Study G Monitoring communications You work for an organisation selling goods to customers and are responsible for the sales team. You must ensure communications follow legal obligations and organisational requirements. You have been informed that a member of your team has been giving personal information of customers to a friend working for a known competitor. You must address this situation immediately by organising and planning the actions you will need to take. The information that you will need to consider is: > Data privacy and confidentiality - all customer's information must be kept private and records made in the secure customer database system. Sales staff must not disclose personal information about customers or staff to other customers or third parties. The consequences of this would be noted as criminal activity and result in prosecution > Organisational requirements all customer communications must be conducted according to the customer standards document that has been produced by the organisation. This provides information on data protection policy and procedures for customer communications. Case Study G Monitoring communications You work for an organisation selling goods to customers and are responsible for the sales team. You must ensure communications follow legal obligations and organisational requirements. You have been informed that a member of your team has been giving personal information of customers to a friend working for a known competitor. You must address this situation immediately by organising and planning the actions you will need to take. The information that you will need to consider is: > Data privacy and confidentiality - all customer's information must be kept private and records made in the secure customer database system. Sales staff must not disclose personal information about customers or staff to other customers or third parties. The consequences of this would be noted as criminal activity and result in prosecution > Organisational requirements all customer communications must be conducted according to the customer standards document that has been produced by the organisation. This provides information on data protection policy and procedures for customer communications