Manage business risk

1. Using your industry as a guide, research the regulations that apply to managing personal data and develop a summary report on how this will meet your organisational requirements.

2. Refer to Case Study G - Monitoring communication

Case Study G - Monitoring communications

You work for an organisation selling goods to customers and are responsible for the sales team. You must ensure communications follow legal obligations and organisational requirements. You have been informed that a member of your team has been giving personal information of customers to a friend working for a known competitor. You must address this situation immediately by organising and planning the actions you will need to take.

The information that you will need to consider is:

• Data privacy and confidentiality - all customer's information must be kept private and records made in the secure customer database system. Sales staff must not disclose personal information about customers or staff to other customers or third parties. The consequences of this would be noted as criminal activity and result in prosecution
• Organisational requirements - all customer communications must be conducted according to the customer standards document that has been produced by the organisation. This provides information on data protection policy and procedures for customer communications.

Looking at the issue raised, assess the information and identify what actions you will need to take. You should conduct some basic research on the internet to help you address the issues and apply your risk management skills. Suggest ways to overcome this issue, the actions that need to take place for the employee, and note any legal or organisational requirements.

3. The activity will require observation

This is a roleplay activity to be conducted in groups of three to four, with you playing the role

of the manager and your peers playing 'relevant parties'.

You are responsible for leading a formal meeting to share important information regarding an

employee's conduct. You must inform relevant parties of the following points:

The facts related to the problem

Details of what you would include in an action plan to deal with the situation

The appropriate method for communicating with the team

The assessment of the risk treatment for appropriateness and ensuring it is lawful and follows organisational requirements.

4. To complete the following activities, you should choose and refer to a risk that could occur in

your industry. (If this isn't possible, then your instructor will provide you with a generic risk).

You are required to prepare to lead a business meeting with relevant stakeholders. To plan for this meeting, you must develop a risk treatment action plan to demonstrate that you are able to take the appropriate action when treating a business risk.

When preparing your risk treatment action plan, you must:

Outline the risk selected

Determine the overall objective

Outline tasks required to treat the risk

List the resources you will require

Determine an appropriate timeframe

List the people who will be responsible or involved.

Attach your finished action plan.

5. This activity requires observation.

As a roleplay activity, you must lead a business meeting with a small group of your peers who will play the role of relevant stakeholders, and present the action plan your developed in Question 1.

During the meeting with the stakeholders, you must:

Demonstrate that you have planned and developed a risk management action plan that you can share with the relevant stakeholders

Demonstrate that you have planned and developed concise content that is appropriate and relevant

Demonstrate that you have followed any relevant organisational and legislative requirements.

During the meeting, you should work in collaboration with your peers, use problem-solving skills to negotiate and resolve any risk challenges that are identified, and acknowledge stakeholder input if necessary.

Your meeting should be no longer than 15 minutes.

6. As a final task, you must evaluate how your risk management process went. You should produce a written report (approximately two A4 sides) to document this. Within your report, you must outline the progress made during the meeting and ensure your report will be relevant to both external and internal stakeholders who have an interest in the process of risk management.

The report must include:

Detail of the overall objective

Details of the risk management action plan

Any unresolved risk issues

Details of what went well during the meeting

Details of where improvement in risk management could be made in the future

A summary of the final outcomes.