- Risk Management Report

2.1 Establishing Organisation Risk Context

• Organisational methods, actions and requirements for undertaking risk management

ORGANISATION RISK MANAGEMENT PROCESS
Establish the Context	Risk Description	Effectiveness of Controls	Analysis	Evaluation
State the relevant objective the risk relates to e.g. strategic, business, project, Describe Intent, purpose and outcomes (refer to appendix 1)	List internal and external factors that influence this risk in relation to objectives E.g.technology; budgetary constraints; change in management	Risk Source Where the risk originates (e.g. regulatory requirements, political changes) Change in management; change in government funding; changes in legislation	Description Something might occur which {Cause(s)} the {Event} that leads to an {Impact/Consequence CauseE.g. Failure to maintain client service management system Event E.g. Leads to delays in service delivery ImpactE.g. Results in poor service level to core clients	Current Control(s) Such as a process, policy, practice, device Governance committee; policies and procedures; quality improvement plans	Control Rating Refer to control effectiveness rating (refer to appendix 2)	Use likelihood and consequence table and risk matrix. Rate the risk based on the current controls and their effectiveness (Refer to Appendix 2)	Based on the outcomes of the risk analysis, risk evaluation assists in deciding which risks need treatment and the priority for treatment implementation.