The purpose and scope of the Risk Module The Risk Module has been developed in line with the international standard, ISO 31000 Risk Management – Principles and Guidelines and supports an integrated approach to the identification and management of risks. The scope of the module includes: linkages between the Risk Module and ISO 31000 how to use the Risk Module to: Identify known risks and demonstrate existing controls Rate risks against risk/SAC levels in accordance with external agency requirements Set and track risk treatment and mitigation tasks Track and report on occurrences of risk across the business range and scope of reporting from the Risk Module ISO 31000 Risk Management – Principles and Guidelines The LOGIQC risk module, which allows for organisational risks to be identified, control measures to be described, and mitigation actions to be documented, has been designed in accordance with ISO 31000 Risk Management – Principles and Guidelines. The following diagram outlines the risk management process proscribed in ISO 31000. ISO 31000 Risk Management Process The risk management process is designed to support the following outcomes: Better identification of opportunities and threats, Prevention of potential risks from being realised and the reduction of the element of chance Increased accountability and transparency for decisions More effective allocation and use of resources Improved incident management and reduction in the cost of risk, including insurance premiums Improved stakeholder confidence and trust Improved compliance with relevant legislation and accreditation processes Proactive rather than reactive management Enhanced governance LOGIQC Risk Module – Workflow The diagram bellow outlines the workflow of the LOGIQC QMS Risk Module, which involves the following processes: Process 1 Following the identification of a risk, a full description of the risk is documented on the Risk Details Form (RDF) Process 2 RDF is sent to the Risk Manager to check that the risk is fully described and controlled
The purpose and scope of the Risk Module The Risk Module has been developed in line with the international standard, ISO 31000 Risk Management – Principles and Guidelines and supports an integrated approach to the identification and management of risks. The scope of the module includes: linkages between the Risk Module and ISO 31000 how to use the Risk Module to: Identify known risks and demonstrate existing controls Rate risks against risk/SAC levels in accordance with external agency requirements Set and track risk treatment and mitigation tasks Track and report on occurrences of risk across the business range and scope of reporting from the Risk Module ISO 31000 Risk Management – Principles and Guidelines The LOGIQC risk module, which allows for organisational risks to be identified, control measures to be described, and mitigation actions to be documented, has been designed in accordance with ISO 31000 Risk Management – Principles and Guidelines. The following diagram outlines the risk management process proscribed in ISO 31000. ISO 31000 Risk Management Process The risk management process is designed to support the following outcomes: Better identification of opportunities and threats, Prevention of potential risks from being realised and the reduction of the element of chance Increased accountability and transparency for decisions More effective allocation and use of resources Improved incident management and reduction in the cost of risk, including insurance premiums Improved stakeholder confidence and trust Improved compliance with relevant legislation and accreditation processes Proactive rather than reactive management Enhanced governance LOGIQC Risk Module – Workflow The diagram bellow outlines the workflow of the LOGIQC QMS Risk Module, which involves the following processes: Process 1 Following the identification of a risk, a full description of the risk is documented on the Risk Details Form (RDF) Process 2 RDF is sent to the Risk Manager to check that the risk is fully described and controlled