1 2 3 4 5 6 7 8 Risk Business Assessment Controls Assessment Action Risk Plan in Planned Owner Objective Place & Target Date Inherent Residual (s) Identifier Identifier Likelihoo Likelihood Impact Impact 5 Occurrence of poor 1.2, 1.3, Governance Framework including Bi monthly liaison meetings in Q2 SMT – governance would 2.2, 2.3, Board and committee terms of 15/16. put the Commission 3,2, 5.2, reference Quarter 2 15/16 stewardship – at risk of not 6.1. Board annual effectiveness review CEX statements by September 2015. meeting legal and Risk Committee review obligations and good procedures and ensure robustness. Input from middle managers on business practice because of Business Continuity Plan HCoS plan progress reporting by end Q2 – weak oversight and Policy Development Plan 15/16. management Internal audit provide advice and 3 2 2 2 assurance guidance Follow up issues arising from 2nd audit SMT arrangements. Risk policy, risk registers, by external and internal audit during Q2 Risk Category: assurance framework. 15/16. – Compliance Regular Assurance to Dept, Board, Carry out assurance checks in A&R, SMT F&AO July/Aug/Sept re Implementation of IA Monthly SMT review of progress recommendations by end Q2 15/16. – and assurance updates by middle Risk Appetite Low management Internal Audit consultancy work re HCoS attendance mgt and records mgt by end Q2 15/16 – Current Assessment: This risk is judged as a high to moderate at this time, informed by briefings and indications of a satisfactory assurance rating from audit. Further comment on the rating will emerge as part of audit’s 2015/16 assignments. Changes to the assurance check mechanism were implemented by staff in Q1, and additional steps to make middle managers and staff accountable as part of assurance checking will continue in Q2. CEX - Chief Executive, SMT Senior Management Team, HCS - Head of Charity Services, HCoS - Head of Corporate Services, HC&E - Head of Compliance & – Enforcement, PM - Policy Manager, CM Casework Manager, CO - Comms Officer –
1 2 3 4 5 6 7 8 Identifier Identifier Risk Business Plan Objective (s) Assessment Controls in Place Assessment Action Planned & Target Date Risk Owner Inherent Residual Impact Likelihoo Impact Likelihood 5 Occurrence of poor governance would put the Commission at risk of not meeting legal obligations and good practice because of weak oversight and management assurance arrangements. Risk Category: Compliance Risk Appetite Low 1.2, 1.3, 2.2, 2.3, 3,2, 5.2, 6.1. 3 2 Governance Framework including Board and committee terms of reference Board annual effectiveness review and Risk Committee review procedures and ensure robustness. Business Continuity Plan Policy Development Plan Internal audit provide advice and guidance Risk policy, risk registers, assurance framework. Regular Assurance to Dept, Board, A&R, SMT Monthly SMT review of progress and assurance updates by middle management 2 2 Bi monthly liaison meetings in Q2 – 15/16. Quarter 2 – 15/16 stewardship statements by September 2015. Input from middle managers on business plan progress reporting by end Q2 – 15/16. Follow up issues arising from 2nd audit by external and internal audit during Q2 – 15/16. Carry out assurance checks in July/Aug/Sept re Implementation of IA recommendations by end Q2 – 15/16. Internal Audit consultancy work re attendance mgt and records mgt by end Q2 – 15/16 SMT CEX HCoS SMT F&AO HCoS Current Assessment: This risk is judged as a high to moderate at this time, informed by briefings and indications of a satisfactory assurance rating from audit. Further comment on the rating will emerge as part of audit’s 2015/16 assignments. Changes to the assurance check mechanism were implemented by staff in Q1, and additional steps to make middle managers and staff accountable as part of assurance checking will continue in Q2. CEX - Chief Executive, SMT – Senior Management Team, HCS - Head of Charity Services, HCoS - Head of Corporate Services, HC&E - Head of Compliance & Enforcement, PM - Policy Manager, CM – Casework Manager, CO - Comms Officer