Attachment C: RISK Assessment and Acceptance Criteria EXISTING CONTROL RATING LEVEL RATING FORESEEABLE DESCRIPTION Controls are fully in place, are being well addressed / Doing more than what is reasonable under the E Excellent complied with, are subject to ongoing maintenance and circumstances monitoring and are being continuously reviewed and tested Controls are in place, are being addressed / complied with A Adequate Doing what is reasonable under the circumstances and are subject to periodic review and testing Not doing some or all things reasonable under the Controls do not exist, or are not being addressed / complied I Inadequate circumstances with, or have not been reviewed or tested for some time Measures of Consequence HEALTH SERVICE RATING FINANCIAL IMPACT COMPLIANCE REPUTATION PROPERTY ENVIRONMENT (Physical) INTERRUPTION No noticeable Unsubstantiated, low Contained, reversible Insignificant No material service Inconsequential or no Negligible injuries Less than $50,000 regulatory or statutory impact, low profile or impact managed by on ‘no interruption damage. (1) impact site response news’ item Short term temporary Localised damage Contained, reversible Minor Some temporary non Substantiated, low impact, First aid injuries $50K - $250K interruption backlog rectified by routine impact managed by – compliances low news item (2) cleared < 1 day internal procedures internal response Medium term Short term Substantiated, public temporary interruption Localised damage Contained, reversible Moderate but with embarrassment, moderate Medical type injuries $250K - $500K backlog cleared by requiring external impact managed by – significant regulatory impact, moderate news (3) additional resources resources to rectify external agencies requirements imposed profile < 1 week Prolonged interruption Non-compliance results Substantiated, public Significant damage Uncontained, reversible of services additional – Major in termination of embarrassment, high requiring internal & impact managed by a Lost time injury $500K - $2M resources; services or imposed impact, high news profile, external resources to coordinated response (4) performance affected penalties third party actions rectify from external agencies < 1 month Indeterminate Substantiated, public Extensive damage Non-compliance results prolonged interruption embarrassment, very high requiring prolonged Catastrophic Fatality, permanent in litigation, criminal Uncontained, More than $2M of services multiple impacts, high period of restitution. – disability charges or significant irreversible impact (5) widespread multiple news Complete loss of plant, damages or penalties > 1 month profile, third party actions equipment & building
Attachment C: RISK Assessment and Acceptance Criteria EXISTING CONTROL RATING LEVEL RATING FORESEEABLE DESCRIPTION E Excellent Doing more than what is reasonable under the circumstances Controls are fully in place, are being well addressed / complied with, are subject to ongoing maintenance and monitoring and are being continuously reviewed and tested A Adequate Doing what is reasonable under the circumstances Controls are in place, are being addressed / complied with and are subject to periodic review and testing I Inadequate Not doing some or all things reasonable under the circumstances Controls do not exist, or are not being addressed / complied with, or have not been reviewed or tested for some time Measures of Consequence RATING HEALTH (Physical) FINANCIAL IMPACT SERVICE INTERRUPTION COMPLIANCE REPUTATION PROPERTY ENVIRONMENT Insignificant (1) Negligible injuries Less than $50,000 No material service interruption No noticeable regulatory or statutory impact Unsubstantiated, low impact, low profile or ‘no news’ item Inconsequential or no damage. Contained, reversible impact managed by on site response Minor (2) First aid injuries $50K - $250K Short term temporary interruption – backlog cleared < 1 day Some temporary non compliances Substantiated, low impact, low news item Localised damage rectified by routine internal procedures Contained, reversible impact managed by internal response Moderate (3) Medical type injuries $250K - $500K Medium term temporary interruption – backlog cleared by additional resources < 1 week Short term but with significant regulatory requirements imposed Substantiated, public embarrassment, moderate impact, moderate news profile Localised damage requiring external resources to rectify Contained, reversible impact managed by external agencies Major (4) Lost time injury $500K - $2M Prolonged interruption of services – additional resources; performance affected < 1 month Non-compliance results in termination of services or imposed penalties Substantiated, public embarrassment, high impact, high news profile, third party actions Significant damage requiring internal & external resources to rectify Uncontained, reversible impact managed by a coordinated response from external agencies Catastrophic (5) Fatality, permanent disability More than $2M Indeterminate prolonged interruption of services – > 1 month Non-compliance results in litigation, criminal charges or significant damages or penalties Substantiated, public embarrassment, very high multiple impacts, high widespread multiple news profile, third party actions Extensive damage requiring prolonged period of restitution. Complete loss of plant, equipment & building Uncontained, irreversible impact
Event-Coordination-Community-Event-Risk-Management-Plan-template.DOCX