COMMISSION POLICY Category: Strategic Directive Title: Risk Management Policy Number: SD-15 Date of Adoption: June 23, 2016 Resolution No. Date of Revision: Resolution No. The CPUC maintains a continuously improving enterprise risk management system and internal audit function. Within its jurisdictional authority, the CPUC will: Identify and characterize substantial risks to the achievement of the goals Commission’s and strategic directives, including risks the public faces with respect to entities the CPUC regulates; Prioritize risks of greatest concern, in light of their likelihood, severity, and available options for their mitigation; Consider risk priorities in allocating the resources, including budgetary funding and CPUC’s the time and attention of commissioners and CPUC staff; Test and verify the effectiveness of the managerial controls and operations. CPUC’s Internal Auditor and Executive Director Reports Monitoring Methods: Frequency: Annual
COMMISSION POLICY Category: Strategic Directive Date of Adoption: June 23, 2016 Date of Revision: Title: Risk Management Policy Number: SD-15 Resolution No. Resolution No. The CPUC maintains a continuously improving enterprise risk management system and internal audit function. Within its jurisdictional authority, the CPUC will: Identify and characterize substantial risks to the achievement of the Commission’s goals and strategic directives, including risks the public faces with respect to entities the CPUC regulates; Prioritize risks of greatest concern, in light of their likelihood, severity, and available options for their mitigation; Consider risk priorities in allocating the CPUC’s resources, including budgetary funding and the time and attention of commissioners and CPUC staff; Test and verify the effectiveness of the CPUC’s managerial controls and operations. Monitoring Methods: Internal Auditor and Executive Director Reports Frequency: Annual
193042287.docx