EXAMPLE ATTACHMENT Risk Management Risk Title Description Existing Controls Additional Risk risk (The risk is that…) treatment Access to Through the term of the IS42 for privacy Principal ensure Rare Moderate – information Arrangement, the supplier will requirements supplier have access to sensitive compliance with information that could be misused privacy Deed of Confidentiality leading to significant legal costs. requirements. and Privacy executed with suppliers. Privacy clauses inserted on salary packaging Service Should service Supplier experience and Monitor Rare Moderate delivery delivery levels fail this capability and continuity quarterly KPIs. will lead to difficulties strategies in place. for employees and Regular departments/ supplier agencies. This meetings. impact on: The accuracy and timeliness of employees salary Stakeholder packaging feedback. payments/reimbursements; The workload for department/agency payroll, HR and taxation areas; and The attractiveness of salary packaging to employees, thus impacting on the utilisation of the SOA by the department/agency in the recruitment and retention of staff. If inexperience personnel are Supplier employee Principal Rare Low key utilised in the provision of Salary retention procedures and monitor through personnel Packaging Services, this will policies. regular supplier increase the risk of incorrect meetings. information being provided to both Supplier employee the employees and employer. training. Resulting in customer dissatisfaction. Insert additional text here if required
EXAMPLE ATTACHMENT Risk Management Risk Title Description (The risk is that…) Existing Controls Additional risk treatment Risk Access to information Through the term of the Arrangement, the supplier will have access to sensitive information that could be misused leading to significant legal costs. IS42 – for privacy requirements Deed of Confidentiality and Privacy executed with suppliers. Privacy clauses inserted on salary packaging Principal ensure supplier compliance with privacy requirements. Rare Moderate Service delivery Should service delivery levels fail this will lead to difficulties for employees and departments/ agencies. This impact on: The accuracy and timeliness of employees salary packaging payments/reimbursements; The workload for department/agency payroll, HR and taxation areas; and The attractiveness of salary packaging to employees, thus impacting on the utilisation of the SOA by the department/agency in the recruitment and retention of staff. Supplier experience and capability and continuity strategies in place. Monitor quarterly KPIs. Regular supplier meetings. Stakeholder feedback. Rare Moderate key personnel If inexperience personnel are utilised in the provision of Salary Packaging Services, this will increase the risk of incorrect information being provided to both the employees and employer. Resulting in customer dissatisfaction. Supplier employee retention procedures and policies. Supplier employee training. Principal monitor through regular supplier meetings. Rare Low Insert additional text here if required
ContractReviewReportTemplate.docx