Risk Management FAQs

Risk Management practices allow for threats to objectives to be identified, assessed and mitigated. This allows for better oversight of the things that threaten what you are trying to achieve.

A risk is something that may happen. An issue is something that is already happening.

The 'Risk Register and Scoring and Treatment Guidance' clearly explains the difference between likelihood and impact and provides indicative guidance for all risk categories.

Risk identification and risk scoring should be dynamic. Any measures which help to reduce (mitigate) the likelihood and/or impact of your risk, should also be scoped. If your mitigating measures are positively impacting the risk, then you can reduce your score. Likewise, if there is evidence to say that the likelihood or impact are increasing, you can increase your risk score. Ongoing review of your risks is vital to ensure they are an accurate reflection.

The risk management framework allows for risks to be managed locally or escalated (via governance processes). The Risk and Resilience Team can be contacted to explain this further. Risk identification and management ensures that decision making is defensible and that the right resources (often being the resource of time) follow higher scoring risks.

A department may assess Health & Safety risks, such as slips, trips and falls, to promote a safe working environment. This is different to risk management via a risk register, which allows for risks to outcomes to be scoped and managed.

Consider how risk register discussions can fit into existing forums and meetings to better increase visibility.

Questions to consider when preparing your committee report:

Q. What are the risks associated with the issue or proposals? Ensure these are referenced in your report.

Q. How are these risks being managed and is there a need to amend any existing risk registers?

Example text:

The XX committee is invited to consider the proposal to procure a new examinations module. If approved, the implementation of this module will be in phases, starting imminently. What are the risks: There is an increased risk to the University’s ability to deliver online examinations when the current system is phased out, and the new module is made operational. There is also the risk of misuse or user error due to lack of staff competence using the new system. How they are managed: The associated risks are acknowledged within the departmental risk register. The likelihood score will be increased from a 2 (low) to a 3 (medium). Mitigating action includes transitioning the system outside of examination periods, developing standard operating procedures and procuring specialist support during the transition. Staff training will also be rolled out in two phases, in June and September.