Governance > Risk Management > Risk Management Framework & Procedure
Authorised by Board of Management
Revised Date: 31 January 2023
The Victorian Government Risk Management Framework identifies important elements to consider in organisational risk management.
ELEMENT |
KYEEMA’S RESPONSE IS REFLECTED IN |
MANDATE AND COMMITMENT – indicates the intent to ensure effective risk management |
Board takes responsibility for ensuring risk management policy in place Purpose and values statements Kyeema Rules Knowledge of NDIS Practice Standards All Policies and procedures that are required Position descriptions appropriate to the job roles Quality Improvement Plans are created Service Agreement contracts with NDIS participants NDIS Terms of Business understood
|
DESIGN – reflects what is required and what should be included |
Governance structure Risk management policy International Standard ISO 31000 applied Appropriate Board committees Terms of reference for committees
|
IMPLEMENTATION – reflects what actions are required to ensure risk management happens in the organisation. |
Risk register reviewed regularly All elements of NDIS Quality and Safeguards in place Program planning Excursion and event planning Business plans Budgeting and planning processes Procedure manuals for managers and admin Internal auditing Incident reporting register Risk management training for the Board and Managers Minutes of Board meetings Minutes of Finance Audit Risk Committee Minutes of Governance meetings Minutes of OH&S and EPC meetings Minutes of management and staff meetings OH&S processes CEO Report incidents, risk & compliance matters to Board
|
MONITOR AND REVIEW – reflects the approach required to assess performance |
Risks reported to and reviewed by Board and Managers Minutes of all meetings – risks addressed Completion of Internal Audit documentation Completion of Quality Improvement Plans form audits, Essential Safety Measures checks etc. Closing out of Corrective Action Requests from audits Risk Management KPIs External audit reports |
CONTINUAL IMPROVEMENT – reflects the commitment for ongoing improvement in risk management processes |
Risk Management improvement plans Elements of other Quality Improvement Plans that relate to risk Annual risk attestation statements as required by funding bodies Audit reports and corrective actions addressed. |
Procedures
Risk management procedures underpin all Kyeema areas of operation and many are detailed under the Implementation section of the Risk Framework above.
Location of information.
•Organisational Risk Register - in K Drive / Risk management – Organisation / Organisational Risk Register
•Day Activities Risk Assessed Activities – K Drive / OH&S, Department Risk Registers & EPC / Day Activities Risk Assessed Activities
Link
GF-07 Annual Attestation by CEO and Finance Manager to Board