Risk Management Framework & Procedure

Governance > Risk Management > Risk Management Framework & Procedure

Authorised by Board of Management

Revised Date: 31 January 2023

 

The Victorian Government Risk Management Framework identifies important elements to consider in organisational risk management.

 

ELEMENT

KYEEMA’S RESPONSE IS REFLECTED IN

MANDATE AND COMMITMENT – indicates the intent to ensure effective risk management

Board takes responsibility for ensuring risk management policy in place

Purpose and values statements

Kyeema Rules

Knowledge of NDIS Practice Standards

All Policies and procedures that are required

Position descriptions appropriate to the job roles

Quality Improvement Plans are created

Service Agreement contracts with NDIS participants

NDIS Terms of Business understood

 

DESIGN – reflects what is required and what should be included

Governance structure

Risk management policy

International Standard ISO 31000 applied

Appropriate Board committees

Terms of reference for committees

 

IMPLEMENTATION – reflects what actions are required to ensure risk management happens in the organisation.

Risk register reviewed regularly

All elements of NDIS Quality and Safeguards in place

Program planning

Excursion and event planning

Business plans

Budgeting and planning processes

Procedure manuals for managers and admin

Internal auditing

Incident reporting register

Risk management training for the Board and Managers

Minutes of Board meetings

Minutes of Finance Audit Risk Committee

Minutes of Governance meetings

Minutes of OH&S and EPC meetings

Minutes of management and staff meetings

OH&S processes

CEO Report incidents, risk & compliance matters to Board

 

MONITOR AND REVIEW – reflects the approach required to assess performance

Risks reported to and reviewed by Board and Managers

Minutes of all meetings – risks addressed

Completion of Internal Audit documentation

Completion of Quality Improvement Plans form audits, Essential Safety Measures checks etc.

Closing out of Corrective Action Requests from audits

Risk Management KPIs

External audit reports

CONTINUAL IMPROVEMENT – reflects the commitment for ongoing improvement in risk management processes

Risk Management improvement plans

Elements of other Quality Improvement Plans that relate to risk

Annual risk attestation statements as required by funding bodies

Audit reports and corrective actions addressed.

 

 

 

Procedures

Risk management procedures underpin all Kyeema areas of operation and many are detailed under the Implementation section of the Risk Framework above.

 

 

Location of information.

      Organisational Risk Register - in K Drive / Risk management – Organisation / Organisational Risk Register

      Day Activities Risk Assessed Activities – K Drive / OH&S, Department Risk Registers & EPC / Day Activities Risk Assessed Activities

Link

GF-07 Annual Attestation by CEO and Finance Manager to Board