240542975.xls.

ms_office
RISK
NO.
RISK DESCRIPTION COMMENT ON
RISK
RISK IDENTIFIED
(MM/DD/YYYY)
PREVIOUS RISK
SEVERITY SCORE
RISK CATEGORY CONTROLS CONSEQUENCE
SCORE
LIKELIHOOD
SCORE
CURRENT RISK
SEVERITY
SCORE
(RESIDUAL)
CONTROL
EFFECTIVENESS
SCORE
CHANGE IN
RISK
RISK OWNER RISK STRATEGY RISK
TREATMENT/S
TREATMENT DUE
DATE (MM/DD/YYY)
1 20 5 4 20 4 UNCHANGED Transfer To be confirmed December 31, 2010
2 12 4 5 20 3 GETTING
WORSE
Reduce To be confirmed December 31, 2010
3 12 4 4 16 2 GETTING
WORSE
Reduce To be confirmed December 1, 2010
4 4 4 4 16 2 GETTING
WORSE
Reduce To be confirmed September 30, 2010
5 12 3 5 15 4 GETTING
WORSE
Avoid To be confirmed January 15, 2011
6 16 5 3 15 2 IMPROVING Reduce To be confirmed September 20, 2010
7 9 5 3 15 2 GETTING
WORSE
Reduce To be confirmed August 15, 2010
8 15 5 3 15 2 UNCHANGED Reduce To be confirmed August 30, 2010
9 20 3 5 15 2 IMPROVING Reduce To be confirmed December 1, 2010
10 12 3 4 12 4 UNCHANGED Reduce To be confirmed August 15, 2010
11 6 4 3 12 3 GETTING
WORSE
Reduce To be confirmed February 28, 2010
12 3 4 3 12 2 GETTING
WORSE
Reduce To be confirmed February 28, 2011
13 6 3 4 12 1 GETTING
WORSE
Reduce To be confirmed September 1, 2010
14 5 5 2 10 3 GETTING
WORSE
Reduce To be confirmed February 28, 2011
15 8 5 2 10 3 GETTING
WORSE
Reduce To be confirmed February 28, 2011
16 20 5 2 10 2 IMPROVING Reduce To be confirmed December 1, 2010
17 12 5 2 10 2 IMPROVING Reduce To be confirmed February 28, 2011
18 20 3 3 9 3 IMPROVING Reduce To be confirmed September 1, 2010
19 9 3 3 9 3 UNCHANGED Reduce To be confirmed August 20, 2010
20 10 3 3 9 2 IMPROVING Reduce To be confirmed November 1, 2010
21 16 3 3 9 2 IMPROVING Reduce To be confirmed September 30, 2010
22 20 4 2 8 3 IMPROVING Reduce To be confirmed August 20, 2010
23 16 4 2 8 3 IMPROVING Reduce To be confirmed December 31, 2010
24 5 4 2 8 3 GETTING
WORSE
Reduce To be confirmed February 28, 2011
25 15 4 2 8 2 IMPROVING Reduce To be confirmed December 31, 2010
26 8 4 2 8 2 UNCHANGED Reduce To be confirmed February 28, 2011
27 15 2 4 8 2 IMPROVING Reduce To be confirmed November 15, 2010
28 10 2 4 8 2 IMPROVING Reduce To be confirmed August 25, 2010
29 5 2 2 4 4 IMPROVING Reduce To be confirmed March 20, 2011
30 10 3 1 3 3 IMPROVING Reduce To be confirmed October 16, 2010
Page 1 of 8
RISK CATEGORY
CORE SERVICES (PROJECT MANAGEMENT
FINANCIAL
FINANCIAL - Billing & Debtors
FINANCIAL - Budgeting
FINANCIAL - Creditors and Payments
FINANCIAL - Reporting
IT & SYSTEMS
IT & SYSTEMS - Data Completeness
IT & SYSTEMS - Data Quality
IT & SYSTEMS - IT Security
IT & SYSTEMS - System Functionality
OPERATIONAL
OPERATIONAL - Asset & Fleet Management
OPERATIONAL - Customer Services
OPERATIONAL - Facilities Management
OPERATIONAL - Health & Safety
OPERATIONAL - HR & Training
OPERATIONAL - Purchasing and Supplies
STRATEGIC
STRATEGIC - Business Continuity
STRATEGIC - Compliance & Legal
STRATEGIC - Governance
STRATEGIC - Stakeholder Relations
STRATEGIC - Strategic Planning
SCORE DESCRIPTION FINANCIAL
(Additional costs
and/or loss of
income)
1 INSIGNIFICANT < $10,000
2 MINOR $10,000 to $49,999
3 MODERATE $50,000 to
$249,999
4 MAJOR $250,000 to
$999.999
5 CATASTROPHIC >$1,000,000
SCORE DESCRIPTION PERCENT
EFFECTIVE
1 VERY EFFECTIVE CONTROL
DESIGN, WELL
IMPLEMENTED, PREVENT &
DETECT RISKS/ BREACHES
2 SOME CONTROLS IN PLACE,
PARTIALLY EFFECTIVE
3 FEW CONTROLS IN PLACE,
POORLY FUNCTIONING
CONSEQUENCE
CONTROL EFEFCTIVENESS
4 NO CONTROLS IN PLACE, OR
CURRENT CONTROLS HAVE
NO EFFECT
10-20%
RISK
STRATEGY
Avoid
Transfer
Reduce
Accept
REPUTATIONAL LEGAL OPERATIONAL/ PROCESS
Little or no impact Little or no impact Little or no impact
Sporadic localised unfavourable
publicity; No impact on staff morale
Minor delays in meeting legal
requirements/ fulfilling SLAs
etc.
Some inefficiencies and/or delays
in delivery of support services and
non-critical functions. No impact
on client service standards.
Localised negative publicity;
Limited impact on staff morale;
Managed by appropriate response
by Marketing & Sales
Some breach of material terms
of key contracts. Threat of legal
action against institution, but
able to be resolved through
negotiation/ remedial action by
institution.
Inability to provide key support
services according to minimal
expected service levels (billing,
security; payroll, canteen; staff
training). No notable impact on
client service standards.
Significant/ continued negative
publicity in local/ regional press;
Low staff morale; Requires
intervention of Institution's
Executive/ CEO to answer public
concerns
Noticeable increase in claims
and legal liability; Most
exposures covered by existing
insurance cover
Delays and inefficiencies in core
processes and systems impacting
significantly on customer service
levels. Increased risk of serious
client injury, disability etc.
Significant/ continued negative
publicity in national press; Low staff
morale resulting in loss of key staff;
Permanent loss of patient trust;
Withdrawal of funding/ key grants
etc.;
Significant increase in volume
and value of legal exposures
and claims; Critical services
impacted by cancellation of
supplier contracts; Exposures
not covered by current
insurance cover
Critical processes/ systems not
available for extended period.
Inability to perform core client-
facing functions. Prolonged
inability to provide basic services.
Possibility of client death due to
interruptions to basic services.
CONSEQUENCE
SCORE DESCRIPTION EXAMPLE
1 REMOTE Highly unlikely to occur in next 5
years. No history of adverse event
in organisation.
2 UNLIKELY Event not likely to occur in next 12
months, but there is a slight
possibility of occurrence.
3 MODERATE 50% chance of occurrence in next
12 months.
4 LIKELY There is a strong likelihood that the
event will occur at least once in the
next 6-12 months. History of
event/s in institution or similar
organisations.
5 FREQUESNT The adverse event will definitely
occur, probably multiple times in a
year.

LIKELIHOOD
POSITION