SamVille will maintain procedures to provide a systematic view of the risks faced in the course of our business activities.
1. Establish a context – the strategic, organisational and risk management context against which the rest of the risk management process in SamVille will take place. Criteria against which risk will be evaluated should be established, and the structure of the risk analysis defined.
2. Identify Risks – identification of what, why and how events arise as the basis for further analysis.
3. Analyse Risks – the determination of existing controls and the analysis of risks in terms of the consequence and likelihood in the context of those controls. The analysis should consider the range of potential consequences and how likely those consequences are to occur. Consequence and likelihood are combined to produce an estimated level of risk.
4. Evaluate Risks – a comparison of estimated risk levels against pre- established criteria. This enables risks to be ranked and prioritised.
5. Treat Risks – for higher priority risks, SamVille is required to develop and implement specific risk management plans including funding considerations. Lower priority risks may be accepted and monitored.
6. Monitor and Review – oversight and review of the risk management system and any changes that might affect it. Monitoring and reviewing occurs concurrently throughout the risk management process.
HAUD Implement & Maintain Internal Control Procedures Student Guide v 2.0 September 2010 Page 12
FNS50204 Diploma of Accounting _____________________________________________________________________________________________
7. Communication and Consultation – appropriate communication and consultation with internal and external stakeholders should occur at each stage of the risk management process, as well as on the process as a whole.