NIPS Annual Report and Accounts 2012-13 - Department of Justice

2012-2013
attract a low risk appetite. This document allows
tolerance for risk to be tailored across different
business areas in order that appropriate policies
may be followed, and mitigation of risks to be
customized.
NIPS identified two risks throughout the year which
were added to the Corporate Risk Register. Once
identified, steps were taken to ensure that the
controls in place adequately covered these risks.
The first risk identified was the potential of a rapid
increase of the prisoner population should potential
protests against the G8 conference in Enniskillen
lead to a large number of arrests. Contingency plans
are in place to provide alternative accommodation
and steps have been put in place to ensure suitable
staffing levels. The second risk identified was the
potential failure to deliver a predictable regime for
prisoners. The completion of the VER scheme and
the recruitment of new staff should enable the
continued implementation of the TOM, thereby
allowing for the delivery of a predictable regime.
Another key element of these risk management
arrangements is the professionally-led Internal Audit
function that works to Government Internal Audit
Standards, reviewing the overall arrangements for
managing risk. Internal Audit provides independent
assurance to the Accounting Officer through reports
and briefings at the ARC throughout the year.
Other governance structures and functions that
support information risk management include: a
Security Officer, Human Rights Manager, Equality
Manager, HR Equality and Diversity Manager and a
Records and Information Unit.
Information Assurance
NIPS has fully embraced the DOJ’s Information
Assurance policy and procedures and is represented
at Director level on the DOJ Information Risk
Owners Council (IROC) which comprises senior
business owners across the departmental family
and holds them to account for the ownership
and management of information assurance risks
within their respective business areas. In line with
IROC requirements, NIPS has its own Information
Assurance Group, chaired by the Director of Finance
and Corporate Services who is also the SIRO for
NIPS. This group has been established to oversee
the delivery of the Information Assurance policy and
procedures and to implement the Security Policy
Framework. The NIPS offices’ supported IT systems
are regularly accredited by the DOJ Accreditation
Authority Panel.
REVIEW OF EFFECTIVENESS OF THE
GOVERNANCE FRAMEWORK
In December 2010 CJINI issued its report into
Corporate Governance arrangements in NIPS. In
light of the imminent publication of the PRT final
report, the observations of CJINI were incorporated
into the 40 PRT recommendations. The Service
has accepted these findings and recognised the
importance of addressing the issues raised in order
to transform NIPS into a model of good practice.
NIPS has taken forward a number of key actions
since the publication of the recommendations in
order to enhance and strengthen existing corporate
governance arrangements. These include:
• clarification of the role of the Board and Board
members;
• roles and responsibility of the Executive
Management Team;
• definition of the assurance framework operating
between the Board and its Committees, the
Board and the Executive Management Team and
the Board and Arms Length Bodies funded by
NIPS;
• revised business planning processes;
• revisions to the performance information
provided to the Board;
• review of risk management processes and
business controls;
61