Misconduct Resistance Framework - Corruption and Crime ...

THE RIGHT RISkS
Misconduct risk identification and assessment are part of the wider corporate risk
management planning process and include all of your agency’s functions and
operational areas.
FOCuS QuESTIONS
w
w
w
w
w
w
w
w
w
w
Does your agency understand what misconduct is and what it might look like in your agency?
Is your agency aware of all misconduct risks, including those which are unique to the core business
of your agency, and those that are prevalent across the public sector?
Have specific misconduct risks been linked to specific types of behaviours?
Has your agency implemented a comprehensive risk identification process that involves
consultation with all stakeholders, and identifies potential misconduct risks from internal and
external sources in all areas?
Does your agency use the information obtained from misconduct and complaint reports and from
reviews of systems and procedures to update its risk identification and assessment processes?
Does your agency use a customised risk identification approach and language to identify
misconduct risks within your particular agency?
Does your agency understand the impact of specific misconduct risks on business outcomes, and
can this impact be measured?
Have your agency misconduct risks been evaluated against corporate risk criteria and prioritised
for treatment as part of the corporate risk management plan?
Does your agency use tailored criteria which reflect its business environment to ensure that the
priority assessment is accurate in terms of the impact of misconduct risks on business outcomes
(e.g. the dollar value may not be the best criterion for determining the damage caused by loss of
public trust)?
Is there a designated person, group or committee responsible for coordinating the assessment of
misconduct risks and integrating it with corporate risk management planning processes?
SignS of SuccESS
Your agency has drawn on all stakeholder viewpoints to develop a comprehensive understanding
of its misconduct risks, both those inherent to core business and those common across the
sector. Your agency periodically reappraises its current misconduct risks and emerging threats in
all work areas and across all operational and administrative functions.
All identified risks are analysed, evaluated against your agency risk criteria and their impact on
business outcomes quantified using relevant measures. You have included a prioritised list of
misconduct risks requiring further treatment in the corporate risk management plan.
Responsibility for the implementation and monitoring of misconduct risk assessment and planning
processes has been allocated to a person or group who are also represented on the corporate
risk management committee (or equivalent body).
Your agency’s methodology for misconduct risk management meets recognised best practice
standards and uses a customised process and language to address misconduct.
10