2015-16

OUR ORGANISATION
Risk Management Framework
NTDCS has a Risk Management Framework in
place to manage risk within a structured and
effective manner. This framework allows the
Department to reasonably manage, mitigate and
eliminate risks, including fraud.
The framework consists of a risk management
plan to inform staff of the risk management
process, a risk management toolkit which steps
users through the risk assessment process and
both a strategic and operational risk register.
For each identified risk, the assessment of
the residual risk determines the level of
monitoring and reporting as per the table
below:
Risk Response Level
Extreme
High
Response required
Commissioner /
Deputy Commissioner
Executive Director
attention required
The framework is reviewed annually and
comprises the following documents:
Medium
Director attention
required
• Risk Management Plan
• Risk Management Toolkit, including
guidelines and templates
• Strategic and operational risk assessments
• Fraud Control Plan
• Fraud Risk Assessment
• Business Continuity Plans.
The framework is designed to fit closely with
the current business planning process in which
divisions currently identify operational risks. The
Operational Risk Register enables a single point of
reference for all business risks.
These documented risks are assessed against
the risk analysis matrix. The Department’s
determination of acceptable risk is based on a
balanced view of all the risks in the operating
environment, the aim being to ensure a
responsible balance between risk aversion and
potential opportunity or gains achieved.
Low
Manage by routine
procedures
Each division is responsible for undertaking
risk assessments which are monitored and
reviewed throughout the life of the activity
or project. This is to ensure risks and the
effectiveness of treatment measures, remain
current and effective.
Risks with a residual rating of high or
extreme are considered unacceptable and
are referred to the Executive Director/
Deputy Commissioner as appropriate, for
consideration before being included on the
Strategic Risk Register for monitoring by the
Executive Leadership Group and the Audit
Committee.
DEPARTMENT OF CORRECTIONAL SERVICES
31