EHSSB Governance and Risk Management Processes

1
EHSSB Governance and Risk Management Processes
Appendix 2

• January 2005

2
Objectives

• Further develop the organisational Governance and
  Risk Management processes
• Establish the principle of Corporate Risk
  Identification and appropriate action

3
Risk Identification Process
Insignificant
4
RISK OPTIONS
For each risk 3 options

• Existing controls in place are adequate (kept
  under review)
• Treatment/Action Plans to reduce risks
• Risks that cannot be managed by Director
  

5
INSIGNIFICANT
Accepted at Directorate Level
Additional Controls Applied where deemed
appropriate
Monitored by Nominated Member of Staff
6 Monthly Review
6
MINOR
Can this be managed by Director
YES
Accepted at Directorate Level
Treatment Plan Agreed
Managed/Monitored by Nominated Member of Staff
Six Monthly Review
7
Moderate
Can this be managed by Director?
YES
NO
Accepted at Directorate Level and validated by
director
Requires validation by GOG and/or SMT
Treatment Plan Agreed
Managed/Monitored by nominated member of staff
Quarterly Review
8
Major
Can this be managed by Director?
NO
YES
GOG/SMT to Validate and Action to accept or treat
risk(s)
Accepted at Directorate level and validated by
the Director
to
Can this be treated locally by Directorate/s?
NO
Managed/Monitored - (Assign Responsibility) by SMT
Brought forward to Governance and Audit Committee
and the Board for information/reports
Quarterly Review
9
CATASTROPHIC
Can this be managed by Director?
NO
SMT to Validate,Accept or Treat Risk and for
inclusion on Corporate Risk Register Managed/Monit
ored (assign responsibility) by SMT
Action and Treatment Plans Agreed with timescales
Quarterly Review (minimum)
Governance and Audit Committee and the Board to
receive reports/information
10
CORPORATE RISK REGISTER

• Risk identification workshop with SMT to identify
  corporate risks
• Risks evaluated and same process applied

11
CORPORATE RISK REGISTER
Public Health Medicine Nursing
LHSCG X 6
Corporate Services
Finance
Personal Social Services
Corporate Risks
Primary Care
Planning Contracting
All Catastrophic Risks and Major Risks are
reported to the Governance and Audit Committee
CORPORATE REGISTER
12
Risk Management Process
Directorate Registers Corporate Register
ONGOING QUARTERLY/SIX MONTHLY REVIEW Governance
Lead from each Directorate to report to
Governance Officer Group
CORPORATE REGISTER After validation by SMT it is
then forwarded to the Governance Audit
Committee for Information/advice/action
Ongoing review of Corporate Objectives/Governance
and Risk Management Strategy
13
BENEFITS OF EFFECTIVE RISK IDENTIFICATION
PROCESSES

• Consistency of approach
• All risks are identified, actioned and
  communicated
• Risk Activity reporting formalised which keep the
  process live (Datix Risk Management System)
• Corporate risks should be addressed and linked
  into the Corporate Plan
• Compliance with DHSSPS guidelines

14
Thank You ?'s