Internal Audit

internal audit

Risk Based Planning

Commitments in relation to planning and risk management.

This web page summarises the University's commitments in relation to planning and risk management activities and the preparation of the associated documentation. These activities are undertaken as part of the annual Planning Budget and Review cycle and the Risk Management Policy as approved by the Audit and Risk Committee of Council.

This list represents a significant undertaking. The workload involved should be minimised through the use of templates and an appreciation of the appropriate amount of detail required at each level. The usefulness of the work will be enhanced through education of staff, support for individuals and groups from Planning and Audit and the promotion of an attitude that sees the task approached in a serious but practical manner. Accountabilities are to be discharged through standard University reporting lines and should be incorporated into the Performance Management process.

The University Strategy 2011 - 2015

University Plans

Enabling Plans and Other Strategies

Faculties and Divisions

Research Centres

Campuses

Projects

Commercial ventures (including offshore programs)

Key Business processes and IT systems

Risk Register

CSU has adopted a relatively simple and generic risk register template [.doc] to encompass risk identification, management and reporting. While its use is not mandatory, this template may be used to complement plans at each level within the University.

There are a range of templates and other tools that can be adapted from the Standards Australia materials on risk management to support a staged or multi layered approach to identifying, assessing, prioritising and managing risk. CSU managers may adapt these materials to support risk management where the required level of detail exceeds the capacity of a single layered template.

It is expected that higher level CSU Risk Registers will be short and strategic. Where the register identifies the operation of another quality or risk management framework duplication should be avoided. A single line entry in the high level register noting compliance (or otherwise) with the adjunct quality or risk management process should suffice.

How to do a Risk Register [.doc ] is a guidance document adapted, from PM 007 Project Risk Register, Template & Guide, Department of Premier and Cabinet, Tasmania.

Additional information on the identification and management of risks, particularly in relation to commercial activities, is available at: