9. Organisational Risk Management

Question 1

Risk Management Policy:

Risk is inherent in policing, and everyone at Police has a role to play in managing risks. Because of this, it’s important we all have an understanding of Police’s approach to risk.

• What is the aim of this policy? (2)
• id rsks erly, mke gd decs hw mnge thm*

Answer 1

The aim is to we are all able to;

• identify relevant risks early-on, and
• make good decisions around how to manage them.

Question 2

Risk Management Policy

Who sets the tone for the culture around risk, and gives guidance on the type and level of risk Police is willing to consider and accept? (1)

Answer 2

The Executive Leadership Board (ELB)

Question 3

Risk Management Policy

Risk is defined as what? (2)

rsk eff uncrtny odjtves, eff any devi frm expectd - gd/bd or bth - adrs/crte/rslt opptnts or thrts

Answer 3

• Risk is the ‘effect of uncertainty on objectives’.
• An ‘effect’ is any deviation from the expected, - it can be a positive, negative or both; and - can address, create or result in opportunities and/or threats.

Question 4

Risk Management Policy

What is ‘Risk Management’ (1)

cmbo coord actves tht dir & ctrl rsk wthn org

Answer 4

• Risk management is the combination of co-ordinated activities that direct and control a ‘risk’ within an organisation

Question 5

Risk Management Policy

What are the types of risk we face as an organisation? (3)

strgc rsk, corp rsk & op rsk

Answer 5

• Strategic Risks: risks that affect the achievement of strategic outcomes
• Corporate Risks: risks that affect the achievement of cross-organisational corporate objectives. These risks are often more tactical and require a more immediate response.
• Operational Risks: These are risks that may affect the achievement of day-to-day operations.

Question 6

Risk Management Policy

What does the Police threat assessment methodology - TENR stand for?

Answer 6

• Threat is assessed
• Exposure is managed (potential harm, security of places or things)
• Necessity to intervene is immediately considered
• Response is proportionate and considered on assessment of above points

Question 7

Risk Management Policy

In what situations must TENR be applied? (2)

al sits invle rsk, & poten cuse hrm

Answer 7

• all policing situations that involve risk, and
• with the potential to cause harm

Question 8

Roles and Responsibilities:

Everyone is responsible for managing risk i.e. employees, consultants and contractors.

• To ensure appropriate and timely risk management, what things are they responsible for? (3)
• idfyg, assg, montrg trtng rsks, contrbg rsk discns, escal rsks appro prsn or gov grp.*

Answer 8

• Identfying, assessing, monitoring and treating risks
• Contributing to risk discussions
• Escalating risks as needed to the appropriate person or governance group.

Question 9

Roles and Responsibilities:

What is the role of the ARC (Assurance Risk Committee - who are independent of police)? (3)

prov comm idepnt adv rnge strgc iss/rsks, ky rsks pol, and adqcy of actns mitig rsks

Answer 9

• Their role is to provide to Commissioner with independent advice on a wide range of strategic issues and risks.
• They will also provide a view on key risks facing police and
• the adequacy of their actions to mitigate risks.

Question 10

Roles and Responsibilities:

What is the role of the ELB (Exec Leadership Board) and the Commissioner and Deputies? (2)

Elb - resp strgc dirctn, id & mnge rsk

C/Deps - ens procss plce mnge rsk impctng d-to-d actvs

Answer 10

• ELB are responsible for strategic direction, and to identify and manage strategic risk.
• The Commissioner and Deputies ensure processes are in place to manage the risk impacting on day-to-day activities.

Question 11

Roles and Responsibilities:

The SLT (Snr Leadership Team) has oversight of corporate risks and reviews, at what level is this team of managers made up of? (1)

Answer 11

• Assistant Commissioner level

Question 12

Activate Risk Management and Assurance:

Police operate a ‘3 lines of defence’ model, each playing a distinct role in the risk management process and wider risk governance. What are they? (3)

al pol persnl - ervyne acts frst lne def, mngemt proces & ctrl, intrnl adit & assur - provds indpt viw pol ctrl meas

Answer 12

• All police personnel - everyone acts as a first line of defence - identifying and discussing potential risks.
• Management processes and controls - Districts, Service Centres PNHQ workgroups provide robust management that monitors and oversees risks and control measures.
• Internal Audit and Assurance - provide an Independent view of police’s control measures.