Context, Requirements and Scope
4 Risk and opportunity management 4.1 Risk and opportunity management strategy [Organization Name]’s strategy with respect to the high-level management of risk and opportunity is to broadly adopt the principles of the ISO31000 standard (Risk management – principles and guidelines) so that risk and opportunity management: • • • • • • • • • • • • •
Creates and protects value Is an integral part of all organizational processes Is part of decision-making Explicitly addresses uncertainty Is systematic, structured and timely Is based on the best available information Is tailored Takes human and cultural factors into account Is transparent and inclusive Is dynamic, iterative and responsive to change Facilitates continual improvement of the organization Assures worker participation in OH&S matters Identifies all foreseeable hazards and risks in the company
These principles will also be applied to the management of risk and opportunity with respect to the business objectives of the organization.
4.2 Internal issues With regard to the business operations of [Organization Name], there are a number of internal issues that create uncertainty that gives rise to risk and opportunity. These include: [List any specific risk factors e.g. • • • • • • • • • •
The strategic direction of the organization The nature of the organization’s products and services Internal occupational health and safety conditions Uncertainties in employee relations Significant organizational changes Location moves Company financial performance Perceptions, values and culture Available capabilities and knowledge Available resourcing levels
Version 1
Page 15 of 20
[Insert date]
