RISK MANAGEMENT FRAMEWORK AND RISK MANAGEMENT PLAN. Utilizing a risk-based approach to mandate fulfillment and service delivery, the BAO will conduct a risk assessment to identify, assess and mitigate risks and develop a risk management plan that will include: (a) The BAO (b) Risks to the achievement of those objectives (c) Risk mitigation strategies; (d) Maintenance of a system of internal controls to minimize risk; and (e) Documentation of policies and procedures to manage risk. In order to facilitate informed and coordinated responses to any issues that emerge, twice annually the BAO will provide the Minister with reports on high and medium risks with corresponding mitigation strategies. A summary of the risk management plan including a summary of key information that conveys how the BAO will ensure continuous delivery of critical business services in the event of an emergency (e.g., expansion of digital service delivery), shall be provided to the Minister annually for review at the same time as, or as a component of, the BAO annual business plan. The occurrence of any risk(s) that required the use of any mitigations can be reported through the annual report.
Appears in 2 contracts