Risk frameworks
A risk policy, appetite statement, rating criteria and reporting rhythm in the style of ISO 31000, written in plain language.
Practice / Assurance
Risk management
Risk that leaders discuss and act on, not a register updated the night before the board meeting.
01Situations we are asked about
Sound familiar?
Typical starting points for this practice, in the words leaders often use.
Our risk register is long and nobody reads it.
We only talk about risk after something goes wrong.
We do not know what we would do if a key system or site went down.
The board wants a risk appetite statement and we have never written one.
02The working model
Where treatment moves a risk
A register earns its keep when each serious risk has a treatment that moves it. The matrix shows the rating today and where the treatment should take it.
- Hollow circle: the rating with the controls you have now
- Solid dot: the target once planned treatments are done
- No arrow means no plan, which is the conversation to have first
03What we do
Services in this practice
Risk registers that work
Workshops that surface the risks that matter, with owners, controls, and treatments that have dates.
Business continuity
Business impact analysis, continuity plans and practical exercises so people know what to do on the bad day.
Project and change risk
Risk reviews for major projects, mergers, new services and system changes before decisions are locked in.
04You leave with
Deliverables you keep
- A risk appetite statement
- A focused register with owners and treatments
- A tested continuity plan
- A risk report for the board
05Programs
Build the capability in house
Risk
Risk management workshop
A working session that builds or refreshes your risk register and teaches leaders how to rate, treat and report risk in the style of ISO 31000.
Governance
Board readiness and governance
For new directors, executives who report to a board, and boards that want to work better together.
06Accredited study
Related nationally recognised qualifications
Nationally recognised qualifications are delivered by CAQA, RTO 45459, and listed on Career Calling Courses. Our own workshops, programs and advisory are non-accredited.
Is a risk heat map enough?
It is a start. A heat map shows where risks sit; the value is in the conversation about controls, treatments and who owns them. Our insights page explains how to read one.
Do you cover work health and safety?
We include safety risks in enterprise risk work. For specialist WHS advice we will point you to the right professional.
Next step
Talk to an adviser about risk management
Tell us what is on the table. An adviser will contact you within one business day to talk it through. Fees are quoted and agreed in writing before any work starts.