2022-09-12 General Committee Meeting Agenda

GENERAL COMMITTEE MEETING AGENDA   12 SEPTEMBER 2022




                                         Page 63 of 85

GENERAL COMMITTEE MEETING AGENDA                                                               12 SEPTEMBER 2022

               COUNCIL POLICY — ENTERPRISE RISK & OPPORTUNITY MANAGEMENT

                Risk Appetite Statement
                Council encourages innovative service delivery, which is reflected in Council's vision and purpose, and is
                open to exploring new opportunities that enhance service delivery to the community. Council has no
                appetite to engage in operations that would significantly disrupt essential services. Council may consider
                adjustments in levels of service with an understanding of community expectation and need and in line with
                financial sustainability requirements. Council may permit minor disruption for short periods if the long-term
                benefit outweighs the consequences.
                Risk Tolerance Statement
                Council will NOT tolerate:         Council will tolerate:                  Council encourages:
                ¢ Failure to deliver services within ¢ Unforeseen interruptions to critical ¢ Aculture which
                  the boundaries of Council’s        services for up to 1 day. Council       values quality
                  service commitment, key            responds and communicates               customer service,
                  performance indicators or other    promptly to impacted stakeholders.      engagement and
                  required metrics and/or          ¢ Moderate impacts arising from           responsiveness.
                  community expectations.            innovations and ideas that contribute
                ¢ Failure to develop plans to        to creating a flexible workforce.
                  respond to a disruption and      ¢ Moderate impacts to service delivery
                  ensure continuity of critical      from new technology, services,
                  business functions.                projects or innovation that improve
                ¢ Failure to promptly escalate a     Council services over the medium to
                  critical business impact or        long term.
                  outages.

               ROLES AND RESPONSIBILITIES

               Councillors and employees contribute to effective risk management within their area of influence.
               The   EROMF will     provide  a targeted   and   integrated  approach   and   indicate the   specific
               accountabilities and responsibilities related to the risk and opportunity management process,
               decision making and strategic and operational planning.

               Councillors:
                  e   adopt Council's Enterprise Risk and Opportunity Management Policy;
                  e   actively participate in strategic and tactical decision-making processes;
                  e   ensure that strategic risks and opportunities are identified, managed and controlled
                      appropriately; and
                  e   appoint the Audit and Risk Committee to provide independent assurance, oversight and
                      monitoring to Council with respect to the risk management function.

               The Chief Executive Officer (CEO) and Executive Team:
                  e   endorse the Enterprise Risk and Opportunity Management Policy for Council adoption;
                  e   approve the supporting Enterprise Risk and Opportunity Management Framework and
                      monitor implementation;
                  e   provide leadership and commitment in the management of opportunities and strategic,
                      service delivery and project risk, including annual review and endorsement of Council’s risk
                      appetite and tolerances, and 6 monthly review of the Strategic Risk Register;
                  e   emphasise that risk and opportunity management is a core responsibility for all employees;
                  e   allocate  appropriate  resources for    risk and   opportunity management and        consider
                      capabilities and constraints on existing resources;

                                                                                                            Page 9

                                                                                                          Page 63 of 85