Meeting papers

GENERAL COMMITTEE MEETING                                                        19 JANUARY 2026




11. Enterprise Risk and Opportunity Management Policy
At its September 2024 Ordinary Meeting, Council adopted the Enterprise Risk and Opportunity
Management Policy. This Policy articulates Council’s overarching approach to managing risks and
identifying opportunities. It forms part of a broader framework of Risk and Opportunity Management
documents designed to support informed decision-making and strategic planning.
A key feature of the Policy is the concept of Risk Appetite, which refers to the amount and type of
risk Council is willing to accept, absorb, or retain in pursuit of its objectives and when making both
strategic and operational decisions. The Policy includes a series of categorised Risk Appetite
Statements and corresponding Risk Tolerance Statements, which serve as tools and guides for
decision-making and planning.

Council’s risk appetite approach seeks to minimise exposure across all risk categories. Specifically:
Health and Safety Risk Appetite Statement
Council has no appetite to take risks that do not adequately prioritise the safety of our workforce,
volunteers, contractors and/or members of the community
Health and Safety Risk Tolerance Statement
Council will not tolerate activities that result in reasonably foreseeable and preventable injuries or
illnesses to our community or employees
Legal and Compliance Risk Appetite Statement
Council will continue to develop, implement, maintain and review a strong governance framework.
Council will make decisions that align to its corporate goals, policies and/or strategies
Legal and Compliance Risk Tolerance Statement
Council will not tolerate failure to consider expert/professional legal advice


12.       Employees Responsibility Under the Policy
Council officers have a number of responsibilities under the Policy which include:
      •   Adhering to the Enterprise Risk and Opportunity Management Policy,
      •   Maintaining an awareness of their operational environment as well as current and potential
          risks and opportunities, particularly in their area of expertise and industry,
      •   Identifying new and emerging risks and applying the risk and opportunity management
          process in their area of work, including regular review, ownership, monitoring, escalation
          and reporting, and
      •   If an employee is identified as a risk owner, then they are required to manage and monitor
          the risk.
13. Residual Risk Rating.
Using Table 1 below, Council’s risk assessment procedure includes determining the residual risk
rating:


Table 1 – Residual Risk Rating Calculator




                                                                                               Page 99 of 141