RiskTreatmentPlanTemplate ISO27001
RiskTreatmentPlanTemplate ISO27001
RiskTreatmentPlanTemplate ISO27001
(Guide Only)
Contents Page
1.0 Introduction and Context
2.0
Definitions
3.0
4.0
Risk Identification
5.0
6.0
7.0
Risk Action Plan Appendix 1 Appendix 2 Appendix 3 Template of Risk Register Template of Risk Treatment Schedule Template of Risk Action Plan
1.0
The event titled, ____________________________________ is being organised by _________________________________________ and will take place on the __________________________________________. The objective of the event is ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ The context within which this plan has been developed is ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ (As an examplethe context within which this plan has been developed is to run the most successful event possible, ensuring at the same time the patrons attending the event are protected from harm, the property and environment are protected from damage and the event provides a positive contribution to the community while enhancing the reputation of the City of Rockingham.)
1.1
(An overview of the event should be provided herewhich creates an image in the readers mind and sets the scene for the rest of the document. The following headings should be used as a guide to describe your event) Background of Event: ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ Detail Activities of the event: ________________________________________________________________ ________________________________________________________________ ________________________________________________________________
Environment: What is the location/layout? ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ Activities requiring permits? ________________________________________________________________ ________________________________________________________________ ________________________________________________________________
1.2
Organisational Details
Organisation coordinating and responsible for the event: Name of individual responsible for organising the event ________________________________________________________________ Contact phone: ________________________________________________________________ Email: ________________________________________________________________ Full name of event: ________________________________________________________________ Date of event: ________________________________________________________________ Setup times: ________________________________________________________________ Location of event: ________________________________________________________________
2.0
Risk
Definitions
Risk Assessment The overall process of risk identification, risk analysis and risk evaluation. Risk Management The culture, processes and structures that are directed towards realizing potential opportunities, whilst managing adverse effects. Risk Reduction Actions taken to reduce the likelihood, negative consequences or both, associated with a risk. Risk Treatment The process of selection and implementation of measures to modify risk. Risk Transfer The process of selection and implementation of measures to modify risk. Risk Acceptance Risk acceptance is the acknowledgement that there is a risk and of the consequences that may result, which is accepted.
3.0
(Detail all agencies, organisations and businesses who are involved in preparing and providing input into the Risk Management Plan. Indicate who was involved in the consultation process) ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ ________________________________________________________________ ________________________________________________________________
The areas identified in the Risk Management framework have been identified under the following categories: (It is expected that the following risks will be assessed as part of the process, however this list should not be considered a complete listthere will be some which are specific to your event such as drowning if your event is held on a reserve which has a lake). Health/Injury/Disease Drug affected persons (not including alcohol) Alcohol affected persons Fire caused by electrical installations Fire risk caused by gas bottles Marquee Collapse Broken glass on reserve Food Poisoning Power failure Water failure Criminal activity Disorderly conduct Consumption of alcohol Environmental Risk Noise Nuisance caused to neighbours Excessive litter left at end of event Legal/Contractual Unclean toilets Loss of key contractors Event Approval not obtained Operational/Crowd Safety Overcrowding Lighting failure Trip Hazards Extreme Weather Communications failure
Traffic Management Lack of Parking Inadequate access for emergency vehicles Promotion/PR Inadequate funding for event Loss of key personnel
5.0
Once risks are identified, they are evaluated on a 2 dimensional matrix using a qualitative rating of the likelihood of the event occurring and the scale of the possible consequences. When risks have been identified, they are analysed by combining the consequences and likelihood to produce a level of risk. This form of evaluation provides a good graphical representation of how serious the risk is or where it lies within a group of risks. The risk analysis provides information critical to determining what risks need to be treated and what risks are accepted. The following matrices have been utilsed for the assessment process;
Moderate
<$10$50,000 <$50$150,000
Major
Catastrophic
Deaths
+$150,000
Likelihood
Medium
High
High
Extreme
Extreme
Low
Medium
High
Extreme
Extreme
Low
Low
Medium
High
Extreme
Low
Low
Low
High
High
Table 4 :
Date:
Risk Register
Compiled by:.....
6.0
Evaluating and Treating Potential Risks Risk Treatment Schedule and Plan
Compiled by:.....
Table 5:
Date.
Not install Marquees Have installer complete a checklist/inspection of the Marquee once erected. Ensure First Aid qualified personnel are employed at the event. Obtain from the Installers a wind speed that once reached, the marquee must be taken down.
1. Have installer complete a checklist/Inspectio n of the Marquee once erected. 2. Obtain from the Installers a wind speed that once reached, the marquee must be taken down.
Event Organiser to advise Installers of requirement for checklist to be completed prior to event. Checklist to be retained once completed by the event organiser. Procedure for dismantling of marquee to be developed based on wind speed prior to event.
10
7.0
For those risks that are High, Extreme or deemed to be unacceptable, they need to be evaluated and specific action plans need to be developed to manage the risk appropriately.
Table 6:
1)
Proposed Actions
2)
Resource Requirements
3)
Responsibilities
4)
Timing
Procedure to be completed prior to event. Marquee company to be notified of checklist requirement one month prior to the event. Event Organiser to remind Marquee Company of checklist requirement within seven days of the event. Completed checklist to be obtained from Installer immediately after erection of Marquee.
5)
Reporting/Monit oring
Compiled by:.....
Appendix 2
Timetable
14
Appendix 3 Template of Risk Action Plan Table 6: Risk Action Plan Table RISK ACTION PLAN Item Risk Location/Function Summary (RECOMMENDED RESPONSE AND IMPACT)
6)
Proposed Actions
7)
Resource Requirements
8)
Responsibilities
9)
Timing
10)
Reporting/Monitoring