The risk and control framework and capacity to handle risk - infographic long description

• conducts a high level risk assessment as part of the annual business planning activities
• ensures that risk controls and contingencies are implemented
• reviews the strategic risk register quarterly
• sets and reviews the risk appetite statement annually

• the sub committee of the Board that oversees and ensures that the approriate systems and activities are taking place to ensure effective risk management
• reviews the strategic risk register quarterly

The HRA Audit and Risk Committee deep dives into specific risks to understand the risk in more detail, the mitigations and controls in place and recommendations which can be made.

Department of Health and Social Care Sponsor

Quarterly accountability meetings held with strategic risk register reviewed.

• conducts high level risk assessment as part of the annual business planning activities
• ensures that risk controls and contingencies are implemented
• reviews the strategic risk register quarterly

Executive Committee agrees those risks which require escalation to the strategic risk register.

• all risks are owned by a director
• directorate and other team meetings are held on a regular basis (monthly/bi-monthly) where risks are regularly reviewed
• a risk engagement framework is in place which supports discussions regarding risk identification, risk appetite and risk assurance to take place regularly alongside training and sharing of best practice

All risks with a combines impact and likelihood risk score of 12 and above are escalated to Executive Committee.

Identify, investigate, evaluate, manage, monitor.