Description of what might happen

6.11 POTENTIAL HAZARDS AND RISK ASSESSMENTS
______________________________________________________________________
Potential Risk Events
Description of what might
happen
1.
Failure of Exhibition
Display Technology
Cause/Source of Risk
Description of existing factors that
might cause it to happen
ƒ
Defective Display
Technology
Existing Controls
Description of what we currently do
to prevent it from happening
ƒ
ƒ
2.
Fault/Failure of Air
Conditioning System
ƒ
ƒ
3.
Fire
ƒ
ƒ
1
Defective Air
Conditioning System
Building Management
System (BMS) not
monitored externally
Fire from Restaurant
kitchen
Malfunctioning
electrical appliance or
display
ƒ
ƒ
ƒ
ƒ
Likelihood
Rating
Refer to
following
pages for
options
Impact
Description of the ‘assets’ that
would be ‘harmed’ if the event
happened and the nature of
the harm
Consequence
Rating
Refer to
following
pages for
options
Overall Risk
Acceptable?
What is the level Is this level
of risk?
acceptable?
Defects progressively
being rectified
Emergency callout
procedures for
contractors
established
Defects progressively
being rectified
BMS monitored
externally
Possible
Employees, Financial,
Reputation
Moderate
Low
Yes
Likely
Employees, Financial,
Reputation, Stakeholder Canberra Business Centre
Moderate
Low
Yes
Smoke detectors
installed and
monitored
Fire fighting
equipment
maintained
Unlikely
Employees, Physical,
Financial, Information,
Reputation, Stakeholders Restaurant and Canberra
Business Centre
Moderate
Low
Yes
Potential Risk Events
Description of what might
happen
4.
5.
6.
Breach of Building
Security
Power Failure
Medical Incident
Cause/Source of Risk
Description of existing factors that
might cause it to happen
ƒ
ƒ
ƒ
ƒ
ƒ
Existing Controls
Description of what we currently do
to prevent it from happening
Break and enter
Access to foyer
available through
Restaurant and
Canberra Business
Centre
ƒ
Major loss of power
caused by external
incident
ƒ
Visitor’s existing
medical condition
Injury to visitor within
Exhibition ie; climbing
on furniture
ƒ
ƒ
ƒ
ƒ
7.
Armed Hold-Up
ƒ
Cash held within Shop
and Safe in Office
ƒ
ƒ
ƒ
2
Monitored security
system inside
Exhibition and Offices
After hours access
monitored through
building access
system
Emergency lighting
system installed
Evacuation
procedures
developed
First Aid Kit located in
staff office, staff
trained in basic
emergency
procedures
Daily inspections
conducted to
minimise risks
Duress alarm in Shop
and Front Desk
Shop security
procedures
Regular cash pickups
Likelihood
Rating
Refer to
following
pages for
options
Impact
Description of the ‘assets’ that
would be ‘harmed’ if the event
happened and the nature of
the harm
Unlikely
Physical, Financial,
Information
Unlikely
Consequence
Rating
Refer to
following
pages for
options
Overall Risk
Acceptable?
What is the level Is this level
of risk?
acceptable?
Moderate
Low
Yes
Physical, Financial,
Stakeholders - Restaurant
and Canberra Business
Centre
Minor
Low
Yes
Possible
Employees, Financial,
Minor
Low
Yes
Possible
Employees, Financial,
Reputation
Moderate
Low
Yes
Potential Risk Events
Description of what might
happen
8.
Staff Personnel
Security
Cause/Source of Risk
Description of existing factors that
might cause it to happen
ƒ
Hostile member of
the public
Existing Controls
Description of what we currently do
to prevent it from happening
ƒ
ƒ
ƒ
9.
Vandalism
ƒ
Isolated location of
Building
ƒ
ƒ
10. Communications
Failure
ƒ
Loss of
communications
caused by external
incident
ƒ
ƒ
11. Civil Disorder
ƒ
Protest Group
ƒ
12. Severe Weather
ƒ
Damage to building or
external sun blinds
from high
winds/hail/leaks
Injury to visitors
entering/departing
building from flying
debris
ƒ
ƒ
3
ƒ
Duress alarms at
Front counter and
Shop
Several employees
rostered within
Exhibition for each
shift
Emergency
Procedures
established
Security Patrols in
evenings
Internal Alarm system
monitored by security
Likelihood
Rating
Refer to
following
pages for
options
Impact
Description of the ‘assets’ that
would be ‘harmed’ if the event
happened and the nature of
the harm
Unlikely
Employees, Reputation
Possible
Use of mobile phones
by Managers
Manual processing of
credit cards in Shop
Implement protest
procedures
Maintenance
contractors on rapid
response callout
Implement
procedures to remove
visitors from risk
situations
Consequence
Rating
Refer to
following
pages for
options
Overall Risk
Acceptable?
What is the level Is this level
of risk?
acceptable?
Moderate
Low
Yes
Physical, Financial,
Reputation
Minor
Low
Yes
Unlikely
Employees, Financial,
Stakeholders - Restaurant
and Canberra Business
Centre
Minor
Low
Yes
Unlikely
Employees, Reputation
Minor
Low
Yes
Unlikely
Physical, Financial
Moderate
Low
Yes
Potential Risk Events
Description of what might
happen
Cause/Source of Risk
Description of existing factors that
might cause it to happen
Existing Controls
Description of what we currently do
to prevent it from happening
13. Structural Damage to
Building
ƒ
Cracking of floor
ƒ
14. Water Supply
Interruption
ƒ
Loss of water caused
by external incident
ƒ
4
Regular monitoring
process undertaken
and investigation into
cause
Close toilets and
restaurant
Likelihood
Rating
Refer to
following
pages for
options
Impact
Description of the ‘assets’ that
would be ‘harmed’ if the event
happened and the nature of
the harm
Unlikely
Physical, Financial,
Reputation
Unlikely
Employees, Stakeholders –
Restaurant and Canberra
Business Centre
Consequence
Rating
Refer to
following
pages for
options
Overall Risk
Acceptable?
What is the level Is this level
of risk?
acceptable?
Moderate
Low
Yes
Minor
Low
Yes
Likelihood Rating
Scale
Almost Certain
Likely
5
Criteria to be used to establish rating
Will occur. Circumstances or situations are likely to arise often throughout the planning / project period in which provide the opportunity for
crystallisation of risk. Expect frequent, regular occurrences.
Likely to occur more than once in the planning period but not an ‘everyday’ occurrence. Preconditions will arise at times throughout the period.
Possible
Likely to occur at least once but not expected to occur much more than this in the planning period.
Unlikely
Not likely to occur in the planning period. A small, but remote chance of occurrence due to circumstances/situations that could arise.
Remote
Would only occur in highly exceptional circumstances that are unlikely to exist in any planning period. Extremely remote chance of occurrence in
planning period. ‘Once in a lifetime’ event.
Consequence Rating
Scale
Criteria to be used to establish rating
"Assets" subject to harm/loss
Descriptor
Severe –
Threaten survival of
Authority.
Major loss of National
Capital assets and
public amenity
Major –
Threaten major
programs of Authority
Moderate –
Threaten major
program/ some minor
programs
6
Employees
Physical
Financial
Information
Other Impact Areas
Reputation
Outputs
Costs
Stakeholders
Death of an
employee or
serious injury to
a significant
proportion of
employees
Destruction/loss
or permanent
impairment of
majority of
Authority's own
assets and/or its
administered
assets
Total loss or
permanent
diminution in
value of
Authority's
financial assets
(cash,
investments).
Total loss/
corruption of all
information
resources.
National public
outrage/
condemnation
and high level
political criticism.
Judicial inquiry.
Breach of
legislation / NCP.
Failure to deliver
all or most
outputs.
Additional costs
or foregone
revenue in
excess of $500K
Death of a
person
Serious injury to
some
employees.
Widespread staff
dissatisfaction,
staff morale
seriously
impaired.
Loss of large
proportion of
Destruction or
loss of a major
cultural or
heritage asset.
Destruction/loss
of a large
proportion of the
Authority's
assets
Loss of
significant
proportion/
significant
diminution in
value of financial
assets.
Loss/
irrecoverable
corruption of
critical
information
resources
including
heritage and
'unique' holdings.
Local public
outrage/
condemnation
and local
political criticism.
Parliamentary
inquiry.
Breach of
Regulations
Failure to deliver
some outputs,
significant under
achievement in
other output
targets.
Loss of service
capacity in
excess of 1
month.
Additional costs
incurred/
revenue foregone
in excess of
$100K
Serious injury to
member of
public/ VIP/
official
No physical harm
to employees.
Widespread poor
staff morale and
negative attitude
toward
organisation/
management.
Departure of key
staff.
Damage to, or
other
impairment of, a
significant
proportion of
assets
Loss of financial
assets
Temporary
diminution in
value of
significant
proportion of
financial assets.
Corruption of
critical
information
resources.
Criticism from
significant
segment of
community eg
RSL.
Parliamentary/
Committee
questions.
Material (> 10%)
underachievement on
targets for most
outputs.
Loss of service
capacity for up to
one month.
Additional costs
incurred/
revenue foregone
in excess of
$10,000.
Minor injury to
member of
public/ VIP/
official
Financial losses
and damages in
excess of $10
million.
Financial losses
and damages in
excess of $1
million.
Financial losses
and damages in
excess of
$100,000.
Scale
Criteria to be used to establish rating
"Assets" subject to harm/loss
Descriptor
Minor –
Impact on efficiency
and effectiveness of
programs.
Insignificant
No discernible
impact on program.
7
Employees
Physical
Financial
Information
Poor staff morale
and negative
attitude toward
segments of the
organisation /
management
from segment of
employees.
Damage to, or
other
impairment of, a
small proportion
of assets.
Temporary
diminution in
value of small
proportion of
financial assets.
Corruption of
routine
'administrative'
information.
A small number
of disgruntled
staff
Loss of/
reparable
damage to small
number of
assets.
No material
affect on value of
financial assets.
Loss or
impairment of
small amount of
'administrative'
information
Other Impact Areas
Reputation
Outputs
Costs
Stakeholders
Criticism from
minor
community
segment.
Adverse press
coverage.
Material (> 10%)
underachievement on
targets for one
output.
Loss of service
capacity up to
one week.
Additional costs
incurred/
revenue foregone
in excess of
$1,000.
Minor injury to
member of
public.
Financial losses
and damages in
excess of
$10,000.
Internal dissent/
criticism
Less than 5%
variance in
achievement of
output targets.
Loss of service
capacity up to
one day.
Additional costs
incurred/
revenue foregone
up to $1,000.
No identifiable
impact.
Tolerable Risk Level
The risk level for each risk is determined by combining likelihood and consequence assessments. The Authority has determined that generally, risks
should be treated so as to achieve a 'Low' or 'Negligible' level of residual risk.
Table 6 – Determination of Risk Level
Insignificant
Minor
Moderate
Major
Severe
Likelihood
Remote
Negligible
Negligible
Low
Low
Significant
Unlikely
Negligible
Low
Low
Significant
Significant
Possible
Low
Low
Significant
Significant
High
Likely
Low
Significant
Significant
High
High
Significant
Significant
High
High
Extreme
Consequence
Almost
Certain
8
Table 7 – Tolerable risk level and management action required
Scale
9
Management action required
Extreme
Urgent and immediate action required. Close monitoring by Authority. Regular internal
audit review
High
Attention required in short term, preferably within 3 months. Senior management
oversight. Reporting to Authority / Audit Committee on progress.
Significant
Attention required in medium term, preferably within 6 months. Monitor and report to
Authority on effectiveness of treatments after implementation.
Low
Watching brief required as part of routine management responsibilities. Update risk
assessment annually to confirm rating and effectiveness of controls.
Negligible
No management action required. Include in annual review of risks.