Statements

Score

Awareness

1.        We are interested in risk management issues 2.        We understand the benefits of an effective risk management system 3.        We are aware of risk management policies developed by other organisations 4.        The effective management of risk is necessary for our company’s success 5.        We have adequate information on risk management initiatives

1 2 3 4 5 1 2 3 4 5 1 2 3 4 5 1 2 3 4 5 1 2 3 4 5

Policies

6.        Effective risk management is a strategic objective of our organisation 7.        We have a defined and documented strategy for managing risks 8.        The person responsible for risk management is clearly defined 9.        Risk management initiatives are not suitable for our company 10.     Adequate resources are dedicated to achieve risk management goals

1 2 3 4 5 1 2 3 4 5 1 2 3 4 5 1 2 3 4 5 1 2 3 4 5

Processes

11.     We have an agreed process for reporting, managing and analysing risk 12.     We regularly conduct risk audits 13.     Our risk management system is used and effective 14.     Our risk management systems is continuously monitored and reviewed 15.     Our risk management process is embedded throughout the organisation

1 2 3 4 5 1 2 3 4 5 1 2 3 4 5 1 2 3 4 5 1 2 3 4 5

Management

16.     We have an approach to determine the root cause of risk 17.     We classify each identified risk using defined risk categories 18.     We register the frequency of risk occurrences 19.     We have a corrective action system in place 20.     We monitor the status of each risk regularly

1 2 3 4 5 1 2 3 4 5 1 2 3 4 5 1 2 3 4 5 1 2 3 4 5

Culture

21.     We train all staff to increase risk awareness 22.     We have dedicated people who act as risk identification champions 23.     Performance measures are used to promote risk identification and prevention 24.     We identify and involve relevant stakeholders of the risk process 25.     We communicate the importance of risk to all employees

1 2 3 4 5 1 2 3 4 5 1 2 3 4 5 1 2 3 4 5 1 2 3 4 5

Benefits

26.     Implementation of risk management policies saves us money 27.     It is not easy to implement risk policies in a small company 28.     Implementation of risk management policies consumes resources 29.     Good risk management practices help us to meet legislative requirements 30.     We receive money/advice from the government to help promote risk initiatives

1 2 3 4 5 1 2 3 4 5 1 2 3 4 5 1 2 3 4 5 1 2 3 4 5