Corporate Business Plan 2026-2030

Risk Management Framework The City operates in a complex environment and faces a broad range of internal and external risks. Risk management is a fundamental element of sound governance and is embedded in the City’s leadership, decision-making and organisational culture.

The City applies a structured, evidence-based approach to risk management to support delivery of the Strategic Community Plan and Corporate Business Plan. The Risk Management Framework translates Council’s Risk Management Policy into a practical system of governance, roles and processes and tools used across the organisation. The Framework forms part of the City’s Risk Management System, operating across four levels: Governance and Direction, Strategic Risk Management, Operational Risk Management, and Compliance and Assurance. These four levels are outlined in the following table, and ensures risks are identified early, assessed consistently and managed across all activities, with clear reporting to the Executive Team, Audit, Risk and Improvement Committee and Council.

The Framework is guided by ISO 31000 principles, adapted for local government, and incorporates a defined risk appetite supported by tolerance thresholds and key risk indicators. This enables informed decision-making and keeps strategic priorities aligned with operational delivery. A coordinated assurance approach, based on the Three Lines Model, supports effective oversight and accountability, complemented by internal and external assurance activities. The Framework is a living system that evolves with the City’s risk profile and operating environment, supported by ongoing review, capability development and continuous improvement.

68

Corporate Business Plan 2026-2030