Appendix F: Common risk categories for the public sector Insert client-specific photo here

Categorising Risk… Use risk categorisation model to group risks Allocate to risk category according to where risk arises and hence needs to be addressed Use best judgment as to appropriate category Allocate each risk to only one category EXAMPLE: Poor design or failure of a FINANCE IT system will have an impact on Financial and other processes BUT is an IT RISK as the root cause of the risk is systems/IT- related and needs to be treated as an IT and Systems issue.

Strategic Stakeholder Market Structure Governance Information IT Systems Intellectual Property Information Management Financial Liquidity & Credit Capital Structure Market Reporting Operations Process Physical Asset People & Culture Legal Example Risk Categories

Stakeholder Market Structure Governance Service Provider National Government National Government DTF Minister Elements Principles Change Management Economic Logistics Market Dynamics Competitor Information IT Systems Intellectual Property Information Management Database Planning & Development Operations Organisation & Monitoring Intangible Capital/ Assets Intangible Capital/ Assets Knowledge Management Financial Liquidity & Credit Collectability Cash Management & Treasury Cash Management & Treasury Funding Capital Structure Equity Debt Market Interest Rate Foreign Exchange Reporting Accounting Regulatory & Compliance Operations Process Physical Asset Service Delivery Supply Chain Management Supply Chain Management Transfer Payments Plant, Estate & Property Plant, Estate & Property Equipment People & Culture Occupational Health & Safety Occupational Health & Safety Skills Development Legal Liability Contract Legislative & Regulatory New Service Development Human Resources Fraud Victorian Cabinet Growth Strategy & Development Growth Strategy & Development Support Processes Support Processes Trade Unions Other Departments/ Agencies Public entities VAGO Business Partner Financial Institutions Public Fiscal Regulatory Framework Regulatory Framework PPP & Procurement PPP & Procurement Internal Audit Fleet Other Tangibles Budget Implementation Budget Implementation Accounting Norms & Standards Compliance & Reporting Economic Indicators Capital Markets CPIX Intangible Assets Business Continuity Hardware Software Networks Security Archiving Change Man, Control Policies & Procedures Policies & Procedures Reputation Monitoring Authority & Responsibility Authority & Responsibility Resource Allocation Strategic Planning Strategic Planning Ethics Environment IT Strategy, Planning Strategic Example Risk Categories