Sample Risk Management Plan
Template – includes some
example information – delete
this and add your own.
ORGANISATION NAME
RISK MANAGEMENT PLAN YEAR _________
CONSE
-QUENCE
Date
Identified
What can go
Wrong?
Specific Risks
1=
Insignifica
nt
2= Minor
3=
Moderate
4= Major
5=Catastro
phic
LIKELI
-HOOD
RISK
RATING
A=Almost
Certain
B = Likely
C = Possible
D = Unlikely
E = Rare
(See Risk
Rating
Matrix to
determine):
L = Low
M=
Medium
H =High
E=
Extreme
E
Medium
Current
Controls to
Reduce Risk
Date
Review
ed
New Controls OR
Required Changes to
Controls
ORGANISATION RISKS
Eg:
August
2012
Financial
Mismanagement

Financial
security at risk

Lack of
funding

Loss of
reputation
4
Board and
management
reports
Annual external
audit of funds
External
Accountant
prepares financial
reports
Money on
Premises Policy
August
2012
Impacts of
Natural or manmade disasters
on business
continuity


Unable to
continue
delivering
services while
business
disrupted
Clients may
not be able to
access
emergency
assistance
they need
3
C
Medium
Back-up of data
outside of Office
Maintenance of
client register.
Involvement in
meetings with
Council regarding
Disaster
Management
Negotiations with
other services re
shared resources
Development of Disaster
Plan,
including
local
contacts
Person/s
Responsible
Due Date
for
completion
CONSE
-QUENCE
Date
Identified
Specific Risks
What can go
Wrong?
1=
Insignifica
nt
2= Minor
3=
Moderate
4= Major
5=Catastro
phic
LIKELI
-HOOD
A=Almost
Certain
B = Likely
C = Possible
D = Unlikely
E = Rare
RISK
RATING
(See Risk
Rating
Matrix to
determine):
L = Low
M=
Medium
H =High
E=
Extreme
Current
Controls to
Reduce Risk
Date
Review
ed
New Controls OR
Required Changes to
Controls
.
Person/s
Responsible
Due Date
for
completion
Risk Management Plan
Page 3 of 4
CONSEQU
ENCE
Date
Identified
Specific Risks
STAFF RISKS
SERVICE USER RISKS
What can go
Wrong?
1=
Insignifica
nt
2= Minor
3=
Moderate
4= Major
5=Catastro
phic
RISK
RATING
LIKELIHOO
D
A=Almost
Certain
B = Likely
C = Possible
D = Unlikely
E = Rare
(See Risk
Rating
Matrix to
determine)
:
L = Low
M=
Medium
H =High
E=
Extreme
Current
Controls to
Reduce Risk
Date
Revie
wed
New Controls OR
Required Changes to
Controls
Person/s
Responsible
Due Date
for
completion
Risk Management Plan
Page 4 of 4
RISK RATING MATRIX
LIKELIHOOD
CONSEQUENCES
Insignificant
1
Minor
2
Moderate
3
Major
4
Catastrophic
5
Almost
Certain
A
Medium
High
High
Extreme
Extreme
Likely
B
Medium
Medium
High
High
Extreme
Possible
C
Low
Medium
High
High
High
Unlikely
D
Low
Low
Medium
Medium
High
Rare
E
Low
Low
Medium
Medium
High
Instructions for Using the Risk Rating Matrix

Identify the
consequence of the
risk:

Identify the
likelihood of the risk:

Identify the risk
rating:
o
o
o
o
o
1=
2=
3=
4=
5=
o
o
o
o
o
A= Almost Certain
B = Likely
C = Possible
D = Unlikely
E = Rare
o
o
o
o
L = Low
M = Medium
H = High
E = Extreme

Include this information in the Risk Management Plan

Identify controls to manage the risks

Review the risks periodically (at least 6 monthly) and identify further
necessary controls

Minute the identification and review of risks in appropriate
management/improvement committee meetings

Include necessary improvements identified through the risk management
process in the Improvement Plan to ensure that they are implemented,
monitored and evaluated.
Insignificant
Minor
Moderate
Major
Catastrophic