This year we reviewed our governance arrangements and implemented an updated Governance Framework. The new Framework sets out the standards for accountability, transparency, continual performance improvement and better service delivery that our stakeholders expect of us.
The Framework which encompasses better practice, is underpinned by the nine principles of governance set out in the Public Sector Commission’s Good governance guide.
As part of these new arrangements, a Corporate Executive was established to provide stewardship through informed and collective decision-making and by providing information and advice to the Commissioner. The Corporate Executive assists the Commissioner with strategic leadership, including our vision, purpose, and strategic direction to ensure we meet our strategic objectives. Importantly, the Commissioner and Corporate Executive set our tone with a focus on performance, accountability and ensuring compliance.
Supporting the Corporate Executive is our Senior Leadership. Their role is to execute Corporate Executive’s strategic vision and manage performance of emergency management services while having regard to our risk appetite.
Our Senior Leadership provide the Corporate Executive with accurate, timely and clear information, advice and support to enable it to perform its governance responsibilities.
We actively identify and manage risk. We assess the environment and prepare for change, developing our workforce so they have the right skills and resources to reduce the risk of emergencies in WA and protect people, property and the environment.
Managing risk is fundamental to decision-making, the effective allocation of our limited resources, and achieving our strategic priorities.
Our structured risk management process meets the requirements of the Treasurer’s Instruction 825 Risk Management and Security, the Public Sector Commissioner’s Circular 2015-3 Risk Management and Business Planning and is aligned with the international standard ISO 31000:2018 Risk Management – Guidelines.
In April 2019, the Business Continuity Management and Disaster Recovery Subcommittee was established to increase oversight and manage disruptive events that have potential to negatively affect our service delivery. Our risks are regularly reviewed, updated and reported to the Corporate Executive and the Audit and Risk Management Committee.
Managing risk is a shared responsibility. We work with our stakeholders, including other State Government agencies, local governments, suppliers, grant recipients, industry and communities to understand and manage risks.
Risk appetite is the amount of risk that we are willing to accept or retain to achieve our objectives.
Emergency services activities are, by definition, hazardous. We use a calculated risk approach during emergency operations to prevent or minimise adverse outcomes.
In general terms, we have a low risk appetite.
This year we continued to increase our resilience to information and cyber security threats through our cyber security program. Our alignment with the ISO 27001 standards for information security management continues along with our participation in the Department of Premier and Cabinet’s Cyber Security Working Group.
Our Cyber Security program focuses on these high level areas:
These initiatives are tracked by the Cyber Security Manager and reported quarterly to the Audit and Risk Management Committee. This ensures cyber risk is managed within our accepted risk appetite.
