Risk & Assurance Advisory

The Issue with Enterprise Risk Management and Business Continuity…

The Issue

Many organisations have found it challenging to establish, develop and maintain effective Risk Management and Business Continuity programs. A lack of internal SMEs, increasing complex compliance obligations, and requirements to align with ISO/AS/NZ standards are some of the factors contributing to the challenge.

Further, specialised risk areas including Climate Change and Workplace Health and Safety (WHS) require specialised risk management skillsets additional to enterprise risk management.

The Solution

HBM have assisted >50 organisations across Australia and internationally to become compliant with industry, NFP, State, and Federal obligations and to establish effective and functioning Enterprise Risk Management programs.

We’re known for maturity-level appropriate programs that all staff understand and can engage, making them highly effective effective.

HBM’s expertise in Climate Change has added significant value by delivering current-state and horizonal compliance assessments, and supported the development of enhanced sustainable operations including climate change and ESG-related strategic plans and adaptation plans based on current future-state projections.

HBM’s extensive experience in using risk management to deliver WHS compliance assessments/audits and program development supports the identification, assessment and control of workplace hazards. Further, it supports elements of Environmental, Social, and Governance (ESG) program requirements.

Enterprise Risk Management

Those in charge of organisations have a fiduciary duty to act in the best interests of the organisation. To discharge these duties, Directors and Senior Management need to understand the organisation’s compliance obligations, its enterprise risks, and the impacts of those risks, on the organisation’s ability to achieve its strategic objectives. Senior management have responsibility to establish and maintain an enterprise risk management framework aligned with the International/Australian Risk Management Standard, ISO/AS 31000:2018, and maintain effective risk management systems, inclusive of adequate risk mitigations.

Services available:

Professional services in Enterprise Risk Management have been delivered to large number of corporate clients, Not for Profit organisations and local, state and federal government agencies (details available upon request).

  • Compliance assessments & internal audits
  • Program development and enhancement
  • Enterprise Risk Manager secondments
  • Risk Assurance assessments & internal audits
  • Training, socialisation and embedding

Business Continuity & Crisis Management

Natural disasters, changes in government, staff attraction/recruitment/retention, costs volatility, and even cyber security have make it challenging for organisations across Australia to achieve their respective strategic objectives.

High functioning organisations have created risk management plans inclusive of mitigations and contingencies, to address operational disruption risks. These plans are called Business Continuity Plans and are typically aligned with the Business Continuity Standard, ISO/AS/NZ 22301:2019

Over the last 10 years, organisations have identified and applied Business Continuity enhancements to become more effective at managing disruption events. Key changes to the way high functioning business continuity organisations now operate include the following:

  1. Integration of crisis management and business continuity in to a single response process.
  2. The use of a framework approach that can be implemented regardless of the disruption event. Many high functioning organisations have adopted the PEARL model as the framework of choice.
  3. The utilisation of a hierarchical response process based on criticality and importance

Services available:

HBM have delivered professional services in contemporary Business Continuity and Crisis Management to a range of organisations and agencies including multinational corporations and emergency services organisations.

  • Compliance assessments & internal audits
  • Program development and enhancement based on current best practices
  • Testing including facilitation of desktop scenario exercises
  • Training, socialisation and embedding
  • Debriefings and lessons learnt
  • Business Continuity Manager secondments

Workplace Health & Safety

Organisations must comply with Work Health and Safety (WHS) laws (Occupational Health & Safety (OHS) in Victoria) for the health and safety of workers, contractors, volunteers and people who come in contact with the organisation.

The WHS Acts and Regulations require organisations who have a duty to ensure health and safety to ‘manage risks’ by eliminating health and safety risks so far as is reasonably practicable, and if it is not reasonably practicable to do so, to minimise those risks so far as is reasonably practicable. At the foundational level, this means establishing a formal process for identifying hazards, evaluating and analyzing risks associated with those hazards, then taking action to eliminate the hazards or control the risks that can’t be eliminated to minimise injury and illness potential.

Services available:

HBM has delivered multiple diverse WHS projects that have assisted organisations across Australia to enhance their WHS and align with WHS compliance obligations.

  • Compliance assessments & internal audits
  • Program development
  • Training, socialisation and embedding
  • Debriefings and lessons learnt
  • WHS/OHS Manager secondments

Climate Change

Climate change is underway and will impact organisations globally over the coming centuries. To be effective, there is a need for all organisations to increase identification and assessment of climate change risks to adequately address the increasing compliance obligations, complex interactions, interdependencies, and adaptation actions required.

Services available:

HBM has delivered multiple Climate Change projects. These have included:

  1. Defining current state and future climate change reporting and target obligations.
  2. Assessing organisations’ likely future state adaptation requirements and strategies to achieve.
  3. ESG development and implementation
  • Compliance assessments & internal audits
  • Horizonal compliance obligations
  • Adaptation program assessments & development
  • Strategic & operational risk assessments
  • Environmental Social and Governance (ESG) projects

Contact

For more details

Phone: +61 467290719

Email: [email protected]

Address: South Yarra VIC 3141 Australia