Professional Documents
Culture Documents
Assessor:
Date:
Risk management
project/process:
Documentation reviewed as
preparation:
1
1.1 NatureCare Products
1.2 NatureCare Products is a business about selling beauty skin care products. Our products are
eco-friendly and has natural ingredients. At the moment, the business presented three
products, and this are as follows:
Cleansing cream which is used as make up removal.
Multi Protection Day Moisturising Creams are used for dry skin, and it is also used as
protection through the day.
Lastly is the Regenerating facial scrub which is used to remove dead skin cells.
1.3 ROLE:
If I will be the one who will do an investigation regarding the risk management, my role is not
only the owner but also a Financial Manager. I’ll be checking any risk of the business most
importantly the financial status of the company. By doing so, I may be able to reduce any
damages that may happen in the future. The role of Finance Manager is all about the money or
what we call financial health of the business, thus, are assigned to do the financial reports and
also other activities about the finance such as budgeting.
2 SCOPE:
2.1 Risk management process:
Firstly, I will identify any threat that a business may find out later on, this will help to do the next
step which is analysing the risk so we may know how to deal with it and also will help to avoid
affecting an organisation’s goal, next is to mitigate any damages that may happen to the
business, and lastly, to monitor every single detail of the business as well as creating new
tactics in order to protect the business from any risk. All these processes are important for the
sake of having good condition in the business.
2.2 Departments:
The department that are involved are the CEO, Accounts Manager, Marketing Manager and
Assistant, Sales Manager, Financial Manager and Assistant.
2.3 Risks can’t be managed:
In my opinion, there is nothing we cannot manage if we do our best managing the business.
There are ways to prevent risks, the business should be responsible to establish some
techniques to reduce any risks and anything that may impact the objectives of the organisation.
By doing a continuous monitoring to all aspect and that the risks are being identified and well
managed, the business will continue to success.
3 Organisational requirements and standards:
3.1 The organisational policies and procedures that will apply to the risk management process are
as follows:
3.2 All the processes are needed to follow in order to ensure that the business will not fail to
achieve their goal. As for me, Risk Management Policy and Procedure and Record Keeping
Policy and Procedure will be followed because Risk Management process is about identifying
the risk that may affect the future of the business, analysing the risk if how seriously will it affect
the business and find a solution to avoid damages which is part of Risk Mitigation, and lastly
Risk Monitoring. Record Keeping Policy and Procedure is also a good help since all the records
will be stored and will be available for any references.
3.3 Policies and procedures:
Risk Management Policy and Procedure
There are 3 sections of commitment under this policy and procedure, these are the
commitment to fulfill the risk management, commitment of training to be more skilled and be
expert of risk management, and a commitment of examining and observing all the aspects of
the business as well as the progress of risk management.
Under the commitment to fulfill risk management, the NatureCare Products will be responsible
of reducing the risks that may encounter in the business. There will be an implementation of
planning and decision making about the risk management. And the staff of the said business
will be responsible to perform according to the standard of the risk management. Next is the
commitment of training to be more skilled and have an excellent knowledge of the risk
management, the staff of the NatureCare Products are responsible to understand the principles
of risk management. Lastly, commitment to observe all the aspect and the progress of risk
management, this is about being updated of anything about the business by monitoring the
risks and to create a new technique to help the business pursue their objectives.
Internal Communication Policy and Procedure
The NatureCare Products is looking forward that their staffs will be using the channels about
communication. In business, communication is very important most importantly in the process
of creating and sharing some ideas about work to have a common understanding. The
channels are project or action plan, Executive team meetings, Team meetings, Staff bulletin,
Staff surveys, NatureCare intranet, Enterprise social networks, All staff emails, Email
distribution lists.
Procurement Policy and Procedures
This policy is about purchasing activities which applies to all the workers of the NatureCare
Products. The practices under this policy and procedures are, Health and Safety Policy must be
obtained at work, must prioritise the needs for business operation such as the use of water and
energy, greenhouse performance, more. Under the Procurement Principles, it is part of being a
worker to check the goods and services that we provide, employees must advise supplier that
the business are accepting credit card as a way of payment, and it must be done prior the
purchasing. There should be a record keeping in the company where all the documents will be
all stored, and lastly, there is a bidding process for the purchase value of the product.
4 Legal requirements:
BSBOPS504 Manage business risk 5|Page
8 Relevant Stakeholders
8.1 Who will you communicate to (at least two stakeholders) regarding:
8.1.1. The owner and investor are the stakeholders who will you communicate in regards with
the risk management process explanation. They have the knowledge and opinions of what
need to be done about the process of the risk management, as well as contributing some
techniques to avoid any risk in the business.
8.1.2. Managers and clients are the one you need to communicate about the invitation to assist
risk identification. They have the right to view the situation of the business and
communicate with other stakeholders regarding the decision making. Involvement is a big
Sincerely,
9 External Environment
9.1 By analysing the environment of risk management project of NatureCare Products, it is possible
to occur any changes in the legislation of the products of the said business. And by the
influences of the new politics, they can control the process of the business.
9.2 For this current economic situation, the business is still capable of producing services and
products. It is also possible to have an increase in goods value. If the business will continue the
operation and will gain a lot of improvement and profits, each members of the business will
benefit.
10.1 Yes, the policy and procedures in risk management are complete. These are the Risk
Management Policy and Procedures, Internal Communication Policy and Procedures, and the
Procurement Policy and Procedures.
10.2 The resources of the NatureCare Products are all secured, its people, finance, property and
reputation.
10.3 Communication between the employees and management is very important in business, it is
use to have a good working relationship and its also a way to negotiate and share
ideas/thoughts in order to achieve the objective of the organisation.
10.4 All the staffs are very loyal. Building loyalty and trust are important in business because it gives
security to all the members that they will be more willing to work for the future of the business.
10.5 The NatureCare Products has a good size of customer data base and that around 70% are
professional women.
10.6 In order to be able to fund, the company will promote programs and a monthly fund raising.
10.7 The cashflow of the business is in good situation. Any concern and worries of the finance
administrator were taken care of, it is by discussing some treatment alternatives.
10.8 Yes, the business has a strong and reliable supplier relationship because any concerns such as
the incorrect invoicing will result in delayed transaction and the good relationship between
1 Risk Discussion
10.9 Leading and organising a group discussion for the business will be effective if the employees
and members are all participating and sharing some thoughts or ideas about the main concern.
The leader must ensure that the meeting will progress and will have a united decision for the
sake of the company. Best technique is the brainstorming, since everyone are involved, and
asking questions for any clarifications is the best way to understand each other.
10.10 All the invited stakeholders will talk about the identification of the risk, evaluating the
identified risk and the treatment for the risk.
10.11 In risk assessment, Matrix method will be using to assess the likelihood and severity of
the identified risk.
10.12 Risk matrix will help to assess which risk should be prioritised. High risk will be prioritised
because this will impact the business’ objective.
10.13 In negotiating, the stakeholders should think of their business’ objective or goals.
Everyone must learn how to creative, thus, work with the team and make a plan for the
negotiation of risk likelihood and the consequences.
10.14 The leader will organise a face-to-face meeting and will discuss what will be the plan for
the risk assessment. Clarify all the details and ensure that the company will be the priority.
10.15 In order to be united, everyone should know to stop and listen to others’ opinion, let
others finish what they want to share and make some questions for any clarifications.
Encourage each member to participate most importantly in making decisions for the sake of the
business’ success. Remember that asking questions will help the members improve their
understanding to the situation.
11 Risks Summary
11.1 Summarise at least three risks identified at the meeting that apply to the scope of your risk
management process or project. For each risk:
11.1.1. Risk of Fire, Non-compliance Risk and Financial Risk are the types of identified
risk.
11.1.2. The Management and all the staffs of the project team will be responsible for the
risk.
11.1.3. The first outcome of the risk is the loss of Financial Income of the company, and
the next will be the staff members. Thus, the loss of the company will affect all the
members and workers of the business.
11.1.4. The treatment alternatives are taking out insurance, conducting a staff training,
and will be deliberate an audit. This is about monitoring all the aspects of the business, it is
for the safety of the business.
11.1.5. By using the Risk Matrix, the risk will be prioritised according to the severity level
of the identified risk. This is to ensure that we manage to plan what to do to solve the
problem.
12 Risk Assessment
Destroy Building 2 3 2 3 2 3 2 3
and Equipments
Poor Performance 3 3 3 3 3 3 3 3
13 Research risks
13.1 RISK OF FIRE
- It is a risk that can kill/injure people and also can destroy the building and equipment of the
company. The alternative treatment for this is to ensure that all the materials for the fire are
available and ready to use such as the fire extinguisher. In addition, all the employees and
members of the business must conduct a training for emergency and evacuation strategies.
NON-COMPLIANCE RISK
- Compliance risk is promised to follow the legal responsibility and will obtain a punishment
for not complying with laws and rules such as losing a job. The alternative treatment for this
is to conduct a risk assessment.
FINANCIAL RISK
- It is a risk that will make your financial status into danger, encountering this risk may result
of losing the business and won’t be able to pay any debts. The alternative treatment for this
is to limit any high-risk clients and keep on monitoring the financial status of the company
and insurance is also a big help. Create a plan to avoid any damages for any identified risk.
13.2 RISK OF FIRE
- A risk that can destroy not only the building of the company but also the people of it.
Everyone should undertake a training for any emergency.
NON-COMPLIANCE RISK
- Fail to follow the laws and rules will affect the work situation of the employees, thus,
managing the risk assessment will help to avoid this risk.
FINANCIAL RISK
- This risk will impact the financial status of the business, thus, the employees should
prioritise the highly risk identified.
13.3 – Insurance
– Conduct a training for emergency
– Risk Assessment
BSBOPS504 Manage business risk 14 | P a g e
TREATMENT ACTIONS:
Risk of Fire can be prevented by conducting a training for any emergency in the company, and also
ensure that the materials for the fire are all available and ready/safe to use. Members of the
company should also undertake a training for the evacuation strategies, so the people inside the
incident will avoid panic.
Non-compliance Risk can be prevented by managing the risk assessment, thus, all the members of
the company are responsible of complying rules and laws.
Financial Risk can be avoided by being careful who to trust clients, must analyse the risk before
making decision. Keep monitoring the financial status of the company and create tactics on how to
prevent encountering damages from the identified risk.
1. Action Plan
Overall person responsible: Stakeholders and all the members of the business
18 Evaluation
18.1 No, identified risk not relevant.
18.2 Yes, the risk treatments are successful.
18.3 There are no new risks.
18.4 The stakeholders are very satisfied with the action plan for managing the identified risk.
18.5 Yes, all the treatment actions still in line with best practice.
18.6 There is no other risk treatment necessary.
18.7 This is a report regarding the outcomes of evaluating the risk process/project and its
alternative treatments.
In business, there are risk that will come and may possibly destroy or affect the status of the
company. In this project, the Nature Care Products is a business selling beauty products which
are eco-friendly and high quality using natural ingredients. In very business that we enter, expect
that the risk may come unexpectedly, all we need to do is to create a plan to avoid damages and
make the business pursue its goal or objectives.
There are 3 kinds of identified risks, these are the Risk of Fire, Non-compliance Risk and
Financial Risk. The Risk of Fire is very dangerous because it can destroy not only the building
and equipment but also people who are inside the building. The Non-compliance Risk is about
not following the rules and will obtain a punishment for not complying, worst result is to lose a
job. Financial Risk is about failing to monitor the financial status of the company, the result is
Evaluation report ☐