Document Feedback - Review and Comment
Step 1 of 4: Comment on Document
How to make a comment?
1. Use this to open a comment box for your chosen Section, Part, Heading or clause.
2. Type your feedback into the comments box and then click "save comment" button located in the lower-right of the comment box.
3. Do not open more than one comment box at the same time.
4. When you have finished making comments proceed to the next stage by clicking on the "Continue to Step 2" button at the very bottom of this page.
Important Information
During the comment process you are connected to a database. Like internet banking, the session that connects you to the database may time-out due to inactivity. If you do not have JavaScript running you will recieve a message to advise you of the length of time before the time-out. If you have JavaScript enabled, the time-out is lengthy and should not cause difficulty, however you should note the following tips to avoid losing your comments or corrupting your entries:
-
DO NOT jump between web pages/applications while logging comments.
-
DO NOT log comments for more than one document at a time. Complete and submit all comments for one document before commenting on another.
-
DO NOT leave your submission half way through. If you need to take a break, submit your current set of comments. The system will email you a copy of your comments so you can identify where you were up to and add to them later.
-
DO NOT exit from the interface until you have completed all three stages of the submission process.
(1) This Policy is effective from 10 July 2023. (3) This Policy sets out how the University embeds effective risk management practices into its operations, activities and day to day decision making. (4) This Policy applies to all staff and associates. (5) Managing risk is fundamental to how the University is managed at all levels. The University will foster a positive risk-aware culture which recognises that controlled risk-taking is acceptable and appropriate to foster growth, innovation, competitiveness and efficient business practices. (6) The University will maintain a Risk Appetite Statement which: (7) The University’s risk management practices will be based on AS ISO 31000:2018, Risk Management – Principles and Guidelines and includes a consistent approach for the identification, treatment and monitoring of risk. (8) Staff and associates are expected to apply sound and informed risk management principles to their work related decision making, practices and operations. The University will support staff and associates to recognise and understand their risk obligations by providing education, training and information. (9) Staff and associates who have a concern regarding the management of risk must contact the Risk, Compliance and Business Continuity Unit. (10) Risk management activities are implemented and coordinated by the Risk, Compliance and Business Continuity Unit, including the communication of advice, guidance and support across the University. (11) Faculty, Institutes and Portfolios will develop risk profiles in accordance with the University’s Risk Appetite, Headline Risks and the strategic priorities of the University. Risk profiles must include all information relating to the risks, including the contributing factors and consequences, ratings, control and treatment activities, alignment with key risk indicators and risk appetite. (12) Risk assessments must be undertaken before commencing a new project or activity in accordance with clause 27 and reviewed at least annually, or more frequently as required by changes or project milestones. (13) Risks can be identified using various methods. Staff and associates are encouraged to contact the Risk, Compliance and Business Continuity Unit to discuss the most suitable method. (14) When a risk is identified, a Risk Owner is assigned by the relevant member of the Senior Executive Team or nominee. The Risk Owner must assess risk, controls and treatment measures in accordance with Schedule A: Risk Matrix. (15) Any Deakin staff member or student who is or proposes to engage in any activity or partnership with a foreign government, foreign university, foreign business or any other foreign organisation or entity as part of their University business must undertake an evaluation of the risk of foreign interference, foreign influence and/or statutory reporting or regulatory obligations that is posed by the proposed activity or partnership. For further information see the International Relations Regulation policy the Deakin University Foreign Interference page or contact the Office of General Counsel as to how the University assesses and manages the risks associated with its foreign interactions. (16) Risk Owners must review and update their risk profiles at least every three months to ensure all current and emerging risks are captured, controls identified, and risk treatment (action) plans are implemented effectively. (17) The Risk, Compliance and Business Continuity Unit will monitor Faculty, Institute and Portfolio Risk Profiles to identify new and changed risks and will recommend action as appropriate. Risk Profiles will inform the Headline Risk Report. (18) Headline Risks are reported at least quarterly to the Senior Executive Team, the Audit and Risk Committee and Council. (19) The University Headline Risk Report informs the University’s annual Internal Audit Plan and strategic priorities. (20) Risk Owners must escalate the following risk items to the relevant member of the Senior Executive Team, and the Director Audit, Risk and Business Continuity or nominee: (21) The relevant member of the Senior Executive Team, and the Director Audit, Risk and Business Continuity or nominee will assess escalated matters to determine actions required to reduce the risk to an acceptable level. (22) The University Council is responsible for: (23) The Audit and Risk Committee is responsible for: (24) The Academic Board has oversight of academic risks. (25) The Vice-Chancellor and Senior Executive Team are responsible for: (26) Senior leaders are responsible for: (27) Project and Executive Sponsors are responsible for: (28) The Risk, Compliance and Business Continuity Unit is responsible for: (29) For the purpose of this policy:Risk Management policy
Section 1 - Preamble
Section 2 - Purpose
Section 3 - Scope
Section 4 - Policy
Section 5 - Procedure
Coordination and communication
Risk assessment and treatment
Foreign interference
Reporting and monitoring
Risks outside acceptable levels and escalation
Roles and responsibilities
Top of PageSection 6 - Definitions