Annexure K - Enterprise Risk Management (Risk Assessment) - Lease Technical Requirements Guidelines

Sep 11, 2026

Uploaded by Aditya

Enterprise Risk Management guidelines instruct how to complete a site/premises risk assessment for operational readiness, including risks during establishment, and risks arising from site decommissioning or lease termination. The document specifies mandatory risk types—Environment, Community, Reputation and Brand, Health and Safety, and Legal and Compliance—plus a 5x5 methodology for consequence severity and likelihood to derive residual risk ratings. It requires ranked risk listings, risk heat map plotting, defined mitigation actions with dates, named owners, and sign-off by the risk assessor.

LanguageEnglish

CategoryPresentations

FormatPDF

Pages5

Reading Time2 min

AccessFree to download

Enterprise Risk Management (Risk Assessment)

Risk Assessment scope and required risk types

Risk assessment methodology (5x5) and residual risk rating

Risk ranking, heat map plotting, and mitigation actions

Roles, ownership details, and assessor sign-off

How to use the risk assessment template (Excel worksheets)

Enterprise Risk Management (Risk Assessment) Utilising the parameters below as a guide and the excel template provided a risk assessment relating to the site/ premises must be completed, considering the operations intended for the site/ premises, also identifying risk with site/ premises decommissioning or termination of the lease. 1. Provide a Risk Assessment relating to site/ premises establishment and Site decommissioning i.e. consideration of risks arising from the activities etc. for the setup of operational readiness of the site and risks relating to the decommissioning of the site/ premises. 2. Provide a Risk Assessment relating to Operational risks once the site/ premises has been established and operations commence. 3. The Risk Assessment must provide at minimum risks in the following types, i.e. Environment, Community, Reputation and Brand, Health and Safety, Legal and Compliance. 4. A defined Risk Assessment methodology utilising a basic 5 x 5 table is provided on how the Risk Consequence or Severity and the Risk Likelihood or Probability is determined and the resultant Risk Rating as the residual risk rating, after the effectiveness of the controls have been considered. 5. A clear ranking of the risks from Highest to Lowest ranking risks be provided in the risk assessment and plotted on the Risk Heat Map. 6. Risk mitigating actions must be specific, clear and defined with a start and completion date. 7. All risk responsibility on the risk assessment, [i.e. name](i.e. name) of the risk owner, name of the control owner and name of the risk mitigation owners must be provided. 8. All risk assessments must be signed off by the risk assessor. Risk Assessment Guideline How to utilise the Risk Assessment Template provided. Below is a high level step by step guide to assist with the completion of the risk assessment template. It is recommended that the risk assessment not be undertaken by only the Risk Assessor but rather in a Risk Workshop with representation from the Organisations Subject Matter Experts, were possible. Proof of the risk workshop in the form of an attendance register along with other supporting documents might be requested as part of the adjudication process of the risk assessment. The Risk Assessment Template is provided as an Excel Workbook with three (3) Excel Worksheets namely “1. Risk Register”, “2. Risk Rating Criteria”, “3. Risk Heat Map”. Worksheets that need input for completion of the risk register is “1. Risk Register” and “3. Risk Heat Map”. Worksheet “2. Risk Rating Criteria” is a guidance document that contains three (3) guidance Tables to assist the risk rating determination of Table 1-Consequence / Severity; Table 2-Likelihood/ Probability and Table 3-Risk Control Effectiveness Rating. Table 1-Consequence/ Severity provides a score from 1 (Insignificant) to 5 (Critical) with descriptors across these levels for Financial, Health and Safety, Environment, Community, Legal & Compliance and Reputation & Brand, to aid the selection of the consequence. Table 2-Likelihood/ Probability provides a score from 1 (Rare) to 5 (Almost certain) with a descriptor for each level. Table 3-Risk Control Effectiveness Rating (RCE) provides a RCE rating and guide for “None”,“Unsatisfactory”,“Requires Improvement” and “Satisfactory”. Worksheet “3. Risk Heat Map”, provides a reference heat map of the risk rating scores when the risk consequence and likelihood ratings are multiplied and aids identification of High, Medium and Low Risks when plotted on the Heat Map and listed in the summary table below. How to complete the risk assessment template:- 1. Fill in the risk assessment description information i.e. Name of Risk Assessment, Date the risk assessment was undertaken and Name of the Risk Assessor. 2. Column A. Provide a sequential number from one (1) to the risk to be assessed. 3. Column B. Indicate the Type of Risk this is e.g. Financial or Health and Safety etc.

FAQs

What must the risk assessment cover for site/premises and lease termination?

It must address risks related to establishing the site and operational readiness, as well as risks related to decommissioning or termination of the lease.

Which categories of risk are required at minimum?

The assessment must include at minimum risks in Environment, Community, Reputation and Brand, Health and Safety, and Legal and Compliance.

How is the residual risk rating determined?

A defined 5x5 methodology determines risk consequence/severity and risk likelihood/probability, and then calculates the resultant risk rating as the residual risk after considering control effectiveness.

Sep 11, 2026

Uploaded by Aditya