JCU Risk Criteria

JCU Risk Criteria

The JCU Risk Criteria is outlined in the below tables. The tables have been taken from the JCU Risk Management Framework and Plan (PDF, 573 KB) for viewing directly.

Likelihood ratings

RatingLikelihoodDescriptionQuantification
1 Rare The event may occur but only in exceptional circumstances and/or no past event history. May occur within every 10 year period or more.
2 Unlikely The event could occur in some circumstances. No past event history. Could occur within a 5 to 10 year period.
3 Possible The event may occur sometime. Some past warning signs or previous event history. Could occur within a 1 to 5 year period.
4 Likely The event will probably occur. Some recurring past event history Could occur within a 3 to 12 month period.
5 Almost Certain The event is expected to occur in normal circumstances. There has been frequent past history. Likely to occur within a 3 month period or during the performance of an actual task.

Consequence ratings

Level 5 – Catastrophic

Impact on objectivesBusiness areaImpact

Most business objectives can no longer be achieved. Complete revision of long term business model required.

Financial

>10% recurrent reduction in operating fund revenue, one off loss of >$50m, Inability to pay staff and creditors

Academic

Loss of accreditation of multiple courses, institutionalised and/or  systemic fraud or misconduct in academic activities including enrolments and examination processes, loss of flagship research projects

Reputation

Sustained negative national and international publicity resulting in significant loss of funding, staff and/or students

Business Disruption

Unavailability of critical infrastructure, utilities and/or ICT services >2 weeks, inability to deliver face to face courses >1 semester

People

Systemic failure to properly deal with serious grievances, sustained high levels of staff turnover across entire university, university-wide staff unrest and/or sustained industrial action

Compliance & Liability

Successful class actions or serious prosecution, repeated breaches of significant contractual arrangements, significant statutory intervention due to serious breach of legislation

Workplace Health & Safety

Fatality, prosecution or legislative non-compliance impacts a substantial part or whole of University with significant works >$100k.

Level 4 – Major

Impact on objectivesBusiness areaImpact

A number of significant business objectives can no longer be achieved.

Financial

5-10% recurrent reduction in operating fund revenue, one off loss of between $20m and $50m, short term inability to pay staff and creditors

Academic

Loss of mandatory accreditation of single course, localised fraud or misconduct in academic activities including enrolments and examination processes, loss of multiple significant research projects

Reputation

Significant negative publicity resulting in some loss of funding, staff and/or students

Business Disruption

Unavailability of critical infrastructure, utilities and/or ICT services between 1 and 2 weeks, inability to deliver face to face courses between 1 month and 1 semester

People

One off failure to properly deal with serious grievances, inability to attract or retain key staff in multiple disciplines, significant staff unrest and/or industrial action at Division level

Compliance & Liability

One off serious successful prosecution or adverse findings, breach of significant contractual arrangement, statutory intervention due to breach of legislation

Workplace Health & Safety

Significant lost time injury (>6 months), notifiable event, finding, notice, suspension of work impacts a substantial part or whole of University with major works between $50-100k.

Level 3 – Moderate

Impact on objectivesBusiness areaImpact

Some important business objectives can no longer be achieved.

Financial

1-5% recurrent reduction in operating fund revenue, one off loss of between $5m and $20m

Academic

Loss of voluntary accreditation of single course, localised fraud or misconduct in academic activities, loss of significant research project

Reputation

One off negative publicity requiring some management resources to deal with

Business Disruption

Unavailability of critical infrastructure, utilities and/or ICT services between 3-5 days, inability to deliver face to face courses between 1-4 weeks

People

Multiple injuries requiring medical treatment, inability to attract or retain key staff in one or two disciplines, negative impact on morale across university

Compliance & Liability

One off breach of legal or contractual arrangements requiring legal or regulatory intervention

Workplace Health & Safety

Lost time injury (<6 months); impacts a moderate to substantial part of University with moderate works between $10-50k.

Level 2 – Minor

Impact on objectivesBusiness areaImpact

Some reprioritisation of resources required to enable key business objectives to be achieved.

Financial

0.25-1% recurrent reduction in operating fund revenue, one off loss of between $1m and $5m

Academic

One off instances of minor misconduct dealt with according to normal procedures, loss of research project

Reputation

One off negative local publicity not requiring management intervention

Business Disruption

Unavailability of critical infrastructure, utilities and/or ICT services between 1-3 days, inability to deliver face to face courses between 2-7 days

People

Inability to attract or retain key staff in specialised area, negative impact on morale in a Division

Compliance & Liability

Minor breach of regulations or standards

Workplace Health & Safety

Incident including medical treatment, near miss, safety finding resolved in 3 days, impacts a minor part of University with minor works <$10k

Level 1 – Insignificant

Impact on objectivesBusiness areaImpact

Little or no impact on business objectives.

Financial

<0.25% recurrent reduction in operating fund revenue, one off loss of <$1m

Academic

Minor academic indiscretions dealt with according to normal procedures

Reputation

One off media enquiries or neutral press coverage

Business Disruption

Unavailability of critical infrastructure, utilities and/or ICT services <1 day, inability to deliver face to face courses <2 days

People

Minor incidents or near misses, one off localised negative impact on morale

Compliance & Liability

Minor technical breach of standards

Workplace Health & Safety

Incident including first aid, workplace hazard contained immediately and no ongoing safety risk impact. No known similar risk within University

Control effectiveness ratings

RatingEffectivenessDescription
1 Not Effective Control(s) does not address risk or no controls identified, or controls identified and address risk, but not implemented.
2 Somewhat Effective Control(s) exist, but not very effective as control design can be iimproved, better communicated and implemented.
3 Reasonably Effective Control(s) mostly reliable and effective. Documentation exists, but can be better communicate. Testing and monitoring of controls needs to be improved.
4 Highly Effective Control(s) fully verified and tested as reliable and effective. Fully documented process and well communicated.