Higher Strategic Risk Themes

Unwilling to accept any risk outside of defined appetite

System Security

Tolerance for risks that weakens system security, compromise the confidentiality, integrity or availability of information/services, leading to service disruption, data loss, regulatory non compliance or loss of stakeholder trust.

Confidentiality

Tolerance for risks that lead to failures in information governance controls leading to unauthorised access, disclosure or misuse of information, resulting in legal, regulatory, reputational or operational harm.

Continuity

Tolerance for risks that compromise the organisation’s ability to maintain, recover or protect critical information and systems during disruption, leading to service failure, data loss or regulatory consequence.

Health & Safety

Tolerance for risks that adversely impact the organisation’s ability to protect the health, safety and wellbeing of staff, service users or the public; leading to harm, legal non compliance or operational disruption.

Wellbeing

Tolerance for risks that adversely affect the wellbeing of staff or service users, leading to harm, reduced performance or resulting in wider organisational impact.

Skills/Competencies

Tolerance for risks that highlight/expose insufficient or inadequate organisational expertise to ensure operational success and efficiency.

Growth/Collaboration

Tolerance for risks that impact the effective collaboration, partnerships or ways of working, limiting the organisation’s ability to grow, innovate or deliver its strategic objectives.

Innovation/ Pursuit of Opportunities

Tolerance for risks that adversely impact the organisation’s ability to innovate, its capacity or willingness to pursue opportunities.