PREPARED BY:
Planning and Strategic Initiatives
DATE:
November 20, 2023
SUBJECT:
2023 Q3 Organizational Risk Report
BACKGROUND/PURPOSE
The Ontario Public Standards requires the Board of Health to have a risk management framework in place that identifies, assesses, and addresses risks. The WECHU risk registry currently tracks 26 risks across 13 categories. Risk categories cover a diverse array of topics such as finances, security, service delivery, equity, and privacy, for example.
Health Units are also expected to submit a list of corporate risks and mitigation strategies to the Ministry of Health during Q3 Standards Activity Reporting.
DISCUSSION
The 2023 WECHU risk registry was reviewed and updated by risk owners in the organization. The risk registry review identified 13 risks scoring “high” before consideration of mitigation strategies and 7 remaining “high” after mitigation measures.
The Ministry requires reporting of up to 10 highly ranked risks. The WECHU’s submission includes the following 7 high risk types for 2023:
- Knowledge/Information-Information
- People/Human Resources-Work Disruption
- People/Human Resources-Succession Planning
- People/Human Resources-Staff Engagement
- Privacy-Privacy Requirements
- Security-Work
- Technology-System Outages
Additionally, as part of the 2023 operational planning process, the risk registry was migrated into the WECHU’s information management system. This project builds upon the risk management system the WECHU already has in place and will modernize it by improving automation and collaboration.