Internal audit involvement in enterprise risk management

Purpose The paper examines the impact of internal auditors’ involvement in Enterprise Risk Management (ERM) on perceptions of their willingness to report a breakdown in risk procedures and whether a strong relationship with the audit committee affects such willingness to report. The study also investigates the use of ERM and the role of internal audit in ERM in Australian private and public sector entities. Design/methodology/approach The study uses an experimental design, manipulating (i) the internal auditor’s involvement in ERM and (ii) the strength of the relationship between internal audit and the audit committee. Participants are 117 certified internal auditors. The study also gathers descriptive data on the use of ERM. Findings The study indicates that a high involvement in ERM impacts the perceptions of internal auditors’ willingness to report a breakdown in risk procedures to the audit committee. However, a strong relationship with the audit committee does not appear to affect their perceived willingness to report. The study also finds that the majority of organisations have recently adopted ERM. Internal auditors are involved in ERM assurance activities but some also engage in activities that could compromise objectivity.

A method for risk analysis across governance systems : a great barrier reef case study

Healthy governance systems are key to delivering sound environmental management outcomes from global to local scales. There are, however, surprisingly few risk assessment methods that can pinpoint those domains and sub-domains within governance systems that are most likely to influence good environmental outcomes at any particular scale, or those if absent or dysfunctional, most likely to prevent effective environmental management. This paper proposes a new risk assessment method for analysing governance systems. This method is then tested through its preliminary application to a significant real-world context: governance as it relates to the health of Australia's Great Barrier Reef (GBR). The GBR exists at a supra-regional scale along most of the north eastern coast of Australia. Brodie et al (2012 Mar. Pollut. Bull. 65 81-100) have recently reviewed the state and trend of the health of the GBR, finding that overall trends remain of significant concern. At the same time, official international concern over the governance of the reef has recently been signalled globally by the International Union for the Conservation of Nature (IUCN). These environmental and political contexts make the GBR an ideal candidate for use in testing and reviewing the application of improved tools for governance risk assessment. © 2013 IOP Publishing Ltd.

Safe perioperative fasting : implementation of evidence based guidelines and an ‘at risk’ checklist

Introduction Guidelines existed at the Royal Children’s Hospital (RCH) to direct preoperative/pre-procedural fasting in day patients undergoing general anaesthetic. However audit, risk analyses and a recent research project at the RCH identified prolonged pre-procedural fasting times in children undergoing day surgical and gastroenterology procedures. Aims 1. Reduce median fasting time to <8 hrs for children admitted for a day procedure under general anaesthetic; 2. Identify children at risk of perioperative hypoglycaemia. Methods The study was conducted in 4 phases: 1) revision and implementation of evidence-based perioperative fasting guidelines with staff education relating to these guidelines; 2) cross-sectional descriptive study with day surgical patients (n = 377) requiring preoperative fasting. ‘Normal risk’ and ‘High risk’ groups were identified for fasting hypoglycaemia using an ‘at risk’ checklist. Venous blood glucose (BGL) testing was performed at a) anaesthetic induction; b) prior to first caloric food/fluid postoperatively; 3) chart audit to evaluate efficacy of guidelines and parent information; 4) development of recommendations for clinical practice. Results The median fasting time for children having morning surgery (14 hrs, IQ range 5–22 hrs) was twice as long compared to afternoon lists (7 hrs, IQ range 6–22 hrs) (p < 0.001). Median fasting times were not significantly different between ‘at risk’ and control groups (p = 0.496). However the proportion of children who experienced hypoglycaemia (BGL <3 mmol/L) was greater in the ‘at risk’ group (5, 8%) compared to the control group (18, 4.3%). Although not statistically significant (x2 = 2.254, p = 0.133), ‘at risk’ children appear more likely to experience hypoglycaemia as children in the control group, constituting a clinically significant finding. Conclusion Appropriate identification and management of ‘high risk’ children, will reduce the risk of deleterious sequelae in children undergoing surgical or investigative procedures requiring general anaesthesia.

Variation in risk seeking behaviour following large losses : a natural experiment

This study explores people's risk taking behaviour after having suffered large real-world losses following a natural disaster. Using the margins of the 2011 Australian floods (Brisbane) as a natural experimental setting, we find that homeowners who were victims of the floods and face large losses in property values are 50% more likely to opt for a risky gamble -- a scratch card giving a small chance of a large gain ($500,000) -- than for a sure amount of comparable value ($10). This finding is consistent with prospect theory predictions regarding the adoption of a risk-seeking attitude after a loss.

From impact assessment to user-friendly risk management decision-making

In earlier cultures and societies, hazards and risks to human health were dealt with by methods derived from myth, metaphor and ritual. In modem society however, notions of hazard and risk have been transformed from the level of a folk discourse to that of an expert centred concept (Plough & Krimsky, 1987). With the professionalization of risk and hazard analysis came a preferred framework for decision making based on a range of 'technical' methodologies (Giere, 1991 ). This is especially true for decision processes relating to risk assessment and management, and impact assessment. Such approaches however, often entail narrow technical-based theoretical assumptions about human behaviour and the natural world, and the· methods used. They therefore carry 'in-built' error factors that contribute considerable uncertainty to the results.

Conflicting notions of risk : the chasm of conflict between institutions and the public

The trust and credibility gap between institutional regulators and the public is based on fundamental social and cultural differences related to power and authority. It is also associated with the 'distance' of a bureaucracies from those whom they serve. The nature of public concern about risk may be investigated by considering specific cognitive decision making 'rules' such as 'familiarity' of a hazard or 'voluntariness' of exposure. A more complete appreciation of the 'how' and 'why' of public response to danger from industrial hazards can be gained by appreciating these 'rules' within the broader context of mis-communication between 'elite' regulators and a highly diverse public. If the results of risk assessments are expressed in technical terms alone, it is unlikely that any real communication will occur. Further, if issues related to the 'remote' nature of much institutional decision making are not addressed, closure of the 'gap' may be difficult to bring about.

Pandemic planning as risk management : how fared the Australian Federation?

The role of law in managing public health challenges such as influenza pandemics poses special challenges. This article reviews Australian plans in the context of the H1N1 09 experience to assess whether risk management was facilitated or inhibited by the "number" of levels or phases of management, the degree of prescriptive detail for particular phases, the number of plans, the clarity of the relationship between them, and the role of the media. Despite differences in the content and form of the plans at the time of the H1N1 09 emerging pandemic, the article argues that in practice, the plans proved to be responsive and robust bases for managing pandemic risks. It is suggested that this was because the plans proved to be frameworks for coordination rather than prescriptive straitjackets, to be only one component of the regulatory response, and to offer the varied tool box of possible responses, as called for by the theory of responsive regulation. Consistent with the principle of subsidiarity, it is argued that the plans did not inhibit localised responses such as selective school closures or rapid responses to selected populations such as cruise ship passengers.

Risk-management of UAS robust autonomy for its integration into civil aviation safety frameworks

This paper discusses a model of the civil aviation reg- ulation framework and shows how the current assess- ment of reliability and risk for piloted aircraft has limited applicability for Unmanned Aircraft Systems (UAS) with high levels of autonomous decision mak- ing. Then, a new framework for risk management of robust autonomy is proposed, which arises from combining quantified measures of risk with normative decision making. The term Robust Autonomy de- scribes the ability of an autonomous system to either continue or abort its operation whilst not breaching a minimum level of acceptable safety in the presence of anomalous conditions. The decision making associ- ated with risk management requires quantifying prob- abilities associated with the measures of risk and also consequences of outcomes related to the behaviour of autonomy. The probabilities are computed from an assessment under both nominal and anomalous sce- narios described by faults, which can be associated with the aircraft’s actuators, sensors, communication link, changes in dynamics, and the presence of other aircraft in the operational space. The consequences of outcomes are characterised by a loss function which rewards the certification decision

Interaction of psychosocial risk factors explain increased neck problems among female office workers

This study investigated the relationship between psychosocial risk factors and (1) neck symptoms and (2) neck pain and disability as measured by the neck disability index (NDI). Female office workers employed in local private and public organizations were invited to participate, with 333 completing a questionnaire. Data were collected on various risk factors including age, negative affectivity, history of previous neck trauma, physical work environment, and task demands. Sixty-one percent of the sample reported neck symptoms lasting greater than 8 days in the last 12 months. The mean NDI of the sample was 15.5 out of 100, indicating mild neck pain and disability. In a hierarchical multivariate logistic regression, low supervisor support was the only psychosocial risk factor identified with the presence of neck symptoms. Similarly, low supervisor support was the only factor associated with the score on the NDI. These associations remained after adjustment for potential confounders of age, negative affectivity, and physical risk factors. The interaction of job demands, decision authority, and supervisor support was significantly associated with the NDI in the final model and this association increased when those with previous trauma were excluded. Interestingly, and somewhat contrary to initial expectations, as job demands increased, high decision authority had an increasing effect on the NDI when supervisor support was low.

Associations between individual and workplace risk factors for self-reported neck pain and disability among female office workers

A cross-sectional survey of female office workers (n=333) was undertaken to determine the level of neck pain and disability (Neck Disability Index—NDI) and to explore the relationship between individual and workplace risk factors with the NDI score and the presence of pain. Workers reported nil (32%), mild (53%), moderate (14%) and severe (1%) neck pain. There were more risk factors associated with the NDI score than the presence of neck pain. The presence of neck pain was associated with a history of neck trauma (OR: 4.8), using a graduated lens (OR: 4.6), and negative affectivity (OR: 2.7) in the multiple regression model. Factors associated with higher NDI score were using the computer mouse for more than 6 h per day, higher negative affectivity, older age and an uncomfortable workstation. These results suggest that measuring the level of neck pain and disability rather than just the presence of neck pain provides more specific directives for the prevention and management of this disorder.

Liability in negligence and the failure to disclose multiple risks in surgery : I would have been willing to run the risk

It has been 21 years since the decision in Rogers v Whitaker and the legal principles concerning informed consent and liability for negligence are still strongly grounded in this landmark High Court decision. This paper considers more recent developments in the law concerning the failure to disclose inherent risks in medical procedures, focusing on the decision in Wallace v Kam [2013] HCA 19. In this case, the appellant underwent a surgical procedure that carried a number of risks. The surgery itself was not performed in a sub-standard way, but the surgeon failed to disclose two risks to the patient, a failure that constituted a breach of the surgeon’s duty of care in negligence. One of the undisclosed risks was considered to be less serious than the other, and this lesser risk eventuated causing injury to the appellant. The more serious risk did not eventuate, but the appellant argued that if the more serious risk had been disclosed, he would have avoided his injuries completely because he would have refused to undergo the procedure. Liability was disputed by the surgeon, with particular reference to causation principles. The High Court of Australia held that the appellant should not be compensated for harm that resulted from a risk he would have been willing to run. We examine the policy reasons underpinning the law of negligence in this specific context and consider some of the issues raised by this unusual case. We question whether some of the judicial reasoning adopted in this case, represents a significant shift in traditional causation principles.

Ecological risk analysis of transgenic plants

Public concern about the safety of many forms of industrial technology are known to be linked to a range of factors including a perceived lack of confidence in regulatory decision making.1 The use of transgenic plants in agriculture may be seen as an issue that could generate similar concern. Criticism has been made about the completeness of knowledge on the potential for aberrant behaviour of genetically manipulated organisms (GMO's) in release environments, and the adequacy of existing pre­‐release screening and assessment methodologies (Goldberg & Tjaden, 1990). Such comments are important because any perceived shortcomings in the pre-release assessment of GMO safety may lead to decreased public support of the technology -­‐and the industry itself...

Obesity and comorbid risk factors for cardiovascular disease among physically inactive patients with musculoskeletal disorders : a targeted intervention for this priority patient group is warranted

Introduction The benefits of physical activity are established and numerous; not the least of which is reduced risk of negative cardiovascular events. While sedentary lifestyles are having negative impacts across populations, people with musculoskeletal disorders may face additional challenges to becoming physically active. Unfortunately, interventions in ambulatory hospital clinics for people with musculoskeletal disorders primarily focus on their presenting musculoskeletal complaint with cursory attention given to lifestyle risk factors; including physical inactivity. This missed opportunity is likely to have both personal costs for patients and economic costs for downstream healthcare funders. Objectives The objective of this study was to investigate the presence of obesity, diabetes, diagnosed cardiac conditions, and previous stroke (CVA) among insufficiently physically active patients accessing (non-surgical) ambulatory hospital clinics for musculoskeletal disorders to indicate whether a targeted risk-reducing intervention is warranted. Methods A sub-group analysis of patients (n=110) who self-reported undertaking insufficient physical activity level to meet national (Australian) minimum recommended guidelines was conducted. Responses to the Active Australia Survey were used to identify insufficiently active patients from a larger cohort study being undertaken across three (non-surgical) ambulatory hospital clinics for musculoskeletal disorders. Outcomes of interest included body mass index, Type-II diabetes, diagnosed cardiac conditions, previous CVA and patients’ current health-related quality of life (Euroqol-5D). Results The mean (standard deviation) age of inactive patients was 56 (14) years. Body mass index values indicated that n=80 (73%) were overweight n=26 (24%), or obese n=45 (49%). In addition to their presenting condition, a substantial number of patients reported comorbid diabetes n=23 (21%), hypertension n=25 (23%) or an existing heart condition n=14 (13%); 4 (3%) had previously experienced a CVA as well as other comorbid conditions. Health-related quality of life was also substantially impacted, with a mean (standard deviation) multi-attribute utility score of 0.51 (0.32). Conclusion A range of health conditions and risk factors for further negative health events, including cardiovascular complications, consistent with physically inactive lifestyles were evident. A targeted risk-reducing intervention is warranted for this high risk clinical group.

Methodology for developing real-time motorway traffic risk identification models using individual-vehicle data

Most of existing motorway traffic safety studies using disaggregate traffic flow data aim at developing models for identifying real-time traffic risks by comparing pre-crash and non-crash conditions. One of serious shortcomings in those studies is that non-crash conditions are arbitrarily selected and hence, not representative, i.e. selected non-crash data might not be the right data comparable with pre-crash data; the non-crash/pre-crash ratio is arbitrarily decided and neglects the abundance of non-crash over pre-crash conditions; etc. Here, we present a methodology for developing a real-time MotorwaY Traffic Risk Identification Model (MyTRIM) using individual vehicle data, meteorological data, and crash data. Non-crash data are clustered into groups called traffic regimes. Thereafter, pre-crash data are classified into regimes to match with relevant non-crash data. Among totally eight traffic regimes obtained, four highly risky regimes were identified; three regime-based Risk Identification Models (RIM) with sufficient pre-crash data were developed. MyTRIM memorizes the latest risk evolution identified by RIM to predict near future risks. Traffic practitioners can decide MyTRIM’s memory size based on the trade-off between detection and false alarm rates. Decreasing the memory size from 5 to 1 precipitates the increase of detection rate from 65.0% to 100.0% and of false alarm rate from 0.21% to 3.68%. Moreover, critical factors in differentiating pre-crash and non-crash conditions are recognized and usable for developing preventive measures. MyTRIM can be used by practitioners in real-time as an independent tool to make online decision or integrated with existing traffic management systems.