Risk Management and Quality Assurance

download Risk Management and Quality Assurance

of 1

Transcript of Risk Management and Quality Assurance

  • 7/31/2019 Risk Management and Quality Assurance

    1/1

    Aim of Risk management policy

    e risk management policy aims to minimize risk in the conduct of the Institutes

    tivities and to seek appropriate opportunities in line with the Institutes strategy and

    siness plans.

    sk management is considered to be fundamental to good management practice and

    ganizational governance. Effective management of risk provides an essentialntribution towards the achievement of the Institutes strategic and operational

    jectives and goals. Considering IRRIs unique features as a research and training

    stitute, we focus on the risks related to research activities. A major response to

    search related risks is quality assurance (QA).

    ving particular attention to improving its internal quality assurance (QA) processes and

    actices, in recognition that an important subset of the Institutes risks, especially

    thin research, is managed through such processes.

    A ensures that IRRIs research outputs are of the highest verifiable quality, thus

    aintaining its reputation for scientific excellence and integrity.

    Risk management at SSDsk assessment process

    Establish context define OU objectives, identify critical factors in the environment,

    identify stakeholders, and define risk appetite

    Identify risks what can happen? How and why?

    Analyze risks risk relevance, continuity implications, nature of risks, affected

    business processes, existing control measures, and risk levels (Fig. 1)

    Evaluate risks compare against risk appetite; accept or avoid risks.

    siness continuity management process

    Planning initiation, business impact analysis (identify downtime to each key

    process)

    Define response strategies, develop continuity plans for the chosen strategy

    Develop a communication strategy; training, maintenance and testing plans;

    activation and development of plans

    MedMedMedrkplace safety

    MedLowHighMedLowHighentific misconduct

    MedLowHighHighMedHighHighMedHigh

    ayed completion of data analysis

    research reports

    LowLowMedMedMedMedMedMedMedccurate and low-quality research

    a gathered

    MedLowHighMedLowHighMedLowHigh

    ccessible research data

    ernal & External)

    HighMedHighHighHighHighHighHighHighs of research data

    MedLowHighMedLowHighMedLowHighidents during field work

    Risk

    levelRisk

    likelihood

    Risk

    impact

    Risk

    levelRisk

    likelihood

    Risk

    impact

    Risk

    levelRisk

    likelihood

    Risk

    impactRisk statement

    201220112010

    RMQA recent activities

    Business Continuity Management

    Shadow Planner Sessions

    ITLC Learning Center

    April 23-24, 2009

    RM and BCM Overview

    Sept 9, 2009

    SSD Risk Management

    Initiative Mini Workshop

    IRRI Guesthouse, Feb. 26, 2010

    Staff timeOU Head

    SSD Staff

    SSD RDM

    1.New publication Guidelines Info

    Campaign2.Enhance awareness onplagiarism

    3.Implement Data access Policyfor SSD

    Possibility of data

    fabricationCareer PressurePlagiarism

    FundingTraining

    SSD RDM

    IT Coordinator

    1. Acquisition of tablet PC2. Assessment / Development of

    tablet applications in digitalhousehold survey

    Delayed Completion ofData collection and

    analysis, processingand research reports

    Funding Workshop / Staff time

    SSD STAFF

    SSD-RDM

    1.Develops standards for data

    documentation2.Explore web tool applications

    that can monitor web accessdowntime

    Internal & External

    (DatabaseManagement)

    Funding Staff Training

    NARES Partners SSD Staff time

    SSD Staff

    Collaborating OUs

    NARES Partners andDPPC

    1.Onsite data audit

    2.Use of digital technologies in

    data collection

    Human BehaviorInadequate Levels of

    skills of some NARESpartners

    FundingStaff time

    SSD

    SAFETY

    PPS

    HRS Heads

    1.Coordinate with safety

    2.PPS3.HRS

    Slippery floors and

    stairways during rainydaysEye discomfort due totoo much glareInstallation flawcauses concern and

    discomfort

    Funding

    Training / Staff time

    Hiring of OJT

    Beta test of SSD Internal

    clearance staff form

    IT Coordinator and RMQA

    IT Coordinator

    IT Admin

    1.Dissemination of SSD Back-up

    retrieval procedure throughtraining

    2.Update SSD External BackupList and NETWIN Access.xls

    3.Develop SOP on properturnover of baseline data

    4.Issuance of external drives forbackup purposes

    Inefficient data-turn

    over of departing staffTechnological failure

    Official cell phone (with

    roaming) IRRI vehicle

    SSD staff

    IPMO IRRI out-posted staff

    1.Local travels: Provision of

    appropriate vehicles by TS basedon requirements / specification ofthe researcher

    2.International travel: Bangladeshand India: Provision of IRRI

    vehicle and driver

    Equipment failure

    Physically hazardousEnvironmentNatural calamities

    Procedure(s)/References(How the work needs to be

    done)

    Responsible(Who is responsible for

    the work)

    Action(What needs to be done)

    Trigger(Initiator)

    Action plan: recovery of SSD research data

    The SSD RMQATEAM

    SSD head Samarendu MohantySSD RMQA leader Thelma ParisSSD RMQA officer Dehner M. De Leon

    SSD RMQA TEAM MEMBERS:

    Piedad MoyaArnel RalaOrlee VelardeDonald Villanueva

    RMQA senior manager: Marichu Bernardo

    The risks encountered are monitored and graded (Table 1) through this the RMQA

    fficer would identify Evaluate the risk impacts: refer to the severity of the exposure of

    he Institute if a risk event occurred: risk likelihood refer to the probability of a risk

    ccurring, given what is known about the degree of quality of the risk mitigation

    trategies in place for a given risk. For analytical purposes, this will be measured in

    erms of Low, Medium, High.

    Through this the RMQA officer together with the key person involved would identify the

    sk nature, risk owner (responsibility), and identify the existing control measure.

    Control measures are further assess by its effectiveness, if it can be improved orevised entirely. The recovery action plans (Table 2) will consists of the supporting

    ocuments.

    SSD risk analysis process

    Fig.1. Risk Profile and

    response Strategy

    Table 2. Updated recovery action plans for SSD

    Table 1. Summary of SSD risk registers from 2010-12

    Data backup and recovery training

    May 31, 2011

    http://var/www/apps/conversion/current/rmqa/SSD_riskregister_2009.xlshttp://var/www/apps/conversion/current/rmqa/SSD_riskregister_2008.xlshttp://var/www/apps/conversion/current/rmqa/SSD_riskregister_2008.xlshttp://var/www/apps/conversion/current/rmqa/SSD_riskregister_2009.xls