Risk management policy


1. HPA is a certified quality supplier, compliant with AS/NZ ISO 9001:2008. We also use the Australian Standard for Risk Management, AS/NZS 3001:2009, and the Project Management Body of Knowledge (PMBOK) project management standard.

2. Health Policy Analysis is committed to the management of risk to continue to protect its:

  • Clients and stakeholders
  • Employees and subcontractors, and their skills
  • Intellectual property
  • Environment
  • Quality of service
  • Assets
  • Contractual and statutory obligations
  • Image and reputation.

3. Risk management is a key part of improving our business and services to be a leading organisation. Our aim is to achieve best practice in controlling all the risks to which our business is exposed.

4. To achieve this aim, risk management standards have been created, and will be maintained and continually improved. This will involve risk identification and risk evaluation linked to practical and cost-effective risk control measures commensurate with our business.

5. Health Policy Analysis’ risk management approach and process will follow that outlined by the Australian Standard for Risk Management, AS/NZS ISO 31000:2009.

6. Risk management is a continuous process demanding awareness and proactive action from all Health Policy Analysis’ employees and outsourced service providers (subcontractors and other suppliers) to reduce the possibility and impact of accidents and losses, whether caused by Health Policy Analysis or externally.

7. Risk management is a core responsibility for all members of Health Policy Analysis. Suitable risk management activities will be incorporated into our business planning, operations and the management of our subcontractors and service providers. The scope of these activities will encompass:

  • Education and training in risk management for staff.
  • Developing risk management standards.
  • Processes for ongoing identification and monitoring of risks, and elimination of risks where possible.
  • Helping to prioritise and schedule risk control improvements.

8. Our challenge for the future is to infuse risk management into our culture, our everyday business operations and those of our subcontractors and business partners. Everyone’s involvement and support is critical to an effective result.