澳大利亚风险管理标准_2

AS/NZS4360:2004RISKMANAGEMENTAustralian/NewZealandStandard®RiskmanagementAS/NZS4360:2004ThisJointAustralian/NewZealandStandardwaspreparedbyJointTechnicalCommitteeOB-007,RiskManagement.ItwasapprovedonbehalfoftheCouncilofStandardsAustraliaon21July2004andonbehalfoftheCouncilofStandardsNewZealandon20August2004.ThisStandardwaspublishedon31August2004.ThefollowingarerepresentedonCommitteeOB-007:AustralianComputerSocietyAustralianCustomsServiceAustraliaNewZealandInstituteofInsuranceandFinanceCSIRO(CommonwealthScientificandIndustrialResearchOrganisation)DepartmentofDefence(Australia)DepartmentofFinanceandAdministrationEmergencyManagementAustraliaEnvironmentalRiskManagementAuthority(NewZealand)InstituteofCharteredAccountants(Australia)InstitutionofEngineersAustraliaInstitutionofProfessionalEngineersNewZealandLocalGovernmentNewZealandMasseyUniversity(NewZealand)MineralsCouncilofAustraliaMinistryofAgricultureandForestry(NewZealand)MinistryofEconomicDevelopment(NewZealand)NSWTreasuryManagedFundNewZealandSocietyforRiskManagementRiskManagementInstitutionofAustralasiaSafetyInstituteofAustraliaSecuritiesInstituteofAustraliaUniversityofNewSouthWalesVictorianWorkCoverAuthorityWaterServicesAssociationofAustraliaThisStandardwasissuedindraftformforcommentasDR03360.OriginatedasAS/NZS4360:1995.Secondedition1999.Thirdedition2004KeepingStandardsup-to-dateStandardsarelivingdocumentswhichreflectprogressinscience,technologyandsystems.Tomaintaintheircurrency,allStandardsareperiodicallyreviewed,andneweditionsarepublished.Betweeneditions,amendmentsmaybeissued.Standardsmayalsobewithdrawn.ItisimportantthatreadersassurethemselvestheyareusingacurrentStandard,whichshouldincludeanyamendmentswhichmayhavebeenpublishedsincetheStandardwaspurchased.DetailedinformationaboutjointAustralian/NewZealandStandardscanbefoundbyvisitingtheStandardsWebShopat©StandardsAustralia/StandardsNewZealandAllrightsarereserved.Nopartofthisworkmaybereproducedorcopiedinanyformorbyanymeans,electronicormechanical,includingphotocopying,withoutthewrittenpermissionofthepublisher.JointlypublishedbyStandardsAustraliaInternationalLtd,GPOBox5420,Sydney,NSW2001andStandardsNewZealand,PrivateBag2439,Wellington6020.AS/NZS4360:2004RiskmanagementiiiPrefaceThisStandardwaspreparedbytheJointStandardsAustralia/StandardsNewZealandCommitteeOB-007,RiskManagementasarevisionofAS/NZS4360:1999,Riskmanagement.Itprovidesagenericframeworkforestablishingthecontext,identifying,analysing,evaluating,treating,monitoringandcommunicatingrisk.ThisrevisedStandardincorporatestheinsightsgainedthroughtheapplicationofthe1999edition,andcurrentthinkingonriskmanagement.Someofthechangesfromthe1999editioninclude—greateremphasisontheimportanceofembeddingriskmanagementpracticesintheorganization’scultureandprocesses;greateremphasisonthemanagementofpotentialgainsaswellaspotentiallosses;andmovingandexpandingindicativeexamplesintoanewhandbook.HB436,RiskManagementGuidelines—CompaniontoAS/NZS4360:2004containsspecificguidanceontheimplementationoftheStandard.Thetwodocumentsareintendedtobeusedtogether.Inaddition,StandardsAustraliaandStandardsNewZealandhavepublishedarangeofhandbooksonthewaytheriskmanagementprocesscanbeappliedinavarietyofsectorsandarangeofsubjectareas.AS/NZS4360:2004RiskmanagementivContents1Scopeandgeneral.....................................................................11.1Scopeandapplication.................................................11.2Objective....................................................................11.3Definitions..................................................................21.4Terminologyandtranslation.......................................61.5Referenceddocuments................................................62Riskmanagementprocessoverview..........................................72.1General.......................................................................72.2Mainelements.............................................................73Riskmanagementprocess.......................................................113.1Communicateandconsult.........................................113.2Establishthecontext.................................................123.3Identifyrisks.............................................................163.4Analyserisks.