The Audit Office is of the opinion that, while agencies are aware of the need to manage risk, their risk management falls short of better practice. Many agencies do not consider their risk management to be adequate. The survey suggests that some agencies, mainly those in the Public Trading Enterprise Sector have approached risk management in a systematic way and in accordance with the principles of better practice standards. Others, mainly departments not subject to commercial imperatives, have yet to progress the management of risk beyond the traditional response of insuring against the more common types of risk. Thus there is a danger that with a number of agencies, risk may not be managed adequately, especially in the General Government Sector.

Parliamentary reference - Report number #98 - released 19 June 2002