JavaScript is required

Our risk management

DPC is committed to strong and effective risk management to support our role in shaping whole-of-government policy, public-sector stewardship and delivering priority reforms. Risk management is embedded in our planning, policy and operations, and is aligned with the Victorian Government Risk Management Framework, the Standing Directions 2018, and the Australian/New Zealand Standard on risk management.

We maintain a department-wide Risk Management Framework that is reviewed annually and ensures the consistent identification, assessment and treatment of risks across all areas of the department. Risk is integrated into business planning, governance, policy development and service delivery, using both formal and fit-for-purpose risk assessment methods, depending on the nature, scale and urgency of the decision. This ensures that risk-informed decisions support positive outcomes for the Victorian community.

Roles and responsibilities are clearly defined with our enterprise risks centrally monitored and overseen by the independent Audit and Risk Committee and the department’s executive Board of Management. Business units are responsible for managing operational and project-level risks. Structured reporting and escalation processes ensure risks, including those emerging, are subject to regular reviews. Business units are responsible for identifying and managing operational and project-level risks, while enterprise risks are monitored centrally.

We work closely with other agencies to manage shared risks, recognising that interdependencies across government require coordinated mitigation strategies. DPC contributes to collective risk oversight through collaboration on cross-cutting issues such as cyber security, integrity and service-delivery reform.

Risk awareness is built through capability development, training, and practical tools. Staff are supported to raise and manage risks, and leaders are equipped to make risk-informed decisions, implement mitigations and seek expert advice where required.

DPC’s risk culture is defined by accountability, openness and a shared commitment to continuous improvement. While the department accepts a moderate level of operational risk to support innovation and reform, it maintains a low tolerance for risks that could impact public trust, integrity or the safety of its people.

By embedding sound risk management across the organisation, DPC ensures it remains agile, responsive and well-positioned to advance the interests of all Victorians.


Updated