Risk oversight and management

decorative

Our approach to risk management is not about stopping or preventing action, it is about empowering staff to engage with risk to support informed decisions. We are committed to developing a positive risk culture where all staff confidently engage with risk as part of their day-to-day work and can adapt when responding to uncertainties and opportunities.

IP Australia’s Risk Management Framework includes:

  • Accountable Authority Instructions — sets out instructions from the Director General on managing risk within IP Australia.
  • Risk Management Policy and Framework — defines IP Australia’s approach to the management of risk, including our attitude to and objectives for risk management.
  • Risk Management Plan — ensures that risk management processes are efficiently integrated into day-to-day work.
  • Risk objectives, appetites, and tolerances — supports staff to identify, monitor and treat risk and make decisions aligned to the Executive Board’s expectations.
  • Information sheets — provides a pragmatic, simple and consistent approach to help staff manage risk.

Our staff are encouraged to pursue, retain and accept risks that have been well considered within the bounds of the agency's appetite for risk and their personal responsibility and accountability limits. This is done in an open and transparent manner to reduce threats and seize opportunities for the benefit of the agency.

To support effective governance, we embed risk management through the following business processes:

  • risk management and assessment systems to support business processes including project and program management, AI/ADM governance, integrity, change management, procurement and contract management
  • enterprise resilience framework
  • strategic and operational planning
  • alignment to our regulatory performance framework
  • audit and assurance program
  • consideration of risk management as standing items at quarterly Executive Board meetings, governance committee meetings and twice per year at IP Australia’s Audit Committee.

Our staff receive ongoing support and development to help them implement the Risk Management Policy and Framework and achieve the desired level of risk maturity. 'Engage with risk' is a core capability for all staff. Individual performance and development plans are used to directly engage with risk capability development. Structured and ad hoc learning and development processes support the framework. These are aimed at all stages of the learning journey, from induction through to Senior Executive Service-specific programs. We seek insights into our risk management culture through our internal audit program and other benchmarking activities.

Strategic risks

We face a broad range of risks reflecting our responsibilities as an administrator, service provider and regulator for Australia's IP rights system. The following categories of strategic risk are used to measure and monitor threats and opportunities that may impact the achievement of our Strategic Objectives and Purpose.

IP Ecosystem

Risk objectives

We are committed to fostering a thriving IP ecosystem that encourages innovation, achieves government objectives, and adds value to the global IP community, rights holders and the Australian public and economic interest. We uphold the integrity of the system and keep it safe from abuse.

Risk response

We have established processes for the identification and prioritisation of policy issues to ensure the IP legislative framework keeps pace with what we are doing and what is happening within the broader IP ecosystem. This is governed by our Strategic Policy and International Committee.

Confidence

Risk objectives

As an administrator and service provider for Australia’s IP rights system we are committed to delivering high-quality and timely IP rights. Our customers have confidence in our ability to meet their needs. Customers can easily interact with our services and have access to accurate information and data.

Risk response

The production of high-quality IP rights is critical to our work and is supported through the implementation of our Quality Management System. The Information and Data Committee oversees the governance of information and data management within the agency.

Customer and Stakeholder Engagement

Risk objectives

We engage effectively with a diverse range of customers and stakeholders, domestically and internationally. We focus on collaboration and meaningful engagement to improve our effectiveness, performance and to expand our sphere of influence.

Risk response

We have strategies and procedures in place to manage and implement activities to support the growth and sustainment of relationships with customers, stakeholders and partners.

Governance

Risk objectives

We meet and administer our legislative responsibilities, follow whole-of-government policy and advice, adhere to our Accountable Authority Instructions, and maintain relevant certifications.

Risk response

We have established frameworks, and underpinning policies and procedures, to govern IP Australia in accordance with our legislative obligations. The Executive Board has responsibility for implementation, and our annual internal audit program and Audit Committee provide independent advice.

Financial

Risk objectives

We invest strategically to ensure our long-term financial sustainability and build our capacity to adapt to the changing needs of our customers and stakeholders.

Risk response

Our established governance arrangements, financial management practices and internal controls, enable us to monitor, manage and report on our entity's financial performance and sustainability. These activities are overseen by our IIPC. Independent assurance and advice are provided through our internal audit program, and Audit Committee.

People and Technology

Risk objectives

Our diverse, agile and capable workforce delivers value to the Australian community and our international partners. Modern technology solutions enable innovative ways of working and sector-leading flexible working options ensure we are an employer of choice.

Risk response

Our People Strategy was created to leverage our existing workforce and to ensure we can meet future workforce needs and capabilities. The People Strategy Committee is responsible for the governance of workforce issues.

Risk appetite

We support Australia's innovation system by delivering world-leading IP services that are modern, effective and efficient to enable all Australians benefit from great ideas. We recognise it is not possible, or necessarily desirable, to eliminate risks inherent in our activities. Our risk appetites reflect these principles, are aligned to our strategic risks, and embedded into organisational decision-making. Our risk appetites and tolerances are updated dynamically to reflect our operating environment and staff are supported to make decisions reflecting established appetites, tolerances, and risk escalation framework.