Risk management
The types of risk Just Gold manages and how risks are assessed, recorded and escalated.
Easy Read
This policy is about managing risk.
Risk means something that could go wrong.
We look at 6 kinds of risk.
They include money, the law, safety and our reputation.
We check risk when we plan projects and choose suppliers.
Big projects keep a risk register.
A risk register is a list of risks and how we manage them.
Projects over $50,000 must keep one.
Risky suppliers need CEO approval.
In plain language
Just Gold looks at six kinds of risk, from money and legal risk to people's safety and reputation. Risk is checked when we scope projects and choose suppliers. Every project over $50,000, or that represents people publicly, must keep a live risk register. High risk suppliers and partnerships need CEO approval. The Board reviews enterprise risks once a year.
Full policy
Section 5: Risk, crisis and compliance
When things go wrong, our values matter most. This section outlines how we assess risks, respond to crises, and ensure legal and ethical compliance. It helps protect our people, partners, and purpose under pressure.
Policy statement
Risk is part of innovation, but unmanaged risk is negligence. This policy outlines how Just Gold anticipates, documents, and mitigates risk across people, projects, systems, and reputation.
Risk types covered
- Strategic: Client alignment, project scope, market positioning
- Operational: IT failure, delays, system outages
- Financial: Budget overrun, supplier issues, funding withdrawal
- Legal and compliance: Contract breaches, regulatory violations
- People and safety: Team conflict, burnout, discrimination, unsafe conditions
- Reputational: Online backlash, public misrepresentation, media exposure
Risk management process
- Risk is assessed during project scoping, procurement, and governance reviews.
- All significant projects require a risk register with ratings and controls.
- Emerging risks are discussed in weekly leads meetings or escalated to the CEO.
- High risk suppliers or partnerships must be approved by the CEO.
Documentation
- All projects over $50,000 or involving public representation must have a live risk register.
- Serious risks or incidents must be logged in the central risk and compliance register.
- Annual enterprise risk reviews are tabled with the Board.
Application
Applies across all operations, partnerships, and programs. Risk documentation tools are listed in Glossary and tools.
- Status
- Under review
- Version
- 2.0
- Last updated
- 14 May 2025
- Effective date
- 14 May 2025
- Review date
- March 2027
- Owner
- CEO, Just Gold