Risk Analysis & Management

Orica Enterprise Risk Intelligence Platform

Contract completion: Current application, Orica continuing to invest in riskDNA now moving hosting to the MS Azure platform in Sydney.

Design, build, implement, host and support an enterprise risk intelligence tool to be used by Orica’s 13,000 employees globally to standardise risk management processes and provide management with the ability to quantify and compare risks across disparate business units.

riskDNA includes serialisation to ensure every risk is unique, extensive charting and reporting options including ability to create a mind map, complex algorithms and inbuilt calculators to mathematically quantify risks so they can be compared, extensive colour coding for quick visual identification of risks, ability for users to set individual language preferences, validation of IP addresses for log in but still provide a guest option as well as extensive security in terms of roles and permissions

Specific activities included –

Business analysis – develop specification for system requirements [coordinate management/user group research sessions, desktop research with regard to functionality of existing applications, identify ISO 31000 requirements], develop functional requirements, identify potential risks, identify regulatory constraints. Technical strategy – design an innovative solution with enterprise architecture to manage risk in a comprehensive manner, develop an application build strategy so a core application could support multiple ‘bolt-on’ functionality improvements over time, provide multi lingual capability for 13,000 global users, design the Cloud architecture [consideration of global internet speeds, data sovereignty, system load both in terms of volume of users and processing requirements for key users, 24/7 support requirements, strategy for managing updates without taking the system down, backups and redundancy], enable remote users to work offline and strategy for associated data management issues, develop a data migration strategy as data to integrate data from multiple sources, design a mobile [iOS] application

Develop change management processes as risk management was now the responsibility of all employees.

Build and Test – develop prototype, build core application and then build additional modules [mind map, management dashboard, Permit to Work system, Job Safety Assessment tool etc], user interface design, build mobile [iOS] application, build Cloud hosting infrastructure. Setup a two stage Cloud architecture for testing and production, build test databases, develop automated test scripts to run in a Cloud hosted device farm, regression test using an automated test tool and manual testing, develop user acceptance tests. Load testing, security testing and heuristic evaluation. Provide systems and processes for quality assurance as a large team of 20 was working in parallel on the application development.

Implementation – data migration, develop user manual and in product help, develop e-learning materials and online user competency certification, one on one training for key user group, intensive post implementation support, resolve warranty defects in a timely manner, provide appropriate system documentation, document lessons learned

Support - provide level 1 support for both the application and Cloud infrastructure in a global 24/7 environment, provide SLA reporting, conduct routine application testing as well as back up and disaster recovery, continually work to refine both the application and the hosting environment to provide Client with best possible product

Project management – provide a single point of contact for project management, provide client with a fixed price quotation for all development and ensure project was delivered on time and on budget to the agreed specification. Support the client with material and statistics for board and management reports

Risk Assurance Capability

Our Member Relegen provided highly-specialised Risk Assurance Capability Services to the Australian Department of Defence SEA1770 project. The project now has greater visibility into the risks and threats which would prevent Activity and Condition Compliance Obligations (ACCO) from being achieved, as well as insight into new risks that might be introduced in meeting these obligations.

Project Background

The SEA1770 project is introducing a new fixed and deployable maritime Rapid Environmental Assessment capability to the RAN to enhance the direction, collection, processing and dissemination of tactical maritime environmental data for the conduct of joint military operations. This includes equipping deployable geospatial survey teams and mobile meteorological and oceanographic teams with environmental and survey sensors, communications and data transmission systems and equipment.

Project:

We undertook an extensive review of the new capabilities against the seaworthiness plan and delivered risk analysis and assurance services for Phase 1 of the SEA1770 project. This work provided project stakeholders and decision-makers the critical information and insights needed to understand the factors that could negatively influence the achievement of the capability as well as identify the assurance criteria which formed the controls required to reduce the likelihood of these risks being realised.

The identification of the applicable ACCO for both the Fly Away Survey Kit (FASK) and Mobile Meteorological Team (MMT) for embarked and deployable sub-systems
The development of a comprehensive Bowtie for ACCO, embarked and deployable sub-systems, which graphically identified and illustrated the threats and consequences of both failing to achieve and achieving ACCO. This also included the associated controls to manage and mitigate these threats
The identification of the key system of controls for ACCO, embarked and deployable sub-systems
The development of assurance criteria including Level and suggested frequency with which the assurance activity should occur for the identified key system of controls for ACCO, embarked and deployable sub-systems
Compliance strategy mapping for the identified key system of controls for ACCO, embarked and deployable sub-systems, which will form part of the proposed means of compliance required by the Defence Seaworthiness Management System.

OUTCOME ACHIEVED

We met and exceeded the requirements for the scope of work for its part in the SEA1770 project on time and on budget. Relegen is well-positioned to provide services for the through-life support for the new capability that will be delivered as a part of SEA1770.

The outcome of our work for SEA1770 gave Defence and Maritime the ability to make better decisions and more informed judgments concerning the extent of the risks as well as what would be needed to materially reduce the significance and impact of identified risk.