Document ID: chunk:federal_register_of_legislation:F2013L01183:reg:9
Version: federal_register_of_legislation:F2013L01183
Segment Type: reg
Provision Reference: reg 9
Character Range: 8121–9640

9                         Risk management function
(1)          The Board must designate a part of the Agency or a person in the Agency that, at a minimum:
(a)          is responsible for assisting the Board, committees of the Board and the senior management of the Agency to develop and maintain the risk management framework; and
(b)          is appropriate to the size, operations and complexity of the NDIS; and
(c)          is operationally independent, meaning that they are not directly involved in the Agency's functions in relation to the funding or provision of supports under the NDIS; and
(d)          is conferred with the authority and the access to the Board, committees of the Board and senior management of the Agency, necessary to conduct its activities effectively and independently; and
(e)          is resourced with staff who have clearly defined roles and responsibilities and the experience and qualifications appropriate to those roles and responsibilities; and
(f)           has access to all aspects of the Agency that have the potential to generate material risk, including information technology systems and system development resources; and
(g)          is required to notify the Board of any significant breach of, or material deviation from, the risk management framework.
(2)          The first designation of a person or body under subsection (1) must take place as soon as reasonably practicable after the commencement of these Rules.

Part 5             Risk management declaration