Wanneroo risk policy puts procurement decisions under a clearer framework

Wanneroo’s updated Enterprise Risk Management Policy has been recommended for adoption after a unanimous 8 - 0 vote, creating a clearer framework for how the City assesses risk across its activities, services and decisions.

The policy is to go to the Policy Review Committee for consideration. It was not adopted by the Audit, Risk and Improvement Committee.

The revised policy is built around AS ISO 31000:2018, the City’s Risk Appetite Statements, its Risk Assessment Criteria and Matrix, and the Enterprise Risk Management Framework. It is intended to keep City operations within the level of risk accepted by the organisation while setting clearer roles, responsibilities and accountability.

That framework applies to decision-making and service delivery areas across the City. It therefore provides the risk basis for decisions involving goods and services, suppliers and contractors, although no specific procurement decision, supplier or contract was identified in the policy recommendation.

The policy review was supported unanimously after Cr Alex Figg joined the meeting electronically. The committee accepted the marked-up draft and recommended the clean version to the Policy Review Committee for adoption.

A separate compliance follow-up concerns procurement practice. Paxon assessed the City’s 2025 Annual Compliance Audit Return against 98 questions and recommended a review of the response to question 2934, which concerns entering multiple contracts rather than one contract. The information available does not identify the contracts, suppliers, values or any resulting procurement action.

The current Risk Policy was last presented to the committee on 27 September 2022 and adopted by Council on 11 October 2022. The timing of Policy Review Committee consideration has not been stated.