Compliance Prioritisation
The University prioritises both compliance drivers and obligations to ensure its responses (i.e. implementation of control procedures, levels of monitoring, reporting requirements and resource allocation) are proportionate to the risks faced and value-adding.
Compliance drivers will be prioritised based on two elements:
• Classification, and
• Failure/risk rating.
Classification is based on the scope and breadth of impact on the University. The levels are:
Level 1
University-wide concern. Impacts on reputation and funding.
Level 2
University-wide requirement. Lower impacts.
Level 3
Centrally managed, local area(s) requirement.
Level 4
Local area requirement, managed locally .
Level 5
Compliance expected, not reportable.
All compliance obligations have a mandatory component and must be addressed. Compliance therefore uses the risk management methodology to assess the obligation, rate the failure/risk of non-compliance and to prioritise the application of its responses.