Table of Contents 1.0 Introduction 3 1.1 Background 3 1.2 Organizational Structure 4 1.3 Mission of the Business 5 1.4 Key Business Strategies 5 2.0 Identify Stakeholders 6 2.1 Internal stakeholder 6 2.1.1 Employee 6 2.1.2 Management 6 2.1.3 Shareholders 7 2.2 External Stakeholder 7 2.2.1 Customers 7 2.2.2 Suppliers 8 2.2.3 Competitors 8 2.3 Relationship between the business and its environment 8 2.4 Context of the risk management framework 9 2.5 Development of internal risk environment 10 2.6 Development of external risk environment 10 3.0 Integration risk management and developing risk framework 12 3.1 Risk Management Process 12 3.1 Risk Identification framework and Risk Area Structure 13 3.4 Risk Identification 14 3.4.1 Checklist 14 3.4.2 Brainstorming 14 3.4.3 Structure Interview 14 3.5 Risk Assessment 15 3.5.1 Human Reliability 15 3.5.2 Cause and effect analysis 15 3.5.3 Failure Mode Effect Analysis 15 3.0 Risk Register 16 Conclusion 17 Reference 18 Appendix B – Likelihood 21 Appendix C – Consequences 22 Appendix D1 – Detailed Risk Register (Risk : Very High) 23 Appendix D2 - Detailed Risk Register (Risk : High) 24 Appendix D3 - Detailed Risk Register (Risk : Yellow) 25 Appendix D4 - Detailed Risk Register (Risk : Green) 26

Figures Figure 1: Organizational Structure 4 Figure 2 : AS/NZS ISO 31000:2009 12 Figure 3 : Risk Identification Framework 13 Figure 4 : Risk Register Matrix 16 Figure 5 : Store Location Error! Bookmark not defined. Figure 6 : Store Format Error! Bookmark not defined. Figure 7 Likelihood 21 Figure 8 Consequences 22 Figure 9 : Detailed Risk Register (Risk : Very High) 23 Figure 10 : Detailed Risk Register (Risk : High) 24 Figure 11 : Detailed Risk Register (Risk : Yellow) 25 Figure 12 : Detailed Risk Register (Risk : Green) 26

1.0