Risk Management Policy

Effective: 20 January 2020

Overview

This policy sets out Skylink network’s security measures in relevant with risk management. This policy specifies that how much and what type of risk is organization willing to take, while considering both opportunities and threats that will invariably impact the performance of the organization.

Scope

This policy applies to everyone who works for Skylink network in any capacity, full-time, part-time or casual, including temporary employees and contractors.

Principles

Skylink Networks understands that a risk-free environment is unattainable, while the level of risk associated with Skylink’s  commitments with the step to control and change.

• All departments are required to undertake risk management to ensure that risks are effectively identified, assessed and where possible, mitigated.
• Risk Registers are required and should be reported to management on termly basis and audit & risk committee on an monthly basis.
• Risk register are established for all strategic projects and are overseen and maintained by team lead.
• Determine the appropriate risk appetite (How much risk acceptable) or level of risk exposer for the organization.
• Leads are obligated to monitor the management of significant risks to reduce the likelihood of severe unexpected condition.
• Leads are obligated to monitor if the less significant risks are being actively managed, with the appropriate controls in place and working effectively.
• Annually review the organization’s risk approach to risk management and revised as per need.
• Quarterly conduct audit to compare current & previous risk control.
• All business decisions will be made with the prior information and acceptance of risk involved.
• The Risk Management Policy shall provide for the enhancement and protection of business value from uncertainties and consequent losses.
• All employees of the company shall be made aware of risks in their respective domains and their mitigation measures.
• The risk mitigation measures adopted by the Company shall be effective in the long-term and to the extent possible be embedded in the business processes of the company.

Responsibility

The IT Policy shall be implemented by the IT Administrator to maintain the above quality management systems throughout the Skylink network.

Compliance and Review

The IT Administrator  is responsible for establishing, overseeing, and assessing achievement against measurable objectives in relation to goals set out in this policy.

The IT Department is responsible for all other objectives and initiatives set out in this policy.

Infringement of this Policy

Skylink network has a long-standing commitment to conduct our business in compliance with all applicable local and international laws and regulations and in accordance with the highest ethical business principles and any violations of the policy will lead to disciplinary action up to and including dismissal of personnel/contract cancellation.

Further Information

For further information, contact with the Human Resources Department or Compliance Administrator