The Corporation of the Town of Oakville · Policy A-BMG-001

Integrated Risk Management

Policy Number:
Business Management
Internal Audit Department and CAO's Office
Effective Date:
2009 Mar 02
Review by Date:
Last Modified:
2016 Dec 12

References and Related Documents

A-BMG-001-002 Business Continuity Management
A-BMG-001-003 Purchasing Card Operating System
Insurance Risk Management
IS&S Disaster Recovery Plan
Emergency Management Plan
Risk Management Process

Policy Statement

The Corporation of the Town of Oakville (town) is committed to the effective management of risk at every level within the town, including any risks specified under the Municipal Act, 2001 and its regulations.


The town is committed to embedding and integrating an explicit, proactive, sustainable and systematic approach to minimizing and managing risks that impact the town's ability to achieve its objectives.


This Policy applies to all town employees, elected officials, and local boards as deemed appropriate.  Risk management will incorporate plans for Business Continuity Management, Insurance Risk Management, Emergency Management and other plans established to mitigate risk.


Integrated Risk Management - is the process of identifying, assessing and developing management strategies to deal with events and circumstances that could impact the Town's achievement of its objectives.

Impact - the outcome of an event expressed in qualitative or quantitative terms (for example operational, financial, legal, and reputational) being a loss, injury, disadvantage or gain.

Risk - is an event or circumstance having a cause or a consequence that could be either positive or negative. Risk is measured in terms of probability and impact. In the context of Integrated Risk Management for the Town, Risk encompasses the following three dimensions: