Integrated Risk Management Policy

Related procedures

Business Continuity Procedure
Purchasing Card Operating System Procedure

Policy statement

The Corporation of the Town of Oakville (town) is committed to the effective management of risk at every level within the town, including any risks specified under the Municipal Act, 2001 and its regulations.


The town is committed to embedding and integrating an explicit, proactive, sustainable and systematic approach to minimizing and managing risks that impact the town's ability to achieve its objectives.


This Policy applies to all town employees, elected officials, and local boards as deemed appropriate.  Risk management will incorporate plans for Business Continuity Management, Insurance Risk Management, Emergency Management and other plans established to mitigate risk.


Integrated Risk Management: is the process of identifying, assessing and developing management strategies to deal with events and circumstances that could impact the town's achievement of its objectives.

Impact: the outcome of an event expressed in qualitative or quantitative terms (for example operational, financial, legal, and reputational) being a loss, injury, disadvantage or gain.

Risk: is an event or circumstance having a cause or a consequence that could be either positive or negative. Risk is measured in terms of probability and impact. In the context of Integrated Risk Management for the town, Risk encompasses the following three dimensions:

  • Hazard - preventing an exposure from turning into a loss,
  • Uncertainty - coping with volatility and change, and
  • Opportunity - harnessing opportunities to the Town's advantage.

Policy details

Policy Number: A-BMG-001
Section: Administration
Sub-Section: Business Management
Author: Internal Audit Department and CAO's Office
Authority: Council
Effective Date: 2009 Mar 02
Review by Date: 2021
Last Modified: 2016 Dec 12


Insurance Risk Management
I.S. Disaster Recovery Plan
Emergency Management Plan
Risk Management Process