Risk Management Flashcards
Risk Management Process
- Identify risks
- Assess/analyze risks.
- Manage risks.
- Review risks.
5 Risk Areas
- Compliance - Legal
- Continuity
- Security
- Safety and Health
- Privacy in the Workplace
HR Audit
Can be used to see what HR functions need to be done, to identify opportunities for improving business results, and to identify organizational risks, A comprehensive audit reviews HR activities in all functional areas.
auditing strategy - organization of HR function
- Reviews org chart
- Verifies the existence of current job descriptions for all departmental positions and ensures the existence of clear accountability for different functions.
- evaluate the size and effectiveness of the HR team, ratio of HR staff to total employees, commitment to professional development for the team, and how well the team meets customer needs.
- HR programs align to organizational goals
- reviews the HCMP
- evaluates the departmental mission statement
- analyzes the budget.
auditing workforce planning and employment
- Examines the recruiting philosophy and process
- whether the company promotes from within
- job posting and candidate sourcing procedures and the approval process
- existence and status of affirmative action and diversity programs
- review of the staffing needs analysis and its use in projecting the availability of candidates for future needs is based on labor market demographics
- Verifies the job analysis process and whether job descriptions include essential job functions
- The selection process is also examined.
auditing development
- Looks at learning and development practices and programs
- the existence of regular training
- performance management practices.
- evaluation process is assessed for adequacy, equity, and content.
auditing compensation and benefits
- Reviewed for consistency with the practices and level of communication
- Adequacy of compensation procedures is examined, and the frequency of salary survey comparisons is analyzed
- Salary administration practices, including pay ranges, compression, salary budgets, and incentive pay practices, are reviewed
- Benefits are compared to competitor programs
- Health care programs are analyzed.
- Programs for controlling absenteeism, unemployment, and other costs are analyzed
- Time off policies and accrual practices are also examined.
auditing employee relations
- Assess the org’s ER philosophy for alignment with corporate goals and reviews practices for conflict-resolution and disciplinary procedures.
- Communication philosophy is reviewed, and written tools, such as handbooks, policies, procedures, work rules, code of conduct, and behavior expectations, are examined.
- Orientation programs are assessed for content and frequency.
- Absentee rates and turnover demographics are analyzed
- exit-interview practices and reporting are examined.
- Procedures for voluntary and involuntary org exits are reviewed.
- Diversity practices are analyzed.
auditing labor relations
Existence of labor unions, collective bargaining agreements, and union-avoidance practices are examined.
auditing risk management
Legal compliance for all applicable federal, state, and local governments are reviewed. Safety, health, and wellness programs are analyzed.
workplace investigation
conducted when management receives complaints about inappropriate or unlawful behavior; identifies a potential financial loss from embezzlement or theft; receives accusations about an employee; or becomes aware of some other type of loss.
steps for workplace investigations
- Begin planning the investigation immediately after receiving the complaint
- Determine whether an employee or third-party investigator would be the most appropriate for the situation.
- Develop a clear strategy before beginning to collect evidence or conduct interviews.
- Compile a list of individuals to be interviewed and documentation to be collected.
- Prepare a list of questions based on the information presented by the complainant.
- Conduct interviews, ask each interviewee to provide a signed, written statement, or to sign your notes after each interview. Interview the complainant first, then interview witnesses, then interview the accused.
- Make a note of the interviewee’s demeanor and openness at the end of each interview but do not add personal opinions or judgments
- Stress the importance of confidentiality for the integrity of the investigation, and reiterate company policy with regard to retaliation against accusers and witnesses.
- At the conclusion of the interview with the accused, clearly state that retaliation or intimidation of those interviewed during the investigation isn’t acceptable and that the accused shouldn’t attempt to discuss the situation with the complainant or witnesses.
- If the accused provides an alternate description of events, completely investigate the new information, re-interviewing witnesses if necessary.
- Conclude the investigation. Make a finding of fact based on the evidence obtained and observations during the interviews, include any relevant documentation that supports your finding, evaluate possible reasons for false accusations and the credibility of those involved, and notify the complainant and the accused of the results of the investigation.
- As appropriate, take disciplinary action consistent with the org’s policy.
- If there is no clear finding, explain and document the finding.
- Compile and close the investigation file, including signed statements from witnesses, complainant, and accused; relevant documentation, and the original handwritten notes with transcribed copies.
- Communicate resolution only to those who have a need to know.
- If necessary, and without violation of those involved, take appropriate action to subdue rumors.
risk assessment
The process used to determine the likelihood that an organization will be affected by a particular risk. An assessment estimates the cost of the loss if one should happen and the impact it would have on the ability of the organization to continue operations. With this knowledge, it’s possible to identify which losses are most likely to occur and what controls must be in place to prevent them. Identifying and ranking risks provides organizations with the opportunity to be proactive and implement controls to prevent losses.
risk related to perceived disability and ADA protection
If an employer believes an employee has a disability and believes that the disability would limit the employee’s ability to perform his or her job duties, causing a danger to himself or others, the employer could be liable for discrimination.
- A disability must be real, not perceived, for management to take action.
- The disability must actually impact the employee’s ability to perform essential job functions.
- Employers must engage in an interactive process to search for reasonable accommodations.
- Reasonable accommodation would result in an undue hardship to the employer.
caregiver discrimination or childcare discrimination or family-responsibility discrimination
EEOC guidelines describe circumstances that constitute unlawful disparate treatment of caregivers:
- disparate treatment of female caregivers when compared to male caregivers (not hiring women with preschool children)
- stereotyping female caregivers (denying a promotion to women with young children based on the assumption that she can’t move)
- pregnancy discrimination
- discriminating against male caregivers (giving women leave but not men)
- discriminating against employees providing care for disabled persons
Sarbanes-Oxley Act (SOX)
SOX requires info that materially affects an org’s financial status to be reported to the SEC when the org becomes aware of the info. For HR, this includes:
- ensuring that material liabilities from pending lawsuits or settlements of employment practices claims are reported in financial statements
- participating in the review and testing of internal controls for hiring, compensation, and termination processes.
- reporting immediately any material changes to the org’s financial condition (such as settlement of a class action lawsuit)
SOX and Whistleblower Retaliation
SOX prohbits employers from retaliating against whistle-blowers who report financial conduct they reasonably believe violates federal laws designed to protect shareholders from fraudulent activity.
Drug Free Workplace Act of 1988
Applies to businesses with fed contracts of $100k or more. Contractors must:
- develop and publish a written policy
- establish an awareness program
- notify employees about contract conditions
- notify the contracting agency of violations
- establish penalties for illegal drug convictions
- maintain a drug free workplace
Basically, if an employee has a conviction of a criminal drug offense, they must inform their employer within 5 days, who must then notify the contracting agency within 10 days of being informed. Within 30 days of being informed, the employer must take disciplinary action or require participation in a drug rehab program.
Occupational Health and Safety (OSH) Act of 1970 - general duties
Three simple duties:
- Employers must provide every employee a place to work that is free from recognized hazards that are causing or are likely to cause death or serious physical harm
- Employers must comply with all safety and health standards disseminated in accordance with the act
- Employees are required to comply with occupational safety and health standards, rules, and regulations that impact their individual actions and behavior.
OSHA
Agency that enforces the OSH Act. Has authority to develop and enforce mandatory standards applicable to all businesses engaged in interstate commerce. This is all businesses except mines (covered separately), sole proprietors without employees, and family farms.
National Institute of Occupational Safety and Health (NIOSH)
Originally part of Dept of Health and Human Svcs, now part of CDC created by the OSH Act. Charged with researching and evaluating workplace hazards and recommending ways to reduce the effect of those hazards on workers. Also supports education and training in occupational safety and health by providing educational materials and training aids.
equipment under the OSH Act
Employers are expected to take steps to minimize or reduce hazards; ensure that employees have and use safe tools, equipment, and personal protective equipment (PPE); and ensure that the tools and equipment are properly maintained
communication under the OSH Act
Employers are responsible for informing all employees about OSHA, posting the OSHA poster in a prominent location, and making employees aware of the standards that apply in the workplace. If employees request a copy of the standard, the employer must provide it to them.
potential hazards under the OSH Act
Appropriate warning signs that conform to the OSHA standards for color coding, posting, or labels must be posted where needed to make employees aware of potential hazards.