As previously noted in my response to PQ ref: 23857/26, my Department has identified the All Island Institute of Public Health (IPH) as the only non-statutory body that receives funding directly from the Department. Therefore, the application of a formal risk assessment or risk-rating model has not arisen. Responsibility for risk management is a matter for the body itself.
I propose to take Questions Nos. 1062 and 1181 together.
In terms of the procedures in place where governance, safeguarding or financial risks are identified, and the required frequency of reporting, the IPH oversight agreement states that Governance and Oversight meetings shall be conducted four times per year. These provide the opportunity for formal reporting against the Performance Delivery Agreement, activities and spending agreed in the annual Business Plan. The IPH reports on progress, challenges, risks and financial activity. At these meetings the IPH is required to provide a Risk Register. The oversight agreement between the two sponsor Departments and the IPH has defined escalation procedures and points of contact.