The Commonwealth Risk Management Policy (CRMP) requires accountable authorities of Commonwealth entities to establish and maintain appropriate systems and internal controls for the oversight and management of risk.
This instrument, signed by the Australian Information Commissioner, appoints an OAIC staff member in the role of the Chief Risk Officer with responsibilities to advise on appropriate systems of risk oversight and management, and internal control for the OAIC.