Strategic risks

These highlight areas of uncertainty that could affect our ability to deliver. We actively monitor and manage these risks through targeted treatments and controls to reduce their impact.

We will be reviewing these so they reflect our expanded mandate and operating model.

Staff safety, health and wellbeing

Our people are essential to everything we do. We prioritise safety, wellbeing and a positive workplace culture. This helps us deliver core work and strategic outcomes safely.

Resources to deliver core services

We use our resources responsibly and build strong, lasting capability to support our work. This includes managing funding pressures, workforce needs, infrastructure, systems and technology.

Effective regulatory performance

Effective regulation is central to our purpose. We focus on doing the right things, in the right way, at the right time to prevent harm.

Cyber security, data security and artificial intelligence risks

We use strong governance and controls to protect our systems and information. We also support the responsible use of new technologies.

Use of science, data and insights

Science, data and intelligence guide our decision making. We are improving how we generate, analyse and use evidence. This helps us make regulatory decisions that are risk-based, timely, transparent, consistent and proportionate.

Confidence of our authorising environment

To be effective, we need stakeholders to trust us and have confidence in our actions. We manage our relationships to support our work, especially in a complex and changing policy environment.

Appropriate conduct and behaviour

As a public sector agency, we are accountable for lawful, ethical and appropriate behaviour. We set strong governance and clear expectations to protect our integrity. We also support a safe, inclusive, and high-performing workplace.

Updated