www.hanrickcurran.com.au
Risk Management
for Professional Services
March 2017
2experience. new thinkingexperience. new thinking 2
An introduction to the fundamental concept
Basics of Risk Management
3experience. new thinking
Source: Queensland State Archives, Customs House, c. October 1926
4experience. new thinkingexperience. new thinking 4
Definitions for risk management are drawn from
a number of different sources, but commonly
are drawn from international standards.
Definitions for risk management
5experience. new thinking
Risk defined (Macquarie)
1. exposure to the chance of injury or loss; a hazard or
dangerous chance
2. to expose to the chance of injury or loss, or hazard
Source: The Macquarie Dictionary
6experience. new thinking
International Standard
Risk is the effect of
uncertainty on objectives
Source: ISO 31000:2009
Source: ISO Guide 73:2009
7experience. new thinking
ISO Guide 73:2009
 Definitions and
vocabulary set out in
the guide that
accompanies the
standards
Source: ISO 31000:2009
Source: ISO Guide 73:2009
8experience. new thinking
Where risk standards are defined
Source: Standards Australia, www.standards.org.au
9experience. new thinking
Where risk standards are defined
Source: www.infostore.saiglobal.com and www.iso.org
10experience. new thinking
Risk Management Relationships
Source: ISO 31000:2009
11experience. new thinking
Risk Management Process
Identification
Analysis
Evaluation
Treatment
Monitoring
12experience. new thinking
Source: www.coso.org
13experience. new thinkingexperience. new thinking 13
Hanrick Curran’s journey into risk management
commenced long ago but become more formal
as the Firm responded to legislative and
professional changes
The Risk Management Journey
14experience. new thinking
CLERP 9
Source: www.legislation.gov.au
15experience. new thinking
Audit partnership goes corporate
16experience. new thinking
APES 325
 Preceded by ASQC1
about quality control
for audit firms
 Mandates risk
management
frameworks for
accounting practices
Source: www.apesb.org.au
17experience. new thinking
18experience. new thinking
CAANZ support
Source: Chartered Accountants Australian & New Zealand
19experience. new thinking
Source: www.qls.com.au
20experience. new thinkingexperience. new thinking 20
Establishing a Risk Management System (RMS).
Risk identification, assessment and mitigation.
Establishment of a RMS
21experience. new thinking
Place in the Firm
Source: Westpac Corporate Governance Statement
22experience. new thinking
23experience. new thinking
Committee Membership
Practice
manager
HR
Partners
24experience. new thinking
Meeting schedule
Jan Feb Mar Apr May Jun Jul Aug Sept Oct Nov Dec
  
  {} 
25experience. new thinking
Primary purpose of the Committee
 Ensuring clients get
looked after
 Protecting the
partners investments
Monitoring
OversightAdvice
26experience. new thinking
Managing professionals
27experience. new thinking
David Maister
“Are Law Firms manageable?”
Source: www.davidmaister.com
28experience. new thinking
How wrong can it go?
Source: ABC Learning Centres Ltd, 2007
29experience. new thinking
Establishing the risk register
Context
Identification
AssessmentResponse
Monitoring
30experience. new thinking
Risk categories
 Business
 Regulatory
 Technology
 HR
 Governance
 Stakeholders
 Financial
31experience. new thinking
Risk Management Register
Source: Hanrick Curran Risk Register
32experience. new thinking
Risk management systems
33experience. new thinking
Professional Risk
Source: Hanrick Curran Risk Register
34experience. new thinking
International Standard
Risk is the effect of
uncertainty on objectives
Source: ISO 31000:2009
Source: ISO Guide 73:2009
35experience. new thinking
Professional Risk
Source: Hanrick Curran Risk Register
36experience. new thinking
Assessment criteria
37experience. new thinking
Professional Risk
Source: Hanrick Curran Risk Register
38experience. new thinking
Professional Risk
Source: Hanrick Curran Risk Register
39experience. new thinking
Professional Risk
Source: Hanrick Curran Risk Register
40experience. new thinking
Residual risk ratings
41experience. new thinking
Professional Risk
Source: Hanrick Curran Risk Register
42experience. new thinking
Risk response options
Source: Hanrick Curran Risk Register
43experience. new thinking
Professional Risk
Source: Hanrick Curran Risk Register
44experience. new thinking
Other risks
 Data security
 Office disasters / office damage
 Social media fails
 WHS issues
 Failure of key clients / projects
45experience. new thinking
Benefits of risk management
Benefits Disadvantages
46experience. new thinking
When do you need to start this?
 $2 million in revenue?
 $5 million in revenue?
 $10 million in revenue?
“Consider a phased
approach to
implementing a risk
management system …
 2 partners?
 5 partners?
 10 partners?
47experience. new thinking
Source: www.qls.com.au
What are the alternatives?
“Working on the practice,
not in the practice …
48experience. new thinkingexperience. new thinking 48
The process of establishing the ‘rules of
engagement’ for clients, for setting expectations
and agreeing what services we have been hired
to provide.
Client Engagement
49experience. new thinking
Professional requirements
 APES 110 Code of Ethics for Professional
Accountants
 APES 305 Terms of Engagement
 ASA 210 Agreeing the Terms of Audit
Engagements
Source: www.apesb.org.au and www.auasb.gov.au
50experience. new thinking
LPA requirements for client
engagement
Source: Legal Profession Act 2007
51experience. new thinking
Client engagement
Source: “Karma Business” by Mike Keene and “The Trusted Advisor” by David Maister
Share
Refine
Propose
Deliver
Engage
Listen
Frame
Envision
Commitment
52experience. new thinking
Terms & Conditions
Source: Hanrick Curran standard terms and conditions (version 7, November 2016)
53experience. new thinking
Terms & Conditions
Source: Hanrick Curran standard terms and conditions (version 7, November 2016)
54experience. new thinking
Terms & Conditions
Source: Hanrick Curran standard terms and conditions (version 7, November 2016)
55experience. new thinking
Problems
Non-
conformance
Client
expectation
gap
Staff/Partner
obstinacy
System
complexity
Changing
legal
requirements
56experience. new thinkingexperience. new thinking 56
Some personal insights into a professional
career, with some tips for survival.
Managing pressure & expectations
57experience. new thinking
Asset structuring
 Of course …
“Who do you trust more, your partners or
your wife?”
58experience. new thinking
The speed of email …
59experience. new thinking
60experience. new thinking
Source: http://www.qls.com.au/For_the_profession/Love_Law_Live_Life
61experience. new thinking
Source: www.headsup.org.au
62experience. new thinking
63experience. new thinking
Email notifications, set to off
64experience. new thinking
65experience. new thinking
Kaizen
Source: David Allen & Stephen Covey
66experience. new thinking
Audit team reading list
Source: Hanrick Curran audit team reading list
67experience. new thinking
Summary …
 Risk is dealing with
uncertainty and its impact on
objectives.
 A risk management system
can serve as a catalyst to
formalising certain
management systems.
 You can start dealing with
risk by simply putting the
matter on the agenda for the
next partners meeting.
 The benefits of looking at,
and thinking about, risk
outweigh the loss of time
involved.
 It does make sense to
document the issues that
you are looking at.
 Start by using some of the
Law Society resources to
identify areas for
improvement.
68experience. new thinkingexperience. new thinking 68
We welcome your questions regarding the
contents of our presentation and the issues
associated with risk management.
An opportunity for questions
69experience. new thinking
Matthew’s details
Source: LinkedIn
Matthew chairs the HC Risk
Management Committee, with a
focus on ensuring that HC is
managing the risks attendant
with the operations of the Firm.
Thank you
www.hanrickcurran.com.au
Hanrick Curran
t. (07) 3218 3900
f. (07) 3218 3901
e. enquiries@hanrickcurran.com.au
Level 11
307 Queen Street
Brisbane Qld 4000
GPO Box 2268
Brisbane Qld 4001
71experience. new thinkingexperience. new thinking 71
Definitions from ISO 31000:2009
Resources
72experience. new thinking
Source: ISO 31000:2009
Source: ISO Guide 73:2009
73experience. new thinking
Source: ISO 31000:2009
Source: ISO Guide 73:2009
74experience. new thinking
Source: ISO 31000:2009
Source: ISO Guide 73:2009
75experience. new thinking
Source: ISO 31000:2009
Source: ISO Guide 73:2009
76experience. new thinking
Source: ISO 31000:2009
Source: ISO Guide 73:2009
77experience. new thinking
Source: ISO 31000:2009
Source: ISO Guide 73:2009
78experience. new thinking
Source: ISO 31000:2009
Source: ISO Guide 73:2009
79experience. new thinking
Source: ISO 31000:2009
Source: ISO Guide 73:2009
80experience. new thinking
Source: ISO 31000:2009
Source: ISO Guide 73:2009
81experience. new thinking
Source: ISO 31000:2009
Source: ISO Guide 73:2009
82experience. new thinking
Source: ISO 31000:2009
Source: ISO Guide 73:2009
83experience. new thinking
Source: ISO 31000:2009
Source: ISO Guide 73:2009
84experience. new thinking
Source: ISO 31000:2009
Source: ISO Guide 73:2009
85experience. new thinking
Source: ISO 31000:2009
Source: ISO Guide 73:2009
86experience. new thinking
Source: ISO 31000:2009
Source: ISO Guide 73:2009
87experience. new thinking
Source: ISO 31000:2009
Source: ISO Guide 73:2009

Risk Management for Professional Services