SACAA Annual Report 2022_23

PART C I Governance

As outlined in the Strategic Risk Register matrix below, progress was made in terms of the identified recommended actions. Legend: Low High Medium Extreme

SACAA STRATEGIC RISK MATRIX – 2022-23 Strategic Outcome Risk Name

Risk Description

Inherent Risk Level

Residual Risk Level

1 Financial sustainability Revenue, Economic Climate (Financial Risk)

Financial sustainability of the Regulator. Failure to attract, develop and/ or retain critical and scarce talent. Poor Stakeholder Relations (impacting negatively on aviation safety and security oversight ). Ineffective aviation safety and security oversight, resulting in non-compliance with ICAO SARPS. Unavailability and vulnerability of ICT Services. Non-Compliance with New and Amended Legislation and Regulations. Poor corporate Governance. Fraud and corruption negatively impacting on the sustainability of the Regulator. Cyber breaches resulting in data fraud, theft and affecting data integrity. Inability of the business to continue operations, following a disruptive event.

25

7

20

6

2

Enhanced human capital management

Human Capital (Operational Risk)

20

7

Stakeholder Management (Reputational Risk)

3

Improve stakeholder engagement and service excellence

25

6

Safety and Security Oversight (Regulatory & Compliance Risk)

4 Strengthened safety and security oversight system

ICT System Reliability (Technology Risk)

25

4

5 Innovation and technology management

20

6

Regulatory Non-Compliance (Regulatory Risk) Governance (Compliance Risk) Fraud and Corruption (Compliance & Reputational Risk)

6

Strengthened safety and security oversight system

7 Sustained good

20

5

corporate governance

20

5

8 Sustained good

corporate governance

20

5

Cyber Breach (Technology Risk)

9

Innovation and technology management

25

6

10 All outcomes (1-6)

Business Disruption

Table 25: SACAA Strategic Risk Matrix

130 I Annual Report 2022/23 I Governance