AS/NZS 4360

AS/NZS 4360
Standard	AS/NZS 4360
Title	AS/NZS 4360 Risk Management
Issuedby	Standards Australia; Standards New Zealand
Status	Superseded
Replacedby	ISO 31000
Firstpublished	1995
Latest	2004

AS/NZS 4360

AS/NZS 4360 was a joint Australian and New Zealand standard for risk management that provided a generic framework for identifying, assessing and treating risk across industries. It influenced corporate governance in organizations such as Commonwealth Bank of Australia, ANZ Group, Westpac, Air New Zealand and Rio Tinto Group and informed public sector practice in agencies like Treasury (Australia), New Zealand Treasury, Department of Defence (Australia), and Department of Prime Minister and Cabinet (Australia). The standard also informed international instruments and standards developed by bodies including International Organization for Standardization, International Electrotechnical Commission, World Bank, Organisation for Economic Co-operation and Development and United Nations.

Overview

AS/NZS 4360 set out a process-oriented model emphasizing establishment of the context, risk identification, risk analysis, risk evaluation and risk treatment, with continual monitoring and review and communication and consultation at all stages. Organizations such as BHP, Qantas, Telstra, New Zealand Ministry of Health, Australian Securities and Investments Commission and Australian Prudential Regulation Authority used the standard to align enterprise risk management with strategic objectives, corporate reporting and compliance obligations tied to instruments like Corporations Act 2001 (Cth), Financial Reporting Council (Australia), Health and Safety at Work Act 2015 (New Zealand) and Privacy Act 1988 (Cth). The framework dovetailed with management system standards referenced by ISO 9001, ISO 14001, AS/NZS 4801, and influenced sectoral practice in mining industry, aviation industry and healthcare sector regulators including Civil Aviation Safety Authority, WorkSafe Victoria and Ministry of Health (New Zealand).

History and Development

Development of AS/NZS 4360 involved collaborative committees within Standards Australia and Standards New Zealand drawing on risk management practice from corporations such as Macquarie Group, Commonwealth Scientific and Industrial Research Organisation, Newmont Mining Corporation and consulting firms like KPMG, Deloitte, PricewaterhouseCoopers and Ernst & Young. Early antecedents and influences included risk approaches used in projects championed by Snowy Mountains Scheme, Sydney Opera House and disaster risk work following events such as the Black Saturday bushfires, the Canterbury earthquake sequence and the Pitcairn Islands case (governance reforms). Academic contributors from institutions like University of Sydney, University of Auckland, Australian National University, Monash University and Victoria University of Wellington provided technical input, while regulators including Australian Securities Exchange and Reserve Bank of Australia endorsed application guidance.

Structure and Key Components

The standard’s core components—establishing the context, identifying risks, analyzing risks, evaluating risks and treating risks—mapped onto corporate governance processes observed at Commonwealth Bank Group, National Australia Bank, New Zealand Stock Exchange and public agencies such as New Zealand Police and Australian Federal Police. Supporting elements included roles and responsibilities, communication and consultation, recording and reporting, and continual improvement mechanisms used by organizations like Medibank Private, Auckland District Health Board and Sydney Water. The standard recommended tools and techniques familiar to practitioners from Project Management Institute, Association for Project Management, Institute of Risk Management and academic methods promoted at Harvard Business School and London School of Economics.

Implementation and Applications

AS/NZS 4360 was applied across sectors: financial services firms including Commonwealth Bank of Australia, ANZ Group, Westpac Banking Corporation used it for credit, market and operational risk frameworks; utilities such as Origin Energy and Transpower New Zealand for asset management; transport operators like Sydney Trains and Air New Zealand for safety management integration; and construction firms on projects like Melbourne Metro Rail Project and Auckland City Rail Link. It supported regulatory compliance and risk reporting frameworks referenced by Australian Prudential Regulation Authority, Financial Markets Authority (New Zealand), Civil Aviation Authority (New Zealand) and insurance firms like Suncorp Group and IAG.

Comparison with Other Risk Management Standards

AS/NZS 4360 shared aims with ISO 31000 and COSO Enterprise Risk Management — Integrated Framework but differed in emphasis, being a process-centric standard tailored for Australasian practice similar to sector guides from Health and Safety Executive, International Financial Reporting Standards protocols in risk disclosure and governance guidance from ASX Corporate Governance Council. Compared to technical standards such as IEC 61508 or ISO 14971, AS/NZS 4360 remained generic and cross-sectoral, more akin to frameworks used by World Health Organization emergency planning and United Nations Office for Disaster Risk Reduction guidance than product-safety regimes.

Revisions and Legacy

AS/NZS 4360 underwent revisions through the 1990s and early 2000s culminating in the 2004 edition before being superseded in many jurisdictions by ISO 31000; organizations including Australian Government agencies, New Zealand Government departments, multinational firms like Woolworths Group and Ford Motor Company migrated to ISO 31000-based approaches while retaining practice elements from AS/NZS 4360. The standard’s legacy persists in corporate risk registers, board risk committees found in entities like Westfield Corporation, ongoing professional development by bodies such as Institute of Internal Auditors, Risk Management Institution of Australasia and university curricula at University of Melbourne and University of Otago.

Category:Standards of Australia