• Section 1 - Context
• Section 2 - Definition
• Section 3 - Categorisation
• Section 4 - Supplementary Notes

Section 1 - Context

(1) The phrase ‘systemic issue’ is generally used to highlight the significance linked to the prevalence of risks, audit findings, control weaknesses or similar deficiencies and irregularities. This Guideline defines ‘systemic issue’ and is designed to facilitate better identification, consistent assessment and reporting on issues at The University of Queensland (UQ) that are genuinely systemic and therefore would require management’s prompt attention and action. 

Section 2 - Definition

(2) An issue must meet ALL the following conditions to be defined as a systemic issue:

1. It is an issue (i.e. a problem or an event that has negative consequences) which has occurred or is inevitable; and
2. It is a materialised risk or an issue that will result in further risk exposure/s; and
3. It is a confirmed (verified) irregularity, deficiency or vulnerability, not just speculation or hearsay; and
4. If left unmanaged, it will continue to exist (and is expected to deteriorate); and
5. It is demonstrably prevalent across UQ, an organisational area or function, depending on the context (see ‘Categorisation’, section 3, below).

Section 3 - Categorisation

(3) Systemic issues will be categorised based on the risk categories as defined in Appendix B of the Enterprise Risk Management Framework (ERMF).

(4) A systemic issue may be further categorised as follows depending on the facts:

1. UQ Systemic Issue - the issue is prevalent across UQ or is present across a significant number of areas of UQ.
2. (Org Area) Systemic Issue - the issue is prevalent across the organisational area or is present across a significant number of areas/sections of the organisational area.
3. (Function) Systemic Issue - the issue is prevalent across the function or is present across a significant number of areas/sections of the function.

(5) Systemic issues will be categorised by the party formally raising the issue in conjunction with the party accountable for managing or remedying the systemic issue.

1. The accountable party is responsible for the timely resolution of the systemic issue and providing updates in the form of management reports regarding the completion of any required actions, or their progress.
2. The party that raises the issue is responsible for monitoring and reporting on the adequate remedying of the systemic issue by the accountable party.

Section 4 - Supplementary Notes

(6) Some issues may be significant but not systemic.

(7) A systemic issue is distinct from the loss or consequence associated with that issue.

(8) A systemic issue may be a single type of irregularity, deficiency, vulnerability or a combination of these with similar causes and consequences.

(9) The significance of a systemic issue is to be measured based on the risk associated with that issue – as per the UQ Risk Matrix (Appendix D of the ERMF). The risk level is determined via the combination of:

1. Likelihood score, representing the systemic issue’s prevalence; and
2. Consequence score, representing the systemic issue’s severity including consideration of potential and realistic (reasonably expected) deterioration.

(10) The protocols for escalating and reporting of systemic issues, and the urgency with which systemic issues are to be addressed including the amount of resources committed to remediation, will depend on the associated risk level assessed as per the UQ Risk Matrix and the Risk Action Table (Appendix D of the ERMF).