RNP supported the elaboration of the IT risk management process in the Information Technology Directorate of the Brazilian Company of Hospital Services (Ebserh), in accordance with the objectives and norms that apply to the public company. The action was agreed as a goal of the institution's IT Master Plan for 2022.

The work was initiated at the headquarters of Ebserh, in Brasília, and escalated to the other 41 hospitals in the Network through eight webinars for the dissemination of knowledge, held between 8/2 and 9/22. The meetings included a theoretical presentation of the execution of the process and examples of construction of the foreseen artifacts, using the established templates.

The training was conducted in order to enable those responsible for risk management at the hospitals to initiate risk management activities under their responsibility, generating the respective initial Treatment Plans.

“Ebserh, through the adoption of the IT Risk Management process, contemplating the analysis, identification and treatment of the institution's risks, has as its key to success its centralized reporting system, called Risk Plan. The Risk Plan enhances Ebserh's ability to focus more effectively on concerns related to the business, choose the most appropriate treatments, identify what its appetite for risk is and how to manage risk more effectively. Thus, it becomes a more mature organization, being able to achieve and maintain an acceptable risk level in an economical way, according to its risk appetite”, explains the RNP consultant responsible for implementation, Sérgio Cintra.