25. OPNAVINST 3500.39C Operational Risk Management (ORM) Flashcards
This is a decision making tool used by personnel at all levels
to increase effectiveness by identifying, assessing, and managing
risks.
ORM
RM is defined as what?
Risk Management
What are the 4 principles that provide the foundation of RM?
- Accept Risk when Benefits outweigh the Costs
- Accept NO unnecessary risk
- Anticipate and manage risk by planning
- Make risk decisions at the right level
The RM process is applied on what 3 levels?
- In-depth
- Deliberate
- Time Critical
Examples of application of ORM at the in-depth level include:
A. long term planning of complex or contingency operations;
B. technical standards and system hazard management applied in engineering
design during acquisition and introduction of new equipment and systems;
C. major system overhaul or repair.
D. all of the above
D. all of the above
At this level, the planning primarily uses experienced personnel and brainstorming and is most effective when done in a group.
Deliberate
At this level, an on-the-run mental or verbal assessment of the new or changed/changing situation is the best one can do.
Time Critical
What model has the Navy adopted to replace the 5-Step process during Time Critical levels of RM?
ABCD
What are the 5 steps in the ORM process?
(1) Identify the hazards;
(2) Assess the hazards;
(3) Make risk decisions;
(4) Implement controls; and
(5) Supervise.
I-A-D-C-S
Simply stated, the 5 steps can be summarized as 2 for Assessment and 3 for execution. What are these steps?
2 Assessment = Identify & Assess
3 Execution = Decision, Controls, Supervise
What are the 2 methods for documenting the ORM process?
TRACS & Community Hazard Tracking databases
This step is the foundation of the RM process and should be allotted a larger portion of time than the other steps.
STEP 1 - Identify Hazards
What 3 basic steps are included in STEP 1: Identifying Hazards?
Analyze Mission
List the Hazards
Determine Hazard root cause
In this step of the ORM process, degree of risk is determined in terms of probability and severity for each identified hazard.
STEP 2: Assess Hazards
How many categories of Severity are there?
4 (I, II, III, IV)
Identify the Severity Category for the following:
Minor Damage to Equipment, systems, property, or the environment
III
Identify the Severity Category for the following:
Mission-critical security failure
I
Identify the Severity Category for the following:
Slight equipment or systems damage, but fully functional and serviceable
IV
Identify the Severity Category for the following:
Death or permanent total disability
I
Identify the Severity Category for the following:
Significantly degraded mission
II
Identify the Severity Category for the following:
Minor injury or illness
III
Identify the Severity Category for the following:
Minimal threat to personnel, safety, or health
IV
Identify the Severity Category for the following:
Permanent partial disability or severe injury or illness
II
This is an assessment of the likelihood
that a potential consequence may occur as a result of a hazard
Probability
Probability categories are assigned letters. What are they and how could you easily describe the category?
A = Likely to occur B = Probably will occur C = May occur in time D = Unlikely to occur
Combining the Severity (I, II, III, IV) with the Probability (A, B, C, D) in the Risk Assessment matrix produces what code?
RAC = Risk Assessment Code
What is the RAC?
Single arabic numeral showing level of risk for each hazard
T/F: It is important to consider less severe consequences of a hazard if they are more
likely than the worst credible consequence, since this combination may actually present a greater overall risk.
TRUE
Define the RAC’s.
1 = Critical 2 = Serious 3 = Moderate 4 = Minor 5 = Negligible
Define this pitfall: Over Optimism
Not being totally honest or not looking for root causes.
Define this pitfall: Misrepresentation
Individual perspective may distort the data.
Define this pitfall: Alarmism
“The sky is falling” or “worst case” estimates are used regardless of their possibility.
Define this pitfall: Indiscrimination
All data is given equal weight
Define this pitfall: Prejudice

Subjective or hidden agendas are used vice facts
Define this pitfall: Inaccuracy
Bad or misunderstood data nullify accurate risk assessment.
Define this pitfall: Enumeration
Difficulty in assigning a numerical value to human behavior.
What are the criteria for effective controls?
Suitability Feasibility Acceptability Explicitness Support Standards Training Leadership Individual
Numerous Control Options include:
REJECT the risk AVOID the risk DELAY an action TRANSFER the risk COMPENSATE FOR the risk
What are the three different types of controls?
ENGINEERING
ADMINISTRATIVE
PHYSICAL