Risk Management Process and Qualitative Analysis Flashcards
Define Risk (AS ISO)
the effect of uncertainty on objectives
Two parts of risk
probability of something going wrong, consequences
Why we manage risks
commercial reasons: statutory, legal, cost, reputation, business
Personal reasons: statutory, legal, financial, career & reputation
Different people involved in Risk Management
Employees: planner, designer, project engineer, auditor
Manager: responsible for safety, project
Business owner: responsible for statutory and legal, commercial success, customer satisfaction
typical engineering risks (10)
Human, operational, reputational, procedural, project, financial, technical, natural, political, structural
Business Risk vs Corporate Risk
terms are general interchangeable
business risk sometimes limited to commercial matters
corporate risk refers to all aspects of establishing and operating business - risks that threaten reputation matter more than commercial risks
Types of business/corporate risks (20)
competitive, economic, operational, legal, compliance, strategy, reputational, program, project, innovation, country, quality, credit, exchange, interest, taxation, process, political, seasonal
Four quadrants of Business Risk
Operational (construction), financial (market), strategic (competition), hazard (injury)
ownership of risks
- allocated to manager best able to understand and manage risk
- when delegated to external entity, they become owner of risk
Risk Appetite definition
the amount and type of risk that an organisation is prepared to pursue, retain or take
Typical Risk Management Process (5+2)
1) Establish context: corporate information to understand risk profile
2) identify risks use workshop methodology to identify hazards, risks, likelihood, consequences
3) risk analysis: use workshops to analyse controls, estimate likelihood and frequency
4) risk evaluation: value consequences of risk occurring, and develop action plan for management of residual risk
5) Risk treatment: use risk registers to track ongoing implementations
ongoing:
- monitoring and review
- communication and consultation
Hazard definition
an event or situation that may give risk to risk
Risk Analysis Process (5 steps)
1) Understand context pf project risks
2) identify hazards and risks
3_) estimate likelihood of risk
4) value consequences of risk occurring
5) determine ranking of risk
6) control measuers
7) review control measures - update and monitor
Determine risk Ranking (main method)
Risk score calculation - using risk rating matrix
Risk treatment: Hierarchy of control measures
1) avoid/eliminate risk
2) control/mitigate risk
3) transfer risk
4) accept risk manage closely