On the risk register, the p*s score is followed by action plans to manage the risk and what else?

On the risk register, the p*s score is followed by action plans to manage the risk and what else?

© iStockphoto
hadynyah

Be prepared for any eventuality.

Risk management is an important function in organizations today. Companies undertake increasingly complex and ambitious projects, and those projects must be executed successfully, in an uncertain and often risky environment.

As a responsible manager, you need to be aware of these risks. Does this mean that you should try to address each and every risk that your project might face? Probably not – in all but the most critical environments, this can be much too expensive, both in time and resources.

Instead, you need to prioritize risks. If you do this effectively, you can focus the majority of your time and effort on the most important risks.

The Risk Impact/Probability Chart provides a useful framework that helps you decide which risks need your attention.

How to Use the Tool

The Risk Impact/Probability Chart is based on the principle that a risk has two primary dimensions:

  1. Probability – A risk is an event that "may" occur. The probability of it occurring can range anywhere from just above 0 percent to just below 100 percent. (Note: It can't be exactly 100 percent, because then it would be a certainty, not a risk. And it can't be exactly 0 percent, or it wouldn't be a risk.)
  2. Impact – A risk, by its very nature, always has a negative impact. However, the size of the impact varies in terms of cost and impact on health, human life, or some other critical factor.

The chart allows you to rate potential risks on these two dimensions. The probability that a risk will occur is represented on one axis of the chart – and the impact of the risk, if it occurs, on the other.

You use these two measures to plot the risk on the chart. This gives you a quick, clear view of the priority that you need to give to each. You can then decide what resources you will allocate to managing that particular risk.

The basic form of the Risk Impact/Probability Chart is shown in figure 1, below.

On the risk register, the p*s score is followed by action plans to manage the risk and what else?

The corners of the chart have these characteristics:

  • Low impact/low probability – Risks in the bottom left corner are low level, and you can often ignore them.
  • Low impact/high probability – Risks in the top left corner are of moderate importance – if these things happen, you can cope with them and move on. However, you should try to reduce the likelihood that they'll occur.
  • High impact/low probability – Risks in the bottom right corner are of high importance if they do occur, but they're very unlikely to happen. For these, however, you should do what you can to reduce the impact they'll have if they do occur, and you should have contingency plans in place just in case they do.
  • High impact/high probability – Risks towards the top right corner are of critical importance. These are your top priorities, and are risks that you must pay close attention to.

It's natural to want to turn this into a two-by-two matrix. The problem here is where the lines dividing the quadrants of the matrix lie. For example – should you ignore a 49 percent probability risk, which will cause a 49 percent of maximum loss? And why, in this example, should you pay maximum attention to a risk that has a 51 percent probability of occurring, with a loss of 51 percent of maximum loss?

Tip 2:

In some industries, you need to pay close attention to even very unlikely risks, where these risks involve injury or loss of human life, for example. Make sure you pay due attention to these risks.

To use the Risk Impact/Probability Chart, print this free worksheet, and then follow these steps:

  1. List all of the likely risks that your project faces. Make the list as comprehensive as possible.
  2. Assess the probability of each risk occurring, and assign it a rating. For example, you could use a scale of 1 to 10. Assign a score of 1 when a risk is extremely unlikely to occur, and use a score of 10 when the risk is extremely likely to occur.
  3. Estimate the impact on the project if the risk occurs. Again, do this for each and every risk on your list. Using your 1-10 scale, assign it a 1 for little impact and a 10 for a huge, catastrophic impact.
  4. Map out the ratings on the Risk Impact/Probability Chart.
  5. Develop a response to each risk, according to its position in the chart. Remember, risks in the bottom left corner can often be ignored, while those in the top right corner need a great deal of time and attention. Read Risk Analysis and Risk Management for detailed strategies on developing a risk response plan.

To successfully implement a project, you must identify and focus your attention on middle and high-priority risks – otherwise you risk spreading your efforts too thinly, and you'll waste resources on unnecessary risk management.

With the Risk Impact/Probability Chart, you map out each risk – and its position determines its priority. High-probability/high-impact risks are the most critical, and you should put a great deal of effort into managing these. The low-probability/high-impact risks and high-probability/low-impact risks are next in priority, though you may want to adopt different strategies for each.

Low-probability/low-impact risks can often be ignored.

Download Worksheet

We want to find out more about who uses this part of our website and what they think of it.

You can help us by completing a short survey.

Go to survey

Risk management is a step-by-step process for controlling health and safety risks caused by hazards in the workplace.

You can do it yourself or appoint a competent person to help you.

Identify hazards

Look around your workplace and think about what may cause harm (these are called hazards). Think about:

  • how people work and how plant and equipment are used
  • what chemicals and substances are used
  • what safe or unsafe work practices exist
  • the general state of your premises

Look back at your accident and ill health records as these can help you identify less obvious hazards. Take account of non-routine operations, such as maintenance, cleaning or changes in production cycles.

Think about hazards to health, such as manual handling, use of chemicals and causes of work-related stress.

For each hazard, think about how employees, contractors, visitors or members of the public might be harmed.

Vulnerable workers

Some workers have particular requirements, for example young workers, migrant workers, new or expectant mothers and people with disabilities.

Talk to workers

Involve your employees as they will usually have good ideas.

Assess the risks

Once you have identified the hazards, decide how likely it is that someone could be harmed and how serious it could be. This is assessing the level of risk.

Decide:

  • Who might be harmed and how
  • What you're already doing to control the risks
  • What further action you need to take to control the risks
  • Who needs to carry out the action
  • When the action is needed by

Control the risks

Look at what you're already doing, and the controls you already have in place. Ask yourself:

  • Can I get rid of the hazard altogether?
  • If not, how can I control the risks so that harm is unlikely?

If you need further controls, consider:

  • redesigning the job
  • replacing the materials, machinery or process
  • organising your work to reduce exposure to the materials, machinery or process
  • identifying and implementing practical measures needed to work safely
  • providing personal protective equipment and making sure workers wear it

Put the controls you have identified in place. You're not expected to eliminate all risks but you need to do everything 'reasonably practicable' to protect people from harm. This means balancing the level of risk against the measures needed to control the real risk in terms of money, time or trouble.

You can find more detailed guidance on controls relevant to your business.

Record your findings

If you employ 5 or more people, you must record your significant findings, including.

  • the hazards (things that may cause harm)
  • who might be harmed and how
  • what you are doing to control the risks

To help you, we have a risk assessment template and examples. Do not rely purely on paperwork as your main priority should be to control the risks in practice.

Review the controls

You must review the controls you have put in place to make sure they are working. You should also review them if:

  • they may no longer be effective
  • there are changes in the workplace that could lead to new risks such as changes to:
    • staff
    • a process
    • the substances or equipment used

Also consider a review if your workers have spotted any problems or there have been any accidents or near misses.

Update your risk assessment record with any changes you make.