Lecture 7 & 8 Risk Management Analysis
Lecture 7 & 8 Risk Management Analysis
4 / 22
Risk and Safety Concept in Industry / Organization
Risk Analysis
➢ Risk Analysis is the process of Defining, Analyzing and
Calculating Potential Hazards, Risks and the Dangers to
Aviation's, Industries, Organizations, Individuals, Society or to
a State or Nation caused due to Potential Natural, Natural
Events or Human-Caused adverse events.
➢Different tools and techniques are used to assist the various
steps of the Risk Analysis & Assessment Calculation Process.
➢A Risk Analysis Report can be used to align Technology-
related Risks / Objectives with a company’s Business
objectives. A Risk Analysis Report can be either Quantitative
or Qualitative.
Risk and Safety Concept in Industry / Organization
References Standards
➢ ANSI Z690.1–2011. (2011)
▪ Vocabulary for Risk Management. Washington, DC: American
National Standards Institute.
➢ ANSI Z690.2–2011. (2011)
▪ Risk Management Principles and Guidelines. Washington, DC:
American National Standards Institute.
➢ ANSI Z690.3–2011. (2011)
▪ Risk Assessment Techniques. Washington, DC: American
National Standards Institute.
➢ ISO Standard 31010:2009 & ISO Guide 73. (2009)
➢ Risk Management Terminology. Geneva, Switzerland:
International Organization for Standardization (ISO)
➢ Risk management – Risk Assessment Techniques
Risk and Safety Concept in Industry / Organization
Risk Analysis Techniques
➢ ISO Standard 31010:2009 lists the following 16 Techniques
that can be used for Risk Analysis Process (Identification,
Assessment, Mitigation and Reporting) process:
1. Brainstorming
2. Delphi Technique
3. Structured or Semi-Structured Interviews
4. Use of Check-Lists
5. Primary Hazard Analysis (PHA)
6. Hazard and Operability Studies (HAZOP)
7. Hazard Analysis and Critical Control (HACCP)
8. Environmental Risk Assessment (ERA)
9. Scenario Analysis
Risk and Safety Concept in Industry / Organization
Risk Analysis Techniques
10. Structure “What if?” (SWIFT)
11. Failure Mode Effect Analysis (FMEA)
12. Cause-and-Effect Analysis (CEA)
13. Human Reliability Analysis (HRA)
14. Reliability Centered Maintenance (RCM)
15. Consequence / Probability Matrix and
16. Fault tree analysis.
Recommendation:
➢ Instead of using only one Technique, a combination of different
tools should be used where suitable & appropriate for an
Organization. It is also important to combine aspects of Qualitative
and Quantitative Analysis in order to reach the Best Outcomes.
Risk and Safety Concept in Industry / Organization
Risk Analysis Techniques
➢ ANSI Z690.1,2,3–2011 lists the following 31 Techniques that can be
used for Risk Analysis Process. 16 Techniques listed by ISO
Guidelines are also part listed by ANSI Standards:
1. Brainstorming
2. Structured or Semi Structured Interviews
3. Delphi Analysis
4. Checklists
5. Preliminary Hazard Analysis (PHA)
6. Hazard and Operability Study (HAZOP)
7. Hazard Analysis and Critical Control Points (HACCP)
8. Structured ‘‘What-If’’ technique (SWIFT)
9. Scenario Analysis
10. Root Cause Analysis (RCA)
11. Failure modes and effects analysis (FMEA)
12. Fault tree analysis (FTA)
Risk and Safety Concept in Industry / Organization
Risk Analysis Techniques
13. Structured ‘‘What-If’’ technique (SWIFT)
14. Scenario Analysis
15. Root Cause Analysis (RCA)
16. Failure Modes and Effects Analysis (FMEA)
Additional Analysis List of -15 Recommended by ANSI Standard
▪ Event Tree Analysis (ETA)
▪ Cause-Consequence Analysis
▪ Cause-and-Effect Analysis
▪ Layers of Protection Analysis (LOPA)
▪ Decision Tree Analysis
▪ Human Reliability Assessment (HRA)
▪ Bow Tie Analysis
▪ Sneak Analysis (SA)
Risk and Safety Concept in Industry / Organization
Risk Analysis Techniques
▪ Monte Carlo Simulation
▪ Bayesian Statistics and Bayes Nets
▪ FN curves
▪ Risk Indices
▪ Consequence / Probability Matrix
▪ Cost-Benefit Analysis (CBA)
▪ Multi-Criteria Decision Analysis (MCDA)
Risk and Safety Concept in Industry / Organization
Risk Analysis Tools
➢ Risk Register is an essential documentation tool for Risk
Management
➢ The Risk Register is like an “Index” of an Administration’s
Risks, from which each Functional Area can develop its
respective Risk Plans
➢ Risk Register should be tailored to meet the requirements
of an organization and may be set out in many different
ways
➢ Examples of Risk Registers is shown in Next Slides
Risk and Safety Concept in Industry / Organization
Risk Analysis Tools
Example #1 RISK MANAGEMENT REGISTER:
Likelihood Consequence Tolerance Risk Risk
Risk Rating Rating Priority Treatment
1 Strategic Risk
3 IT & Communication
6 Legal Framework
1 Aviation
1.1 Airport
▪ Risk Identification
▪ Risk Analysis
▪ Risk Mitigation Planning
▪ Implementation of Mitigation Plan
▪ Risk Tracking & Reporting
Risk and Safety Concept in Industry / Organization
17
Very high risk: 15 or greater, High risk 9-14, Medium risk 5-8, Low risk 1-4
Risk and Safety Concept in Industry / Organization
23
THANKS
Q&A
Air University Kamra Attock
1 Strategic Risk
3 IT & Communication
6 Legal Framework
1 Aviation
1.1 Airport
▪ The event could occur in some circumstances, however more likely through human error for not following the control
environment, or
2 Unlikely ▪ Effective Controls in place, e.g. Timely QAPs, internal & external audits, or
▪ The event hasn’t occurred in Customs recently but it could occur in some circumstances, or
▪ Has happened in the last 2 years
▪ The event may occur in some exceptional circumstances, i.e. deliberate fraud / attack outside of existing deterrents, or
from activity beyond the control of Customs actions, or
1 Rare ▪ Strong Controls. Despite effective controls an external event or uncontrollable event could occur, or
▪ Improbable: A very small chance of an event occurring that would be caused by stressed economic, market and operating
conditions or events not previously seen in similar agencies, or • Has not happened in the last 3 years
Risk and Safety Concept in Industry / Organization
Risk Analysis Tools
Example #5 5x5 RISK TOLERANCE MATRIX:
Risk Rating Minimal Minor Moderate Major Severe
(1) (2) (3) (4) (5)
Almost Certain 5 10 15 15 25
Likely 4 8 12 12 20
Possible 3 6 9 9 15
Unlikely 2 4 6 6 10
Rare 1 2 3 3 5
Risk and Safety Concept in Industry / Organization
Risk Analysis Tools
Example #5 5x5 RISK TOLERANCE MATRIX:
Risk Rating Minimal Minor Moderate Major Severe
(1) (2) (3) (4) (5)
SEVERITY LIKELIHOOD
MINOR NO LOST TIME VERY UNLIKELY
FATALITY CERTAIN
1-5 ( LOW RISK) 6-15 High RISK 16-25 EXTREME HIGH RISK
Risk and Safety Concept in Industry / Organization
RISK REPORTING & COMMUNICATION
Internal Reporting
➢ Different Levels within an Organization need different information from the Risk
Management process
• Board of Director
• individual
• Organizational Units
• Functional Groups
• Operational Groups
• Administrative & Supports Groups
External Reporting
➢A company needs to Report to it’s Stakeholders on a regular basis, By setting
out Risk Managements Policies and the Effectiveness in achieving its
objectives.
• Stakeholders look to an Organizations to provide evidence of Effective Management of
the organization’s non-financial performance / Roles in such areas as Community Affairs,
Human Rights, Employment Practices, Health and Safety and, the Environment
Risk and Safety Concept in Industry / Organization
WHAT IS RISK TREATMENT?
➢ Risk Treatment is the process of Selecting and Implementing measures to
Modify the Risk
➢ Risk Treatment includes its Major Elements, Risk Control & Mitigation, and further
extends to Risk Avoidance, Risk Transfer & Risk Financing etc While the workload
has been increasing,
➢ Any System of Risk Treatment should provide us is minimum as:
▪ Effective and Efficient operation of an Organization
▪ Operational Efficiency Increases
▪ Better Resources Allocation through the enhancement of the Risk Management
▪ Valuable Internal / External Controls on Vulnerable
▪ Ensure the Compliance with Laws and Regulations
▪ Develop Control over the Schedule and Cost
▪ On-time Delivery and Customers / Clients Satisfaction
Risk and Safety Concept in Industry / Organization
RISK TREATMENT PLAN (RTPs)
➢Risk Treatment means the process of Selection and
Implementation of measures to Modify Risk
➢The process of producing the RTPs can be described
in terms of a Series of Steps. For Example
▪ step 1 – Identify the Events
▪ step 2 - Identify the Assets
▪ step 3 – Identify the Impacts
▪ step 4 – Identify the Threats
▪ step 5 – Produce the RTPs
Risk and Safety Concept in Industry / Organization
Guidelines for Risk Vs Impact Assessment
MEASUREMENT OF LIKELIHOOD MEASUREMENT OF SEVERITY
(PROBABILITY OF OCCURRENCE) (POSSIBLE CONSEQUENCE)
DESCRIPTION
LEVEL
DESCRIPTION (S)
LEVEL (L) DESCRIPTOR
(FREQUENCY) PEOPLE /
EQUIPMENT /
LOGISTICS ENVIRONMENT
PRODUCT
SUPPORT
WILL CERTAINLY OCCUR IN MULTIPLE EXPENSIVE
5 ALMOST CERTAIN
MOST OF THE CIRCUMSTANCES 5 FATALITIES DAMAGE
MASSIVE EFFECT
THANKS
Q&A