
About integrating, designing, implementing, evaluating and improving risk management.
What is risk. What is risk management. What is a risk source and a control. The principles of risk management.
About the involvement and support from top management for the risk management process
Definitions for the three important elements that need to be specified with regards to the risk management process - scope, context, criteria
What risk assessment involves and the contribution of risk assessment to the risk management process
The criteria for selecting a risk assessment technique
About brainstorming as risk assessment technique including its variation the brainwriting
A set of questions that interviewees are asked with the aim of identifying risks associated to a certain situation, a product, a process, etc
A group of experts who are asked to formulate their opinions anonimously on certain topics. Each one has access to the opinions of others with the purpose of finding consensus between the experts.
Checklists or checklist analysis is a technique that can be used to identify hazards and risks or to assess if certain controls are effective.
About a risk technique usually used to identify hazardous situations and events that can cause harm to a system, a facility or an activity.
Hazard and Operability - a guide word examination that looks for deviations from the design of a system or process due to deficiencies in the design in the components, procedures or due to human error.
Standard practice in the food sector, HACCP represents a method to identify hazards and to implement controls in relevant points of production processes.
A risk technique used to evaluate the risks to humans, plants and animals as a result of exposure to hazards such as chemicals, micro-organisms or other species
A brainstorming method meant to serve as a simpler alternative to HAZOP. Involves What-if type of questions.
Develop scenarios and possible outcomes - a risk technique that requires imagination
Identify the key activities and processes in an organization and their interdependencies, see how a disruptive event can affect the functioning of key activities and propose solutions so that the impact of a disruptive event can be managed and the organization can continue to operate at an acceptable level.
Starting from a major incident and trying to understand how and why it happened so that controls can be designed and implemented to prevent re-occurrence. The 5-whys technique
The Failure Modes and Effects Analysis is used to evaluate an item, a component, a process, a system to identify the ways (or modes) in which it can fail, the effects that those failures can have, the mechanisms of failure and how such failures can be avoided or their effects mitigated
A technique used to identify factors and conditions that contribute to the occurence of a certain undesired event – which is reffered to as the top event.
Similar logic to the fault tree. The starting point is an initiating event and the purpose is to identify the sequence of events that follow the initiating event, taking into consideration the systems and controls in place meant to mitigate the consequences of the initiating event
A combination of Fault tree and event tree analysis
The cause and effect analysis or diagram is a method to identify possible causes of an event. It organizes possible causes into categories and details them further into causes and subcauses.
This risk assessment technique is used to estimate the risks associated to an unwanted event by analyzing whethere there are sufficient layers of protection (or safeguards) in place to control or to mitigate the risk
The decision tree analysis is a graphic representation of outcomes that follow a certain decision.
The Human reliability analysis deals with the impact of humans on system performance and is used to evaluate the consequences of human errors on the functioning of systems
The Bow tie analysis starts from a particular event wich is the central knot of the bowtie, then on the left we have the causes of the event and on the right we have its consequences
About an approach to maintenance that is looking to identify the most appropriate maintenance strategy to ensure that an equipment, or a system that involves several equipments, functions at optimal levels
A methodology to identify errors that come from the design of a product or a system. Sneak circuit and software sneak analysis.
A risk technique that is used for systems that move from one state to another.
The Monte Carlo simulation is a computerized mathematical techinque which is used to provide a range of possible outcomes and the probability they will occur for any action or choice.
The Bayes theorem or the Bayes law describes the probability of an event based on prior knowledge of conditions that may be related to the event. Any already known information (which is called the Prior) can be combined with subsequent measurement to establish an overall probabilty.
A graphical representation of the combination between probability of an event and the consequences it can have on a certain population
A risk index is a system of rating risks by applying scores to each component of the risk (like for example exposure, impact, source – if we speak of environmental related risks). By ranking risks then its easier to compare them.
Combining potential consequences with estimated probabilities to calculate a level of risk – which can be a number, can be a certain level on a scale or it can be expressed in any other form, is one of the most common risk assessment techniques
The idea in a cost/ benefit analysis is to compare total expected benefits of an action or a decision with total expected costs and make an informed decision based on the results
Used when there are several different options that can be chosen and the purpose is to order them by preference and choose the best, based on some criteria
About different risk treatment options - avoidance, share, mitigation, acceptance. Concepts like residual risk and secondary risk.
About what can be monitored in the risk management process and opportunities to improve risk management
The purpose of this course is to present the framework for risk management proposed by ISO 31000 along with the multiple risk techniques from IEC 31010 (a supporting standard for ISO 31000).
After going through the lessons you will have a good understanding of the risk management principles, the framework of ISO 31000, risk assessment techniques or available risk treatment options.
The structure of the course includes:
- general aspects about risk management and the framework proposed by ISO 31000
- risk management principles
- the support and involvement of top management for the risk management process
- the risk assessment process and the selection of the appopriate risk techniques
A brief presentation of the general aspects of risk techniques from IEC 31010 including:
- Brainstorming;
- Structured and semi-structured interviews;
- the Delphi technique;
- HAZOP (Hazard and Operability);
- HACCP (Hazard Analysis and Critical Control Points);
- Business impact analysis;
- Root cause analysis;
- FMEA and FMECA - Failure Modes and Effects (and Criticality) Analysis;
- Fault tree analysis;
- Event tree analysis;
- Cause - consequence analysis;
- Cause and effect analysis;
- Bow tie analysis;
- Reliability centered maintenance;
- Markov analysis;
- Monte Carlo simulation;
- Consequence probability matrix;
- Cost - benefit analysis;
- Multi criteria decision analysis;
and others.
The final part of the course is about risk treatment options, concepts like residual and secondary risk, monitoring and improvement of the risk management process.
The various risk techniques of IEC 31010 are explained in an easy to understand way with simple examples.
At the end of the course there is a quiz - with questions from the subject matter.
Learn about how to develop and apply a risk management process by following the framework of ISO 31000.