Risk Assessment

A risk assessment is a process to identify potential hazards and analyze what could happen if a hazard occurs. A business impact analysis (BIA) is the process for determining the potential impacts resulting from the interruption of time sensitive or critical business processes.

There are numerous hazards to consider. For each hazard there are many possible scenarios that could unfold depending on timing, magnitude and location of the hazard. Consider hurricanes:

A Hurricane forecast to make landfall near your business could change direction and go out to sea.

The storm could intensify into a major hurricane and make landfall.View from outer-space of a hurricane in Gulf of Mexico

There are many “assets” at risk from hazards. First and foremost, injuries to people should be the first consideration of the risk assessment. Hazard scenarios that could cause significant injuries should be highlighted to ensure that appropriate emergency plans are in place. Many other physical assets may be at risk. These include buildings, information technology, utility systems, machinery, raw materials and finished goods. The potential for environmental impact should also be considered. Consider the impact an incident could have on your relationships with customers, the surrounding community and other stakeholders. Consider situations that would cause customers to lose confidence in your organization and its products or services.

As you conduct the risk assessment, look for vulnerabilities—weaknesses—that would make an asset more susceptible to damage from a hazard. Vulnerabilities include deficiencies in building construction, process systems, security, protection systems and loss prevention programs. They contribute to the severity of damage when an incident occurs. For example, a building without a fire sprinkler system could burn to the ground while a building with a properly designed, installed and maintained fire sprinkler system would suffer limited fire damage.

The impacts from hazards can be reduced by investing in mitigation. If there is a potential for significant impacts, then creating a mitigation strategy should be a high priority.

Risk Assesment process diagram

Risk Assessment Process Diagram - Text Version

Use the Risk Assessment Tool complete your risk assessment. Instructions are provided on the form.

Hazards

Natural Hazards

Meteorological -Flooding, Dam/Levee Failure, Severe Thunderstorm (Wind, Rain, Lightning, Hail), Tornado, Windstorm, Hurricanes and Tropical Storms, Winter Storm (Snow/Ice)

Geological -Earthquake, Tsunami, Landslide, Subsidence/Sinkhole, Volcano

Biological - Pandemic Disease, Foodborne Illnesses

Human-Caused Hazards

Accidents -Workplace Accidents, Entrapment/Rescue (Machinery, Water, Confined Space, High Angle), Transportation Accidents (Motor Vehicle, Rail, Water, Air, Pipeline), Structural Failure/Collapse, Mechanical Breakdown

Intentional Acts - Labor Strike, Demonstrations, Civil Disturbance (Riot), Bomb Threat, Lost/Separated Person, Child Abduction, Kidnapping/Extortion, Hostage Incident, Workplace Violence, Robbery , Sniper Incident, Terrorism (Chemical, Biological, Radiological, Nuclear, Explosives), Arson, Cyber/Information Technology (Malware Attack, Hacking, Fraud, Denial of Service, etc.)

Technological Hazards

Information Technology - Loss of Connectivity, Hardware Failure, Lost/Corrupted Data, Application Failure

Utility Outage - Communications, Electrical Power, Water, Gas, Steam, Heating/Ventilation/Air Conditioning, Pollution Control System, Sewage System

Fire/Explosion - Fire (Structure, Wildland), Explosion (Chemical, Gas, or Process failure)

Hazardous Materials -Hazardous Material spill/release, Radiological Accident, Hazmat Incident off-site, Transportation Accidents, Nuclear Power Plant Incident, Natural Gas Leak Supply

Chain Interruption - Supplier Failure, Transportation Interruption

Risk Assessment Resources

Natural Hazards

Human-Caused Hazards

Technological Hazards

Last updated: 01/29/2014 - 12:01 PM