Conducting Effective Risk Analysis

"That'll never happen." Famous last words. Things can and will go wrong. The job of the business owner and engineers is to anticipate, evaluate, and mitigate possible risks in the operation. Especially if those risks include the potential of loss of life, facilities, and equipment. Risk management and risk assessment are tools to assist companies in understanding and mitigating potential problems. 

Anticipate the Risks:
This involves identifying the risks to the operation. The best way to start is to construct what-if scenarios. What if there was a major lightning strike on the north tower? What if a blowout preventer failed? What if our computer controllers are hacked? Identify key safety processes and discuss what would happen if each failed. Include a review of injury, maintenance, and incident reports, the near misses as well as the losses. 
The best brainstorming sessions include staff from all parts of the operation, including the front line workers. They often know the dangers better than management because they've been on the receiving end of the close calls. 

Evaluate the Risks:
Separate the risks into groups (some may fall into more than one category.) As an example, headings might include loss of life/injury, loss of the facility, loss of equipment, loss of data, loss of income, environmental damage, etc. Go through each category and rank the risks from highest damage potential to lowest. The same incident may rank differently in different categories.  
This can lead to some sobering realizations such as if there was a fire at the south entrance, everyone in the maintenance bay would be trapped. 
The next step requires expertise and analysis. Each risk needs to be considered by its probability of happening. For example, a natural disaster causing major property and environmental damage is going to have a higher probability in areas prone to hurricanes, tornadoes, and earthquakes. Conversely, equipment that is new, well-maintained, and has little or no record of operating problems is going to have a lower probability of failure.
The goal is to create a risk matrix. At a glance, a company can sort out high damage, but low probability occurrences from the more immediate risks faced by the company. In short, the risk matrix identifies the likelihood of a failure and the damages if it happens. 
This can be a difficult procedure. Software experts have gathered data about everything from weather or injury reports and the programs can assist you in assigning probabilities of different types of failures. Creation of a risk matrix may start out as yellow pads and whiteboards, but in modern business, it will end up as a computerized summary identifying the company's key vulnerabilities.  

Mitigate the Risks:
This isn't just good business, its good stewardship. Once the risk matrix identifies areas of improvement, the company can target resources to lessening or eliminating the problems. Rather than trying to hurricane-proof the entire facility, it could be as simple as clearing out trees and bushes around key valves and equipment. If there is a history of injuries, a job process can be reworked or additional safety equipment installed. Computers can be upgraded and expanded to include easily accessible cloud storage. Comprehensive risk management reviews can also weed out inefficient tottering equipment that is costing the company more in dollars and danger than it is worth. 

Performing a risk evaluation is a major project. Depending on the size and complexity of the operation, it is a significant commitment of manpower and resources. But the payoff is increased efficiency, lower accident rates, and real savings by avoiding unnecessary downtime and repairs. Bonuses include a better relationship with safety and environmental regulatory agencies and potentially lower insurance rates. Contact us to discuss solutions to help streamline and improve your risk management system.