Blank Risk Matrix, Updated on 31.01.2017.

RISK

What has been managed & NEW RISKS

Business strateg

%usiness, sales' No suiable and deailed enoug0, poorly communicaed and implemened, poorly adaped o c0anges

Compeon

Aggressive competton, argetng argetng AAA on purpose

Costs o* #onsumables and re#hargeables

ncrease by a"es, driven up by competor Ne& c0emicals re)uired *ie ecological+

Customer segments at risk

(0anges in mare - s&ic0ing over o F# companies, going in 0ouse, leaving premises, reducton of cusomers business

Impa#t on "S! business

(robabilit o* happening

Control rang

Residual risk rang Measures taken

3

1

1

3

3

2

2

12

2

2

1

4

2

1

2

4

1

2

6

!raud !unding

Financial losses, cour proceedings

3

For sar-up, oo long paymen period

2

2

1

4

"eographi#al #o$erage

No provided for successful bid

2

1

1

2

3

3

2

1

I%

/pgrading cosly, curren programmes no up o sandard 5 mare needs, no compatble &i0 e"istng sysems Available or no in 0ouse, contnually improved *or no+, can be safely ousourced for large proecs, ec

2

3

2

12

Knoledge base 'egislaon

!a", N#$, ec

2

2

2



2

2

2



(artnerships

ie 777 - AAA don8 0ave 0e freedom in pricing, resriced business &i0 o0er cliens, forced use of suppliers

9oss of ey sa: *;ead 0uned, leave for o0er reasons+ and no
3

2

2

12

(eople (ri#es dri$en don

%y F#, cliens, competors, for cerain services 5 all services

3

3

2

1

(rodu#t risks

=elying on one main service, no innovatve enoug0, no capaciy

3

2

2

12

2

3

2

12

3

3

2

1

)ualit o* internal sstems and rocedures no up o dae, no rig0, no cummunicaed o all, no being follo&ed pro#esses ervice )ualiy dropping belo& 9A due o sa: urnover, urnover, poor m anagemen, clien inerfering &i0 sa:, sa:, if ousourced - can be a:eced by )ualiy of services delivered by suppliers

)ualit o* ser$i#es Reputaon damage

%y o&n actons or by 3rd pary, deliberaely

2

1

2

4

S#hedules o* authorit

omeone &i0 lesser au0oriy signs conrac 0a is no bene.cial o AAA

1

2

3

6

u AAA a ris due o poor performance, lac of capabiliy o deliver services, approac0ing clien direcly, driving up prices

2

3

1

6

Suppliers

AAA don8 use laes ec0nologies, clien < si>e< is no enoug0 o pay for ec0nologies by clien pus pressure on AAA

2

3

2

12

%e#hnologi#al #hanges Weather

(leaners canno ge o &or ame &i0 ?#, also oo dangerous o &or on sies

2

2

2



3' (ritcal

3' Fre)uenly *1 " pa+

3' oor conrols

2' erious

2' robable *min 1 " every 3 years+

2' @ucome no guaraeed

1' igni.can

1' =emoe *1 " in more 0an 3 years+

1' /nder conrol

Deadlines

Responsibilies

12 and over

31121B

?F  9 =is mari", curren

=ef

RISK

Comments



Control rang

Residual risk rang

=1 =2

=3 =4 =C =6 =B = =D = 1 = 11 = 12 = 13 = 14 = 1C



= 16



= 1B



= 1



= 1D



= 2



= 21

 3' (ritcal


3' oor c onrols

31121B


=ef

RISK


Comments


Control rang

Residual risk rang

=1 =2

=3 =4 =C =6 =B = =D = 1 = 11 = 12 = 13 = 14 = 1C



= 16



= 1B



= 1



= 1D



= 2



= 21

 3' (ritcal


3' oor c onrols

2' erious



1' igni.can


1' /nder conrol


Measures taken

12 and over

Deadlines

Responsibilies

31121B


Measures taken

12 and over

Deadlines

Responsibilies

31121B

RISK +o has been managed +&S manager not aare about risk,s e-isng on a par#ular site thus risk,s not addressed .ps managers not aare o* risks/ there*ore #annot in*orm +&S Manager and re0uest to address 1ne risks due to on site a#$ies/ poor knoledge o* site2

+&S Manager has no knoledge to per#ei$e something as risk and address a##ordingl

Risks not addressed #ompletel or parall b .ps as per instru#ons *rom +&S Manager Risk,s #aused b sta3 beha$iour 1human


RISK +o has been managed +&S manager not aare about risk,s e-isng on a par#ular site thus risk,s not addressed


.ps managers not aare o* risks/ there*ore #annot in*orm +&S Manager and re0uest to address 1ne risks due to on site a#$ies/ poor knoledge o* site2

+&S Manager has no knoledge to per#ei$e something as risk and address a##ordingl

Risks not addressed #ompletel or parall b .ps as per instru#ons *rom +&S Manager Risk,s #aused b sta3 beha$iour 1human *a#tor2 4##idents/ in#idents/ near misses reported late or not reported +igher +&S risk might need to be taken due to #ommer#ial reasons Non5#omplian#e ith re0uirements o* .+S4S 67886 standard 1eakness o* sstem/ issues ith re5a##reditaon o* .+SMS/ issues ith #ompling ith sa*et s#hemes/ issues ith #ompling ith #lients9 re0uirements2 Non5#omplian#e ith re0uirements o* IS. :886 standard 1eakness o* sstem/ issues ith re5a##reditaon o* )MS/ issues ith #ompling ith on pro#edures2

Non5#omplian#e ith re0uirements o* IS. 6;886 standard 1eakness o* sstem/ issues ith re5a##reditaon o* EMS/ issues ith #ompling ith on pro#edures and #lients9 re0uirements2 NEW RISK 3' (ritcal

2' erious 1' igni.can



Control rang

3' oor conrols

Residual risk rang Measures taken

12 and over

Deadlines




1' /nder conrol

Responsibilies

Blank Risk Matrix, Updated on 31.01.2017.

Recommend Documents