Question Posed By Mark Heath

Mark,

I carry out risk assessments and organise a Risk Framework for small companies in my local area. You ought to decide which activity you are going to assess from your business, and I would suggest that you consider the weighting you place on the activity before decideing which to do first. I would then carry out a full risk assessment, based on the individual activities, and ask what risks are possible from this activity, whether it is a single task, or whether it is a collection of tasks. The risk may be of three types, Strategic, Operational or Financial generally. Operational risk will include Health and Safety risk.

You need to consider what risk is possible, and then apply the controls you need to minimise that risk. Assess the risk on a marking system, probability x impact. Whichever somes out highest, on a scale of 25, is the risk you will address first. You will then decide whether you have addressed the risk, or whether it is an ongoing issue that you still need to monitor.Keep a log of all these risks on your risk register.

If you feel like a chat or would welcome more info, feel free to get in touch.

Garry