Risk Consultant

Risk assessment- An assessment of any risks to the worker's health and safety is undertaken by a trained risk assessor. This allows for the risks to be removes, reduced or avoided, and for preventive and protective measures to be identifies and

The purpose of risk assessment is not to remove risks, but to take reasonable steps to reduce them. The process involves looking at the risk, and considering what can be done to make it less likely that the risk will develop into a reality. This can be done through implementing policies and codes of practice, acting in individual’s best interests, fostering culture of openness and support being consistent, maintaining professional boundaries and following systems for raising concerns.

3.4 summarise the types of risks that may be involved in assessment in own area of responsibility.

The idea behind a risk assessment is to attempt to identify all the potential risks associated with a particular activity. The risk assessment will normally be carried out by the nominated Health and Safety Officer.

Risk assessments can help address dilemmas between rights and health and safety concerns by helping reduce any risks created by undergoing certain tasks, risks assessments are not in place to prevent an individual doing things that they want to do, they are in place to concentrate on the risk factors and to look at any other ways to reduce the risk of the task in hand.

A risk assessment is used to assess the hazards and risks that can cause harm to individuals in an environment. I did my risk assessment for my placement which is a day nursery setting called Quince Tree. Many parents and their children visit this health and social care setting daily and a risk assessment was needed to make sure their safety was to a high standard.

4.3: To carry out a risk assessment first of all you need to identify the hazards, then decide who might be harmed and how. Then evaluate the risks and decide on precaution and then record your findings and implement on them. After this is done review your assessment and update if necessary.

Risks assessments will identify any hazards and/or dangers and who might be harmed and how this may happen, allow the risks to be evaluated and check if the precautions are

3.7. Using a risk assessment to promote health and safety is very important to ensure that the individual is kept safe in the work place. Risk assessments evaluate the risks and identify hazards to put precautions in place to reduce the risks. Reporting and recording the outcome of the risk assessments make things more clear and is careful to keep everybody protected and safe.

Quantitative risk analysis involves steps, calculations and tools to have a good analysis. The steps involve with this method from (wikibooks n.d) includes: assigning value to assets, Estimating potential loss per threat, Performing a threat analysis and Deriving the overall loss potential per threat. Firstly, in order to assign an accurate value to an asset, all tangible and intangible assets must be identified. For instance a company may have a server and to determine the value of the server, the important of the server to the company and the cost of losing server are factors that helps in determining the value for the server. Secondly, the potential loss per threat should be estimated. If a server is hacked, how much loss will it cost to the company? To know that, the Single Loss Expectancy (SLE) has to be calculated. SLE is the asset value (AV) times the exposure factor (EF). Thirdly, risk analysis have to be performed. In the case of a server being stolen, it has to be determine how many times in a year can it happen. To know this, the Annual Rate of Occurrence (ARO) have to be calculated. Also, the overall loss potential per threat have to be known. The overall loss that can be incur from a stolen server and the probability that a server will be stolen can be derived by calculating the Annual Lost Expectancy (ALE) which is annual rate of

The analysis of risk assessment controls are an important aspect of a system, as they are used as a basis for identifying and selecting appropriate and cost-effective measures.

First, they conduct a risk analysis to identify specific risks to data, resources and the network. The purpose of a risk analysis is to identify and evaluate each vulnerable component in order to apply appropriate security solutions. Risk analysis helps to maintain a flexible balance between security and required access.

Quantitative risk analysis attempts to calculate the probability of an event occurring along with what will likely be lost. These calculations are called typically designated with names like the “Annual Loss Expectancy” (ALE) or “Estimated Annual Cost” (EAC). (Osman) These numbers are figured by multiplying the potential loss by the probability of it occurring. Theoretically, it is possible to rank events based on an ALE or EAC score; however, in practice using just this type of risk analysis has several drawbacks mostly related to inaccuracy and unreliability of this data. Often times risks are often interrelated as the existence, and then occurrence, of a risk often times snowballs causing a seemingly low risk situation to become either much more likely to occur or more damaging. Qualitative Risk Analysis is much more widely used. In this form of risk analysis probability of risk occurring is not taken into consideration. Three interrelated variables are of taken into consideration when using formal Qualitative Risk Analysis to analysis security risk: threats, vulnerabilities and controls. (Osman) Threats are potential variables that could cause loss in some way. These exist in every system. For instance, in information systems threats may be hackers or even disgruntled employees. Vulnerabilities make a system more likely to be attacked and for that attack to be more successful. A recent

Managing risk is an important task for any project manager. After s/he has determined what risks exist for the project and assessed their importance, s/he needs to choose a strategy for dealing with each risk if and when it comes into play. According to Swanson, the risk assessment is critical because it enables the person responsible for contingency planning to focus risk management efforts and resources in a prioritized manner only on the identified risks. The risk management process includes the risk assessment and determination of suitable technical, management, and operational security controls based on the level of threat the risk imposes (Swanson, 2001). Minimize the chances that the risk will occur, develop

The way risks are assessed by rate their impact and probability as low, medium or high, as analyse on below matrix. The numbers are adding together to give a score; the higher the score the greater the requirement to address that risk.