作者：Cruanyes Cruanyes 3 年以前
189
更多类似内容
Where to next?
Type in the event that is at risk of occurring. This is an incident that has both causes and consequences, and is usually undesirable (as 'risk' usually has a negative meaning, but not always).
Examples of events include:
How might the control measure fail?
We have added the control measure Control to reduce the probability of Maturity level [Actors]. How might Control fail? What could go wrong and allow Maturity level [Actors] to still happen?
Example: a generator might fail because it runs out of oil. So we could add an oil sensor to give an early warning. This oil sensor would be a control measure. But the oil sensor itself might fail, allowing the generator to fail.
How can you reduce the probability of Maturity level [Actors] occurring?
Can anything be done to prevent it from happening, or at least reduce the chances?
Type in a control measure
How might the control measure fail?
We have added the control measure Maturity to reduce the probability of Maturity level [Actors]. How might Maturity fail? What could go wrong and allow Maturity level [Actors] to still happen?
Example: a generator might fail because it runs out of oil. So we could add an oil sensor to give an early warning. This oil sensor would be a control measure. But the oil sensor itself might fail, allowing the generator to fail.
How might the control measure fail?
We have added the control measure Control to reduce the probability of Maturity level [Operation]. How might Control fail? What could go wrong and allow Maturity level [Operation] to still happen?
Example: a generator might fail because it runs out of oil. So we could add an oil sensor to give an early warning. This oil sensor would be a control measure. But the oil sensor itself might fail, allowing the generator to fail.
How can you reduce the probability of Maturity level [Operation] occurring?
Can anything be done to prevent it from happening, or at least reduce the chances?
Type in a control measure
Marutity failure
How might the control measure fail?
We have added the control measure Maturity to reduce the probability of Maturity level [Operation]. How might Maturity fail? What could go wrong and allow Maturity level [Operation] to still happen?
Example: a generator might fail because it runs out of oil. So we could add an oil sensor to give an early warning. This oil sensor would be a control measure. But the oil sensor itself might fail, allowing the generator to fail.
Type in a potential cause for Risk Event.
Then rate its probability by clicking an icon:
How might the control measure fail?
We have added the control measure Control to reduce the probability of Maturity level [Strategy]. How might Control fail? What could go wrong and allow Maturity level [Strategy] to still happen?
Example: a generator might fail because it runs out of oil. So we could add an oil sensor to give an early warning. This oil sensor would be a control measure. But the oil sensor itself might fail, allowing the generator to fail.
Add a backup control
How can we reduce the chances of Control failure occurring, or preventing Control from working?
Can Control failure be prevented from happening?
If not, can we reduce the chances of it happening?
If it happens, can we reduce the impact, so that Control still works?
Example: adding an oil sensor to a generator could prevent generator failure. To reduce the chances of the oil sensor failing (and allowing the generator to fail), we could add a self-test mechanism to the oil sensor as a backup control.
How can you reduce the probability of Maturity level [Strategy] occurring?
Can anything be done to prevent it from happening, or at least reduce the chances?
Type in a control measure
Maturity failure
How might the control measure fail?
We have added the control measure Maturity to reduce the probability of Maturity level [Strategy]. How might Maturity fail? What could go wrong and allow Maturity level [Strategy] to still happen?
Example: a generator might fail because it runs out of oil. So we could add an oil sensor to give an early warning. This oil sensor would be a control measure. But the oil sensor itself might fail, allowing the generator to fail.
Consequences
What are the consequences of Risk Event?
What happens as a result of this incident?
Add a potential consequence of Risk Event.
Then rate its impact by clicking an icon:
Exclusion
Add a backup control
How can you reduce the chances of Exclusion occurring, or preventing Transference from working?
Can Exclusion be prevented from happening?
If it cannot be prevented, can we reduce the chances of it happening?
If it happens, can we reduce the impact, so that Transference still works?
Limit
Add a backup control
How can you reduce the chances of Limit occurring, or preventing Transference from working?
Can Limit be prevented from happening?
If it cannot be prevented, can we reduce the chances of it happening?
If it happens, can we reduce the impact, so that Transference still works?
Deductible
How might the control measure fail?
You have added the control measure Transference to reduce the impact of Consequence.
How might Transference fail? What could go wrong?
Example: the failure of a packaging machine could have a major impact, so we might keep an old machine for emergencies. But this old machine might not work when needed, because it has not been maintained.
Add a backup control
How can you reduce the chances of Deductible occurring, or preventing Transference from working?
Can Deductible be prevented from happening?
If it cannot be prevented, can we reduce the chances of it happening?
If it happens, can we reduce the impact, so that Transference still works?
How can you reduce the impact of Consequence?
What can be done to make it less disruptive, easier to cope with, or easier to recover from?
Add a control measure
Control failure
How might the control measure fail?
You have added the control measure Control to reduce the impact of Consequence.
How might Control fail? What could go wrong?
Example: the failure of a packaging machine could have a major impact, so we might keep an old machine for emergencies. But this old machine might not work when needed, because it has not been maintained.
Backup control
Add a backup control
How can you reduce the chances of Control failure occurring, or preventing Control from working?
Can Control failure be prevented from happening?
If it cannot be prevented, can we reduce the chances of it happening?
If it happens, can we reduce the impact, so that Control still works?
