Risk analysis has become a vital exercise for a lot of international standards. A large majority of certified companies are required to have a risk assessment methodology and should be aware of the risks within their company and operations. Some companies have been creating this analysis with a lot of passion using all the knowledge they have. However, a lot of companies just perform the analysis for the certification and simply check it yearly or twice a year during an audit or management review. So how is it possible to make sure risks are really embedded in the company culture?
Risk Treatment Plan
A good way to start is by creating a Risk Treatment Plan. The purpose of a Risk Treatment Plan is to define exactly who is going to do what. You can also call this document an ‘Implementation Plan’ or ‘Action Plan’. It is crucial to get your management approval on the plan because it will take considerable time and effort (and money) to implement all of the actions. Furthermore, management approval also gives you the mandate to ensure things happen. Make sure you have clearly defined tasks for people to perform.
Next to the Plan, a great way to make the risk assessment more dynamic is by embedding it into the issue management or CAPA. When an issue has occurred, check the risk analysis and see if there is something mentioned about this specific issue. The issue could be a minor problem or a major problem, either way it is best to check the risk assessment. When the issue has some serious impact on the company, modify the risk assessment and add the risk. This way the company is able to use the risk analysis as a dynamic document that holds valuable lessons learned of the company.
When big changes happen within the company, you can use the risk assessment as guidance. Yes, companies should take risks to strive for a better future. But companies should make sure they take calculated risks. By embedding these big changes within the company’s risk assessment, the top management has a feeling of what could go wrong if no precautions are taken. This way, the top management can plan and prepare for the big change and manage it much better. The role of the quality manager is to ask the right questions for management.
A big part of the risk assessment includes risks in the workplace. Of course the most obvious ones are included such as the risks with lifting machines and the other heavy-duty machinery, but the less obvious are the ones that can cause danger. The big risk comes when a routine of the work activity kicks in. When people are doing the same job every day and completely understand how to do it, less care is taken and something can be out of place. That is when the danger starts. Make sure that the employees that perform inherited dangerous tasks always perform a quick Risk assessment before they start to prevent any problems from happening. Having people sick at home is a great risk in and of itself. Next to the physical risks, psychological risks shouldn’t be neglected. The psychological risks of the stress heavy jobs should be monitored on a regular basis also.