Risk assessment
A risk assessment in Ester is a structured evaluation of how a risk source is actually handled in the organisation. The purpose is to document protective measures and handling conditions in order to calculate the operational risk — that is, the actual risk level given the measures that have been taken.
What can affect operational risk?The risk assessment takes into account factors such as:
- Exposure scenario — how, where and how often the risk source is handled
- Protective measures — e.g. fume hood, personal protective equipment, ventilation
- Storage — how the risk source is stored
- Waste management — how residual products are handled
Ester follows the principle of never burying risks. If a risk source can be assessed as both low and high risk, the higher risk level is always presented — at least until a full risk assessment has been documented.
Statuses of the risk assessment
| Status | Means |
|---|---|
| Not assessed | No risk assessment has been carried out — operational risk = inherent risk |
| In progress | Risk assessment has been started but is not completed |
| Completed | Risk assessment is documented and approved |
Completed risk assessments form the basis of the organisation's compliance level in Ester. The compliance level reflects to what extent the organisation's risk sources have been assessed and addressed.