Risk assessment
Risk assessment questions test whether you can separate hazard from risk, choose a method that fits the decision, and show that controls reduce risk to a tolerable level. The exam favors structured reasoning over a single risk number.
Core rules and concepts
- A hazard is a source of harm; risk combines likelihood and severity for a specified exposure scenario.
- Qualitative matrices support screening; HAZOP, FMEA, LOPA, and fault-tree analysis suit more complex systems.
- ALARP and risk tolerance criteria require documented acceptance decisions, not just a score.
- Reassess residual risk after controls; verify that the control actually works and does not create a new hazard.
- Risk registers need owners, dates, and review triggers.
Worked example
A task is scored on a 5×5 matrix: likelihood 4 (likely) and severity 3 (serious injury) gives 12, in the high-risk band. An engineering guard reduces likelihood to 2, producing 6, in the medium band. The team documents the residual risk as tolerable with the guard, inspection, and lockout/tagout in place, and sets a review date. If the guard is bypassed for maintenance, the original score returns; that is why bypass control is part of the assessment.
Traps that cost marks
Calling a hazard a risk ('the grinder is high risk') without stating exposure and consequence. Treating a matrix score as precise arithmetic. Accepting a low residual score without evidence. Selecting administrative controls when elimination is feasible.