Chapter 8: Evaluation of risk and risk management (2024)

Chapter 8: Evaluation of risk and risk management


In this chapter, the complex process of determining the significance or value of the identified hazards and estimated risks to those concerned, or affected, is examined. The evaluation of risk is concerned with issues relating to how those affected by risks perceive them, the value issues underlying the perceived problem and the trade-off between the perceived risks and benefits. The controversy surrounding BSE is used as an example of where risk evaluation has proved hugely important in the implementation of decisions arising from risk assessment. The chapter looks at the factors involved in risk perception and risk acceptance.


The chapter also examines the advantages and disadvantages of the major approaches used in making risk management decisions - bootstrapping, formalised methods such as cost-risk-benefit analysis, and professional judgement. Examples of the use of these approaches in environmental management are discussed.


8.1 The importance of risk evaluation and perception


Risk evaluation attempts to define what the estimated risk actually means to people concerned with or affected by the risk. A large part of this evaluation will be the consideration of how people perceive risks. This section of the book provides an overview of the psychometric and cultural approaches underpinning risk perception, offering an insight into the reasons why risks are perceived in different ways.


8.2 How safe is safe enough?

See Also
Audit risk


A question that is fundamental when talking about risk issues is "How safe is safe enough?". An ERA will characterise the risk posed by a situation and then the process of risk management will eventually lead to a choice of action that will achieve the desired level of "safety". The determination of this "acceptable" or "tolerable" level of risk may have been prescribed before the risk assessment process begins - through societally determined acceptable levels of risk in the form of legislative environmental quality standards for instance, or industry derived "norms". In this case, risk management attempts to analyse which options for action based on the results of the risk assessment will produce these pre-determined risk levels. Where no acceptable risk standards exist, the risk management process will attempt to derive "acceptable" or tolerable risk on a case-by-case basis. This will always raise the question of "Acceptable to whom?". When risk assessment and management procedures are carried out by regulators or government, the aim is to produce societally acceptable risk levels. When an individual company carries out a risk assessment, in the absence of societally determined standards, risk levels will be determined which are acceptable to the company. These may have reference to societally acceptable levels or may be based on a formal risk-cost-benefit approach as advocated by some software packages on risk reduction.


Decision making to determine "acceptable" or "tolerable" risk uses a number of approaches. The three major approaches to acceptable risk decisions are professional judgement where technical experts devise solutions, bootstrapping where historical precedent guides decision making, and formal analyses where theory-based procedures for modelling problems and calculating the best decision are used. These approaches are explained in detail in the text.


8.3 Risk management action


As was discussed in Chapter 1 of the book, environmental risk can be:

  • transferred to another body such as an insurance company,
  • retained by a company or nation,
  • eliminated by removal of the risk agent, or reduced.

In most environmental risk management conducted by nations on behalf of society, risk reduction will be the risk management option chosen. For individuals or companies, risk transfer is a common approach. This may be required by legislation, especially for infrequent catastrophic events. Risk elimination is often very difficult because of all the social and economic effects the removal of an agent can create. For instance the elimination of a pesticide may have implications on the socio-economic conditions in a region.


Risk reduction for environmental risks can involve many techniques. For chemicals they are discussed in the draft European technical guidance document (CEC/ECB, 1997). Generally there are a range of approaches to risk reduction. These include:

  • Substitution. Can the agent be substituted by another, less risky agent? For instance, can a chemical pesticide be substituted by a biological method? What are the risks of the new agent being introduced into the scenario? Is the new agent as effective?
  • Information. Providing information about the safe use and disposal of agents will try to ensure that the risks assessed are the same as what actually occur in practice.
  • Education and information may also allow the public and users to choose lower risk options and force the manufacturers into the production of less risky agents.
  • Limit the availability of the agent by marketing bans or limits on the production or importation of the agent. Such a risk reduction technique has severe implications politically and economically and can often be controversial. Such decisions are taken at a national or regional level and at an international level such agreements are difficult to obtain.

8.4 Some concluding remarks


ERA is a process by which environmental risks can be examined and a qualitative or quantitative measure of risk derived. The process can never be wholly scientific, but uses scientific data to arrive at a measure of the risk that has been chosen to be examined. Many social factors, such as those discussed in this chapter, will heavily influence how environmental problems are formulated and therefore exactly what the ERA will examine. The result of the ERA may be a quantitative scientific estimate. It is important to recognise, however, that social factors will affect this risk estimate and are fundamental in the decisions that are made as a result of the ERA. ERA takes time, resources and energy. The answers provided by ERA will be crucial in decision-making. It may be wise for those who wish to use ERA to take heed of the handling of BSE and the Brent Spar, and recognise that often the social issues involved in environmental risk decisions will be just as important as the scientific assessments.


Most of the book focuses on the techniques used in ERA. The approaches to risk management discussed in this chapter are as important, in terms of the influence they have on the decision-making outcome, as the ERA itself. Risk management techniques are less transparent than those developed for ERA and the influence of different criteria on decision making is often difficult to unravel. Formal analysis can be more easily "opened up" to scrutiny by others but exactly the same criticisms used against ERA can be levelled at it (availability of data, the interpretation and uncertainty). The focus of attention in ERA in recent years has been moved to "tighten up" and increase formality within ERA. Environmental risk management needs to undergo the same process.



References for this chapter
Publications (books and journals)


Chapter 8: Evaluation of risk and risk management (2024)

FAQs

What is the evaluation of risk in risk management? ›

The evaluation of risk is concerned with issues relating to how those affected by risks perceive them, the value issues underlying the perceived problem and the trade-off between the perceived risks and benefits.

How do you evaluate a risk management plan? ›

There is no fixed rule or schedule for evaluating a risk management plan, but some common triggers or occasions for evaluation are regular intervals during the project or business lifecycle, key milestones or deliverables, significant changes in scope, schedule, budget, quality, or resources, major incidents or events ...

What is risk evaluation in risk management PDF? ›

Risk evaluation is the process of comparing the results of the risk analysis with the risk evaluation criteria defined during the context establishment to determine whether the cyber-risks are acceptable.

What are the 3 parts or steps of risk evaluation? ›

Risk assessment is the name for the three-part process that includes:
  • Risk identification.
  • Risk analysis.
  • Risk evaluation.
Jun 20, 2019

What's the main goal when evaluating a risk? ›

What is the goal of risk assessment? The aim of the risk assessment process is to evaluate hazards, then remove that hazard or minimize the level of its risk by adding control measures, as necessary.

What strategies do you use to evaluate risk? ›

How do you evaluate the effectiveness and efficiency of risk responses and mitigation strategies?
  • Define your evaluation goals.
  • Use quantitative and qualitative methods.
  • Apply the PDCA cycle.
  • Consider the context and constraints.
  • Learn from feedback and experience.
  • Evaluate continuously and periodically.
Apr 16, 2023

What are four methods involved in monitoring and evaluating risk management? ›

Risk professionals can divide this continual process that forms part of risk management into four main types, or stages, of risk monitoring:
  • Risk identification. This is an important initial step in risk management and risk monitoring. ...
  • Risk analysis. ...
  • Risk controls and risk treatment. ...
  • Risk reporting and communication.
Feb 9, 2024

How can you monitor and evaluate risk management process? ›

Let's explore each step in more detail.
  1. Step 1: Identify Risks. ...
  2. Step 2: Prepare & Monitor Specific Risk Response Plans. ...
  3. Step 3: Track Identified Risks. ...
  4. Step 4: Identify New Risks Along the Road. ...
  5. Step 5: Evaluate the Effectiveness of Your Risk Management Process.

Why is it necessary to evaluate the risk management process? ›

Risk evaluation determines the tolerability of each risk. Tolerability is different from severity. Tolerability assists to determine which risks need treatment and the relative priority.

How to critically evaluate a risk assessment? ›

Reviewing your assessment and re-assessing if necessary.
  1. Identify potential hazards. ...
  2. Identify who might be harmed by those hazards. ...
  3. Evaluate risk severity and establish precautions. ...
  4. Implement changes and record your findings. ...
  5. Review your assessment and reassess if necessary.

What are risk evaluation criteria? ›

In general, risk criteria should include a risk scoring system that includes risk factors, defined scales of risk levels, and a risk matrix for an organization to measure risk for the purpose of prioritizing and making proper decisions.

What are the 3 C's of risk assessment? ›

A connected risk approach aims to connect risk owners to their risks and promote organization-wide risk ownership by using integrated risk management (IRM) technology to enable improved Communication, Context, and Collaboration — remember these as the three C's of connected risk.

What are the 2 primary methods of risk evaluation? ›

Organizations conduct risk assessments in many areas of their businesses — from security to finance. Cybersecurity risk assessments deal exclusively with digital assets and data. There are two main types of risk assessment methodologies: quantitative and qualitative.

What is risk management in simple words? ›

Risk management is the set of steps an organization takes to prevent unwanted events from happening, or at least to reduce the damage of those events when they do happen. Put another way: risk management is a system for dealing with risks before they evolve into immediate and direct harm.

What is risk evolution? ›

A risk assessment that provides an estimation of evolving or future risk is a way to engage stakeholders in carrying out actions now in order to avoid or mitigate the risk that is accumulating in their city or country.

What is risk assessment and evaluation? ›

A risk assessment is a process used to identify potential hazards and analyze what could happen if a disaster or hazard occurs. There are numerous hazards to consider, and each hazard could have many possible scenarios happening within or because of it.

Why is it important to evaluate risks? ›

Evaluation and prioritization are important because you can't respond to every risk at once. Understanding risk impact lets executives sort out which issues require immediate attention versus those with an acceptable level of that can be addressed later.

Top Articles
Latest Posts
Article information

Author: Ray Christiansen

Last Updated:

Views: 6529

Rating: 4.9 / 5 (49 voted)

Reviews: 88% of readers found this page helpful

Author information

Name: Ray Christiansen

Birthday: 1998-05-04

Address: Apt. 814 34339 Sauer Islands, Hirtheville, GA 02446-8771

Phone: +337636892828

Job: Lead Hospitality Designer

Hobby: Urban exploration, Tai chi, Lockpicking, Fashion, Gunsmithing, Pottery, Geocaching

Introduction: My name is Ray Christiansen, I am a fair, good, cute, gentle, vast, glamorous, excited person who loves writing and wants to share my knowledge and understanding with you.