Risk 101
The Five-Step ORM Process
Misc. Risk
Risk Assessment
Types of Risk
100

A continuous, systematic process of identifying and controlling hazards to increase certainty of outcomes.

What is Risk Management

100

List the hazards associated with each phase of the project. Potential failures, i.e., things that could go wrong, encompass equipment or operational problems both internal and external to the project.

What is Identify Hazards

100

Enterprise, Strategic, Operational, and Real-Time.

What are the Levels of Risk Management

100

Almost Certain, Likely, Possible, Unlikely, and Rare. 

What is Probability

100

A continuous, systematic process of identifying and controlling hazards to increase certainty of outcomes.

What is Identified Risk 

200

Risks that could have a potential impact on an organization’s objectives

What is Strategic Risk

200

Consider the risk applicable to the project and, specifically, the risk applicable to meeting the objective; determine individual levels for each hazard identified; assess risk by evaluating specific elements or factors that, when combined, define risk; identify the potential consequences associated with the given task; lastly, determine the probability or likelihood of experiencing that outcome based on experienced persons, such as subject matter experts.

What is Assess Hazards

200

Sometimes confused or interchangeably with Risk. 

What is Safety

200

Catastrophic, Critical, Moderate, or Negligible. 

What is Severity/Consequences 

200

Risk that has not been identified but has some effect on the likelihood of achieving our objective. Some risk is not identifiable or measurable but is no less important.

What is Unidentified Risk

300

Risks that materialize from regulatory and compliance requirements that organziations are subject to.

What is Compliance Risk

300

1. Identifying risk management strategies. 

2. Determining the effect of these controls, or the residual risk, on the hazard. 

3. Evaluating risk versus gain to inform a decision

What is Make Risk Decisions

300

Seeks to reduce risks to acceptable levels.

What is Risk Management 

300

Extremely High, High, Moderate, Low

What are Risk Assessment Codes

300

The portion of total risk that remains after mitigation measures have been employed, comprised of acceptable risk and unidentified risk.

What is Residual Risk

400

This form of Risk, has the potential to disrupt daily operations involved with running an Organization.

What is Operational Risk

400

Once the risk decision is made, resources must be made available to put the specific controls in place. 

What is Implement Controls

400

Serves to facilitate and promote wildland firefighter safety.

What is Forest Service Fire Operations Risk Management Council

400

Provides a quick mechanism to assess risk, assign scores to risk elements, compile a total risk score, and equate that score to a relative evaluation of overall risk.

What is Risk Assessment Tool

400

Residual and unidentified risks determined to be acceptable based on the importance of meeting objectives.

What is Acceptable Risk

500

These risks look at a company’s standing in the public and in the media and identify what could impact its reputation.

What is Reputational Risk

500

The final step in the ORM process.

What is Supervise

500

Used to determine the authorization required to sign a Risk Assessment.

What is Risk Decision Authority

500

Used to assign Risk Assessment Codes to each hazard that may be experienced while completing an objective.

What is Risk Assessment Matrix

500

That portion of identified risk that cannot be tolerated and must be either controlled or avoided.

What is Unacceptable Risk  

M
e
n
u