Demonstrating Adequate Management of Risks: The Move from Quantitative to Qualitative Risk Assessments

摘要

This paper will demonstrate that the use of quantitative risk analysis (QRA) has limitations and does not, in isolation, demonstrate adequate management of risks. The only way to demonstrate that risks are being appropriately managed is to identify all hazards; understand the level of risk; identify all prevention, control and mitigation barriers; and then demonstrate that those barriers are adequate and effective in managing that risk to a level that is as low as reasonably practicable. This paper is applicable to all process industries and, in particular, those industries operating under the jurisdiction of NOPSEMA in Australia. Under the OPGGS Act we have a legal obligation to demonstrate that we are managing risk to levels that are demonstrably ALARP. In summary this paper will show that QRA has its place in demonstrating adequate management of risks; however, it should not be used in isolation. Having a QRA conducted can sometimes provide a false sense of security that risk is being managed. The UKOOA Risk-based Decision Making Framework is a useful tool in demonstrating the small part that QRA plays in managing risk. The answer to managing risk effectively lies in demonstrating that adequate and effective controls are in place. Not only do we need to identify the controls that are required to manage risk effectively, we also need to demonstrate that those controls are actually in place, are performing as they should and that competent people have confirmed that this is the case.