Risk Management Procedure
Risk Management Procedure
RISK MANAGEMENT
PROCEDURE
APPROVED BY: RODNEY SINGH | HSSE-PRD-021 | REVISION 0 | 3RD AUG 2021| PAGE 1 OF 19
DIKENSON ENTERPRISES LIMITED
TABLE OF CONTENTS
1 INTRODUCTION .........................................................................................................................................................................3
4 PROCEDURE ..............................................................................................................................................................................5
APPROVED BY: RODNEY SINGH | HSSE-PRD-021 | REVISION 0 | 3RD JAN, 2021| PAGE 2 OF 19
DIKENSON ENTERPRISES LIMITED
1 INTRODUCTION
Risk management is part of every manager’s day to day responsibilities – it should inform judgements about the
appropriateness of policy options or service delivery methods and as such should be integral to both strategic and
operational management.
The term “risk” in this procedure document is intended to encompass all risks facing DEL including Health, Safety,
Security and Environment.
1.1 PURPOSE
This procedure document provides detailed guidance to DIKENSON ENTERPRISES LTD (DEL) managers regarding the
operation of the Risk Management System outlined. It highlights the processes to be followed and the responsibilities of
the managers and staff involved. The procedure is intended to ensure compliance with the Risk Management Strategy
and facilitate a consistent approach to risk across DEL.
1.2 SCOPE
These Manuals forms part of the HSSE Management System and covers all DEL activities carried out at any of their
locations in the field or office; this includes activities carried out on DEL’s behalf by contractors and subcontractors.
The Author will review this document at least annually. Triggers for further reviews may include:
APPROVED BY: RODNEY SINGH | HSSE-PRD-021 | REVISION 0 | 3RD JAN, 2021| PAGE 3 OF 19
DIKENSON ENTERPRISES LIMITED
2 KEY DEFINITIONS
TERMS DEFINITIONS
Aspect The organisation shall establish and maintain procedures to identify the environmental aspects of its
activities, products and services that it can control and over which it can be expected to have an influence, in
order to determine those which have or cannot have significant impacts on the environment.
Hazard Anything with the potential to cause harm, including ill health and injury, damage to property, products or
the environment, production losses, increased liabilities or a combination of these.
Impact Any change to the environment, whether averse or beneficial, wholly or partly resulting from an
organisation's activities, products or services.
Likelihood Number of occurrences of an event or outcome per defined period of time
Plant and Includes-any machinery, equipment, appliance, implement and tool; and any component of any of those
Equipment things; and anything fitted, connected or related to any of those things.
Residual Risk Risk remaining after risk treatment/controls. Residual risk may contain unidentified risk.
Risk The combination of likelihood of occurrence of harm and the consequence/severity of that harm. Risk=
Likelihood x Consequence
Risk Acceptance The informed decision to accept risk. Risks accepted should be subject to monitoring and review.
Risk Analysis The estimation of risk associated with the identified hazards.
Risk Assessment A systematic process of organizing information to support a risk decision to be made within a risk
management process. It consists of the identification of hazards and the analysis and evaluation of risks
associated with exposure to those hazards
Risk Control Actions implementing risk management decisions.
Risk Evaluation Process of comparing the results of the risk analysis against risk criteria to determine the level of risk and
whether it is tolerable or not.
Risk Management The systematic application of HSE management policies, procedures and practices to the tasks of assessing,
controlling, communicating and reviewing risks.
Risk Monitoring Monitoring of risk management procedures, particularly risk treatment/control processes, to assess whether
they are effectively implemented and achieving their planned aims.
Severity Extent of a loss, harm or damage.
4 PROCEDURE
4.1 KEY REQUIREMENTS
DEL undertakes business in a profitable and sustainable way that is consistent with the needs of our stakeholders, and
does not endanger the health and safety of people or the environment.
Risks that affect DEL– that arise as a result of DEL’s activities – shall be identified, analysed and evaluated.
Risk management techniques shall be used to ensure that risks are either eliminated or controlled to a level that is
considered As Low as Reasonably Practicable (ALARP), see Figure 2. The achievement of this goal shall be commensurate
with DEL’s social and moral obligations and the business need for undertaking the risk.
• Reducing any unacceptable risks, or ceasing the operations that create them
• Implementing risk treatments to reduce risks to a level so that the exposure to risk is consistent with Dikenson
Enterprises Ltd’s social and moral obligations and its business requirements
• Regularly monitoring risks and their controls to ensure they are in place and effective
• Communicating risk information to the relevant parties.
The process of risk management being used at DEL is in accordance with the AS4360 Risk Management Standard. This is
summarized in Figure 1.
To assist in ensuring that risks within all levels of DEL are identified and managed, three discrete approaches to risk
management are employed within DEL:
APPROVED BY: RODNEY SINGH | HSSE-PRD-021 | REVISION 0 | 3RD JAN, 2021| PAGE 6 OF 19
DIKENSON ENTERPRISES LIMITED
Identify Hazard/Risk
Accept risks
Record Results
APPROVED BY: RODNEY SINGH | HSSE-PRD-021 | REVISION 0 | 3RD JAN, 2021| PAGE 7 OF 19
DIKENSON ENTERPRISES LIMITED
APPROVED BY: RODNEY SINGH | HSSE-PRD-021 | REVISION 0 | 3RD JAN, 2021| PAGE 8 OF 19
DIKENSON ENTERPRISES LIMITED
Once the existing controls have been identified, the residual risk shall be calculated. This is the level of risk remaining
provided the existing controls are in place, effective and those exposed to the risk are aware of these controls.
APPROVED BY: RODNEY SINGH | HSSE-PRD-021 | REVISION 0 | 3RD JAN, 2021| PAGE 9 OF 19
DIKENSON ENTERPRISES LIMITED
Extreme Risk is intolerable Activity, product, service or issue relating to this risk should cease
immediately. Significant and urgent risk treatments are required to treat and remove
risks from extreme area of matrix. Continual monitoring of action/management plans
and risk treatments to be conducted by risk owners. The Risk owner shall inform the
Managing Director and the Audit and Risk Management Committee of identified
Extreme residual risks and their method of control.
Moderate Risk should be reduced Monitoring of activity, product, service or issue by relevant
management group with action plans in place to treat and reduce the risk to As Low
As Reasonably Practicable (ALARP). Action/management plans to be monitored to
ensure completion. Controls to be monitored to ensure they are in place and
effective. If risk cannot be reduced, then risk owner is to make a decision to accept
risk and monitor controls to ensure they are in place and effective.
Low Risk is acceptable Risk is to be accepted and monitored to ensure controls are in
place and effective.
Risks shall be treated so that there is a reduction in the residual risk to a level that is considered As Low as Reasonably
Practicable (ALARP). Figure 1 defines the relevance of ALARP in terms of risk reduction.
APPROVED BY: RODNEY SINGH | HSSE-PRD-021 | REVISION 0 | 3RD JAN, 2021| PAGE 10 OF 19
DIKENSON ENTERPRISES LIMITED
region
Residual risk acceptable only if
further risk reduction is
impracticable.
Negligible Risk
APPROVED BY: RODNEY SINGH | HSSE-PRD-021 | REVISION 0 | 3RD JAN, 2021| PAGE 11 OF 19
DIKENSON ENTERPRISES LIMITED
For health, safety, security and environmental risks, the hierarchy of controls, shown in Table 2, shall be considered
when implementing treatments.
Controls higher up the hierarchy are preferred to controls lower down because of their greater effectiveness in reducing
the consequence and hence the level of risk.
Identified risk treatments shall be supported by an action or management plan that documents the necessary steps
required for successful implementation. The plan shall include defined steps for implementation, accountabilities,
timeframes for completion and any other resource information that may be required.
APPROVED BY: RODNEY SINGH | HSSE-PRD-021 | REVISION 0 | 3RD JAN, 2021| PAGE 12 OF 19
DIKENSON ENTERPRISES LIMITED
Eliminate Eliminate the activity that allows the risk Avoid the use of the chemical, waste or
to occur. activity that leads to the impact.
Substitute Substitute the product or process to Substitute the product or process to minimise
minimise the risk. For example, change of the risk. For example, change of a chemical or
a chemical or process such as use of fall process such as use of fall prevention rather
prevention rather that fall protection. that fall protection. Substitute a product or
Substitute a product or process to process to minimise the impact or pollution.
minimise the impact or pollution. For For example, waste reuse, change of
example, waste reuse, change of chemicals, use of alternative energy or energy
chemicals, use of alternative energy or recovery.
energy recovery.
Isolate Place a barrier or lock to prevent access Establish a physical barrier between the
to the source of the risk. Barriers or lock natural environment and the pollution, for
must be physical, for example, guarding example, bunding, filtration, catalytic
or lockout devices. converters or recycling.
Personal Protective Use PPE as necessary for the risk, for ------
example, face masks, gloves, high
Equipment (PPE) visibility clothing etc.
Table 2: Hierarchy of Controls for Health and Safety, and Environmental Risks
APPROVED BY: RODNEY SINGH | HSSE-PRD-021 | REVISION 0 | 3RD JAN, 2021| PAGE 13 OF 19
DIKENSON ENTERPRISES LIMITED
Once a risk has been reduced to ‘As Low as Reasonably Practicable’, the risk owner shall determine if it is to be accepted.
Existing controls of accepted risks should be monitored for effectiveness. A number of processes can be used to monitor
the effectiveness of a control. These include but are not limited to:
• Auditing
• Asset, equipment or workplace inspections
• Calibration programs
• Training or awareness programs
• Contract planning, monitoring and review
• Job Safety Analysis
• Incident Investigations
• Hazard reporting and correction
• Regulatory compliance monitoring
• Emergency or crisis exercises.
The owner of a risk that has an inherent ranking of Extreme or Very High, shall ensure that the review of the risk include
a review of the effectiveness of existing controls and approved risk treatments.
• The reference number or identifying tag associated with the risk assessment
• The name of the person/s that carried out the risk assessment
• The critical task the risk assessment was carried out to assess
APPROVED BY: RODNEY SINGH | HSSE-PRD-021 | REVISION 0 | 3RD JAN, 2021| PAGE 14 OF 19
DIKENSON ENTERPRISES LIMITED
• At regular intervals to ensure consistency and accuracy of DEL’s risk management program
• When changes to our Statement of Corporate Intent or Corporate Strategies have occurred;
• Where changes to legal or other compliance requirements such as codes of practice, standards or guidelines
may impact our the operations of DEL
• Upon receipt of regulatory or stakeholder feedback that may impact the objectives of the corporation;
• Where incident investigations have identified the failure of existing controls or the failure to manage risks to the
corporation
• Where external audits have identified gaps in our governance processes or systems failures.
• Changes to business operations or the introduction/alteration of new plant/equipment or processes.
The review shall ensure that successfully implemented risk treatments are classified as existing controls on the relevant
risk register and that these controls are being monitored for effectiveness.
The person initiating the review shall ensure that the risk owner and the function head if necessary are informed of the
circumstances of the review and that nature of the review is clearly understood by all parties
Dikenson Enterprises Limited’s nominated Functional Heads shall review the risks in each Department strategic and
operational risk register that are applicable to their area of expertise
The owner of a risk shall ensure that personnel affected by an identified risk, have any information, including controls
and risk treatments communicated to them
Personnel who work in or interact with risks identified in a risk register shall have that register communicated to them.
This is communicated via HSSE/toolbox meetings.
APPROVED BY: RODNEY SINGH | HSSE-PRD-021 | REVISION 0 | 3RD JAN, 2021| PAGE 15 OF 19
DIKENSON ENTERPRISES LIMITED
5 TRAINING REQUIREMENTS
6 RELATED DOCUMENTS
Title Document # Type
Risk Assessment Form
JSA Form
APPROVED BY: RODNEY SINGH | HSSE-PRD-021 | REVISION 0 | 3RD JAN, 2021| PAGE 16 OF 19
DIKENSON ENTERPRISES LIMITED
Service Delivery No loss of service. Service restored Short term disruption Long term disruption Complete and
Issues rectified with within expected to service outside of to service with indefinite disruption
corrective action. timeframes. <1 Day. expected timeframes extended resources to service. >1 Month.
to remedy. >1 Day to required to remedy.
< 1 Week. >1 Week to <1
Month
Financial, Minor costs less than Costs 10k - $100k. Costs $100k - $500k. Costs $500k - $1M. Costs >$1M.
Damage or Loss <$5k.
APPROVED BY: RODNEY SINGH | HSSE-PRD-021 | REVISION 0 | 3RD JAN, 2021| PAGE 17 OF 19
DIKENSON ENTERPRISES LIMITED
Likelihood Table
A The event is expected to occur in most circumstances At least once every week.
Almost certain
B The event will probably occur in most circumstances Once every month.
Likely
C The event might occur at some time Once every year.
Possible
D The event could occur at some time Once every 2 to 5 years.
Unlikely
E The event may occur only in exceptional circumstances Once in 6 – 30 years.
Rare
APPROVED BY: RODNEY SINGH | HSSE-PRD-021 | REVISION 0 | 3RD JAN, 2021| PAGE 18 OF 19
Dikenson Enterprises Limited’s Risk Matrix
Consequence
1 2 3 4 5
2 5 9 14 19
APPROVED BY: RODNEY SINGH | HSSE-PRD-021 | REVISION 0 | 3RD AUG 2021| PAGE 0 OF 19