Resources operational risk management

Risk management is very important if appropriate resources are to be deployed in a timely fashion to mitigate or reduce the potential effect of identified risks. It is recommended that a risk map be produced showing where computer systems are used to support the various process streams of operational activity. 

The principal resources required by a risk management program are money to fund activities such as external audits and equipment inspections, and the time of key pCTSonnel to participate in activities such as hazards analyses and the writing of operating procedures. The second of these is often the most critical because the key people are busy with many other activities, including operations, maintenance, and other types of project work. Hence, the process safety schedule will often be developed around the availability of these people. 

The shutdown safety plan (SSP) is an extension of an outage operational plan and covers the risk management considerations. The SSP should describe possible recovery actions considering systems and equipment which are or may be available at different periods during an outage. Also use of external resources and non-standard systems for accident mitigation should be described. 

To avoid the damage of human health and contamination of particular elements of the environment it is necessary to apply the risk management process which is significant and still rmderrated tool in the Czech Republic. No matter the characteristic and sector classification of the researched risk in the risk evaluation process it is possible to identify common elementary steps like the risk resources identification, to evaluate, to semi-quantify or quantify all risks, to propose and then to implement adequate preventive countermeasures for the critical risks. Within the waste disposal process in this phase this method must be applied, i.e. in the phase of a landfill planning, operations and closing. Just only in this was it is possible to reach an efficient risk control and reduction. 

In respect of the operational and organisational structure of an enterprise, the proposed RA approach mainly addresses the IT responsible person at a small and medium-sized enterprise (SME) who is also engaged in IT safety and security tasks. However, SME are often overtaxed with the evaluation of their IT risks as well as in the determination of the degree of compliance with IT security standards. Developments in a tailored and resource-saving methodology are specifically needed at SME in order to support their risk management and decision-making. 

---