Human health risk assessment
   HOME

TheInfoList



OR:

Broadly speaking, a risk assessment is the combined effort of: # identifying and analyzing potential (future) events that may negatively impact individuals, assets, and/or the environment (i.e.
hazard analysis A hazard analysis is used as the first step in a process used to assess risk. The result of a hazard analysis is the identification of different types of hazards. A hazard is a potential condition and exists or not (probability is 1 or 0). It may, ...
); and # making judgments "on the
tolerability Tolerability refers to the degree to which overt adverse effects of a drug can be tolerated by a patient. Tolerability of a particular drug can be discussed in a general sense, or it can be a quantifiable measurement as part of a clinical study. U ...
of the risk on the basis of a risk analysis" while considering influencing factors (i.e. risk evaluation). Put in simpler terms, a risk assessment determines possible mishaps, their likelihood and consequences, and the tolerances for such events. The results of this process may be expressed in a
quantitative Quantitative may refer to: * Quantitative research, scientific investigation of quantitative properties * Quantitative analysis (disambiguation) * Quantitative verse, a metrical system in poetry * Statistics, also known as quantitative analysis ...
or qualitative fashion. Risk assessment is an inherent part of a broader risk management strategy to help reduce any potential risk-related consequences.


Need


Individual risk assessment

Risk assessment are done in individual cases, including patient and physician interactions. Individual judgements or assessments of risk may be affected by psychological, ideological, religious or otherwise subjective factors, which impact rationality of the process. A systematic review of patients and doctors from 2017 found that overstatement of benefits and understatement of risks occurred more often than the alternative. There is a tendency for individuals to be less rational when risks and exposures concern themselves as opposed to others. There is also a tendency to underestimate risks that are voluntary or where the individual sees themselves as being in control, such as smoking. A 2017 systematic review from the
Cochrane collaboration Cochrane (previously known as the Cochrane Collaboration) is a British international charitable organisation formed to organise medical research findings to facilitate evidence-based choices about health interventions involving health profess ...
suggests "well-documented decision aids" are helpful in reducing effects of such tendencies or biases. The ways statistics are expressed and communicated, both through words and numerically also impact the interpretation of benefit and harm. For example, a fatality rate may be interpreted as less benign than the corresponding survival rate.


Systems risk assessment

Risk assessment can also be made on a much larger "systems" scale, for example assessing the risks of a nuclear power plant (an interactively complex mechanical, electronic, nuclear, and human system) or a hurricane (a complex meteorological and geographical system). Systems may be defined as linear and nonlinear (or complex), where linear systems are predictable and relatively easy to understand given a change in input, and non-linear systems unpredictable when inputs are changed. As such, risk assessments of non-linear/complex systems tend to be more challenging. In the engineering of complex systems, sophisticated risk assessments are often made within
safety engineering Safety engineering is an engineering discipline which assures that engineered systems provide acceptable levels of safety. It is strongly related to industrial engineering/systems engineering, and the subset system safety engineering. Safety eng ...
and reliability engineering when it concerns threats to life, environment, or machine functioning. The agriculture, nuclear, aerospace, oil, railroad, and military industries have a long history of dealing with risk assessment. Also, medical, hospital,
social service Social services are a range of public services intended to provide support and assistance towards particular groups, which commonly include the disadvantaged. They may be provided by individuals, private and independent organisations, or administ ...
, and food industries control risks and perform risk assessments on a continual basis. Methods for assessment of risk may differ between industries and whether it pertains to general financial decisions or environmental, ecological, or public health risk assessment.


Concept

Rapid technological change, increasing scale of industrial complexes, increased system integration, market competition, and other factors have been shown to increase societal risk in the past few decades. As such, risk assessments become increasingly critical in mitigating accidents, improving safety, and improving outcomes. Risk assessment consists of an objective evaluation of
risk In simple terms, risk is the possibility of something bad happening. Risk involves uncertainty about the effects/implications of an activity with respect to something that humans value (such as health, well-being, wealth, property or the environm ...
in which assumptions and uncertainties are clearly considered and presented. This involves identification of risk (what can happen and why), the potential consequences, the probability of occurrence, the tolerability or
acceptability Acceptability is the characteristic of a thing being subject to acceptance for some purpose. A thing is acceptable if it is sufficient to serve the purpose for which it is provided, even if it is far less usable for this purpose than the ideal exa ...
of the risk, and ways to mitigate or reduce the probability of the risk. Optimally, it also involves documentation of the risk assessment and its findings, implementation of mitigation methods, and review of the assessment (or risk management plan), coupled with updates when necessary. Sometimes risks can be deemed acceptable, meaning the risk "is understood and tolerated ... usually because the cost or difficulty of implementing an effective countermeasure for the associated vulnerability exceeds the expectation of loss." Part of the difficulty in managing risk is that both the quantities by which risk assessment is concerned—potential loss and probability of occurrence—can be very difficult to measure. The chance of error in measuring these two concepts is high. The risk with a large potential loss and a low probability of occurrence is often treated differently from one with a low potential loss and a high likelihood of occurrence. In theory, both are of near equal priority, but in practice, it can be very difficult to manage when faced with the scarcity of resources—especially time—in which to conduct the risk management process.


Mild Versus Wild Risk

Benoit Mandelbrot distinguished between "mild" and "wild" risk and argued that risk assessment and management must be fundamentally different for the two types of risk. Mild risk follows
normal Normal(s) or The Normal(s) may refer to: Film and television * ''Normal'' (2003 film), starring Jessica Lange and Tom Wilkinson * ''Normal'' (2007 film), starring Carrie-Anne Moss, Kevin Zegers, Callum Keith Rennie, and Andrew Airlie * ''Norma ...
or near-normal probability distributions, is subject to
regression to the mean In statistics, regression toward the mean (also called reversion to the mean, and reversion to mediocrity) is the fact that if one sample of a random variable is extreme, the next sampling of the same random variable is likely to be closer to it ...
and the law of large numbers, and is therefore relatively predictable. Wild risk follows
fat-tailed distribution A fat-tailed distribution is a probability distribution that exhibits a large skewness or kurtosis, relative to that of either a normal distribution or an exponential distribution. In common usage, the terms fat-tailed and heavy-tailed are someti ...
s, e.g., Pareto or power-law distributions, is subject to regression to the tail (infinite mean or variance, rendering the law of large numbers invalid or ineffective), and is therefore difficult or impossible to predict. A common error in risk assessment and management is to underestimate the wildness of risk, assuming risk to be mild when in fact it is wild, which must be avoided if risk assessment and management are to be valid and reliable, according to Mandelbrot.


Mathematical conceptualization

To see the risk management process expressed mathematically, one can define total risk as the sum over individual risks, R_i, which can be computed as the product of potential losses, L_i, and their probabilities, p(L_i): :R_i=L_i p(L_i)\,\! :R_=\sum_i L_i p(L_i)\,\! Even though for some risks R_i, R_j, we might have R_i = R_j, if the probability p(L_j) is small compared to p(L_i), its estimation might be based only on a smaller number of prior events, and hence, more uncertain. On the other hand, since R_i = R_j, L_j must be larger than L_i, so decisions based on this uncertainty would be more consequential, and hence, warrant a different approach. Financial decisions, such as insurance, express loss in terms of dollar amounts. When risk assessment is used for public health or environmental decisions, the loss can be quantified in a common metric such as a country's currency or some numerical measure of a location's quality of life. For public health and environmental decisions, the loss is simply a verbal description of the outcome, such as increased cancer incidence or incidence of birth defects. In that case, the "risk" is expressed as :R_i= p(L_i)\,\! If the risk estimate takes into account information on the number of individuals exposed, it is termed a "population risk" and is in units of expected increased cases per time period. If the risk estimate does not take into account the number of individuals exposed, it is termed an "individual risk" and is in units of incidence rate per time period. Population risks are of more use for cost/benefit analysis; individual risks are of more use for evaluating whether risks to individuals are "acceptable".


Quantitative risk assessment

In quantitative risk assessment, an
annualized loss expectancy The annualized loss expectancy (ALE) is the product of the annual rate of occurrence (ARO) and the single loss expectancy (SLE). It is mathematically expressed as: : \text = \text \times \text Suppose that an asset is valued at $100,000, and ...
(ALE) may be used to justify the cost of implementing countermeasures to protect an asset. This may be calculated by multiplying the
single loss expectancy Single-loss expectancy (SLE) is the monetary value expected from the occurrence of a risk on an asset. It is related to risk management and risk assessment. Single-loss expectancy is mathematically expressed as: = \times Where the exposure f ...
(SLE), which is the loss of value based on a single security incident, with the annualized rate of occurrence (ARO), which is an estimate of how often a threat would be successful in exploiting a vulnerability. The usefulness of quantitative risk assessment has been questioned, however.
Barry Commoner Barry Commoner (May 28, 1917 – September 30, 2012) was an American cellular biologist, college professor, and politician. He was a leading ecologist and among the founders of the modern environmental movement. He was the director of the ...
,
Brian Wynne Brian Wynne is Professor Emeritus of Science Studies and a former Research Director of the Centre for the Study of Environmental Change (CSEC) at the Lancaster University. His education includes an MA (Natural Sciences, Cambridge 1968), PhD ( ...
and other critics have expressed concerns that risk assessment tends to be overly quantitative and reductive. For example, they argue that risk assessments ignore qualitative differences among risks. Some charge that assessments may drop out important non-quantifiable or inaccessible information, such as variations among the classes of people exposed to hazards, or social amplification. Furthermore, Commoner and O'Brien claim that quantitative approaches divert attention from precautionary or preventative measures. Others, like Nassim Nicholas Taleb consider risk managers little more than "blind users" of statistical tools and methods.


Assessment of risk

The process of risk assessment may be somewhat informal at the individual social level, managing economic and household risks, or a sophisticated process at the strategic corporate level. However, in both cases, ability to anticipate future events and create effective strategies for mitigating them when deemed unacceptable is vital. At the individual level, a simple process of identifying objectives and risks, weighing their importance, and creating plans, may be all that's necessary. At the strategic organisational level, more elaborate policies are necessary, specifying acceptable levels of risk, procedures to be followed within the organisation, priorities, and allocation of resources. At the systematic level, management involved with the project produce project level risk assessments with the assistance of the available expertise as part of the planning process and set up systems to ensure that required actions to manage the assessed risk are in place. At the dynamic level, the personnel directly involved may be required to deal with unforeseen problems in real time. The tactical decisions made at this level should be reviewed after the operation to provide feedback on the effectiveness of both the planned procedures and decisions made in response to the contingency. The first step in risk assessment is to establish the context. This restricts the range of hazards to be considered. This is followed by ''identification of visible and implied hazards'' that may threaten the project, and ''determining the qualitative nature of the potential adverse consequences'' of each hazard. Without a potential adverse consequence, there is no hazard. Consequences are the possible outcome of an undesired event. It is also necessary to identify the potential parties or assets which may be affected by the threat, and the potential consequences to them if the hazard is activated. If the consequences are dependent on dose, i.e. the amount of exposure, the relationship between dose and severity of consequence must be established, and the risk depends on the probable dose, which may depend on concentration or amplitude and duration or frequency of exposure. This is the general case for many health hazards where the mechanism of injury is toxicity or repetitive injury, particularly where the effect is cumulative. For other hazards, the consequences may either occur or not, and the severity may be extremely variable even when the triggering conditions are the same. This is typical of many biological hazards as well as a large range of safety hazards. Exposure to a pathogen may or may not result in actual infection, and the consequences of infection may also be variable. Similarly, a fall from the same place may result in minor injury or death, depending on unpredictable details. In these cases, estimates must be made of reasonably likely consequences and associated probability of occurrence. In cases where statistical records are available, they may be used to evaluate risk, but in many cases, there are no data or insufficient data available to be useful. Mathematical or experimental models may provide useful input.


Dose dependent risk

#''Dose-Response Analysis'', is determining the relationship between dose and the type of adverse response and/or probability or the incidence of effect (dose-response assessment). The complexity of this step in many contexts derives mainly from the need to extrapolate results from experimental animals (e.g. mouse, rat) to humans, and/or from high to lower doses, including from high acute occupational levels to low chronic environmental levels. In addition, the differences between individuals due to
genetics Genetics is the study of genes, genetic variation, and heredity in organisms.Hartl D, Jones E (2005) It is an important branch in biology because heredity is vital to organisms' evolution. Gregor Mendel, a Moravian Augustinian friar wor ...
or other factors mean that the hazard may be higher for particular groups, called susceptible populations. An alternative to dose-response estimation is to determine a concentration unlikely to yield observable effects, that is, a no effect concentration. In developing such a dose, to account for the largely unknown effects of animal to human extrapolations, increased variability in humans, or missing data, a prudent approach is often adopted by including safety or uncertainty factors in the estimate of the "safe" dose, typically a factor of 10 for each unknown step. #''Exposure Quantification'', aims to determine the amount of a contaminant (dose) that individuals and populations will receive, either as a contact level (e.g., concentration in ambient air) or as intake (e.g., daily dose ingested from drinking water). This is done by examining the results of the discipline of
exposure assessment Exposure assessment is a branch of environmental science and occupational hygiene that focuses on the processes that take place at the interface between the environment containing the contaminant of interest and the organism being considered. ...
. As a different location, lifestyle, and other factors likely influence the amount of contaminant that is received, a range or distribution of possible values is generated in this step. Particular care is taken to determine the exposure of the susceptible population(s). The results of these steps are combined to produce an estimate of risk. Because of the different susceptibilities and exposures, this risk will vary within a population. An uncertainty analysis is usually included in a health risk assessment.


Dynamic risk assessment

During an emergency response, the situation and hazards are often inherently less predictable than for planned activities (non-linear). In general, if the situation and hazards are predictable (linear), standard operating procedures should deal with them adequately. In some emergencies, this may also hold true, with the preparation and trained responses being adequate to manage the situation. In these situations, the operator can manage risk without outside assistance, or with the assistance of a backup team who are prepared and available to step in at short notice. Other emergencies occur where there is no previously planned protocol, or when an outsider group is brought in to handle the situation, and they are not specifically prepared for the scenario that exists but must deal with it without undue delay. Examples include police, fire department, disaster response, and other public service rescue teams. In these cases, ongoing risk assessment by the involved personnel can advise appropriate action to reduce risk. HM Fire Services Inspectorate has defined dynamic risk assessment (DRA) as: Dynamic risk assessment is the final stage of an integrated safety management system that can provide an appropriate response during changing circumstances. It relies on experience, training and continuing education, including effective debriefing to analyse not only what went wrong, but also what went right, and why, and to share this with other members of the team and the personnel responsible for the planning level risk assessment.


Fields of application

The application of risk assessment procedures is common in a wide range of fields, and these may have specific legal obligations, codes of practice, and standardised procedures. Some of these are listed here.


Human settlements

The importance of risk assessments to manage the
consequences of climate change The effects of climate change impact the physical environment, ecosystems and human societies. The environmental effects of climate change are broad and far-reaching. They affect the water cycle, oceans, sea and land ice ( glaciers), sea le ...
and variability is recalled in the global frameworks for Disaster Risk Reduction (DRR), adopted by the member countries of the United Nations at the end of the World Conferences held in Kobe (2005) and Sendai (2015). The Sendai framework for DRR brings attention to the local scale and encourages a holistic risk approach, which should consider all the hazards to which a community is exposed, the integration of technical-scientific knowledge with local knowledge, and the inclusion of the concept of risk in local plans to achieve a significant disaster reduction by 2030. Taking these principles into daily practice poses a challenge for many countries. The Sendai framework for DRR monitoring system highlights how little we know about the progress made over the past five years in local disaster risk reduction.


Sub-Saharan Africa

Exceptions aside, in the South of the Sahara, risk assessment is not yet an institutionalized practice. The exposure of human settlements to multiple hazards (hydrological and agricultural drought, pluvial, fluvial and coastal floods) is frequent and requires risk assessments on a regional, municipal, and sometimes individual human settlement scale. The multidisciplinary approach and the integration of local and technical-scientific knowledge are necessary from the first steps of the assessment. Local knowledge remains unavoidable to understand the hazards that threaten individual communities, the critical thresholds in which they turn into disasters, for the validation of hydraulic models, and in the decision-making process on risk reduction. On the other hand, local knowledge alone is not enough to understand the impacts of future changes and climatic variability and to know the areas exposed to infrequent hazards. The availability of new technologies and open access information (high resolution satellite images, daily rainfall data) allow assessment today with an accuracy that only 10 years ago was unimaginable. The images taken by unmanned vehicle technologies allow to produce very high resolution digital elevation models and to accurately identify the receptors. Based on this information, the hydraulic models allow the identification of flood areas with precision even at the scale of small settlements. The information on loss and damages and on cereal crop at individual settlement scale allow to determine the level of multi-hazard risk on a regional scale. The multi-temporal high-resolution satellite images allow to assess the hydrological drought and the dynamics of human settlements in the flood zone. Risk assessment is much more than an aid to informed decisions making about risk reduction or acceptance. It integrates early warning systems by highlighting the hot spots where disaster prevention and preparedness are most urgent. When risk assessment considers the dynamics of exposure over time, it helps to identify risk reduction policies that are more appropriate to the local context. Despite these potentials, the risk assessment is not yet integrated into the local planning in the South of the Sahara which, in the best of cases, uses only the analysis of
vulnerability to climate change Climate change vulnerability (or climate vulnerability or climate risk vulnerability) is defined as the " propensity or predisposition to be adversely affected" by climate change. It can apply to humans but also to natural systems (ecosystems). H ...
and variability.


General health

There are many resources that provide health risk information. The
National Library of Medicine The United States National Library of Medicine (NLM), operated by the United States federal government, is the world's largest medical library. Located in Bethesda, Maryland, the NLM is an institute within the National Institutes of Health. Its ...
provides risk assessment and regulation information tools for a varied audience. These include: * TOXNET (databases on hazardous chemicals, environmental health, and toxic releases), * the Household Products Database (potential health effects of chemicals in over 10,000 common household products), *
TOXMAP TOXMAP was a geographic information system (GIS) from the United States National Library of Medicine (NLM) that was deprecated on December 16, 2019. The application used maps of the United States to help users explore data from the United States ...
(maps of the U.S. Environmental Protection Agency Superfund and
Toxics Release Inventory The Toxics Release Inventory (TRI) is a publicly available database containing information on toxic chemical releases and other waste management activities in the United States. Summary of requirements The database is available from the United St ...
data). The
United States Environmental Protection Agency The Environmental Protection Agency (EPA) is an independent executive agency of the United States federal government tasked with environmental protection matters. President Richard Nixon proposed the establishment of EPA on July 9, 1970; it ...
provides basic information about environmental health risk assessments for the public for a wide variety of possible environmental exposures. The Environmental Protection Agency began actively using risk assessment methods to protect drinking water in the United States after the passage of the Safe Drinking Water Act of 1974. The law required the National Academy of Sciences to conduct a study on drinking water issues, and in its report, the NAS described some methodologies for doing risk assessments for chemicals that were suspected carcinogens, recommendations that top EPA officials have described as perhaps the study's most important part. Considering the increase in junk food and its toxicity, FDA required in 1973 that cancer-causing compounds must not be present in meat at concentrations that would cause a cancer risk greater than 1 in a million over a lifetime. The US Environmental Protection Agency provides extensive information about ecological and environmental risk assessments for the public via its risk assessment portal. The
Stockholm Convention Stockholm Convention on Persistent Organic Pollutants is an international environmental treaty, signed on 22 May 2001 in Stockholm and effective from 17 May 2004, that aims to eliminate or restrict the production and use of persistent organic ...
on
persistent organic pollutants Persistent organic pollutants (POPs), sometimes known as "forever chemicals", are organic compounds that are resistant to environmental degradation through chemical, biological, and photolytic processes. They are toxic chemicals that adversel ...
(POPs) supports a qualitative risk framework for public health protection from chemicals that display environmental and biological persistence, bioaccumulation, toxicity (PBT) and long range transport; most global chemicals that meet this criteria have been previously assessed quantitatively by national and international health agencies.


Small sub-populations

When risks apply mainly to small sub-populations, it can be difficult to determine when intervention is necessary. For example, there may be a risk that is very low for everyone, other than 0.1% of the population. It is necessary to determine whether this 0.1% is represented by: * all infants younger than ''X'' days or * recreational users of a particular product. If the risk is higher for a particular sub-population because of abnormal exposure rather than susceptibility, strategies to further reduce the exposure of that subgroup are considered. If an identifiable sub-population is more susceptible due to inherent genetic or other factors, public policy choices must be made. The choices are: * to set policies for protecting the general population that are protective of such groups, e.g. for children when data exists, the Clean Air Act for populations such as asthmatics or * not to set policies, because the group is too small, or the costs too high.


Acceptable risk criteria

Acceptable risk is a risk that is understood and tolerated usually because the cost or difficulty of implementing an effective countermeasure for the associated vulnerability exceeds the expectation of loss. The idea of not increasing lifetime risk by more than one in a million has become commonplace in public health discourse and policy. It is a heuristic measure. It provides a numerical basis for establishing a negligible increase in risk. Environmental decision making allows some discretion for deeming individual risks potentially "acceptable" if less than one in ten thousand chance of increased lifetime risk. Low risk criteria such as these provide some protection for a case where individuals may be exposed to multiple chemicals e.g. pollutants, food additives, or other chemicals. In practice, a true zero-risk is possible only with the suppression of the risk-causing activity. Stringent requirements of 1 in a million may not be technologically feasible or may be so prohibitively expensive as to render the risk-causing activity unsustainable, resulting in the optimal degree of intervention being a balance between risks vs. benefit. For example, emissions from hospital incinerators result in a certain number of deaths per year. However, this risk must be balanced against the alternatives. There are public health risks, as well as economic costs, associated with all options. The risk associated with no
incineration Incineration is a waste treatment process that involves the combustion of substances contained in waste materials. Industrial plants for waste incineration are commonly referred to as waste-to-energy facilities. Incineration and other high ...
is the potential spread of infectious diseases or even no hospitals. Further investigation identifies options such as separating noninfectious from infectious wastes, or air pollution controls on a medical incinerator. Intelligent thought about a reasonably full set of options is essential. Thus, it is not unusual for there to be an iterative process between analysis, consideration of options, and follow up analysis.


Auditing

For audits performed by an outside audit firm, risk assessment is a crucial stage before accepting an audit engagement. According to ISA315 ''Understanding the Entity and its Environment and Assessing the Risks of Material Misstatement'', "the auditor should perform risk assessment procedures to obtain an understanding of the entity and its environment, including its internal control". Evidence relating to the auditor's risk assessment of a material misstatement in the client's financial statements. Then, the auditor obtains initial evidence regarding the classes of transactions at the client and the operating effectiveness of the client's internal controls. Audit risk is defined as the risk that the auditor will issue a clean unmodified opinion regarding the financial statements, when in fact the financial statements are materially misstated, and therefore do not qualify for a clean unmodified opinion. As a formula, audit risk is the product of two other risks: Risk of Material Misstatement and Detection Risk. This formula can be further broken down as follows:
inherent risk Inherent risk, in risk management, is an assessed level of raw or untreated risk; that is, the natural level of risk inherent in a process or activity without doing anything to reduce the likelihood or mitigate the severity of a mishap, or the amou ...
× control risk × detection risk.


Public health

In the context of
public health Public health is "the science and art of preventing disease, prolonging life and promoting health through the organized efforts and informed choices of society, organizations, public and private, communities and individuals". Analyzing the det ...
, risk assessment is the process of characterizing the nature and likelihood of a harmful effect to individuals or populations from certain human activities. Health risk assessment can be mostly qualitative or can include statistical estimates of probabilities for specific populations. In most countries, the use of specific chemicals or the operations of specific facilities (e.g. power plants, manufacturing plants) is not allowed unless it can be shown that they do not increase the risk of death or illness above a specific threshold. For example, the American
Food and Drug Administration The United States Food and Drug Administration (FDA or US FDA) is a List of United States federal agencies, federal agency of the United States Department of Health and Human Services, Department of Health and Human Services. The FDA is respon ...
(FDA) regulates food safety through risk assessment, while the
EFSA The European Food Safety Authority (EFSA) is the agency of the European Union (EU) that provides independent scientific advice and communicates on existing and emerging risks associated with the food chain. EFSA was established in February 2002, ...
does the same in EU. This source includes a useful historical survey of prior food safety regulation. An
occupational risk assessment An occupational risk assessment is an evaluation of how much potential danger a hazard can have to a person in a workplace environment. The assessment takes into account possible scenarios in addition to the probability of their occurrence, and the ...
is an evaluation of how much potential danger a hazard can have to a person in a workplace environment. The assessment takes into account possible scenarios in addition to the probability of their occurrence and the results. The five types of hazards to be aware of are safety (those that can cause injury),
chemicals A chemical substance is a form of matter having constant chemical composition and characteristic properties. Some references add that chemical substance cannot be separated into its constituent elements by physical separation methods, i.e., wit ...
, biological, physical, and
ergonomic Human factors and ergonomics (commonly referred to as human factors) is the application of psychological and physiological principles to the engineering and design of products, processes, and systems. Four primary goals of human factors learnin ...
(those that can cause
musculoskeletal disorder Musculoskeletal disorders (MSDs) are injuries or pain in the human musculoskeletal system, including the joints, ligaments, muscles, nerves, tendons, and structures that support limbs, neck and back. MSDs can arise from a sudden exertion (e.g., ...
s). To appropriately access hazards there are two parts that must occur. Firstly, there must be an "
exposure assessment Exposure assessment is a branch of environmental science and occupational hygiene that focuses on the processes that take place at the interface between the environment containing the contaminant of interest and the organism being considered. ...
" which measures the likelihood of worker contact and the level of contact. Secondly, a "risk characterization" must be made which measures the probability and severity of the possible health risks.


Project management

In
project management Project management is the process of leading the work of a team to achieve all project goals within the given constraints. This information is usually described in project documentation, created at the beginning of the development process. T ...
, risk assessment is an integral part of the risk management plan, studying the probability, the impact, and the effect of every known risk on the project, as well as the corrective action to take should an incident be implied by a risk occur. Of special consideration in this area are the relevant codes of practice that are enforced in the specific jurisdiction. Understanding the regime of regulations that risk management must abide by is integral to formulating safe and compliant risk assessment practices.


Information security

Information technology risk assessment can be performed by a qualitative or quantitative approach, following different methodologies. One important difference in risk assessments in information security is modifying the threat model to account for the fact that any adversarial system connected to the Internet has access to threaten any other connected system. Risk assessments may therefore need to be modified to account for the threats from all adversaries, instead of just those with reasonable access as is done in other fields. NIST Definition: The process of identifying risks to organizational operations (including mission, functions, image, reputation), organizational assets, individuals, other organizations, and the Nation, resulting from the operation of an information system. Part of risk management incorporates threat and vulnerability analyses and considers mitigations provided by security controls planned or in place.


Cybersecurity

The Threat and Risk Assessment (TRA) process is part of risk management referring to risks related to cyber threats. The TRA process will identify cyber risks, assess risks' severities, and may recommend activities to reduce risks to an acceptable level. There are different methodologies for performing TRA (e.g., Harmonized TRA Methodology), all utilize the following elements: identifying of assets (what should be protected), identifying and assessing of the threats and vulnerabilities for the identified assets, determining the exploitability of the vulnerabilities, determining the levels of risk associated with the vulnerabilities (what are the implications if the assets were damaged or lost), and recommending a risk mitigation program.


Megaprojects

Megaprojects A megaproject is an extremely large-scale investment project. According to the ''Oxford Handbook of Megaproject Management'', "Megaprojects are large-scale, complex ventures that typically cost $1 billion or more, take many years to develop a ...
(sometimes also called "major programs") are extremely large-scale investment projects, typically costing more than US$1 billion per project. They include bridges, tunnels, highways, railways, airports, seaports, power plants, dams, wastewater projects, coastal flood protection,
oil An oil is any nonpolar chemical substance that is composed primarily of hydrocarbons and is hydrophobic (does not mix with water) & lipophilic (mixes with other oils). Oils are usually flammable and surface active. Most oils are unsaturated ...
and natural gas extraction projects, public buildings, information technology systems, aerospace projects, and defence systems. Megaprojects have been shown to be particularly risky in terms of finance, safety, and social and
environmental impact Environmental issues are effects of human activity on the biophysical environment, most often of which are harmful effects that cause environmental degradation. Environmental protection is the practice of protecting the natural environment on t ...
s.


Software evolution

Studies have shown that early parts of the system development cycle such as requirements and design specifications are especially prone to error. This effect is particularly notorious in projects involving multiple stakeholders with different points of view. Evolutionary software processes offer an iterative approach to requirement engineering to alleviate the problems of uncertainty, ambiguity, and inconsistency inherent in software developments, including uncertainty, ambiguity, and inconsistency inherent in software developments.


Shipping industry

In July 2010, shipping companies agreed to use standardized procedures in order to assess risk in key shipboard operations. These procedures were implemented as part of the amended ISM Code.


Underwater diving

Formal risk assessment is a required component of most professional dive planning, but the format and methodology may vary. Consequences of an incident due to an identified hazard are generally chosen from a small number of standardised categories, and probability is estimated based on statistical data on the rare occasions when it is available, and on a best guess estimate based on personal experience and company policy in most cases. A simple matrix is often used to transform these inputs into a level of risk, generally expressed as unacceptable, marginal or acceptable. If unacceptable, measures must be taken to reduce the risk to an acceptable level, and the outcome of the risk assessment must be accepted by the affected parties before a dive commences. Higher levels of risk may be acceptable in special circumstances, such as military or search and rescue operations when there is a chance of recovering a survivor.
Diving supervisor The diving supervisor is the professional diving team member who is directly responsible for the diving operation's safety and the management of any incidents or accidents that may occur during the operation; the supervisor is required to be ava ...
s are trained in the procedures of hazard identification and risk assessment, and it is part of their planning and operational responsibility. Both health and safety hazards must be considered. Several stages may be identified. There is risk assessment done as part of the diving project planning, on site risk assessment which takes into account the specific conditions of the day, and dynamic risk assessment which is ongoing during the operation by the members of the dive team, particularly the supervisor and the working diver. In
recreational scuba diving Recreational diving or sport diving is diving for the purpose of leisure and enjoyment, usually when using scuba equipment. The term "recreational diving" may also be used in contradistinction to "technical diving", a more demanding aspect of ...
, the extent of risk assessment expected of the diver is relatively basic and is included in the pre-dive checks. Several mnemonics have been developed by
diver certification agencies This article lists notable underwater diver certification agencies. These include certification in cave diving, commercial diving, recreational diving, technical diving and freediving. Diver certification agencies are organisations which issue ce ...
to remind the diver to pay some attention to risk, but the training is rudimentary. Diving service providers are expected to provide a higher level of care for their customers, and diving instructors and
divemaster A divemaster (DM) is a role that includes organising and leading recreational dives, particularly in a professional capacity, and is a qualification used in many parts of the world in recreational scuba diving for a diver who has supervisory respo ...
s are expected to assess risk on behalf of their customers and warn them of site-specific hazards and the competence considered appropriate for the planned dive. Technical divers are expected to make a more thorough assessment of risk, but as they will be making an informed choice for a recreational activity, the level of acceptable risk may be considerably higher than that permitted for occupational divers under the direction of an employer.


Outdoor and wilderness adventure

In outdoor activities including commercial outdoor education, wilderness expeditions, and
outdoor recreation Outdoor recreation or outdoor activity refers to recreation done outside, most commonly in natural settings. The activities that encompass outdoor recreation vary depending on the physical environment they are being carried out in. These activitie ...
, risk assessment refers to the analysis of the probability and magnitude of unfavorable outcomes such as injury, illness, or property damage due to environmental and related causes, compared to the human development or other benefits of outdoor activity. This is of particular importance as school programs and others weigh the benefits of youth and adult participation in various outdoor learning activities against the inherent and other hazards present in those activities. Schools, corporate entities seeking team-building experiences, parents/guardians, and others considering outdoor experiences expect or require organizations to assess the hazards and risks of different outdoor activities—such as sailing, target shooting, hunting, mountaineering, or camping—and select activities with acceptable risk profiles. Outdoor education, wilderness adventure, and other outdoor-related organizations should, and are in some jurisdictions required, to conduct risk assessments prior to offering programs for commercial purposes. Such organizations are given guidance on how to provide their risk assessments. Risk assessments for led outdoor activities form only one component of a comprehensive risk management plan, as many risk assessments use a basic linear-style thinking that does not employ more modern risk management practice employing complex socio-technical systems theory.


Environment

Environmental Risk Assessment (ERA) aims to assess the effects of stressors, usually chemicals, on the local environment. A risk is an integrated assessment of the likelihood and severity of an undesired event. In ERA, the undesired event often depends on the chemical of interest and on the risk assessment scenario. This undesired event is usually a detrimental effect on organisms, populations or
ecosystem An ecosystem (or ecological system) consists of all the organisms and the physical environment with which they interact. These biotic and abiotic components are linked together through nutrient cycles and energy flows. Energy enters the syste ...
s. Current ERAs usually compare an exposure to a no-effect level, such as the
Predicted Environmental Concentration Calculated value of a chemical in the environment on the basis of exposure models such as the European Union System for the Evaluation of Substances (EUSES). Used in the context of Chemical Safety Assessments (CSA) and referenced in Chemical Safet ...
/
Predicted No-Effect Concentration The predicted no-effect concentration (PNEC) is the concentration of a chemical which marks the limit at which below no adverse effects of exposure in an ecosystem are measured. PNEC values are intended to be conservative and predict the concentrati ...
(PEC/PNEC) ratio in Europe. Although this type of ratio is useful and often used in regulation purposes, it is only an indication of an exceeded apparent threshold. New approaches start to be developed in ERA in order to quantify this risk and to communicate effectively on it with both the managers and the general public. Ecological risk assessment is complicated by the fact that there are many nonchemical stressors that substantially influence ecosystems, communities, and individual plants and animals, as well as across landscapes and regions. Defining the undesired (adverse) event is a political or policy judgment, further complicating applying traditional risk analysis tools to ecological systems. Much of the policy debate surrounding ecological risk assessment is over defining precisely what is an adverse event.


Biodiversity

Biodiversity Risk Assessments evaluate risks to
biological diversity Biodiversity or biological diversity is the variety and variability of life on Earth. Biodiversity is a measure of variation at the genetic ('' genetic variability''), species ('' species diversity''), and ecosystem ('' ecosystem diversity'') ...
, specially the risk of
species In biology, a species is the basic unit of classification and a taxonomic rank of an organism, as well as a unit of biodiversity. A species is often defined as the largest group of organisms in which any two individuals of the appropriate s ...
extinction Extinction is the termination of a kind of organism or of a group of kinds (taxon), usually a species. The moment of extinction is generally considered to be the death of the last individual of the species, although the capacity to breed and ...
or the risk of ecosystem collapse. The units of assessments are the biological (species, subspecies or
population Population typically refers to the number of people in a single area, whether it be a city or town, region, country, continent, or the world. Governments typically quantify the size of the resident population within their jurisdiction using a ...
s) or ecological entities (
habitat In ecology, the term habitat summarises the array of resources, physical and biotic factors that are present in an area, such as to support the survival and reproduction of a particular species. A species habitat can be seen as the physical ...
s,
ecosystem An ecosystem (or ecological system) consists of all the organisms and the physical environment with which they interact. These biotic and abiotic components are linked together through nutrient cycles and energy flows. Energy enters the syste ...
s, etc.), and the risk are often related to human actions and interventions (threats and pressures). Regional and national protocols have been proposed by multiple academic or governmental institutions and working groups, but global standards such as the
Red List of Threatened Species The International Union for Conservation of Nature (IUCN) Red List of Threatened Species, also known as the IUCN Red List or Red Data Book, founded in 1964, is the world's most comprehensive inventory of the global conservation status of biologi ...
and the
IUCN Red List of Ecosystems The IUCN Red List of Ecosystems (RLE) is a global framework for monitoring and documenting the status of ecosystems. It was developed by the International Union for Conservation of Nature for biodiversity risk assessment. Its main objectives are ...
have been widely adopted, and are recognized or proposed as official indicators of progress toward international policy targets and goals, such as the Aichi targets and the Sustainable Development Goals.


Law

Risk assessments are used in numerous stages during the legal process and are developed to measure a wide variety of items, such as recidivism rates, potential pretrial issues, probation/parole, and to identify potential interventions for defendants.What is Risk Assessment , Bureau of Justice Assistance. https://bja.ojp.gov/program/psrac/basics/what-is-risk-assessment Clinical psychologists, forensic psychologists, and other practitioners are responsible for conducting risk assessments.Monahan, J., & Skeem, J. L. (2016). Risk Assessment in Criminal Sentencing. ''Annual review of clinical psychology'', ''12'', 489–513. https://doi.org/10.1146/annurev-clinpsy-021815-092945 Depending on the risk assessment tool, practitioners are required to gather a variety of background information on the defendant or individual being assessed. This information includes their previous criminal history (if applicable) and other records (i.e. Demographics, Education, Job Status, Medical History), which can be accessed through direct interview with the defendant or on-file records. In the pre-trial stage, a widely used risk assessment tool is the Public Safety Assessment, which predicts failure to appear in court, likelihood of a new criminal arrest while on pretrial release, and likelihood of a new violent criminal arrest while on pretrial release. Multiple items are observed and taken into account based on which aspect of the PSA is being focused, and like all other actuarial risk assessments, each item is assigned a weighted amount to produce a final score. Detailed information such as transparency on the items the PSA factors and how scores are distributed are accessible online.Advancing Pretrial Policy & Research: How the PSA Works. https://advancingpretrial.org/psa/factors/ For
defendants In court proceedings, a defendant is a person or object who is the party either accused of committing a crime in criminal prosecution or against whom some type of civil relief is being sought in a civil case. Terminology varies from one jurisdi ...
who have been incarcerated, risk assessments are used to determine their likelihood of recidivism and inform sentence length decisions. Risk assessments also aid parole/probation officers in determining the level of supervision a probationer should be subjected to and what interventions could be implemented to improve offender risk status. The
Correctional Offender Management Profiling for Alternative Sanctions Correctional Offender Management Profiling for Alternative Sanctions (COMPAS) is a case management and decision support tool developed and owned by Northpointe (now Equivant) used by U.S. courts to assess the likelihood of a defendant becoming a ...
(COMPAS) is a risk assessment too designed to measure pretrial release risk, general recidivism risk, and violent recidivism risk. Detailed information on scoring and algorithms for COMPAS are not accessible to the general public.


See also


References


Footnotes


General references

* * * * * * * * * Also published as December 4 cover title
"Why We Worry About the Wrong Things: The Psychology of Risk"
, work=Time * * * * {{DEFAULTSORT:Risk Assessment Impact assessment Probability assessment * Hazard analysis Safety engineering Reliability engineering Occupational safety and health Corporate development