The necessary risk controls should then be in place and risk monitoring ensures the controls are adequate to address the identified risks. These activities should be embedded into a systematic risk management process.
Site management should identify the "top down" business risks which threaten the survival or reputation of the organization, for example associated with major internal or external events, major clients, key supply chain partners, major projects or loss of key personnel.
The organization should identify the "bottom up" risks associated with specific hazards for occupational health, occupational safety, process safety, environment, security and quality. These should then be controlled and monitored with suitable engineering design, rules, procedures, training, inspection and observation programmes. Preventing major loss events requires the necessary people, process and plant barriers are in place.