Risk Assessment
Definition
The overall process of risk identification, risk analysis, and risk evaluation. Risk assessment identifies what can go wrong (hazard identification), determines how likely it is and what the consequences would be (risk analysis), and compares the results against risk criteria to determine whether the risk is acceptable or requires treatment (risk evaluation). It is the systematic application of the ISO 31000 risk management process.
Context
Risk assessments are performed at multiple levels: equipment-level (RBI), failure mode-level (FMEA), and enterprise-level (risk register). In Reliatic, risk assessments are governed artifacts with audit trails, meaning every assessment decision is recorded immutably for regulatory compliance.
Examples
- An RBI risk assessment of a heat exchanger evaluates 5 credible damage mechanisms, calculates the combined PoF, determines the worst-case CoF scenario, and produces a risk ranking of C with a recommended 24-month inspection interval.
- A project risk assessment for a piping modification evaluates the risks of both performing and not performing the modification, including the risk introduced by the change itself (addressed via MOC).
Applicable Standards
- ISO 31000:2018
- ISO 31010:2019
- API 580
Related Terms
A structured repository that records all identified risks, their assessments (probability, consequence, risk level), treatment plans, residual risk after treatment, risk owners, review dates, and current status. The risk register provides a single authoritative view of an organization's risk landscape and serves as the primary governance tool for tracking risk management activities.
Risk MatrixA two-dimensional grid that combines Probability of Failure (PoF) on one axis and Consequence of Failure (CoF) on the other to produce a visual risk ranking. The matrix divides risk into categories (typically A through E or Low/Medium/High/Very High/Extreme) that determine inspection priority, interval, and strategy. Risk matrices provide a standardized framework for comparing and prioritizing risks across diverse equipment populations.
Risk-Based Inspection(RBI)A methodology that uses risk assessment to prioritize and plan inspection activities for pressurized and other equipment. RBI combines Probability of Failure (driven by damage mechanisms and equipment condition) with Consequence of Failure (driven by process hazards and safety impact) to rank equipment by risk and allocate inspection resources where they will have the greatest impact on risk reduction.
Failure Mode and Effects Analysis(FMEA)A systematic, proactive methodology for evaluating a process, product, or design to identify all possible failure modes, determine their effects on system performance, rank them by risk priority, and recommend actions to reduce or eliminate the highest risks. FMEA examines each component's potential failure modes, their causes, effects at local/system/end levels, current controls, and risk priority numbers.
Probability of Failure(PoF)A quantitative or semi-quantitative measure of the likelihood that an equipment item will fail within a specified time period. PoF is determined by the generic failure frequency of the equipment type, modified by damage factors that account for specific active degradation mechanisms, and adjusted by a management system factor reflecting the quality of the facility's integrity management program.
Consequence of Failure(CoF)A measure of the impact resulting from an equipment failure, encompassing safety (personnel injury/fatality), environmental (release to atmosphere/ground/water), production (lost throughput and business interruption), and equipment (repair/replacement cost). CoF is evaluated based on the worst credible release scenario, considering fluid properties, operating conditions, detection and isolation systems, and the surrounding environment.
Where this appears in Reliatic
This concept is used in the FMEA & Risk module.