In risk assessments, how do you determine whether a change requires additional controls?

• A. Evaluate change severity and change frequency.
• B. Ignore the change.
• C. Only consider cost.
• D. Only consider schedule.

Answer: (A)

Assess risk changes by looking at how the change affects both the potential consequences and their likelihood. If the change makes outcomes more severe or increases the chance that a hazardous event could occur, you typically need additional controls to keep risk at an acceptable level. This is about comparing post-change risk to the pre-change risk using your risk assessment approach, often a risk matrix or similar method, and then applying the appropriate controls from the hierarchy as needed. Ignoring the change or focusing only on cost or schedule isn’t appropriate, because even small changes can introduce new hazards or raise existing risk. For example, substituting a more flammable solvent can raise both the severity of a possible release and the chance of ignition, prompting added safeguards or revised procedures.