Impact on GSF Probability of Residual risk

RISK What has been managed & NEW RISKS business happening Control rating rating Measures taken Deadlines Responsibilities

Business, sales: Not suitable and detailed enough,

poorly communicated and implemented, poorly 3 1 1 3
Business strategy adapted to changes
3 2 2 12
Competition Aggressive competition, targeting AAA on purpose

2 2 1 4
Costs of consumables and Increase by taxes, driven up by competitor. New
rechargeables chemicals required (i.e. ecological)

Changes in market - switching over to FM companies,

going in house, leaving premises, reduction of 2 1 2 4
Customer segments at risk customer's business
Fraud Financial losses, court proceedings 3 1 2 6
Funding For start-up, too long payment period 2 2 1 4
Geographical coverage Not provided for successful bid 2 1 1 2

Upgrading costly, current programmes not up to

standard / market needs, not compatible with 3 3 2 18
IT existing systems

Available or not in house, continually improved (or 2 3 2 12

Knowledge base not), can be safely outsourced for large projects, etc
Legislation Tax, NMW, etc 2 2 2 8

i.e. XXX - AAA don’t have the freedom in pricing,

restricted business with other clients, forced use of 2 2 2 8
Partnerships suppliers

Loss of key staff (Head hunted, leave for other 3 2 2 12

reasons) and no "next in line" prepared, problems
People with recruiting and / or retaining in certain area
By FM, clients, competitors, for certain services / all 3 3 2 18
Prices driven down services
Relying on one main service, not innovative enough, 3 2 2 12
Product risks no capacity
Quality of internal systems and Procedures not up to date, not right, not 2 3 2 12
processes cummunicated to all, not being followed

Service quality dropping below SLA due to staff

Quality of services
Reputation damage
Schedules of authority
turnover, poor management, client interfering with 3 3 2 18
staff, if outsourced - can be affected by quality of
services delivered by suppliers
By own actions or by 3rd party, deliberately 2 1 2 4
Someone with lesser authority signs contract that is 1 2 3 6
not beneficial to AAA

Put AAA at risk due to poor performance, lack of

capability to deliver services, approaching client 2 3 1 6
Suppliers directly, driving up prices

AAA don’t use latest technologies, client "size" is not

enough to pay for technologies byt client puts 2 3 2 12
Technological changes pressure on AAA
Cleaners cannot get to work. Same with GM, also too 2 2 2 8
Weather dangerous to work on sites.

3: Critical 3: Frequently (1 x pa) 3: Poor controls 12 and over

2: Probable (min 1 x 2: Outcome not
2: Serious every 3 years) guarateed
1: Remote (1 x in more
1: Significant than 3 years) 1: Under control
 31.01.2017.
GSF S L Risk matrix, current

Impact on GSF Probability of Residual risk

Ref. RISK Comments business happening Control rating rating
R1
R2

R3
R4
R5
R6
R7
R8
R9
R 10
R 11
R 12
R 13
R 14
R 15 0
R 16 0
R 17 0
R 18 0
R 19 0
R 20 0
R 21 0

3: Critical 3: Frequently (1 x pa) 3: Poor controls

2: Probable (min 1 x 2: Outcome not
2: Serious every 3 years) guarateed
1: Remote (1 x in more
1: Significant than 3 years) 1: Under control
 31.01.2017.
GSF S L Risk matrix, current

Measures taken Deadlines Responsibilities

12 and over
 Impact on GSF
RISK How has been managed business
H&S manager not aware about risk/s
existing on a particular site thus risk/s not
addressed

Ops managers not aware of risks, therefore

cannot inform H&S Manager and request
to address (new risks due to on site
activities, poor knowledge of site)

H&S Manager has no knowledge to

perceive something as risk and address
accordingly

Risks not addressed completely or partially

by Ops as per instructions from H&S
Manager

Risk/s caused by staff behaviour (human

factor)
Accidents, incidents, near misses reported
late or not reported
Higher H&S risk might need to be taken
due to commercial reasons
Non-compliance with requirements of
OHSAS 18001 standard (weakness of
system, issues with re-accreditation of
OHSMS, issues with complying with safety
schemes, issues with complying with
clients' requirements)

Non-compliance with requirements of ISO

9001 standard (weakness of system, issues
with re-accreditation of QMS, issues with
complying with own procedures)

Non-compliance with requirements of ISO

14001 standard (weakness of system,
issues with re-accreditation of EMS, issues
with complying with own procedures and
clients' requirements)

NEW RISK

3: Critical
2: Serious

1: Significant
 Probability of Residual risk
happening Control rating rating Measures taken Deadlines

3: Frequently (1 x pa) 3: Poor controls 12 and over

2: Probable (min 1 x 2: Outcome not
every 3 years) guarateed
1: Remote (1 x in more
than 3 years) 1: Under control
Responsibilities