ORM (Operational Risk Management) - ANSWER...-Decision making tool used by
personnel at all levels to increase effectiveness by identifying and managing risks
Three levels of ORM - ANSWER...-1. Time Critical
2. Deliberate
3. In Depth
5 steps of ORM - ANSWER...-1. Identify hazards
2. Assess hazards
3. Make risk decisions
4. Implement controls
5. Supervise
suitability - ANSWER...-Control removes the threat or mitigates (reduces) the risk to an
acceptable level
feasibility - ANSWER...-Has the capability to implement the control
Acceptability - ANSWER...-Benefit or value gained by implementing the control justifies
the cost in resources and time
Explicitness - ANSWER...-Clearly specifies who, what, when, where, why, and how
each control is to be used
support - ANSWER...-Adequate personnel, equipment, supplies, and facilities
necessary to implement a suitable control are available
Standards - ANSWER...-Guidance and procedures for implementing a control are clear,
and specific
Training - ANSWER...-Knowledge and skills are adequate to implement a control
individual - ANSWER...-Individual personnel are sufficiently self-disciplined to
implement control
Types of Control - ANSWER...-Engineering controls
Administrative controls
Physical controls