Documenting Processes for Risk Register Maintenance

In plain language

You must have documented procedures in your exposition or manuals explaining how you keep your risk register up to date, how staff report safety issues, and how you audit your safety controls.

Requirement as structured

The authority requires operators to document processes for keeping their hazard and risk register current, including mechanisms for reporting safety concerns, assessing risks, investigating incidents, and conducting systematic audits.

Original regulatory text

The operator needs to document processes for keeping the register current, and to: • enable staff, contractors, suppliers, clients or other interested parties to raise or report safety concerns or issues, and consider how they will be reported to the regulator • assess risks arising from those issues, and review the mitigations to manage them • reach decisions on appropriate controls for hazards and risks • investigate incidents or accidents, particularly if unexpected or new • engage with staff and contractors and other interested parties, where useful, to identify and assess new hazards and determine risk mitigations, and • carry out systematic reviews or audits