[Stephen Small]

Hi Sonya

I would suggest that you read NZS7901:2014 Section 4: Risk Management, which is what is audited against.

Although the requirement is technically only for those risks that could cause serious harm or significant property damage (see Section 4.4.3), we need to be able to prove by a systematic process why other public safety risks don’t fall into that criteria (see Section 4.4.2 “……It is essential to generate a comprehensive list of risks……. in order to identify those that are likely to be significant”)

We also need to be able to provide evidence of all residual risks that are mitigated to ALARP, not just significant risks.

Regards

Stephen Small