Has anyone ever heard of a 5x5x3x2 risk rating matrix? severity x frequency x likilehood x possibility to avoid Apparently the new company I work for was told by an 18001 auditor that the standards state this should be used. Persaonnally I have never seen this before and certainly can't find anything in the 18001 standard to sugest that this complex matrix should be used. Some help and examples of this kind of matrix would be appreciated

Never head of this either. My last position was with an ISO accredited company and we never used any matrix. The auditors were quite happy with the system that we used. Andy

Goodness!

It's a new one on me too. I am struggling to see the difference between frequency and likelihood, unless frequency means the rate of repetition of the hazardous task, although that has an effect on likelihood, aka probability. Agree with previous good advice to go back to the auditor and ask WHAT/WHY/WHERE?

"Likelihood" - another word might be "probability". When I am doing a risk assessment for chemical exposure I always ask (myself) the question: "What if?" What would be the consequences if that hose burst, the cooling system stopped working, the worker diluted the product incorrectly, the fork lift truck put a fork through the plastic bulk container, etc., etc.? It is actually quite revealing when you ask the worker: "Does that ever become blocked?" "Oh yes! Regularly". "What happens then?" "Fred crawls in and hits it with a hammer. He comes out covered in the chemical!" (And often the manager is standing there saying: "I didn't know they did that!") Likewise when training workers I always recommend that before they start using any chemical, either at work or at home, they make sure they have read what to do in an emergency and prepared for the action that might become necessary. For me this is an essential element in any risk assessment/management process. Chris

You really have to challenge the auditor otherwise you will end up running your business as the auditor said you should. I would recommend the lead auditor course for 18001 as a start and dont take anything as gospel. Challenge peoples methods and ways of thinking. We are 18001 UKAS accredited and the auditors are getting more and more out of touch with what the requirements are and is constantly re-inventing new things.

Crikey! The only similar ish matrix that I have seen is a 10x10x10 matrix, based on probability, severity and frequency (of how often the hazard is present) suggested by Stranks. I suggest that for the majority of risk assessments, these more complex matrices aren't necessary in order to assess and manage a risk