Good afternoon Having done a number of searches of the forum and the web without success I am hoping that someone out there can help. A question was raised by an auditor to the effect that have we carried out a risk assessment of surrounding businesses. Without visiting, either physically or virtually, each of the businesses that surround us on the industrial estate I don't see how this can be done. I can understand how another business could affect our operations if they had a serious incident e.g. a fire involving compressed gas bottles or a hazardous substance release but I am at a bit of a loss of how easily find the information needed to include in a risk assessment. I am thinking that a general statement would to the effect that our business could be adversely affected by others in the locality but I would not be able to assess what the hazard would be or its severity. If anyone has experience of this any help would be most appreciated. Regards Tony

This sounds more like a Business Continuity Plan than a risk assessment. Your BCP should cover critical things like loss of IT, access, flooding, fire (and possibly an exclusion zone) suspect bomb and so on. I suggest you need to be aware as part of the BCP what businesses are in the vicinity of your work area and what types of hazardous activities they may undertake either by visiting them or checking on Google, Yellow Pages, etc.

Not wishing to be picky but, a RA is supposed to take into account anyone who may be affected by the undertaking, such as, members of the public, visitors, contractors and not just employees.

Thank you all for your replies. Having thought about it I think that RayRapp is right in thinking that I could cover the issue in the BCP.

Why don’t you ask the auditor, exactly what he/she means? This whole process is obviously being driven by them and they can’t get away with making vague requirements like ‘risk assessment neighbouring businesses’. This is the sort of unprofessional rubbish that gets auditors a bad name. They should explain exactly what is required for you to comply with whatever standard that are auditing you for, otherwise you end up trying to second guess what someone else is doing…a totally pointless exercise.