General Reference

Risk Assessment Data Model

The values that appear on the baseline Risk Matrix come from values that are stored in records in the following families:

  • Risk Matrix
  • Risk Category
  • Consequence
  • Probability
  • Risk Threshold
  • Protection Level

The following diagram illustrates the families that are used to create a Risk Matrix and how they are related to one another in the baseline APM database. APM leverages its fundamental entity and relationship family infrastructure to store data about the Risk Matrix.

Note: The Criticality Mapping entity family and the Has Criticality Mapping relationship family are used only by the Asset Criticality Analysis (ACA) module.

Risk Matrix System Code Tables

The following table lists the System Code Tables that are used by the Risk Matrix feature.

Table IDTable DescriptionFunction
MI_RISK_CATEGORYRisk CategoryPopulates the Category Name field in Risk Category records.
MI_RISK_CATEGORY_DESCRisk Category DescriptionPopulates the Category Description field in Risk Category records.
MI_RISK_CONSEQUENCEConsequencePopulates the Name field in Consequence records.
MI_RISK_CONSEQUENCE_DESCConsequence DescriptionPopulates the Description field in Consequence records.
MI_RISKMATR_CONS_LABEL_CConsequence LabelPopulates the label of the Consequence axis in a Risk Matrix.
MI_RISK_MATRIX_AXISRisk Matrix Axis SelectionPopulates the Consequence Axis and Probability Axis fields in Risk Matrix records.
MI_RISK_MATRIX_SORT_ORDERRisk Matrix Sort Order for Consequence and ProbabilityPopulates the Consequence Sort Order field in Risk Matrix records.
MI_RISK_PROBABILITYProbabilityPopulates the Name field in Probability records.
MI_RISK_PROBABILITY_DESCProbability DescriptionPopulates the Description field in Probability records.
MI_RISKMATR_PROB_LABEL_CProbability LabelPopulates the label of the Probability axis in a Risk Matrix.
MI_RISKMATR_PROT_LABEL_CProtection Level LabelPopulates the label of the protection level slider in a Risk Matrix.
MI_RISK_PROTECTION_LEVELProtection LevelPopulates the Name field in Protection Level Slider records.
MI_RISK_PROTECTION_LEVEL_DESCProtection Level DescriptionPopulates the Description field in Protection Level Slider records.
MI_RISK_THRESHOLDRisk ThresholdPopulates the Description field in Risk Threshold records.
MI_RISK_THRESHOLD_DESCRisk Threshold DescriptionThis table is not used.

About the Risk Assessment Window

This documentation uses the term Risk Assessment window to refer to the window that displays the Risk Matrix and other risk information, and which can be accessed in various places throughout the APM application. The actual name of the window that appears in the application may be Unmitigated Risk Assessment or Mitigated Risk Assessment, depending on how you accessed the window. Various aspects of the window, including its name, may be customized by an administrative user.

Note: For details on accessing the Risk Assessment window using a particular module, see the documentation for that module.

The following image illustrates what the Risk Assessment window looks like when accessed from Asset Criticality Analysis.

The Risk Assessment window contains different items depending upon how you access it. The following table describes the possible items that you might see on the Risk Assessment window.

Item

Description

Notes

Risk Of section

Displays the name of the risk.

An administrative user can modify the label of this section using the Risk Matrix datasheet.

Unmitigated Risk Rank section

Displays a value that is calculated based on the sum of the unmitigated risk values, which are represented by a  icon on the matrix.

The value in the Unmitigated Risk Rank section is a sum of all of the values on the tabs on the Risk Matrix, multiplied by the appropriate weight and protection level factor (the weight and the protection level factor are configured in Risk Category records and Protection Level records).

If the Risk Matrix is configured to use the maximum risk rank, this value is the greatest of all the risk values, not the sum.

An administrative user can modify the label of this section using the Risk Matrix datasheet.

Mitigated By section

Displays the name of the action or the recommendation that mitigates the risk.

An administrative user can modify the label of this section using the Risk Matrix datasheet.

Mitigated Risk Rank section

Displays a value that is calculated based on the sum of the mitigated risk values, which are represented by a icon in the matrix.

For a given risk, the mitigated risk rank will be lower than the unmitigated risk rank.

The value in the Mitigated Risk Rank section is a sum of all of the values on the tabs on the Risk Matrix, multiplied by the appropriate weight and protection level factor (the weight and the protection level factor are configured in Risk Category records and Protection Level records).

If the Risk Matrix is configured to use the maximum risk rank, this value is the greatest of all the risk values, not the sum.

An administrative user can modify the label of this section using the Risk Matrix datasheet.

Risk Matrix

Contains a series of tabs that contain a matrix, where you can make selections that the APM system will use to calculate the overall risk rank.

For details about the Risk Matrix, see the topic About the Risk Matrix.

Legend

Displays the icons that are used to represent mitigated risk values and unmitigated risk values in the matrix.

None

Basis for Assessment section

An explanation of the current risk assessment.

None

Save button

Saves any changes you have made using the Risk Assessment window.

None

Cancel button

Closes the Risk Assessment window, discarding any changes you have made.

None

Risk Matrix Site Filtering

Site Filtering helps users who are assigned to specific sites find relevant records more easily by preventing users from viewing records associated with sites with which they are not associated. Site Filtering uses a Site Reference Key on families that have site filtering enabled.

Tip: For more information, refer to the Site Filtering section of the documentation.

Entity families in APM, including Equipment and Functional Locations, store the Site Reference Key in the system field MI_SITE_KEY. In the following image, you can see that entity families are related to a Site Reference via the MI_SITE_KEY system field. Each Site Reference is related to a Risk Matrix by the Has Risk Matrix relationship family.

Example: Customizing Row, Column, and Tooltip Labels

Suppose the internal matrix that your company uses to evaluate safety risk looks like this:

You want to begin using APM Asset Strategy Management to create Asset Strategies and evaluate risk, and the baseline APM Risk Matrix that will be used in ASM looks like this:

You could modify the baseline Risk Matrix so that the probability and consequence labels more closely resemble the Risk Matrix that you are familiar with.

To do so, in the Risk Matrix record, you would need to:

  • Select the Hide Numeric Risk Rank check box, which hides the probability values 0.0001 through 1 and consequence values 1 through 1000 from the Risk Matrix.
  • Select the Use Maximum Risk Rank check box, which causes the total risk rank value to be the maximum risk rank across all categories (tabs) versus the sum of all risk rank values.
  • Select the Use Aliases check box, which allows you to define your own custom labels.
  • Type the text {r}{c} in the Alias Format Mask text box.

Then, in the Probability and Consequence records that are linked to the Safety Risk Category record, you would need to create aliases to specify the labels that you want to see in the Risk Matrix. Specifically, you would need to:

  • Specify the probability values A through E in the Alias field in the Probability records. For example, in the Unlikely Probability record with the Probability value 0.0001, you would type A in the Alias text box.

    If you were to view the Risk Matrix, you would see a row with the label Unlikely A, as shown in the following image.

    In each remaining Probability record, you would specify the aliases B, C, D, and E.

  • Specify the consequence values 1 through 5 in the Alias field in the Consequence records. For example, in the Very High Consequence record with the Consequence value 1000, you would type 5 in the Alias box.

    If you were to view the Risk Matrix, you would see a column with the label Very High 5, as shown in the following image.

    In each remaining Consequence record, you would specify the aliases 2, 3, 4, and 5.

When you finished defining the aliases, the completed Safety section in the Risk Matrix would look like this:

About the Risk Matrix System Code Tables

When you create or modify certain records linked to a Risk Matrix record, the values that you can select in the Name and Description lists are defined by System Code Tables. The following table lists these records and the corresponding tables.

Record

Table that defines the Name list

Table that defines the Description list

Risk Category

MI_RISK_CATEGORY

MI_RISK_CATEGORY_DESC

Consequence

MI_RISK_CONSEQUENCE

MI_RISK_CONSEQUENCE_DESC

Probability

MI_RISK_PROBABILITY

MI_RISK_PROBABILITY_DESC

Risk Threshold

N/A

MI_RISK_THRESHOLD_DESC

You can modify or add new entries to these System Code Tables via the System Codes and Tables page within the Risk Matrix Admin section of the application.

For each entry in a System Code Table that defines the Name list, there must be a corresponding entry (i.e., an entry with the same ID) in the System Code Table that defines the Description list. After you select a value in the Name box, the Description box is populated automatically with the value defined by the corresponding system code.

Example

When you create a new Probability record, suppose that the following list appears in the Name box.

These values are defined in the MI_RISK_PROBABILITY System Code Table, where the values that appear in the Name list are the Descriptions for each System Code.

Further, after you select a value in the Name box, the Description box is populated automatically. The value that is populated is specified by the entry in the MI_RISK_PROBABILITY_DESC table that contains the same ID as the selected entry in the MI_RISK_PROBABILITY System Code Table, where the value populated is stored in the Description field of the System Code.

For example, suppose you create a new Probability record and select Frequent in the Name box. The Description box is populated automatically with the text Likely to occur more frequent than mission time.

The following System Code in the MI_RISK_PROBABILITY System Code Table represents the value Frequent.

The following System Code in the MI_RISK_PROBABILITY_DESC System Code Table has the same ID. The value from this System Code is used to populate the Description box for the Probability record with the text Likely to occur more frequent than mission time.

How the Values in the Risk Matrix are Configured

You can configure each Risk Matrix to display values in certain places to guide users in selecting the appropriate risk values.

Values in a Risk Matrix are determined as follows:

  • The Risk Matrix as a whole that appears in the Risk Assessment window is specified by a Risk Matrix record. Risk Matrix records store the values that determine how the Risk Matrix looks. Some of the values in a Risk Matrix record are also used to filter the values that you can select in other records in the Risk Matrix data model.
  • Each tab in the Risk Assessment window is specified by a Risk Category record linked to the Risk Matrix record.
  • Within the Risk Matrix that appears upon selecting given tab, each row identifies a probability level associated with the matrix. Each probability level is specified by a Probability record. The Risk Category record to which the Probability record is linked determines the section in which the row will appear.
  • Within the Risk Matrix that appears upon selecting a given tab, each column identifies a consequence level associated with the matrix. Each consequence level is specified by a Consequence record. The Risk Category record to which the Consequence record is linked determines the section in which the column will appear.
  • Within each Risk Matrix, each cell contains a color and a tooltip that explains the threshold within which the risk value falls. The threshold values and corresponding colors are specified by Risk Threshold records that are linked to the Risk Matrix record.

Example

Consider the following Risk Matrix.

The values shown in this Risk Matrix are determined by the following records:

  • Risk Matrix records: Determines the look of the Risk Matrix, such as the appearance, order, and axis on which the probability and consequence values appear.
  • Risk Category records: There are 4 Risk Category records linked to the Risk Matrix record shown: Safety, Environment, Operations, and Financial. Each Risk Category record corresponds to one tab within the Risk Assessment window. The image shown above displays the values in Probability and Consequence records that are linked to the Safety Risk Category record.
  • Probability records: There are 5 Probability records linked to the Environment Risk Category record. Each Probability record corresponds to one row in the Risk Matrix.

    The Probability record for the first row shown in this example contains the following values:

    • Name: Probable
    • Value: 1
    • Description: Likely to occur the same as mission time

      Note: This value appears as a tooltip when you pause over the row heading.
  • Consequence records: There are 5 Consequence records linked to the Environment Risk Category record. Each Consequence record corresponds to one column in the Risk Matrix.

    The Consequence record for the first column shown in this example contains the following values:

    • Name: Very Low
    • Value: 1
    • Description: None to minor first-aid

      Note: This value appears as a tooltip when you pause over the column heading.
  • Risk Threshold records: There are 5 Risk Threshold records linked to this Risk Matrix record. Each Risk Threshold record corresponds to a range of values that are represented with the same color in the matrix, as well as the risk threshold value that appears when you pause on a cell in the matrix.

    The Risk Threshold record representing the cell in this example contains the following values:

    • Description: Medium
    • Value: 1
    • Color: PaleGoldenrod
      Note: Risk Threshold records represent a range of values. Refer to the topic About Risk Threshold Records for more information about how Risk Threshold records are used.

About Risk Threshold Records

Each Risk Matrix is linked to multiple Risk Threshold records, where each Risk Threshold record corresponds to a range of values that are represented with the same color in the matrix, as well as the risk threshold value that appears when you pause on a cell in the matrix.

When you select a tab on the Risk Matrix, the cells in the matrix are shaded according to the value in that cell and where it falls within the ranges as they are defined in the Risk Threshold records. For example, in the following image, you can see that the cells contain in the number 0.1 and 0.01 are colored LightGreen. If you pause on the cell, the tooltip says Low.

The following Risk Threshold records are provided in the baseline APM database to support the baseline Risk Matrix.

From the values in these records, we can determine that the following criteria will be applied to numbers that appear on the baseline Risk Matrix:

  • Any number greater than or equal to 0 and less than 1 will be considered low risk. Cells in the matrix that contain numbers greater than or equal to 0 and less than 1 will be shaded LightGreen.
  • Any number greater than or equal to 1 and less than 10 will be considered medium risk. Cells in the matrix that contain numbers within this range will be shaded PaleGoldenrod.
  • Any number greater than or equal to 10 and less than 100 will be considered high risk. Cells in the matrix that contain numbers within this range will be shaded LightSalmon.
  • Any number greater than or equal to 100 and less than 1000 will be considered very high risk. Cells in the matrix that contains numbers within this range will be shaded Salmon.
  • Any number greater than or equal to 1000 will be considered extreme risk. Cells in the matrix that contains numbers greater than or equal to 1000 will be shaded IndianRed.

About the Baseline Risk Matrix Records

The baseline APM database contains two Risk Matrices:

  • Standard Practice
  • Default
Note: If you are upgrading from a previous version of APM, you will not receive the Standard Practice Risk Matrix. You will receive only the Default Risk Matrix (and any Risk Matrices that you created manually). The Default Risk Matrix will be phased out over the next several releases. If you are an existing customer, you should continue using the Risk Matrix that you were using before you upgraded. New customers, however, will receive both Risk Matrices but should use the Standard Practice Risk Matrix or create their own Risk Matrix. In other words, the Standard Practice Risk Matrix is recommended for customers who are not already using a different Risk Matrix. For this reason, the APM documentation explains the functionality of the Standard Practice Risk Matrix, not the Default Risk Matrix. Throughout this documentation, when we use the phrase baseline Risk Matrix, we are referring to the Standard Practice Risk Matrix. The Standard Practice Risk Matrix is not set automatically as the default Risk Matrix. If you are planning to use it as the default Risk Matrix, you will need to select the Default check box on the datasheet (after clearing the Default check box for the Default Risk Matrix).

The following image shows the Standard Practice Risk Matrix.

The Standard Practice Risk Matrix consists of a Risk Matrix record and the following additional records:

  • 4 Risk Category records: Safety, Environment, Operations, and Financial.
  • 5 Consequence records: Very Low, Low, Medium, High, and Very High.

    In the baseline APM database, each Consequence record is linked to the following Risk Category records: Environment, Operations, Safety. The Risk Category record Financial is not linked to a Consequence record.

  • 8 Probability records: Frequent, Probable, Likely, Credible, Remote, Possible, Improbable, Unlikely.

    5 of these Probability records are linked to each Risk Category record, as shown in the following table.

    Safety

    Environment

    Operations

    Financial

    Probable

    Probable

    Frequent

    Frequent

    Credible

    Credible

    Probable

    Probable

    Remote

    Remote

    Likely

    Likely

    Improbable

    Improbable

    Credible

    Credible

    Unlikely

    Unlikely

    Possible

    Possible

  • 5 Risk Threshold records: Low, Medium, High, Very High, and Extreme.