Module 3

Session 1 - Theory Session 2 - Theory Session 3 - Practical Session 4 - Practical

Introduction to the Course Feedback from Previous day Short Recap on Theory Feedback from Previous day
Module 4B: ISO 31010 Risk Assessment
Techniques
Module 1: ERM Principles, framework, Baseline, Issue Base RA Module 7: Monitoring and Review Practical: SWOT combined with Force
principles and protocols (ISO 31000) HAZOP (Project) (ISO31000) Filed Analysis
FMECA (Technical Equipment)
FTA / ETA (Event Management)

Module 2: Risk Culture, Aspect and Module 5: H&S Leadership in context of

Strategy ISO 45001, 14001, 9001
Modelling (IRM:UK Model) Behaviour modelling & Human Error
Practical: Attendee Presentations
Module 3: ISO 73 Risk Management 1. Internal and External Context
Vocabulary 2. Risk Culture and Improvement Plan
Concepts and Terminology 3. Hazard and Event Identification
Module 4A: Multilevel risk management 4. Hazard Lifecycle Map
Module 6: Bow Tie Analysis - Integration
process 5. Selection of Risk Assessment Techniques
with Activities and Critical Control
(ISO 45001) 6. System Effectiveness Course Examination
Monitoring regimes
Baseline Risk Assessment 7. BTA and Critical Control Exercise &
Issue / Significant Based Risk Assessment Feedback
Task / Activity Risk Assessment
Continuous Risk Assessment

c-MiRM
 Hazard
ISO 73:2009 Source of potential harm
Hazard can be a risk source: Element which alone or in combination has the intrinsic potential to give rise
to risk. A risk source can be tangible or intangible

ISO 45001:2018: Source with a potential to cause injury and ill health
Hazards can include sources with the potential to cause harm or hazardous situations, or circumstances
with the potential for exposure leading to injury and ill health
Impact from social environment within surrounding of operations, within the country in which operations or resources are situated, Demographic change affects demand for
Societal
Economic, Financial Stability services; stakeholder expectations change
Profound social
Environmental Major social movements or protests (e.g. street riots, social unrest, etc.) that disrupt political or social stability, negatively impacting populations and economic activity.
instability
Societal Rapid and massive
Bacteria, viruses, parasites or fungi that cause uncontrolled spread of infectious diseases (for instance as a result of resistance to antibiotics, antivirals and other treatments)
spread of infectious
leading to widespread fatalities and economic disruption.
Geopolitical diseases

Operations Effective and efficient use of its resources e.g. delivering the product to the market at the right time, effectively marketing the product, arranging human resources etc.
Technological
Labour/Human Operational effectiveness, human capital and ability to manage risks, etc. Aging of workforce, Number of persons leaving the company, Vacancy rate increase, Average salary
Strategic resources increase, Engagement rates, Union relationships, organised labour relations, etc.
Contingency Lack of systems or infrastructure to uphold efficiency, Production breakdowns, etc.
Operations
HSE Energy and resources used as input to perform function/process, interactions between these resources and output from the activities or process, etc.
Reporting Atmospheric quality Potential for OHS opportunities / HSE Risks resulting in change in the ambient air quality
Compliance Biodiversity / Irreversible consequences for the environment, resulting in severely depleted resources for humankind as well as industries, This could be OHS opportunities / HSE Risks by
ecosystem exposure to biological hazards, flora and fauna, environmental OHS opportunities / HSE Risks to biodiversity.
HSE Potential for OHS opportunities / HSE Risks resulting from interaction of activities with biological agents. Bacteria, viruses, parasites or fungi that cause uncontrolled spread of
Biological
infectious diseases (for instance as a result of resistance to antibiotics, antivirals and other treatments) leading to widespread fatalities and economic disruption.

c-MiRM
 Aggregation of Hazards
Combination of a number of hazards and or risks into one to develop a more
complete understanding of the overall concept of hazards and or risk Dust cloud
Storage and use at the operation
Trigger events
Transfer
to Charge
holes

Gases
released

Understanding explosives
Manufacturing process Transfer
Chemical composition to vehicle
Ignition source Blasting
Sensitivity & Stability Lightning
Toxicity Static charge What is left
Electro pulse, etc. behind!!

c-MiRM
 Magnitude of Hazard
• Critical to determine as it provides information for selecting the correct controls

• It provides information to determine consequence and residual risk that require contingency plans / actions

• Usually can be described by a minimum of two to three factors

Magnitude Factor 1 Magnitude Factor 2 Magnitude Factor 3

Potential Source Mass (kg) Height raised (m) Lower than ground (m)

Electricity Voltage (V) Ampere (A) Cost per unit (R0.80/kWh)

Chemical Strength (mg/l, pH) Volume (m3, litres) Exposure level (OEL 30 ppm)

Kinetic energy Mass (kg) Speed (km/hr) Velocity (m/s)

Capacitance - capacitor
Stored energy Pressure (kPa) Volume (m3)
(farads)

c-MiRM
 Event
Occurrence or change of a particular set of circumstances
One or more occurrences, and can have several causes
Consist of something not happening
Something that is expected which does not happen
Something that is not expected which does happen
Certain or uncertain
A single occurrence or a series of occurrences
A few minutes ago it was plain sailing!
The event is NOT the consequence
How could this have happened?

(Derek Viner)

c-MiRM
 Hierarchy of Control
A measure that is modifying risk
Most Effective Least dependant on Behaviour

• Controls include any process, policy, ELIMINATION Remove the Hazard

device, practice, or other actions
which modify risk (ISO 73:2009) Replace with different
SUBSTITUTION Product or Equipment
• Controls may not always exert the
ISOLATION Separate the
intended or assumed modifying effect
source/hazard

• How to determine Effectiveness of ENGINEERING Guarding/ Automatic/

Barrier / Fence
Control?
ADMINISTRATIVE Procedures/Signage /
• When do ALARP apply? Human interaction

PPE Gloves, Goggles etc.

Least Effective Mostly dependant on Behaviour

c-MiRM ALARP: As Low as Reasonable Practicable

 Risk Treatment
Avoiding risk
Risk treatment involves developing a range of options for by deciding not
to start or
mitigating the risk, assessing those options, and then continue with the
activity that gives
preparing and implementing action plans. rise to the risk
Taking or
Retaining risk increasing
by informed
Selecting a methodology or strategy that is most decision risk to pursue
A process to an opportunity
appropriate for managing the risk. modify risk and
can involve

Balancing the costs of implementing each activity against

the benefits derived.
Sharing risk
with another Removing
party [including
the risk source
Cost of managing the risks needs to be equal with the contracts and risk
financing]
benefits obtained.

Cost versus benefit judgements include a wider context.

Changing Changing
consequences likelihood

c-MiRM
 Risk Acceptance – As Low as Reasonable Practicable (ALARP)
Defined as a point in time when an informed decision has
Scope Context, Criteria
been taken with respect to a particular risk
• Risk acceptance can occur without risk treatment or during the
Risk Assessment
process of risk treatment

Dependency and supportive control monitoring regime

• Accepted risks are subject to monitoring and review Risk Identification

Communication and Consultation

Change management strategies

Monitor and Review

Risk Analysis

Risk Evaluation
• The severity and scope of the hazard or risk concerned
• The state of knowledge reasonably available concerning that hazard or risk
and of any means of removing or mitigating that hazard or risk.
Risk Response & Treatment
• The availability and suitability of means to remove or mitigate that hazard
or risk.
• The costs and the benefits of removing Recording and Reporting

or mitigating that hazard or risk.

c-MiRM
 Risk Aggregation
Combination of a number of risks into one risk to develop a more complete understanding of the overall risk

Used for the Top Event of the Bow Tie Process

• Person struck by fall of ground Hazard /
Risk Source
Process / Activity Hazard / Risk Source Description Description of Unwanted Event Top Event
• Equipment struck by fall of ground Classificati
on
• Loss of access way due to fall of ground Supporting Chemical Flammable gas Flammable gas explosion Release of flammable gas -
• Subsidence due to fall of ground in underground workings, etc. Fire & Explosion Chemical Flammable gas, CO, CO2 Underground fire
Explosive Atmosphere
Release of flammable gas - Fire
Management
Construction and Electrical 6.6KV, 1000V, 525V, 380V, 220V, 110V, Electrical fire Electrical Equipment facilitating
Use to describe risk at Corporate level or to external stakeholders infrastructure absence off electricity alternative curent flow (to earth or
• Multiple fatalities Charging & Blasting Climatic/ Surface lightning Accidental ignition of explosives
between phases)
Pre-mature ignition of explosives
• People trapped underground Natural
Events
• Escalation of commodity prize Conveying (Excluding Climatic/ Thunderstorm, 50ml of rain in 30 minutes Excessive water onto conveyor belt or floor - coal Excessive water on conveyor
Section Belt but includes Natural rush and persons inundated belt/floor
• Strikes Block 7, and all other beltsEvents
up to North West Shaft silo)
Hauling & Tramming Chemical Lubricants, On-board fire Facilitating alternative current
Company wide risks – number of operations with same exposure Transport Climatic/
Gear oils 120 Lts, Fluid drive oils 10 Lts,
Thunderstorm, rapid pour down in short Petrol or diesel tanker stuck by lightning
flow on trackless machines
Ignition source in contact with
• Dust Natural period vapour at flash point
Storage Chemical Gasses in cylinders (Oxygen - 5 Cylinders), Chemical fumes / gasses in contact with ignition Flammable materials incontact
• Infectious diseases (Acetylene - 5 Cylinders), (Helium - 5 source - Explosion with ignition source

• Labour disturbances Cylinders), (Argon Shield - 5 Cylinders),

(Methane - 5 Cylinders), (LPG - 5 Cylinders),
(Nitrogen - 5 Cylinders)

c-MiRM
 Likelihood
A chance of something happening. In risk management terminology, the word “likelihood” is used to refer to
the chance of something happening, whether defined, measured or determined objectively or subjectively,
qualitatively or quantitatively, and described using general terms or mathematically (such as a probability or a
frequency over a given time period)

Basis of Rating
Likelihood is subjective to the (Choose the most
suitable one)
E - Rare D - Unlikely C - Possible B - Likely A - Almost Certain

effectiveness of controls. FULL LIFETIME or Unlikely to occur Could occur about Could occur more than May occur about once May occur several
LIFE OF during a lifetime or life once during a lifetime once during a lifetime per yearORMore likely times per
• Protective equipment PLANTORPROJECT of plantORVery or life of plantORMore or life of plantORAs to occur than not yearORExpected to
or TRIAL or FIXED unlikely to occurORNo likely not to occur than likely to occur as not to occurORHas occurred occurORHas occurred
• Lock outs TIME known occurrences in to occurORHas occurORHas occurred at least once within several times within
PERIODORNEW broader occurred at least once at least once in the Glencore Glencore
• Procedures PROCESS / PLANT / worldwideindustry in broader worldwide mining / extractive or
• Training material R&D industry commodities trading
industries
• Competency
• Pre-use inspections, etc.

c-MiRM 10
 Consequence
Outcome of an event affecting objectives.
An event can lead to a range of
Information Technology (I.T.) Integrity
Health & Safety Environment Social and Cultural Human Rights Financial Image & Reputation Legal
& Intellectual Property (IP)
5 Catastrophic Multiple fatalities (5+) due to a single incident Widespread environmental impact to Multiple fatalities or permanent disability or Company causes or contributes to a gross >$500M operating profit Sustained negative international media Criminal investigation at Glencore Group level Multiple critical I.T. systems unavailable or in
or health cause ecosystems, habitat or species (irreversible, or disease cases (5+) of community members human rights violationl >$200M property damage coverage or in respect of the Board or senior extended recovery

consequences. Multiple permanent disability or disease cases

(5+) due to a single incident or health cause
(mental or physical)
>10 years to remediate) Widespread and extended detrimental social
impacts (>5 years)
Extensive, irreversible damage to community
Company causes or contributes to grave or
serious, systemic human rights impacts
>$1B asset devaluation Condemnation from heads of state,
governments, religious leaders and
supranational bodies, e.g. the U.N.
management
Any litigation or arbitration, loss of license or
permit, or cancellation of a contract with
Large volume of highly confidential records /
business information / patentable information
leaked
assets or items / locations of international Negative social media campaigning reaches potential catastrophic financial consequences
archaeological or cultural significance into mainstream public awareness Default under Group funding arrangements
Consistent and sustained negative public
statements from high-profile NGOs and
pressure groups

Certain or uncertain
Loss of customers and suppliers lInvestors
consider divestment and analysts publish
notes condemning the company and change
their ratings

Positive or negative effects

4 Major Fatalities (<5) due to a single incident or Widespread, but reversible, environmental Fatality or permanent disability or disease Company causes or contributes to an isolated $100M to $500M operating profit Negative media coverage at local / regional, Criminal investigation of a Group company Critical I.T. system(s) or service(s) hacked,
health cause impact to ecosystems, habitat or species (2 to cases (<5) of community members serious human rights impact $50M to $200M property damage national and international levels over several (but not for the Group) or directors or officers compromised or unavailable, affecting multiple
Permanent disability or disease cases (<5) 10 years to remediate) Long-term (2 to 5 years) detrimental social Company is linked to a grave human rights $250M to $1B asset devaluation days of a Group company sites
due to a single incident or health cause impacts impact Negative social media internationally with a Civil investigation at Group level or for any Highly confidential records / business

Qualitative or quantitative
(mental or physical) Irreversible damage to one or more community hostile tone Group entity with potential penalty of major information / patentable information leaked
assets or items / locations of national Strongly negative public statements from financial consequences or extended work
archaeological or cultural significance local, regional and national government, and stoppage
Violent protest (>100 people) separately from multiple NGOs and pressure Any litigation or arbitration, loss of license or

Escalate through knock-on effects.

groups permit, or cancellation of a contract with
Threat of losing business from customers potential major financial consequences
and/or suppliers
Strong concerns from multiple investors and/or
analysts

3 Moderate Lost Time Injury (LTI) / Disease (LTD) Limited, but reversible, environmental impact Disabling injury or disease case of a Company causes or contributes to moderate, Negative media coverage at local / regional Civil investigation of any member of the Group Critical I.T. system(s) or service(s) hacked, $50M to $100M operating profit
Single incident resulting in multiple RWIs or to ecosystems, habitat or species (<2 years to community member(s) temporary human rights impacts and national level for more than 24 hours, with potential penalty of moderate financial compromised or unavailable Isolated release $5M to $50M property damage
MTIs remediate) Medium-term (6 months to 2 years) detrimental Company is linked to a serious human rights limited pick-up internationally consequences or short-term stop work order of confidential information $25M to $250M asset devaluation

Consequences are directly linked to social impact or grievance requiring third-party

intervention to resolve
Reversible damage (<6 months) to community
impact Negative social media pick-up, from a mix of
local and national stakeholders, limited pick-
up internationally
Any litigation or arbitration, loss of license or
permit, or cancellation of a contract with
potential moderate financial consequences
Malware prevalent across multiple I.T.
systems, requiring extended investigation and
clean-up
assets or items / locations of local Public statements from local and/or regional

the magnitude of the Hazard

archaeological or cultural significance but not national government
Disruptive protest (>100 people) Public statements from a limited number of
NGOs and pressure groups
Queries from multiple customers and/or

• Speed of equipment
suppliers
Queries from multiple investors and/or analysts

2 Minor Restricted Work Injury (RWI) / Disease Limited, but reversible, environmental impact Minor injury to a community member(s) Company causes or contributes to a minor, $5M to $50M operating profit Limited but negative media coverage at local / Civil investigation of any member of the Group Non-critical I.T. system(s) or service(s) hacked,

• Weight of equipment (RWD)or Medical Treatment Injury (MTI) /

Disease (MTD)
to ecosystems, habitat or species (<3 months
to remediate)
requiring medical treatment
Low-level detrimental social impact on multiple
community members
isolated human rights impact
Company is linked to a moderate human
rights impact
1M to $5M property damage
$5M to $25M asset devaluation
regional level that subsides after 24 hours
Negative social media pick-up, but limited to
local stakeholders that subsides after 24
with potential penalty of minor financial
consequences
Any litigation or arbitration, license or permit
compromised or unavailable
Multiple desktops, laptops, handheld devices
hacked, compromised or lost
Planned, reversible damage (<6 months) to hours non-compliance, or cancellation of a contract Multiple I.T. personnel required to investigate

• Concentration, etc. community assets or items / locations of local

archaeological or cultural significance
Disruptive protest (<100 people)
Queries but no public statements from local,
regional or national government
Queries but no public statements from NGOs
with potential minor financial consequences and rectify impact

and pressure groups

Queries from one or more customers and/or
suppliers
Queries from one or more investors and/or
analysts

1 Negligible First Aid Injury (FAI) / Illness(not considered a Negligible, and reversible, environmental Minor injury to a community member(s) not Company is linked to a minor human rights <$5M operating profit Negligible interest from media and no local, Civil investigation which might result in a non- Minor impact to non-critical I.T. system or
disease or disorder) impact to ecosystems, habitat or species(<1 requiring medical treatment impact <$1M property damage national or international pick-up penal remedy or with potential negligible service
week to remediate) Isolated, low detrimental social impacton a <$5M asset devaluation Low-level social media pick-up, posts are financial consequences Desktop or laptop or handheld device hacked,
community member neutral and isolated Any litigation or arbitration, license or permit compromised or lost
Minor, remediable damage (<1 week) to, or Negligible interest from local, regional or non-compliance, or cancellation of a contract Single I.T. person required to investigate and
disturbance of, community assets or items / national government with potential negligible financial rectify impact
locations of local archaeological or cultural Negligible interest from NGOs and pressure consequences
significance groups
Peaceful protest (<100 people) Negligible interest from customers and/or
suppliers
Negligible interest from investors and/or
analysts

c-MiRM 11
 Risk Matrix
E - Rare D - Unlikely C - Possible B - Likely A - Almost Certain

Unlikely to occur Could occur about Could occur more than May occur about once May occur several
during a lifetime or life once during a lifetime once during a lifetime per yearORMore likely times per
of plantORVery or life of plantORMore or life of plantORAs to occur than not yearORExpected to
unlikely to occurORNo likely not to occur than likely to occur as not to occurORHas occurred occurORHas occurred
known occurrences in to occurORHas occurORHas occurred at least once within several times within
broader occurred at least once at least once in the Glencore Glencore
worldwideindustry in broader worldwide mining / extractive or
industry commodities trading
industries
Information Technology (I.T.) Integrity
Health & Safety Environment Social and Cultural Human Rights Financial Image & Reputation Legal

5 Catastrophic Multiple fatalities (5+) due to a single incident Widespread environmental impact to Multiple fatalities or permanent disability or Company causes or contributes to a gross >$500M operating profit Sustained negative international media Criminal investigation at Glencore Group level
& Intellectual Property (IP)
Multiple critical I.T. systems unavailable or in
VERY HIGH Risks: Additional Risk Treatment should
or health cause
Multiple permanent disability or disease cases
ecosystems, habitat or species (irreversible, or disease cases (5+) of community members
>10 years to remediate) Widespread and extended detrimental social
human rights violationl
Company causes or contributes to grave or
>$200M property damage
>$1B asset devaluation
coverage
Condemnation from heads of state,
or in respect of the Board or senior
management
extended recovery
Large volume of highly confidential records / be implemented if possible to reduce the Risk below
(5+) due to a single incident or health cause impacts (>5 years) serious, systemic human rights impacts governments, religious leaders and Any litigation or arbitration, loss of license or business information / patentable information
a VERY HIGH rating. Must be signed-off by the Risk
(mental or physical) Extensive, irreversible damage to community
assets or items / locations of international
supranational bodies, e.g. the U.N.
Negative social media campaigning reaches
permit, or cancellation of a contract with
potential catastrophic financial consequences
leaked
15(M) 19(H) 22(H) 24(VH) 25(VH)
archaeological or cultural significance into mainstream public awareness
Consistent and sustained negative public
Default under Group funding arrangements Owner, and communicated and escalated to the
statements from high-profile NGOs and
pressure groups CEO, CFO, Head of Industrial Assets and General
Loss of customers and suppliers lInvestors
consider divestment and analysts publish Counsel.
notes condemning the company and change

Fatalities (<5) due to a single incident or Widespread, but reversible, environmental Fatality or permanent disability or disease Company causes or contributes to an isolated $100M to $500M operating profit
their ratings
Negative media coverage at local / regional, Criminal investigation of a Group company Critical I.T. system(s) or service(s) hacked,
HIGH Risks: Additional Risk Treatment should be
4 Major
health cause
Permanent disability or disease cases (<5)
impact to ecosystems, habitat or species (2 to
10 years to remediate)
cases (<5) of community members
Long-term (2 to 5 years) detrimental social
serious human rights impact
Company is linked to a grave human rights
$50M to $200M property damage
$250M to $1B asset devaluation
national and international levels over several
days
(but not for the Group) or directors or officers
of a Group company
compromised or unavailable, affecting multiple
sites
implemented if possible to reduce the Risk below a
due to a single incident or health cause impacts impact Negative social media internationally with a Civil investigation at Group level or for any Highly confidential records / business
HIGH rating. Must be signed-off by the Risk Owner,
(mental or physical) Irreversible damage to one or more community
assets or items / locations of national
archaeological or cultural significance
hostile tone
Strongly negative public statements from
local, regional and national government, and
Group entity with potential penalty of major
financial consequences or extended work
stoppage
information / patentable information leaked
10(M) 14(M) 18(H) 21(H) 23(VH) and communicated and escalated to the relevant
Violent protest (>100 people) separately from multiple NGOs and pressure Any litigation or arbitration, loss of license or
groups
Threat of losing business from customers
permit, or cancellation of a contract with
potential major financial consequences
Industrial Lead and/or Commodity Lead, Group
and/or suppliers
Strong concerns from multiple investors and/or
Functional Leads and the Head of Industrial Assets.
analysts

3 Moderate Lost Time Injury (LTI) / Disease (LTD) Limited, but reversible, environmental impact Disabling injury or disease case of a Company causes or contributes to moderate, Negative media coverage at local / regional Civil investigation of any member of the Group Critical I.T. system(s) or service(s) hacked, $50M to $100M operating profit MEDIUM Risks: Additional Risk Treatment should be
Single incident resulting in multiple RWIs or to ecosystems, habitat or species (<2 years to community member(s) temporary human rights impacts and national level for more than 24 hours, with potential penalty of moderate financial compromised or unavailable Isolated release $5M to $50M property damage
MTIs remediate) Medium-term (6 months to 2 years) detrimental Company is linked to a serious human rights
social impact or grievance requiring third-party impact
limited pick-up internationally
Negative social media pick-up, from a mix of
consequences or short-term stop work order
Any litigation or arbitration, loss of license or
of confidential information
Malware prevalent across multiple I.T.
$25M to $250M asset devaluation implemented based on Return on Investment and/or
intervention to resolve
Reversible damage (<6 months) to community
local and national stakeholders, limited pick-
up internationally
permit, or cancellation of a contract with
potential moderate financial consequences
systems, requiring extended investigation and
clean-up 6(L) 9(M) 13(M) 17(H) 20(H) agreement of the Risk Owner, supported by
assets or items / locations of local
archaeological or cultural significance
Public statements from local and/or regional
but not national government consensus of a risk assessment team of suitable
Disruptive protest (>100 people) Public statements from a limited number of
NGOs and pressure groups
Queries from multiple customers and/or
technical and stakeholder personnel.
suppliers
Queries from multiple investors and/or analysts

2 Minor Restricted Work Injury (RWI) / Disease Limited, but reversible, environmental impact Minor injury to a community member(s) Company causes or contributes to a minor, $5M to $50M operating profit Limited but negative media coverage at local / Civil investigation of any member of the Group Non-critical I.T. system(s) or service(s) hacked,
(RWD)or Medical Treatment Injury (MTI) / to ecosystems, habitat or species (<3 months requiring medical treatment isolated human rights impact 1M to $5M property damage regional level that subsides after 24 hours with potential penalty of minor financial compromised or unavailable
Disease (MTD) to remediate) Low-level detrimental social impact on multiple Company is linked to a moderate human $5M to $25M asset devaluation Negative social media pick-up, but limited to consequences Multiple desktops, laptops, handheld devices
LOW Risks: Additional Risk Treatment should only
community members
Planned, reversible damage (<6 months) to
community assets or items / locations of local
rights impact local stakeholders that subsides after 24
hours
Queries but no public statements from local,
Any litigation or arbitration, license or permit
non-compliance, or cancellation of a contract
with potential minor financial consequences
hacked, compromised or lost
Multiple I.T. personnel required to investigate
and rectify impact
3(L) 5(L) 8(M) 12(M) 16(M) be implemented if simple and inexpensive.
archaeological or cultural significance regional or national government
Disruptive protest (<100 people) Queries but no public statements from NGOs
and pressure groups
Queries from one or more customers and/or
suppliers
Queries from one or more investors and/or
analysts

1 Negligible First Aid Injury (FAI) / Illness(not considered a Negligible, and reversible, environmental Minor injury to a community member(s) not Company is linked to a minor human rights <$5M operating profit Negligible interest from media and no local, Civil investigation which might result in a non- Minor impact to non-critical I.T. system or
disease or disorder) impact to ecosystems, habitat or species(<1 requiring medical treatment impact <$1M property damage national or international pick-up penal remedy or with potential negligible service
week to remediate) Isolated, low detrimental social impacton a <$5M asset devaluation Low-level social media pick-up, posts are financial consequences Desktop or laptop or handheld device hacked,

1(L) 2(L) 4(L) 7(M) 11(M)

community member neutral and isolated Any litigation or arbitration, license or permit compromised or lost
Minor, remediable damage (<1 week) to, or Negligible interest from local, regional or non-compliance, or cancellation of a contract Single I.T. person required to investigate and
disturbance of, community assets or items / national government with potential negligible financial rectify impact
locations of local archaeological or cultural Negligible interest from NGOs and pressure consequences
significance groups
Peaceful protest (<100 people) Negligible interest from customers and/or
suppliers
Negligible interest from investors and/or
analysts

Potential Maximum Consequence

Consequence Designation Ownership and Approval Escalation and Communication Risk Treatment Action
(PMC)
CEO / CFO / Head of Industrial Assets / Detailed assessment is required to confirm achievement of ALARP ('As Low As Reasonably Practicable'). Critical Control Management is
5 Catastrophic Hazard / Threat Industrial Lead / Commodity Lead
General Counsel required.
4(Health & Safety) Fatal Hazard Industrial Lead / Commodity Lead Head of Industrial Assets Glencore SafeWork Fatal Hazard Protocol implementation is required. Critical Control Management is required.

Risk Matrix Result Risk Rating Ownership and Approval Escalation and Communication
Very High Risk Industrial Lead / Commodity Lead CEO / CFO / Head of Industrial Assets /
23 to 25
General Counsel
High Risk Operation / Asset / Function / Department Head of Industrial Assets / Industrial Lead /
17 to 22
Leadership Commodity Lead / Group Functional Leads
Medium Risk Operation / Asset / Function / Department Operation / Asset / Function / Department
7 to 16
Leadership Delegate Leadership
Low Risk Operation / Asset / Function / Department Operation / Asset / Function / Department
1 to 6
Leadership Delegate Leadership

c-MiRM
 Risk
Effect of uncertainty on objectives
An effect is a deviation from the expected. It can be positive, negative or both, and can address, create or result
in opportunities and threats
Risk is often described in terms of risk sources, potential events, their consequences and their likelihoods

Uncertainty: Is the state, even partial, of deficiency of information related to, understanding or knowledge of,
an event, its consequence, or likelihood
Uncertainty arising from the limitations of the human mind
Intrinsic variability in the parameters
Validity or accuracy R( Likelihood of event occurring
& Consequence should event occur )*Opinion
Relevance to risk management strategies f (control effectiveness) f (magnitude of hazard (risk source))
Predictions about the future

An objective can be strategic, tactical, or operational

Objectives can relate to different disciplines
An intended outcome, a purpose, an operational criterion

c-MiRM
 Risk Response (ISO 45001:2018 & ISO 31000:2018)

Performance measurement for identified risks.

Tracking identified risks
Contingent or mitigating responses. Identifying new risks

A trigger identified (risk factor) when the risk response

strategy should be initiated, indicate level of tolerance. Executing risk Evaluating their
response plans effectiveness

Visual signal (warning signal and emergency signal) Throughout the hazard and or
indicating imminent onset or actual occurrence, requiring project life cycle
some immediate human response to eliminate or control Short term Operational
the event. response readiness
Opportunities
Strategic command of the emergency response effort
Monitoring residual
risks

c-MiRM
 Risk Response – Baseline Risk Assessment
Threats (Risk) Opportunities
Terminate / Eliminate: Removing the risk source while still aiming to achieve objectives (cease from Escalate: This risk response strategy is appropriate when the team agrees that an opportunity is
doing or providing). This may however require a change to resource activities affecting the objectives. outside the scope or that the proposed response would exceed the risk owner’s authority.
Not all risks can be eliminated, and for others, this approach may be too expensive or time-consuming. The team invests the resources to realise the opportunity.
However, this should be the first strategy considered. These opportunities are not monitored further by the team after escalation.
The intent is that the risk source is not used or introduced in the process or activity, it should not be able These are recorded in the Risk Register referring the ownership to the next authority.
to re-instate or re-surface
Avoid: Deciding not to start or continue with the activity that gives rise to the risk. informed decision not Exploit: The aim is to ensure that the opportunity is realised. This strategy seeks to eliminate the
to be involved in, or to withdraw from, an activity in order not to be exposed uncertainty associated with a particular risk by making the opportunity definitely happen. Exploit is an
to a particular risk. aggressive response strategy.
Not all risks can be avoided, and for others, this approach may be too expensive or time-consuming. Invests the resources to realize the opportunity.
Exploit as many critical positive risks as possible.
The exploited opportunities once put to use are removed from Risk Register since they are no more
uncertainty. Keep them on a, “Exploited” Register.
Transfer: Transferring risk involves finding another party who is willing to take responsibility for its Share: Allocate risk ownership of an opportunity to another party who is best able to maximize its
management, and who will bear the liability of the risk should it occur. The aim is to ensure that the risk Likelihood of occurrence and increase the potential benefits if it does occur. Those to whom threats
is owned and managed by the party best able to deal with it effectively. Risk transfer usually involves are transferred take on the liability and those to whom opportunities are allocated should be allowed
payment of a premium, and the cost-effectiveness of this must be considered when deciding whether to to share in the potential benefits.
adopt a transfer strategy. Legal or regulatory requirements can limit, prohibit or mandate risk sharing. The extent to which risk is
distributed can depend on the reliability and clarity of the sharing arrangements.
Mitigate: Risk mitigation reduces the likelihood and/or impact of an adverse risk event to an acceptable Enhance: This response aims to modify the “size” of the positive risk. The opportunity is enhanced by
threshold (ALARP). Risk mitigation may require resources or time and thus presents a trade-off between increasing its Likelihood and/or impact, thereby maximizing benefits realized for the activity / project.
doing nothing versus the cost of mitigating the risk. Invests pro-active efforts towards enhancing the likelihood of the opportunity (towards almost
certain).
Applies the strategy if Critical positive risks go unexploited. It will produce critical controls to create
and protects value.
Acceptance / Tolerate (Retain): This strategy is adopted when it is not possible or practical to respond to the risk by the other strategies, or a response is not warranted by the importance of the risk. When the
risk owner decide to accept a risk, agreeing to address the risk if and when it occurs. A contingency plan, workaround plan and/or contingency reserve may be developed for that eventuality.

c-MiRM