A risk assessment identifies potential undesirable incidents, so that measures can be taken to prevent anything from happening, and to be prepared for what to do if it still happens.

A risk assessment should be carried out when you are planning to do something that can include danger or handling something valuable.

Ask yourself: What is valuable? – To you, your place of work or study, individuals or those we cooperate with. What do you have in your possession that must not be destroyed, damaged, stolen or misused?

Considering and reducing risk

To consider and reduce risk, ask yourself the following questions:

• What could go wrong?
  - What are the reasons it could go wrong?
• What can we do to prevent it happening?
  - What can be the consequences of it happening?
• What can we do to reduce the consequence if it does happen?

Perform a risk assessment in connection with, for example:

• High-risk work (lab, workshop, clinic)
• Processing of personal data or information that requires a high degree of confidentiality
• Large or controversial events
• High-risk trips, excursions, field work or research cruises
• Change processes in the organisation or changes that may have a bearing on safety and/or security.

Risk management

After completing a risk assessment, it is decisive that the risk of undesirable incidents is addressed. There are several ways of managing risks:

• Reduce the risk by implementing measures that reduce the probability or the consequences
• Accept the risk as it is
• Transfer the risk to others by taking out insurance or similar
• Avoid the risk by discontinuing the high-risk activity