The 4 phases of the risk management process.
This evolves through 4 distinct stages:
Risk mappingUsing appropriate technical tools such as on-site company visits, collection of documents (plans, internal control procedures, certifications, etc. ), compiling questionnaires, interviews with the managers of different sectors (production, safety, quality, commercial, administration, etc.) we identify and evaluate the goods and resources that make up the assets of the company and we detect potentially unfavourable events.
Risk treatmentOnce the risks that characterise the Company have been identified, it is necessary to lay down the rules for the best treatment of the same grouped by frequency / probability of occurrence and consequences in economic terms for the company both in the medium term (e.g. fire damage to buildings and equipment, etc.) and in the long term (e.g. damage to company image, loss of market share, etc.) choosing the best type of intervention from time to time.
Risk auditingThis entails constant and periodic control of the first two stages in order to keep management practices aligned with respect to risks that actually exist and business evolution.
Risk evaluationAt the end of the process two macro-areas can be identified: risks that can be managed directly by the Company and risks to be outsourced.