Describe the exposure and its controls
- Keep the risk, location, owner, existing controls and next review date together.
- Record inherent and residual likelihood and impact using the identified assessment matrix.
- Residual risk is an assessor’s judgement; the application does not infer that a listed control has removed the hazard.