Difference between revisions of "Risk"
| (154 intermediate revisions by 5 users not shown) | |||
| Line 1: | Line 1: | ||
| + | [[Category:Safety]] |
||
| − | =Introduction= |
||
| + | [[Category:Social]] |
||
| + | [[Category:Threat]] |
||
| − | '''Risk''' is a measure for the expectation of undesirable outcome ([ |
+ | [[File:ae.png|25px|right|This is a page providing background in a specific field of expertise]]'''Risk''' is a measure for the expectation of undesirable outcome ([[impact]]) to realise. This expectation concerns both the [[likelihood]] and [[impact]] of the undesired outcome. Quantified levels of risk are often used to enable an assessment of risk in order to establish if they fall within acceptable limits or to determine which risks pose the highest [[threat]]. |
| − | =Definitions= |
+ | == Definitions == |
| ⚫ | There is no universally accepted definition for risk. A prominent definition of risk is provided in the ISO 31000:2009 risk management standard, <ref name="iso31000">See: http://en.wikipedia.org/wiki/ISO_31000</ref> where risk is defined as the ‘effect of uncertainty on objectives’ and both positive and negative effects are included. As this definition is of a high conceptual level and can be counter-intuitive, for the purpose of this wiki, the definition as mentioned above will be used. In the plan and detail level tools, these elements of risk are translated into terms of susceptibility and consequence (see [[Plan_level_tools#Calculation_method|Plan level tools]]). |
||
| + | == Objective and subjective risk== |
||
| ⚫ | There is no |
||
| + | There are two aspects of the determination of risks: the risks that are in fact present ([[Risk#About objective risk|objective risks]]), and the risks as they are perceived ([[Risk#Perception_of_risk|subjective risks]]). One would expect the two to be very similar, but studies have shown they can (and often do) differ quite a bit. |
||
| − | = |
+ | ===About subjective risk=== |
| + | Results from urban planning decisions can influence citizens’ perception of risk including the distraction of their risk perception for more objective risk levels. Conversely, citizens’ risk perception can result in societal demands on urban planning. Several specific aspects as addressed in the following are worth consideration in strategic urban planning. These aspects among others include indicators for citizens’ subjective perception of criticality of infrastructure and need to protect it, including by appropriate urban planning measures. Conversely, infrastructure that results from urban planning may also influence subjective assessment of its criticality and contribution to security or susceptibility to natural or anthropogenic (“man made”) risk. |
||
| + | Risk perception is strongly influenced by various subjective factors that drag it from objective risk figures. Factors such as overconfidence, loss aversion, individual experience, temporal factors, capacity of remembering, level of information and knowledge, public discourse, stigmatisation, cultural factors, orientation of values, confidence in institutions, etc. <ref>Cf. Covello V. T. et. al.: Risk Communication, the West Nile Virus Epidemic, and Bioterrorism: Responding to the Communication Challenges Posed by the Intentional or Unintentional Release of a Pathogen in an Urban Setting. Journal of Urban Health: Bulletin of the New York Academy of Medicine, vol. 78, no. 2, 2001, 382-391. |
||
| − | =Risk assessment= |
||
| + | Organisation for Economic Co-operation and Development (OECD): OECD Reviews of Risk Management Policies. Future Global Shocks. Improving Risk Governance. Preliminary Version. OECD Publication Service, 2011; Proske D.: Katalog Risiken - Risiken und ihre Darstellung. Dresden: Eigenverlag, 2004, 167-174. Retrieved from: http://www.qucosa.de/fileadmin/data/qucosa/documents/71/1218786958574-1736.pdf. |
||
| ⚫ | |||
| ⚫ | |||
| + | Slovic P. et al.: Facts and Fears: Societal Perception of Risk, in: Monroe K.B., Abor A. (eds.): Advances In Consumer Research, vol. 08, Association For Consumer Research, 1981, 497-502. Retrieved from: http://www.acrwebsite.org/volumes/display.asp?id=5844. |
||
| ⚫ | |||
| + | Sterr H. et al.: Risikomanagement im Küstenschutz in Norddeutschland, in: Felgentreff C., Glade T.: Naturrisiken und Sozialkatastrophen. Berlin Heidelberg: Springer, 2008,345-346. |
||
| ⚫ | Many variations exist, for example by distinguishing between the |
||
| + | Zwick M., Renn O.: Risikokonzepte jenseits von Eintrittswahrscheinlichkeit und Schadenserwartung, in: Felgentreff C., Glade T.: Naturrisiken und Sozialkatastrophen. Berlin Heidelberg: Springer, 2008, 85-95.</ref> |
||
| ⚫ | |||
| + | |||
| + | This is relevant to urban planners since they have some means to direct the perceived security or at the very least has means to predict it and account for it in planning. |
||
| + | Addressing of risk in planning should be coherent with societal risk perception and views.<ref>Organisation for Economic Co-operation and Development (OECD): OECD Reviews of Risk Management Policies. Future Global Shocks. Improving Risk Governance. Preliminary Version. OECD Publication Service, 2011 |
||
| + | |||
| + | Organisation for Economic Co-operation and Development (OECD): Emerging Risks in the 21st Century. An Agenda for Action. Paris: OECD Publication Service, 2003, 54-56. Retrieved from: http://www.unisdr.org/eng/library/Literature/7754.pdf [last access: 2011 07 28].</ref> |
||
| + | Adequate risk management and public communication can help urban planners to prevent negative effects from public risk perception or misperception, and related public demands on or acceptance of urban design. However, effects of urban planning decisions can also distract citizens’ risk perception from more objective risk levels. |
||
| + | |||
| + | To do so, the complexity of individual and social mechanisms of risk perception has to be appreciated.<ref> Coppola D. P.: Introduction to International Disaster Management. Oxford: Butterworth-Heinemann, 2007, 162. </ref> Humans usually do not fear statistically highly ranked threats to life and health (such as car accidents, food poisoning, cancer and others), whereas they are disproportionately wary of spectacular hazards, even if related vulnerabilities are low. |
||
| + | |||
| + | ===About objective risk=== |
||
| ⚫ | |||
| ⚫ | |||
| ⚫ | |||
| − | ==The estimation of likelihood in security== |
||
| ⚫ | Many variations exist, for example by distinguishing between the likelihood of a threat realizing (also called probability) and the likelihood that that threat will affect an object ([[vulnerability]]). An example would be storm damage: The probability would reflect the likelihood of a storm at the object, the vulnerability would reflect the likelihood that this storm would cause damage and the impact would reflect the extent of damage that would occur if the storm would cause damage. The quantified risk formula associated with this definition is |
||
| − | The use of probability relies on the ability to make reliable predictions. This is most often based on the analysis of past occurrences and identification of trends. When determining risk in the field of threats related to [#_Human_intent human intent], the use of trend analysis to determine likelihood is criticised[#_ftn2 ] for threats actively seeking harm (for example terrorism). This is due to the fact that |
||
| ⚫ | |||
| − | * these events occur relatively infrequently, making the recognition of trends difficult; |
||
| − | * in contrast to for instance natural threats, the results of past events does influence the likelihood of future events: potential perpetrators will actively seek ‘the weakest link’. This means that the predicting value of trends in past occurrences is in doubt. |
||
| + | Most commonly, likelihood can be quantified by statistical analysis. The likelihood of weather events occurring, for example, has been the subject of long and well-established study and has a solid statistical basis. Wherever statistical data can predict the future, likelihood can be interpreted to equal probability. |
||
| ⚫ | |||
| + | ====Problems with the use of probability==== |
||
| − | ==Uses of risk assessment== |
||
| + | A precondition for statistical analysis to be valid is that the future can be predicted on the basis of events in the past and this does not hold for all situations. Particularly in security analysis, the use of statistical analysis for the determination of likelihood is highly debatable as: |
||
| + | * The likelihood of occurrence is influenced by the vulnerability (compare the risk of flooding with the risk of burglary: Whereas the likelihood of high water occurring is independent of dykes being erected, the likelihood of a burglary attempt occurring at a building depends on the doors having visible locks or not). |
||
| + | * The likelihood is influenced by external factors (measures taken at one place can influence the likelihood for burglary at another place (crime displacement or waterbed effect)) |
||
| + | * The likelihood is subject to rational beings who can act against trends (a criminal will actively look for the weakest link, irrespective of choices made in the past if the last three attacks where (unsuccessful) hostage takings, is that an indication that the next one will also be a hostage taking, or is it likely that the next one will be a different attack method?) |
||
| + | * Some forms of crime (particularly the more extreme forms, such as mass killing or destructions by fanatics) have a very low rate of occurrence, which is a problem for the accumulation of enough data to assure the validity of statistical analysis. |
||
| ⚫ | A way to overcome these problems is to substitute '''attractiveness''' (the extent to which criminals are likely to choose the object over another object) for probability and '''conceivability''' (the extent to which criminals are deemed able to be successful) for vulnerability. In this way, assumptions about historical data predicting future events can be avoided. |
||
| − | t.b.d. |
||
| − | = |
+ | ===Uses of risk assessment=== |
| + | Risk assessment is used to get a good understanding of the various circumstances that might have a negative impact on the realisation of your goals. In other words, it can be used as a systematic way to survey the weak spots in your plans and do something about it before they cause problems. |
||
| + | The [[Concept level tools#Risk Assessment tool (SecuRbAn|SecuRbAn]] tool is a tool to quickly do a high-level risk assessment on planned urban development, developed in the context of the VITRUV project. |
||
| ⚫ | One way to typify types of risk |
||
| + | ==Sources of risk== |
||
| ⚫ | |||
| ⚫ | One way to typify types of risk is by their causes. A cause for risk is called a [[threat]]. Threats can be classified into [[safety]] threats, consisting of [[natural threat|natural threat]]s, [[human failure]], [[technical failure]], [[failure of critical services]] and [[security]] threats which are due to [[human intent]]. |
||
| ⚫ | |||
| − | t.b.d. |
||
| + | * [http://en.wikipedia.org/wiki/Risk_analysis Risk analysis] |
||
| + | * [http://en.wikipedia.org/wiki/Risk_assessment Risk assessment] |
||
| + | * [http://www.who.int/healthinfo/global_burden_disease/global_health_risks/en/ Health risks] |
||
| + | * [[Risk communication]] |
||
| − | + | {{references}} |
|
Latest revision as of 00:34, 20 January 2018
Risk is a measure for the expectation of undesirable outcome (impact) to realise. This expectation concerns both the likelihood and impact of the undesired outcome. Quantified levels of risk are often used to enable an assessment of risk in order to establish if they fall within acceptable limits or to determine which risks pose the highest threat.
Contents
Definitions
There is no universally accepted definition for risk. A prominent definition of risk is provided in the ISO 31000:2009 risk management standard, [1] where risk is defined as the ‘effect of uncertainty on objectives’ and both positive and negative effects are included. As this definition is of a high conceptual level and can be counter-intuitive, for the purpose of this wiki, the definition as mentioned above will be used. In the plan and detail level tools, these elements of risk are translated into terms of susceptibility and consequence (see Plan level tools).
Objective and subjective risk
There are two aspects of the determination of risks: the risks that are in fact present (objective risks), and the risks as they are perceived (subjective risks). One would expect the two to be very similar, but studies have shown they can (and often do) differ quite a bit.
About subjective risk
Results from urban planning decisions can influence citizens’ perception of risk including the distraction of their risk perception for more objective risk levels. Conversely, citizens’ risk perception can result in societal demands on urban planning. Several specific aspects as addressed in the following are worth consideration in strategic urban planning. These aspects among others include indicators for citizens’ subjective perception of criticality of infrastructure and need to protect it, including by appropriate urban planning measures. Conversely, infrastructure that results from urban planning may also influence subjective assessment of its criticality and contribution to security or susceptibility to natural or anthropogenic (“man made”) risk.
Risk perception is strongly influenced by various subjective factors that drag it from objective risk figures. Factors such as overconfidence, loss aversion, individual experience, temporal factors, capacity of remembering, level of information and knowledge, public discourse, stigmatisation, cultural factors, orientation of values, confidence in institutions, etc. [2]
This is relevant to urban planners since they have some means to direct the perceived security or at the very least has means to predict it and account for it in planning. Addressing of risk in planning should be coherent with societal risk perception and views.[3] Adequate risk management and public communication can help urban planners to prevent negative effects from public risk perception or misperception, and related public demands on or acceptance of urban design. However, effects of urban planning decisions can also distract citizens’ risk perception from more objective risk levels.
To do so, the complexity of individual and social mechanisms of risk perception has to be appreciated.[4] Humans usually do not fear statistically highly ranked threats to life and health (such as car accidents, food poisoning, cancer and others), whereas they are disproportionately wary of spectacular hazards, even if related vulnerabilities are low.
About objective risk
Although terminology may vary, two widely accepted elements in the definition of risk are the inclusion of likelihood and magnitude and to a lesser extent, the fact that to arrive at a measure of risk, the two should be multiplied. A simple, but widely used definition of risk is therefore
Risk = Likelihood of event realizing X Impact (expected loss in case the accident realises).
Many variations exist, for example by distinguishing between the likelihood of a threat realizing (also called probability) and the likelihood that that threat will affect an object (vulnerability). An example would be storm damage: The probability would reflect the likelihood of a storm at the object, the vulnerability would reflect the likelihood that this storm would cause damage and the impact would reflect the extent of damage that would occur if the storm would cause damage. The quantified risk formula associated with this definition is
Risk = Likelihood of event realising X Vulnerability (probability of realised event impacting object) X Impact (expected loss in case the accident realises and impacting object).
Most commonly, likelihood can be quantified by statistical analysis. The likelihood of weather events occurring, for example, has been the subject of long and well-established study and has a solid statistical basis. Wherever statistical data can predict the future, likelihood can be interpreted to equal probability.
Problems with the use of probability
A precondition for statistical analysis to be valid is that the future can be predicted on the basis of events in the past and this does not hold for all situations. Particularly in security analysis, the use of statistical analysis for the determination of likelihood is highly debatable as:
- The likelihood of occurrence is influenced by the vulnerability (compare the risk of flooding with the risk of burglary: Whereas the likelihood of high water occurring is independent of dykes being erected, the likelihood of a burglary attempt occurring at a building depends on the doors having visible locks or not).
- The likelihood is influenced by external factors (measures taken at one place can influence the likelihood for burglary at another place (crime displacement or waterbed effect))
- The likelihood is subject to rational beings who can act against trends (a criminal will actively look for the weakest link, irrespective of choices made in the past if the last three attacks where (unsuccessful) hostage takings, is that an indication that the next one will also be a hostage taking, or is it likely that the next one will be a different attack method?)
- Some forms of crime (particularly the more extreme forms, such as mass killing or destructions by fanatics) have a very low rate of occurrence, which is a problem for the accumulation of enough data to assure the validity of statistical analysis.
A way to overcome these problems is to substitute attractiveness (the extent to which criminals are likely to choose the object over another object) for probability and conceivability (the extent to which criminals are deemed able to be successful) for vulnerability. In this way, assumptions about historical data predicting future events can be avoided.
Uses of risk assessment
Risk assessment is used to get a good understanding of the various circumstances that might have a negative impact on the realisation of your goals. In other words, it can be used as a systematic way to survey the weak spots in your plans and do something about it before they cause problems.
The SecuRbAn tool is a tool to quickly do a high-level risk assessment on planned urban development, developed in the context of the VITRUV project.
Sources of risk
One way to typify types of risk is by their causes. A cause for risk is called a threat. Threats can be classified into safety threats, consisting of natural threats, human failure, technical failure, failure of critical services and security threats which are due to human intent.
Related subjects
Footnotes and references
- ↑ See: http://en.wikipedia.org/wiki/ISO_31000
- ↑ Cf. Covello V. T. et. al.: Risk Communication, the West Nile Virus Epidemic, and Bioterrorism: Responding to the Communication Challenges Posed by the Intentional or Unintentional Release of a Pathogen in an Urban Setting. Journal of Urban Health: Bulletin of the New York Academy of Medicine, vol. 78, no. 2, 2001, 382-391. Organisation for Economic Co-operation and Development (OECD): OECD Reviews of Risk Management Policies. Future Global Shocks. Improving Risk Governance. Preliminary Version. OECD Publication Service, 2011; Proske D.: Katalog Risiken - Risiken und ihre Darstellung. Dresden: Eigenverlag, 2004, 167-174. Retrieved from: http://www.qucosa.de/fileadmin/data/qucosa/documents/71/1218786958574-1736.pdf. Slovic P. et al.: Facts and Fears: Societal Perception of Risk, in: Monroe K.B., Abor A. (eds.): Advances In Consumer Research, vol. 08, Association For Consumer Research, 1981, 497-502. Retrieved from: http://www.acrwebsite.org/volumes/display.asp?id=5844. Sterr H. et al.: Risikomanagement im Küstenschutz in Norddeutschland, in: Felgentreff C., Glade T.: Naturrisiken und Sozialkatastrophen. Berlin Heidelberg: Springer, 2008,345-346. Zwick M., Renn O.: Risikokonzepte jenseits von Eintrittswahrscheinlichkeit und Schadenserwartung, in: Felgentreff C., Glade T.: Naturrisiken und Sozialkatastrophen. Berlin Heidelberg: Springer, 2008, 85-95.
- ↑ Organisation for Economic Co-operation and Development (OECD): OECD Reviews of Risk Management Policies. Future Global Shocks. Improving Risk Governance. Preliminary Version. OECD Publication Service, 2011 Organisation for Economic Co-operation and Development (OECD): Emerging Risks in the 21st Century. An Agenda for Action. Paris: OECD Publication Service, 2003, 54-56. Retrieved from: http://www.unisdr.org/eng/library/Literature/7754.pdf [last access: 2011 07 28].
- ↑ Coppola D. P.: Introduction to International Disaster Management. Oxford: Butterworth-Heinemann, 2007, 162.
