Risk

Risk represents the calculated product of two variables: event likelihood and the absolute severity of resulting consequences. Risk functions exclusively where a hazard intersects with an exposure. Removing the hazard or isolating the exposure eliminates the risk entirely.

In formal decision frameworks, risk operates as an exposure filter, converting vague uncertainty into a quantified metric requiring strict management. Governance systems reshape risk by inserting physical controls, including engineering barriers and safety factors, between the hazard and the vulnerable receptor. Controls never eliminate risk entirely.

Physical barriers only narrow the pathway for potential harm. Controls degrade over time, making risk dynamic rather than static. Systemic failure frequently originates from optimism bias, where markets treat likelihood as the dominant factor.

Supply chains routinely discount low-probability events carrying severe consequences. The assumption produces infrastructure appearing safe until sudden physical failure occurs in reality. Robust governance demands confronting system failure directly.

The primary diagnostic asks what the worst credible outcome becomes following primary control failure. Operations failing to survive control failure carry unacceptable exposure. Regulators heavily penalise operations lacking catastrophic failure planning.