In ORM, which step involves assessing risk and determining the level of risk?

• A. Assess risk
• B. Identify hazards
• C. Develop controls
• D. Implement controls

Answer: (A)

In ORM, the action of evaluating how risky a situation is happens during risk assessment. Here, you weigh how likely a hazard is to occur and how severe the consequences would be, then assign a risk level (for example, low, moderate, high). This rating helps prioritize which risks need the most attention and what level of controls are required.

Identifying hazards, by contrast, is about finding potential sources of harm, not judging how bad the risk is. Developing controls comes after risk has been assessed, focusing on choosing measures to reduce the risk. Implementing controls is the step of putting those measures into action and monitoring their effectiveness.