Jump to content

  • Quick Navigation
Photo

Does a risk assessment require a corresponding policy?

Share this

  • You cannot start a new topic
  • Please log in to reply
4 replies to this topic
- - - - -

zoelawton

    Grade - MIFSQN

  • IFSQN Member
  • 159 posts
  • 42 thanks
31
Excellent

  • United Kingdom
    United Kingdom
  • Gender:Female
  • Location:United Kingdom

Posted 08 June 2020 - 08:38 AM

Hi, 

 

Sorry if this is under the wrong topic, wasn't sure on the most suitable. 

 

I am just working through some policies, risk assessments, procedures etc. 

 

If i conduct a risk assessment, do i then need a corresponding policy? 

 

For example, i have a pen risk assessment that i'm updating, do i then need a pen policy? Or could this just be answered under clause 4.9.6.2 instead of having a separate policy?

 

I currently have both however i'm not sure if it's overkill. 

 

I hope this makes sense.



pHruit

    Grade - FIFSQN

  • IFSQN Fellow
  • 2,072 posts
  • 849 thanks
537
Excellent

  • United Kingdom
    United Kingdom
  • Gender:Male
  • Interests:Composing/listening to classical music, electronics, mountain biking, science, sarcasm

Posted 08 June 2020 - 12:17 PM

I'm not aware of anything specific in the standard that requires you to equate policies to RAs on a 1:1 basis, and indeed I've been doing BRC since Issue 4 and have far more RAs than individual policies.

I certainly think it makes sense to group these, as otherwise with the number of RAs required for BRC, you'll end up with a vast number of policies, many of which don't really say a great deal. As long as the outcome of the assessment is reflected in a policy, and you can clearly show this to be the case, then it is not a problem.



Charles.C

    Grade - FIFSQN

  • IFSQN Moderator
  • 20,542 posts
  • 5665 thanks
1,544
Excellent

  • Earth
    Earth
  • Gender:Male
  • Interests:SF
    TV
    Movies

Posted 08 June 2020 - 12:23 PM

Hi, 

 

Sorry if this is under the wrong topic, wasn't sure on the most suitable. 

 

I am just working through some policies, risk assessments, procedures etc. 

 

If i conduct a risk assessment, do i then need a corresponding policy? 

 

For example, i have a pen risk assessment that i'm updating, do i then need a pen policy? Or could this just be answered under clause 4.9.6.2 instead of having a separate policy?

 

I currently have both however i'm not sure if it's overkill. 

 

I hope this makes sense.

If BRC do not ask for it, it's probably overkill.

 

Their own Policy on asking for risk assessments is already overkill.


Kind Regards,

 

Charles.C


zanorias

    Grade - PIFSQN

  • IFSQN Principal
  • 811 posts
  • 245 thanks
167
Excellent

  • Wales
    Wales
  • Gender:Male
  • Location:UK
  • Interests:Motorcycling, Food Safety, Science, Paddleboarding, Space

Posted 08 June 2020 - 12:30 PM

I'd also recommened grouping where feasible, i.e for 4.9.6.2 I'd include pens with similar equipment in an equipment foriegn body policy or something along those lines otherwise yes you'll end up with a large number of small policies



SQFconsultant

    SQFconsultant

  • IFSQN Fellow
  • 4,662 posts
  • 1139 thanks
1,132
Excellent

  • United States
    United States
  • Gender:Male
  • Interests:Just when I thought I was out - They pulled me back in!!!

Posted 08 June 2020 - 04:42 PM

I would not create an additional document - I'd include pens in your standard foreign matter, etc documentation - so the answer is no.


All the Best,

 

All Rights Reserved,

Without Prejudice,

Glenn Oster.

Glenn Oster Consulting, LLC -

SQF System Development | Internal Auditor Training | eConsultant

Martha's Vineyard Island, MA - Restored Republic

http://www.GCEMVI.XYZ

http://www.GlennOster.com

 




Share this

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users