About this lesson
Susceptibility, occurrence, and response capability describe the parameters of risk analysis. All three must combine for a risk to become a reality. Completely controlling anyone of those removes the risk as a factor in your business.
Download this lesson’s related exercise files.Susceptibility, Occurrence, Response Capability
61.1 KB Susceptibility, Occurrence, Response Capability - Solution
Susceptibility, Occurrence, Response Capability
There are three necessary conditions for a theoretical risk to become an actual threat. The product or process must be susceptible to that type of risk; something must occur to initiate that type of risk, and the product or process does not have the capability to respond to that risk once the occurrence has been initiated.
When to use
The understanding of these three principles should be applied to a product or process in the early design stages. An in-depth assessment of these three conditions should be done with respect to risk profiles prior to the finalization of product or process design.
Whenever a product or process is being designed, the designers must consider risks and threats to ideal performance. When considering the potential risk scenarios, there are three conditions that must be met for a theoretical risk to turn into an actual realized problem. If the designers of the product or process can eliminate or control one of those three conditions, the potential risk will not impact performance. Therefore, each potential or theoretical risk scenario should be analysed and a determination made as to the best method to attempt to control these three conditions. These three conditions are:
This condition is inherent in the design and use of the product or process. It is based upon the functions that are being performed and how they are being performed. Some risks can be eliminated by creating a design that is not susceptible to that risk. For instance, if the product or process does not have electronics and software, there is no risk of a software bug. Eliminating the susceptibility risk is not always possible because the risk is an inherent attribute of the function of the product or process. For instance, since automobiles are intended to transport people along city streets, there is always a risk that the automobile will hit something that is on the street.
This is the condition that starts the sequence of events associated with the risk condition. If the sequence is never started, the risk remains theoretical, not actual. This occurrence could be due to an action of a user or operator. The person drops a product that has fragile parts and it becomes damaged. This occurrence could be due to the misuse or misapplication of a product or process. A user enters a wrong code on a keypad. And sometimes the occurrence is outside the control of the product, process, or user. A lightning strike creates an electrical surge that damages a circuit and causes a product to malfunction.
The third condition is an inability to respond to a risk event, either because it is not recognized as such or the there is not enough time or capacity to react. This is the reason that many products and processes have warning lights or safety guards. These provide a user with an indication of risk conditions and the user can then take appropriate action. In some cases, the design is created with enough robust or “heavy duty” performance margin that even though a risk condition is occurring, the product or process is able to continue to perform.
Hints & tips
- You only need to control one of the three conditions. If the there is no susceptibility, the risk can’t happen. If there is no occurrence, the risk won’t happen. If there is response capability, the risk is contained and controlled when it does happen.
- These conditions are much easier to impact if they are addressed at the design concept stage rather than waiting until the design is complete and then trying to add risk reduction attributes.
- Make sure you consider both normal use and abnormal use when considering risk scenarios.
Lesson notes are only available for subscribers.
PMI, PMP, CAPM and PMBOK are registered marks of the Project Management Institute, Inc.