Explanation
No measure removes a risk completely. What remains after the measures is the residual risk. You assess it with the same method as the original risk, for example a risk matrix or Kinney, and check whether the score has dropped to a level the organisation finds acceptable.
If you find the residual risk too high, you take extra measures. If it stays acceptable, you record who decided that and why. That shows in a risk assessment or TRA that you made a conscious choice. Residual risk is also a starting point for emergency response: what can still go wrong and what do we do then?
The difference with the original risk is therefore the moment of measuring: before or after the measures. Note that a measure that exists on paper but does not work yet only lowers the risk once it has been implemented and tested. So assess the residual risk after implementation, not after planning.
Example from practice
A cordoned-off work area with a daily check lowers the risk of being hit by traffic during roadworks, but never to zero. You record the residual risk, for example a driver who still drives through, and discuss it with the team.
© 2026 BrydgeOne. General information, not legal or other professional advice. No rights can be derived from this explanation.
