In ORM, what step follows hazard identification?

• A. Implement controls.
• B. Monitor and review effectiveness.
• C. Assess risk.
• D. Identify additional hazards.

Answer: (C)

After hazards are identified in ORM, the next step is to assess the risk posed by those hazards. This means evaluating how likely the hazard is to occur and how severe the consequences could be if it does, which gives a risk level (low, moderate, high, etc.). This assessment helps prioritize which hazards need controls and guides what kind of controls should be put in place. Only after understanding the risk do you move on to selecting and implementing controls to reduce it. Monitoring and reviewing effectiveness comes later, to ensure the controls work as intended. Identifying additional hazards is an ongoing part of the process and often occurs as new information or operations are considered.