Operational Risk Controls, Reporting & Business Continuity

CRMC · 100 questions

• A warehouse crew notices a frayed power cable under a pallet rack. For weeks everyone shrugs and says safety will handle it, yet no one files a report. What principle of risk responsibility is being ignored?
• A municipal fleet garage policy says only managers may file risk reports, and technicians who spot leaking hydraulic lines are told to stay quiet. What change best aligns with sound risk reporting practice?
• A civic utilities plant requires a twelve-page form before anyone may mention a gas smell on the floor. What reporting-design problem does this create?
• After near-misses are logged at a county print shop, coworkers joke about “snitches,” and logging drops. What cultural fix best supports healthy risk reporting?
• Night custodians at a community college notice water intrusion under a server closet door but believe only daytime supervisors may file reports. What guidance should leadership give?
• A parks-department director instructs staff to report only completed injuries and never hazards or near-misses. What should a risk manager correct?
• A city’s responsibility matrix lists “all staff” as the owner for every operational control, with no named individual. What weakness does this create?
• After a hospital facilities reorganization, elevator emergency response ownership is never updated and two former teams assume the other still owns it. What should happen next?
• Contractors renovating a county courthouse have badges and tools but no instruction on how to report a chemical spill. What gap should the risk program close?
• A university’s risk portal crashes when duplicate reports are filed, so staff stop submitting altogether. What does this illustrate about reporting mechanisms?
• A warehouse supervisor quietly alters near-miss forms to hide recurring forklift incidents from leadership. What duty is being violated?
• A nonprofit board insists every minor hazard report be posted publicly with the reporter’s and involved employees’ names for blame. What reporting-system concern should a risk manager raise?
• IT tickets describe a leaking ceiling tile above a server rack while safety reports note the same drip as a slip hazard, yet neither record points to a shared owner. What practice would improve risk response?
• Volunteers staffing a city festival receive shirts and schedules but no briefing on emergency reporting numbers. What should organizers add?
• A risk register lists the “responsible party” for chemical inventory controls as an empty job code with no person currently assigned. What correction is required?
• Staff at a regional clinic file hazard reports only during the week auditors are on site. What cultural shift should leadership drive?
• Two deputy directors both claim exclusive ownership of flood-barrier deployment and block each other’s work orders. What should leadership do?
• A city call-center agent hears language consistent with a bomb threat but has no written escalation card at the desk. What should the risk program provide?
• Remote employees treat repeated VPN outages as merely annoying and never flag service impact to operations. What should risk guidance emphasize?
• Leadership celebrates a quarter with zero hazard reports as proof of perfect safety. What interpretation should a risk manager challenge?
• After metal filings injure eyes in a municipal machine shop, managers first buy darker safety posters and skip removing or redesigning the grinding source. What hierarchy-of-controls mistake is this?
• Management issues only PPE goggles after chip injuries, even though switching to a wet-cut method would largely eliminate flying chips. Which control preference is more appropriate?
• A facilities team keeps a toxic cleaner “because we have always used it,” even though a less hazardous substitute is available and effective. What control action best follows hierarchy principles?
• A loud compressor sits in an open office; leadership hands out earplugs instead of relocating or enclosing the machine. What higher-order control should be considered first?
• Guarding is removed from a table saw “for speed,” and workers are told only to be careful. What control principle does this violate?
• A warehouse keeps logging ladder misuse. Operations sends the same reminder email after each near miss but never refreshes training or updates the procedure. What should a risk manager emphasize about administrative controls?
• A packaging line has sharp edges that cut gloves and nick hands. Leadership mandates thicker gloves but refuses to redesign guards or edge finishing even though redesign is feasible. What is the sound hierarchy critique?
• The night of a civic fundraiser, catering stacks crates and carts across marked accessible exits to clear the lobby for guests. What essential workplace precaution is being violated?
• During a dusty renovation, facilities silences fire alarms as 'annoying' and leaves them off with no fire watch, detection alternative, or compensatory plan. What should the risk manager conclude?
• A municipal fleet shop puts new hires on grinders and lifts on day one, delaying safety training until 'a quiet week.' What precaution expectation is being missed?
• Call-center desks force awkward reaches and elevated shoulders for full eight-hour shifts, and no ergonomic adjustment or alternate furniture is offered. What risk precaution should leadership prioritize?
• A nonprofit HQ lobby has after-hours access with no badge control or camera coverage despite a documented theft history. Which statement best reflects appropriate organizational precautions?
• A facilities chemical storage room has no functioning ventilation, and odor complaints are rising. What essential environmental health precaution is missing?
• A lab supervisor waves off missing first-aid kits and eyewash stations because '911 exists.' What should the risk manager correct?
• A hierarchy-of-controls poster hangs in the break room, yet every hazard fix jumps straight to PPE raffles and giveaways. What does correct application of the hierarchy require?
• To cut noise complaints, maintenance isolates a pump in a closed closet. The closet now meets confined-space conditions, but nobody reassesses the new exposure for entry and maintenance work. What lesson applies?
• Operators repeatedly tape over machine interlocks 'just for today' to clear jams faster. What is the hierarchy impact?
• A yard posts a 5 mph speed policy in the employee handbook, but the yard has no signs, no enforcement, and drivers routinely ignore it. What makes this administrative control ineffective?
• The stockroom shelves only oversized and undersized respirators and gloves, so staff routinely skip required PPE. What condition for PPE effectiveness is failing?
• A renovation permanently removes a stair guardrail (engineered control) and leaves a traffic cone as the standing protection. What is the residual-risk problem?
• During a chemical smell event, facilities texts daycare staff in the same building raw PSI readings and equipment jargon with no plain-language action. What communication principle is missing?
• Leadership debates email templates and social posts for a boil-water notice but has not decided which facts occupants must know. What should come first in the communication strategy?
• An urgent building evacuation is announced only through the monthly all-hands newsletter scheduled to publish tomorrow. What is wrong with this channel choice?
• Facilities sends a single daytime email about a hazardous material delivery route change and never confirms that night-shift teams saw it. What communication effectiveness issue does this create?
• A completed risk analysis recommends procedure changes, but results are withheld from the teams who must rewrite and follow those procedures. What communication duty is unmet?
• During a multi-hour service outage, a spokesperson improvises conflicting restoration timelines across social media replies. What should a communication strategy have provided?
• Routine slip-hazard reminders and rare active-assailant alerts both use identical 'ALL CAPS EMERGENCY' banners every time. What messaging problem does this create?
• A shelter-in-place drill notice goes out only in English even though a large share of the workforce has limited English proficiency. What audience-analysis gap does this show?
• Legal insists on a 48-hour review cycle before any warning can be posted about an icy visitor ramp already in use. What communication priority should override that delay?
• During a multi-hour outage, no owner is named for updating the public status page, so hours pass with stale 'investigating' text. What element was missing from the communication strategy?
• A facilities risk register heat map is pasted into public board minutes without likelihood, consequence, or mitigation context, and tenants panic about red cells. What should the risk communicator do next time?
• During a site evacuation drill, employees hear the assembly-point message, but contractors and visitors never receive it and gather in the wrong zone. What communication gap does this expose?
• After a tabletop exercise, lessons and control changes are filed in a binder, but frontline supervisors never hear what behaviors must change. What closing-the-loop action is missing?
• During an incident, SMS, radio, PA, and email each send contradictory instructions about whether to shelter or evacuate. What multi-channel communication principle was violated?
• Property managers discover a recurring elevator failure that could strand occupants, but they withhold notice from tenants "to avoid worry." What communication judgment is most appropriate?
• An incident notice template is used, but senders leave the "actions required of you" field blank and only describe what failed. What improvement best strengthens the message?
• Board risk packs list only technical residual-risk scores with no plain-language summary of what the scores mean for the organization. What adjustment fits a governance audience?
• An organization publishes an incident hotline number widely, yet nobody staffs the line after 5 p.m. when most after-hours events occur. What channel-capacity lesson applies?
• Rumors spread for hours on employee chat while official channels stay silent after a chemical odor event. What communication strategy response is most appropriate?
• A continuity tabletop drills only technical failover of systems and never rehearses who drafts, approves, or sends stakeholder messages. What gap should leaders close?
• A spill response procedure still lists cleanup steps for a solvent the plant discontinued three years ago, while the current chemical set differs. What maintenance action is required?
• Asked when lockout/tagout procedures were last checked for adequacy, supervisors cannot identify any review date, trigger, or owner. What practice is missing?
• Fire extinguisher types were upgraded site-wide, but ten-year veterans received training only at hire and never refreshed on the new equipment. What training-cycle fix is needed?
• After incidents, supervisors share oral tips in the break room, but controlled documentation never changes to match the new expected practice. What documentation principle is being ignored?
• Annual compliance monitoring consists of managers signing a binder affirming procedures were followed, with no observation of actual work practices. What monitoring improvement is most appropriate?
• The "emergency procedure" is a ninety-page manual that no one can navigate during a live alarm. What adequacy concern should procedure owners address?
• Two conflicting boiler-shutdown SOPs sit on the share drive, and operators cannot tell which version is current. What maintenance control is missing?
• After a near-miss, leadership tells staff to "be careful" but does not evaluate whether a procedure gap contributed. What evaluation trigger is being missed?
• Contractors on site follow an unlabeled printout for confined-space entry while employees use a different controlled PDF. What controlled-document practice should leadership enforce?
• A site faces predictable seasonal flooding, but the flooding annex was never attached to the main emergency procedure staff actually open during alarms. What completeness issue does this create?
• E-learning completion for extinguisher use is 100%, yet spot checks show staff using incorrect technique on the new units. What training-effectiveness adjustment is needed?
• The procedure library has annual review dates on documents, but no named owner is assigned to perform those reviews. What ownership fix is required?
• A new regulatory requirement affecting chemical labeling took effect eighteen months ago, yet related workplace procedures remain unchanged. What external-change practice was neglected?
• Pocket checklists used on the floor differ from the official controlled PDF, and nobody reconciles the two. What alignment action should procedure owners take?
• A new software workflow goes live for vendor access, but the access-revocation procedure still describes only the retired legacy system. What tech-change maintenance step was skipped?
• An internal audit of a city warehouse procedure checklist flags several missing supervisor signatures, then closes the finding without walking the floor. What should the risk manager insist the review also test?
• At a regional call center, the official ticket-escalation procedure takes about forty minutes for a task staff routinely finish in two minutes, so teams invent unofficial shortcuts. What does this pattern most clearly show about procedure adequacy?
• A county facilities team cancels its quarterly emergency-response drills repeatedly, saying it will resume “when things calm down.” What readiness principle is being violated?
• A manufacturing site keeps safety and shutdown procedures only in English, while the night shift is predominantly Spanish-speaking. What procedure-maintenance gap does this create?
• A nonprofit office restored its normal visitor SOP after the pandemic, but a temporary COVID-era screening rule remains posted at the lobby and conflicts with the current procedure. What maintenance action is most needed?
• After a clerk falls from a step ladder in a municipal office, coworkers discuss it as hallway gossip and nobody files an accident report. What should the risk manager reinforce?
• A professional-services firm’s medical-emergency “plan” is a sticky note that says “call someone,” with no assigned roles, AED location, or assembly point. What does a usable response plan need instead?
• A warehouse associate files a strain injury from lifting, the report is completed, and the lifting procedure remains unchanged. What is missing from the risk response?
• A corporate policy excludes near-misses from the incident reporting system so “only real injuries” are tracked. What is the primary risk-management flaw?
• An office manager dismisses trip hazards from power cords as “not real safety” compared with warehouse forklift risks. What should the risk manager emphasize?
• An incident report after a lobby fall blames only the injured visitor’s “carelessness” and omits wet flooring, missing caution signs, and lighting. What investigation quality problem does this illustrate?
• During a cardiac-event drill, AED cabinets are locked and nobody on shift has the key. What readiness failure does this expose?
• A mailroom logs several minor cut injuries over six months, but each case is closed in isolation and leadership never sees a trend. What analytical step is missing?
• After a violent visitor incident in a clinic waiting room, operations files an internal note but never coordinates follow-up with security or HR. What should the risk manager ensure next?
• Supervisors alter first-report timestamps so incidents appear filed within the internal SLA. What reporting integrity issue should the risk manager address?
• A contractor is injured on a host company’s site and is told to report only to the contractor’s employer, leaving the host with no record. What should the host’s risk program require?
• After a chemical spill response in a lab annex, the used spill kit is never restocked. What post-response maintenance step was skipped?
• Staff in an office kitchen never practiced grease-fire response and throw water on a cooking-oil fire. What preparedness gap does this reveal?
• An anonymous safety hotline exists, but submitted reports sit unread for months. What system failure should leadership correct?
• After repeated cuts from a sharp counter edge, corrective action is limited to “retrain everyone forever,” with no engineering look at the edge itself. What does effective corrective action prefer?
• An after-hours security guard does not know the incident escalation tree when a pipe burst floods a records room at night. What planning gap does this expose?
• Ergonomic complaints about poorly adjusted workstations are mocked until a recordable musculoskeletal injury appears. What early-intervention principle was ignored?
• After a flash-flood damages a basement records room, the organization restores operations but skips an after-action on salvage priorities. What learning step should the risk manager require?
• Shared printers with frayed power cords sit in a common area and remain unfixed because “nobody owns them.” What office-hazard governance fix is needed?
• Leadership asks staff to minimize filed incident counts so an upcoming safety award application looks stronger. What integrity principle should the risk manager defend?