HSE ERM Control Ontology
type: Ontology
abstract: This ontology defines the sets of owl classes to be used to instantiate Controls
contributor: Junli Liang
contributor: Nick McDonald
contributor: Rob Brennan
created: 2024-05-15
modified: 2024-05-15
publisher: openark.adaptcentre.ie
rights: https://creativecommons.org/licenses/by/4.0/
source: HSE ERM Control Ontology
preferred namespace prefix: hseERM
version info: 0.1
introduction: This ontology defines the sets of owl classes to be used to instantiate Controls

Accept
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
definition: Accept the level of risk based on existing information e.g. pursue the opportunity.

Action. owner
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
definition: in order to monitor the action one person must have lead responsibility.

Actions
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
definition: Actions are a future measure that will maintain and/or modify a risk. In the HSE, an action is a future measure to further reduce either the likelihood or impact of a risk.

Avoid/terminate
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
definition: Avoid/Terminate it completely e.g. do not proceed with the planned activity.

Control owner
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy

Controls
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
definition: Controls are measures that maintain and/or modify risk. In the HSE, a control is a measure that is in place, is working effectively and operating to reduce either the likelihood or impact of a risk.

Corrective controls
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
subclass of: Reactive controls
definition: Corrective controls are designed to correct errors or undesirable events which have occurred and will prevent further occurrences.

Current risk
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
definition: Current risk is the level of risk after both the existing controls and actions are considered at the point in time the risk is being assessed

Detective controls
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
subclass of: Reactive controls
definition: Detective controls are designed to search for and identify errors or undesirable events after they have occurred so that corrective actions can be taken.

Directive controls
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
subclass of: Proactive controls
definition: Directive controls give direction. These can be, for example, statutory obligations, regulatory standards including professional standards, or other organisational requirements or instructions, many of which are converted into policies, procedures, circulars, standard operating procedures and training.

External Assurance providers
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
definition: assurance from external independent assurance providers such as Regulators.

First line of defence
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
definition: the way risks are managed and controlled day-to-day. Assurance comes directly from those responsible for delivering specific objectives or processes. Its value comes from those who know the business, culture and day-to-day challenges.

Inherent risk
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
definition: Inherent risk in the HSE is the level of risk before consideration of control and/or action measures.

Initial risk
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
definition: Initial risk is the level of risk after existing controls are considered when the risk was originally assessed.

Preventative controls
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
subclass of: Proactive controls
definition: Preventative controls are controls designed to stop, discourage, pre-empt or limit the possibility of an undesirable event before it occurs.

Proactive controls
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
definition: Proactive controls are put in place before the risk materialises

Residual risk
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
definition: Residual risk in the HSE is the level of risk remaining after consideration of existing controls.

Reactive controls
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
definition: Reactive controlsfocus on what happens after the risk occurs or which identify weaknesses in our current controls

Reduce
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
definition: Reduce the risk with further actions.

Risk treatment
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
definition: Risk treatment is the process to modify risk.

Second line of defence
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
definition: the way the organisation oversees the control framework so that it operates effectively. The assurance provided is separate from those responsible for delivery, but not independent of the management chain, such as risk and compliance functions.

Target risk
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
definition: Target risk in the HSE is the planned level of risk after consideration of both control and action measures.

Third line of defence
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
definition: objective and independent assurance, e.g. internal audit, providing reasonable (not absolute) assurance of the overall effectiveness of governance, risk management and controls.

Transfer the risk
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
definition: Transfer the risk e.g. to an identified individual or unit, that has been communicated to and notified, where many of the actions identified as required to mitigate are better managed and are within their span of control.

Treatmant plan
type: Class
created: 2024-05-15
creator: Nick McDonald
source: hse-integrated-risk-management-policy
definition: treatment plans detail both action and effective control plans, to minimise the likelihood and impact of the identified risk.