Department: Quality Assurance

Issue Date: 01.03.06 Subject

DOC. No. : AV/IM/ACH/002 Page No. : Page 1 of 11 Revision No. & Date : (00)-01.03.06

Risk Analysis. REVISIONS Revision Description Original Issue

Revisi Revis on No. ed Pages 00 0

Date of Revision 01.03.06

Prepared By Document Chemist

Approved By Management Representative

CLASSIFIED: Internal Use Only

Authorized by Factory Manager

Department: Quality Assurance

Issue Date: 01.03.06 Subject

DOC. No. : AV/IM/ACH/002 Page No. : Page 2 of 11 Revision No. & Date : (00)-01.03.06

Risk Analysis.

Asset Affected S No. Risk Event People, Infrastructure

Control measure L. Hood Impact Fire Extinguisher Automatically controlled 4 3 1 4 1 4 1 Good Relationship Good Relationship 3 3 2 1 2 2 4 4 4 5 4 4 5 3 3 4 5 3 4

Ris Mitigatio k n Vulnerability 4 4 2 5 2 4 2 3 3 3 2 2 3 3 2 4 2 2 2 2 4 4 1 5 1 5 4 4 1 5 2 2 2 2 2 4 1 2 1

1 Fire Electrical Fire- HSD,FO Boiler Blast 2 Earthquake 3 Flood 4 Drought 5 Bomb threats Etc 6 Social /Political Issue 7 Local community relation 8 Spurious product Glass Fragment 9 10 Product tampering 11 Quality of water supply

People, Infrastructure, product People, Infrastructure, product Product People, Infrastructure, product People, Infrastructure, product Production Product Product Product Product

Drought prone area, Average Rain Fall

Glass fragment control program Incoming water Quality monitoring Program Dedicated approved source Approved By Management Representative
CLASSIFIED: Internal Use Only

Prepared By Document Chemist

Authorized by Factory Manager

Department: Quality Assurance

Issue Date: 01.03.06 Subject

DOC. No. : AV/IM/ACH/002 Page No. : Page 3 of 11 Revision No. & Date : (00)-01.03.06

Risk Analysis. and supplier Controlled process

12 Production process Product failure 13 Transport Strike People, Production 14 Quality of raw material. Product 15 Regulatory Environment/ Production, Product change 16 Industrial / labour Production problems 17 Terrorist Act.-Attack on People, Infrastructure, facilities 18 Water Availability Product 19 Waste Disposal Product

1 3 1 4 3 1

5 3 4 4 3 5 5 5

2 3 2 4 3 2 5 5

5 4 5 3 4 1 2 3

1 2 1 4 2 2 5 4

Purchasing from approved supplier, Incoming monitoring of materials Compliance of regulatory requirement Alternate labour contractor

Maximize the efficiency

5 5

Corrective Action and preventive action plan is prepared for the Vulnerability of 5, 4 & 3 and work instructions are prepared for handling all the risk to the business. Likelihood Descriptions: Descriptor Descriptions

Prepared By Document Chemist

Approved By Management Representative

CLASSIFIED: Internal Use Only

Authorized by Factory Manager

Department: Quality Assurance

Issue Date: 01.03.06 Subject

DOC. No. : AV/IM/ACH/002 Page No. : Page 4 of 11 Revision No. & Date : (00)-01.03.06

Risk Analysis. The risk event is expected to occur in most circumstance and / or it is happening now.

Very High

High

The risk event probably occur in most circumstance. A direct, credible threat has been received and/or it has happened, or would have happened if not actively prevented, a number of time before. It has happened to similar companies. The conditions are very favorable for it to occur. The risk event will probably occur in most circumstance. A direct, credible threat has been received and/or it has happened, or would have happened if not actively prevented, a number of time before. It has happened to similar companies. The conditions are very favorable for it to occur. The risk event might occur at some time but generally only under specific circumstance. Indirect threat have been received. It has happened to other similar companies but under specific circumstance. The condition could be favorable for it to occur. The risk event could occur at some time but is unlikely No direct credible threat have been received. It may have happened to other similar companies but only under very specific circumstances. Conditions are not favorable for it to occur. Approved By Management Representative
CLASSIFIED: Internal Use Only

High

Medium

Low

Prepared By Document Chemist

Authorized by Factory Manager

Department: Quality Assurance

Issue Date: 01.03.06 Subject

DOC. No. : AV/IM/ACH/002 Page No. : Page 5 of 11 Revision No. & Date : (00)-01.03.06

Risk Analysis.

Very Low

* The risk event is very unlikely to occur, exceptional

Descriptor Critical

High

Medium

Impact Descriptors Description Death of person Very significant financial loss Very significant harm to image and reputations that leads to significant and sustained fall in share price and significant loss of sales over the long term. Long term loss of competitive advantage Very significant, sustained negative international media coverage. Extensive injuries to people. Very significant financial loss. Major embarrassment / harm to reputation leading to significant fall in share price and loss of sales over medium term. Significant loss of competitive advantage. Negative international media coverage. Some injuries to people requiring medical treatment. Significant financial loss. Moderate embarrassment/ harm to reputation leading to significant fall in share price and loss of sales Prepared By Document Chemist Approved By Management Representative
CLASSIFIED: Internal Use Only

Authorized by Factory Manager

Department: Quality Assurance

Issue Date: 01.03.06 Subject

DOC. No. : AV/IM/ACH/002 Page No. : Page 6 of 11 Revision No. & Date : (00)-01.03.06

Risk Analysis. over medium term Possibility of some minor loss of competitive advantage. Negative media coverage at a national level.

Descriptor Critical

High

Medium

Impact Descriptors Description Death of person Very significant financial loss Very significant harm to image and reputations that leads to significant and sustained fall in share price and significant loss of sales over the long term. Long term loss of competitive advantage Very significant, sustained negative international media coverage. Extensive injuries to people. Very significant financial loss. Major embarrassment / harm to reputation leading to significant fall in share price and loss of sales over medium term. Significant loss of competitive advantage. Negative international media coverage. Some injuries to people requiring medical treatment. Significant financial loss. Moderate embarrassment/ harm to reputation leading to significant fall in share price and loss of sales over medium term Prepared By Document Chemist Approved By Management Representative
CLASSIFIED: Internal Use Only

Authorized by Factory Manager

Department: Quality Assurance

Issue Date: 01.03.06 Subject

DOC. No. : AV/IM/ACH/002 Page No. : Page 7 of 11 Revision No. & Date : (00)-01.03.06

Risk Analysis. Possibility of some minor loss of competitive advantage. Negative media coverage at a national level.

Risk Matrix
IMPACT LIKEHOOD Very High High Medium Low Very Low

Very Low Very Low Very Low Very Low Very Low Very Low

Low Low Low Low Very Low Very Low

Medium Medium Medium Medium Low Low Mitigation Descriptors

High High High High Medium Low

Critical Critical Critical High Medium Low

Descriptor Very Low

Low

Medium

Description There is very little awareness of the risk associated with this risk event There are no written or tested mitigation plans in place. No or very few mitigation elements have been implemented. There is no-one specifically accountable for managing this risk. there is little awareness of the risk associated with this risk event. There may be some written mitigation plans but these have not been implemented and tested. Few mitigation elements ( a minority) have been implemented. There is no one specifically accountable for managing this risk There is some awareness of the risk associated with this risk event but no formal program to ensure that this level of Prepared By Document Chemist Approved By Management Representative
CLASSIFIED: Internal Use Only

Authorized by Factory Manager

Department: Quality Assurance

Issue Date: 01.03.06 Subject

DOC. No. : AV/IM/ACH/002 Page No. : Page 8 of 11 Revision No. & Date : (00)-01.03.06

Risk Analysis. awareness is maintained. There are written mitigation plans that have been implemented but these may not have all been tested. Over half of the mitigation elements are in place. There may be some signal detectors in place but these are not continuously monitored. There is someone accountable for managing this risk but that person does not have all the expertise to do this effectively. There is a high level of awareness of the risk associated with this risk event and staff are given regular (every sixtwelve months) updates. There are written mitigation plan in place and these plans have been integrated into standard operating procedures for the business. These plans have been tested in the last six months. All of the mitigation elements are in place. There are documented signal detectors in place and these are monitored continuously. A manger is specifically accountable for managing this risk and this is listed in that persons performance plan. there is high degree of understanding of the risk associated with this risk event and staff are given regular briefing and updates ( every six months) There are written mitigation plan in place and these have been fully integrated into the standard operating procedures of the business. Those responsible for the program have been certified. These plans are regularly reviewed tested and/or audited. Results and learning are shared with other business units. These plans represent best practice in this field. All of the mitigation elements are in place, fully implemented and undergo regular review and refinement. There are fully documented signal detectors in place and these detectors are continuously monitored. A manger is specially accountable for managing this risk and this is listed in that persons performance plan.

High

Very High

Prepared By Document Chemist

Approved By Management Representative

CLASSIFIED: Internal Use Only

Authorized by Factory Manager

Department: Quality Assurance

Issue Date: 01.03.06 Subject

DOC. No. : AV/IM/ACH/002 Page No. : Page 9 of 11 Revision No. & Date : (00)-01.03.06

Risk Analysis. Vulnerability Matrix

MITIGATION LIKEHOOD

RISK

Very Low
Low Medium High Very High

Very Low Very Low Very Low Very Low

Very Low Very Low

Low Low Low Low

Very Low Very Low

Medium High Medium Medium

Low Very Low

High Critical High High

Low Low

Critical Critical Critical High

Medium Low

Taking Action Risk Level

Action Needed

Critical

Prepared By

High

Urgent attention at senior management level is required to put in place a written plan, set of procedure or process and/or changes made to management practices to protect the assets A senior manger should be given responsibility for addressing this as a priority. Strategic security should be consulted to receive additional assistance and to validate assessment and proposed protection measures. Where procedures already exist, they must be tested at least annually. This incident should be considered a key potential incident in the division IMCR plan. There is need to develop an employee training/ awareness program. Urgent attention at management level is required to put in place a written plan, set of procedures or process and/ or changes made to management practice to protect the assets A manger should be given responsibility for addressing this as a priority. Where the impact was assessed as catastrophic or major, strategic security should be consulted to receive additional assistance and to validate assessment and proposed protection measures. Approved By Management Representative
CLASSIFIED: Internal Use Only

Authorized by Factory Manager

Document Chemist

Department: Quality Assurance

Issue Date: 01.03.06 Subject

DOC. No. : AV/IM/ACH/002 Page No. : Page 10 of 11 Revision No. & Date : (00)-01.03.06

Risk Analysis. Where procedures already exist in regard to this incident , they must be tested at least annually. This incident should be considered a key potential incident in the division IMCR plan. There is a need to develop an employee training/awareness program in regard to this incident. Attention at management level is required to put in place a written plan, set of procedures or process and/or changes made to management practices to protect the assets. Where the impact was assessed as catastrophic or major, strategic security should be consulted to receive additional assistance and to validate the assessment and proposed protection measures. Where procedures already exist in regard to this incident, they must be tested regularly. This incident should be considered as a potential incident in the division IMCR plan. There may a need to develop an employee training/awareness program in regard to this incident. Existing plans should be reviewed to ensure appropriate measures are in place to protect the assets. Where the impact was assessed as major, contingency plans should exist to ensure appropriate action is taken in the event the incident occurs. Existing plans should be reviewed to ensure appropriate measures are in place to protect the asset.

Moderate

Low

Very Low

Prepared By Document Chemist

Approved By Management Representative

CLASSIFIED: Internal Use Only

Authorized by Factory Manager

Department: Quality Assurance

Issue Date: 01.03.06 Subject

DOC. No. : AV/IM/ACH/002 Page No. : Page 11 of 11 Revision No. & Date : (00)-01.03.06

Risk Analysis.

Prepared By Document Chemist

Approved By Management Representative

CLASSIFIED: Internal Use Only

Authorized by Factory Manager