What Is Risk Assessment? A Manufacturing Guide

Start with the objective and scope

Define what you need to protect: customer conformity, process continuity, delivery, capacity or another objective. Specify the process, site, product and time horizon. A risk description such as ‘quality problems’ is too broad to help a team choose a control.

A more useful description is: ‘Tool wear during the finishing operation could cause bore diameter to exceed tolerance, resulting in rework or customer escape.’ It describes the event and consequence without pretending that a numerical score proves the risk is understood.

A practical assessment workflow

Use the people who know the work: production, quality, maintenance, engineering and relevant suppliers. Separate facts from assumptions. Historical defects, downtime records, complaints and observations help the team challenge optimistic ratings.

• Define the objective, scope and rating criteria before scoring.
• Identify events and consequences, including less frequent but serious exposure.
• Record current controls and their actual coverage.
• Analyse likelihood and impact with supporting evidence.
• Evaluate the exposure against your organisation’s decision criteria.
• Assign treatment actions, owners and review dates, then verify effectiveness.

Choose the depth of analysis you need

A risk matrix helps a team compare broad risks using likelihood and impact. A risk register keeps the descriptions, controls and actions together. Process FMEA goes deeper into individual process functions, failure modes, effects, causes and prevention or detection controls.

These methods can support one another. A register may identify a machining operation that needs detailed PFMEA work. A single FMEA Action Priority calculation answers a narrower question about one supported S/O/D combination; it does not create the complete analysis.

• Compare Risk Matrix and FMEA
• Build a useful risk register

Worked example: dimensional drift in CNC machining

Consider a finishing operation with a history of dimensional drift late in tool life. For an illustrative workshop, the team assigns likelihood 4 and impact 4: 4 × 4 = 16, High in Qhubio’s generic model. The ratings are assumptions for this example, not universal values for CNC machining.

The response might combine tool-life limits, first-off approval, measurement-system checks and a reaction plan for drift. Assign an owner and record when effectiveness will be checked. A lower residual score is justified only when evidence supports the changed exposure, not merely because the actions have been listed.

• Understand initial and residual risk

What a score cannot tell you

The score is a prioritisation aid, not a measurement of expected loss or an automatic acceptance decision. An unusual but severe consequence may need escalation regardless of its position in the matrix. Apply relevant customer, legal and organisational requirements alongside the assessment.

Qhubio’s 5×5 bands are generic discussion criteria. They are not prescribed ISO 31000, ISO 9001 or IATF thresholds, and the tool does not certify compliance. Keep the rationale and evidence visible so another reviewer can understand the decision.