Risk can’t be reduced unless it’s identified and mitigation plans are put in place. There will always be some risks that can’t be anticipated or prepared for, but in most organizations, there are many EHS-related risks that can be easily identified including: › Financial risks › Operational risk › Security risks › Risk of harm to employees, communities, and the environment Compiling your known risks, assessing the potential impacts, and estimating probabilities of occurrence enables you to prioritize the risks that are most likely or most costly so you can allocate resources to mitigating the largest risks in your organization. Meghan: For many companies, it’s a struggle to proactively identify issues and challenges before they present risks to the environment, employee health and safety, and the business. In addition to following the ISO 14001 framework like Christine suggested, another way to reduce both EHS and business risk is to leverage technology like EHS software as it enables process automation, accountability, and greater insight into data and activities. For example, if your company uses integrated solutions for the following activities, it’s possible to assign compliance activities to accountable personnel, facilitate documentation and completion of the activity, and assess the effectiveness of your programs all in one place: › Compliance Calendar and Actions Tracking (preventive, corrective, or other actions) › Audits and Inspections › Incident Management and Root Cause Analysis › Management of Change (MOC) › EHS Risk Assessments › Behavioral-Based EHS and Near-Miss/ Concern Reporting › Training and Competency Management › Environmental Data Management (emissions, quantities, limits, thresholds, etc.) 6 © CORITY SOFTWARE INC.

Ask the EHSQ Expert - Page 6 Ask the EHSQ Expert Page 5 Page 7