Which ORM step involves putting controls into action?

The step that involves putting controls into action is implementing control. This phase of the Operational Risk Management (ORM) process focuses on the execution of the strategies and measures that have been identified to mitigate risks. During this step, specific actions are taken to reduce or eliminate the hazards that have been assessed, allowing the team to perform tasks more safely and effectively.

For example, if a potential hazard has been identified in a training scenario, the implementation of controls may include using proper personal protective equipment, modifying procedures, or scheduling more frequent breaks to reduce fatigue. This proactive approach ensures that the risks are managed effectively during operations.

By contrast, other steps in ORM, such as assessing hazards, making risk decisions, and supervising, play distinct roles in the overall process. Assessing hazards focuses on identifying and evaluating potential risks. Making risk decisions involves evaluating the acceptable levels of risk and determining which controls should be put in place. Supervising, on the other hand, ensures that the implemented controls are followed and remain effective over time. Each step is critical, but implementing control is specifically where the theoretical plans are put into practical action.