Fundamentals of Risk Management

Directive controls
Table 16.1 provides a brief description of the nature of directive controls. 
Organizations will be familiar with the directive controls, because staff will need
to be advised of the correct way of undertaking specific tasks. Where tasks involve
a level of risk, documented procedures, together with information, training and
instruction, can be seen as directive controls. Therefore, directive controls are likely 
to be in place for most risks, regardless of whether other types of controls also exist.
An example of directive controls is the requirement to wear personal protective 
equipment when undertaking potentially dangerous activities. Staff will need to be 
trained in the correct use of the equipment and a level of supervision will be required 
in order to ensure that it is used correctly.
The advantage of directive controls is that the risk control requirements can be 
explained during a normal training and instruction session provided for staff. How-
ever, directive controls, especially in relation to health and safety risks, represent a 
low level of control that may require constant supervision in order to ensure that the 
correct procedures are being followed.
Although directive controls on their own represent an insecure and unreliable 
method of risk control, they will always be a component in the overall approach
to risk control adopted by any organization. Developing systems, procedures and 
protocols are important for any organization. However, there is a danger that if
the developed procedures are not implemented in practice, the organization will be 
more exposed to allegations of poor risk control. Developing detailed risk control 
procedures is an indication by the organization that risks exist and need to be
managed. However, failing to implement the identified procedures will leave the
organization unable to defend itself by claiming that it was not aware of the risks.

---