A Risk Register for Branch and Mobile Services of the Glasgow Libraries - Case Study Example

A Risk Register for Branch and Mobile Services of the Glasgow Libraries Table of Contents Introduction 2 Defining and Identifying Risks 2 Table 1: General Risks by Category 3 Assessing Risks 3 Table 2: Risk Probability Values 4 Table 3: Risk Impact Guide 4 Table 4: Risk Profile Matrix 5 Detailed Risk Analysis for the Library of Glasgow 5 Conclusion 10 Works Cited 11 Appendix: Summary Risk Register 12 Introduction The objective of this report is to present a risk register for the branch library facilities and mobile services of the Glasgow Library. The particular subjects for which this risk register is developed are 36 branch libraries (not including the main Mitchell Library), the main location and eight branches of the Sandyford Library, for which responsibility is shared with the NHS, and the delivery services program of library materials to residents of care homes and other sheltered housing. (Glasgow City Council, 2009) This report is organised as follows: First, an explanation of what defines a risk and how risks are assessed on the basis of their likelihood of occurring and impact on the library organisation is given. Second, a detailed listing of twenty potential risks to the Glasgow Library’s branch and mobile services is given, with the risks ranked from highest to lowest. This section of the report constitutes one of two parts of a formal risk register, with the second being a summary table of the ranked risks for easy reference and monitoring. (Secretariat, U. of Cambridge, 2008) The summary table is presented in the conclusion of the report. Defining & Identifying Risks The definition of what constitutes a risk is almost always contextual, but always includes the elements of uncertainty and impact. (Gibb, 2006: 30) Although it is not necessarily always true, risk and impact in the connotation of risk management and this report is conventionally negative; they are things to be avoided if possible, and otherwise anticipated and mitigated. As a generalisation, a risk can be defined as some event or circumstance not part of the normal activity of the organisation that causes a loss of some kind. What constitutes not normal and loss are the contextual parts of the definition, and will mean different things to different organisations. Since the definition of a risk is contextual to the organisation or activity, in order to identify potential risks it is helpful to consider broad categories that represent sources of risks, and then to list as many risks as can be conceived under their appropriate categories. Sources of risks can be divided into natural and artificial causes. Natural causes can be further divided into organic and inorganic causes, and artificial causes can be divided into intentional and unintentional causes. (Gibb, 2006: 32-33) Once the brainstorming activity of listing all possible risks is completed, some of them are likely to be easily discounted as either being patently ridiculous, so improbable as to not warrant further consideration, or so far beyond the organisation’s ability to anticipate or control that further attention would be pointless. For example, the Sun’s exhausting of its fuel and exploding in a supernova, which astronomers assure us will happen someday in the very distant future, is technically a risk that would impact the Library of Glasgow – assuming the Library is still in existence – but there is not much point in trying to develop a mitigation or recovery plan for a risk that would result in the entire planet being vaporised. Once the practically impossible risks are eliminated, those that remain can be subjected to the process of assessment described in the following section. Joint (2007) points out a couple of important characteristics of risks associated with libraries that help to guide the development of a list of risks that should be studied. The traditional functions of a library are low-risk; the normal processes and activities are largely series of discrete steps, no single one of which represents a serious impact on the overall organisation or the people in it. (Joint, 2007: 546) Most risks to the library come from external sources and can be easily predicted, and are thus said to be homogenous. (Ibid.) The addition of digital resources, however, and in the particular case of the Glasgow Library, the provision of mobile services add elements of unpredictability to the risks. Even though the risks remain relatively low overall, the library becomes more susceptible to their impact because the risks are now heterogeneous. (Ibid.) Table 1: General Risks by Category NATURAL ARTIFICIAL Organic Inorganic Intentional Unintentional Pest (insects/vermin) Infestation Infectious Disease Outbreak Mould/Bacteria Contamination Flood Earthquake Tornado/Violent Wind Snowstorm Landslide/Subsidence Volcanic Eruption Meteor Tsunami Theft of Materials Vandalism Arson Fire Bomb Attack Physical Attack on Staff/Patrons IT System Hack Virus/DOS Attack Robbery/Carjacking Theft of Equipment/Furnishings Labour Action/Strike Resignation/Termination of Staff Political Change Loss of Funding Regulatory Change Legal Actions Contract Disputes Accidental Fire Building Collapse Accidental Injury to Staff/Patrons Road Accident Water Damage from Pipe Failure Water/Smoke Damage from fire in nearby building Area Evacuation due to emergency (Fire/chemical spill) Police Activity unrelated to library (evacuation/access restricted) Building equipment failure (HVAC/plumbing/electric) IT system Failure Training/procedure shortcomings Loss of suppliers (Sources: Longley, 2005; Natarajan, 2005; Gibb, 2006) Assessing Risks Once the list of all possible risks is developed, each risk must be assessed on the basis of its actually occurring, and the harm to the organisation that it is likely to cause should it occur. While experts in particular fields, such as fire and building inspectors, can help identify specific risks, it is important that the risks be considered in the context of the library. For example, the Fire Inspector will view risks and give advice based on the requirements for public safety, but most likely without regard to the impact of the fire on the materials in the library, or on the staff’s jobs. (Eden & Matthews, 1997: 47) Determining the likelihood of a risk occurring is somewhat subjective, requiring a “best guess” as to its probability. Knowledge of the environment and past events can help guide this part of the assessment. For example, is the library located in an area with identifiable environmental risks? Have any of the risks or similar situations occurred in the past, and what were their outcomes? Once the likelihood has been assessed, a numerical value of 1 to 5 can be assigned to it, with 1 representing a low probability and 5 representing the highest probability. In the risk management program used by the University of Cambridge, the values and their corresponding likelihood of occurrence are defined as shown in the following table: Table 2: Risk Probability Values VALUE LIKELIHOOD 1 – Very Low 2% likely to happen 2 – Low 5% likely to happen 3 – Moderate 10% likely to happen 4 – High 20% likely to happen 5 – Very High 50% likely to happen (Source: Secretariat, U. of Cambridge, 2008) Put another way, a risk that is deemed “moderate” has a one-in-ten chance of occurring. This can be a helpful way to think about risks, especially if there is some record of similar occurrences in the past; the frequency with which those happened will give a very objective likelihood value. The impacts of risks also can be rated according to a 1-5 scale. Each risk will have its own specific impacts, but some generalisation is possible for the sake of developing a scale of severity: Table 3: Risk Impact Guide SEVERITY POSSIBLE CONSEQUENCES 1 – Insignificant Slight or No Impact 2 – Minor Little to no financial loss No regulatory consequences Little to no adverse publicity Minor reversible injury or damage 3 – Moderate Some short-term financial loss Limited regulatory consequences Short-term, local adverse publicity Major reversible injury or damage 4 – Serious Financial loss affecting an entire fiscal year Cost-cutting or savings actions needed to break-even in short to medium term Significant regulatory consequences Adverse publicity on a regional or national level Irreversible death, injury, or damage 5 – Very Serious Financial loss affecting consecutive fiscal years Comprehensive regulatory consequences and/or sanction Sustained adverse publicity in the national media Partial or complete closure of library Multiple irreversible injuries, deaths, or catastrophic loss (Source: Secretariat, U. of Cambridge, 2008) Once the value for the severity of the risk impacts is determined, the two values are multiplied to produce an overall “risk profile”. (Gibb, 2006) The values are usually represented in a table such as the one below; figures in red represent values that are ‘unacceptable’ risks, yellow represents ‘moderate-to-serious’ risks, and green represents ‘minor-to-moderate’ risks: Table 4: Risk Profile Matrix SEVERITY LIKELIHOOD 1 2 3 4 5 5 5 10 15 20 25 4 4 8 12 16 20 3 3 6 9 12 15 2 2 4 6 8 10 1 1 2 3 4 5 (Sources: Gibb, 2006; Secretariat, U. of Cambridge, 2008) Equipped with these tools, it is now possible to develop a risk register for the Library of Glasgow’s branch and mobile services. Detailed Risk Analysis for the Library of Glasgow In this section, 20 potential threats facing the Library of Glasgow’s branch and mobile services are described in detail, in descending order of risk profile value. These are then summarised in a pro forma risk register table in the concluding section of the report. 1. Physical Attack on Staff/Patrons: This is a problem that unfortunately seems to be all too frequent in libraries, and can come from a variety of sources. Unruly youths have been identified as a problem by up to 40% of librarians in the UK (Farrugia, 2002: 313), but other visitors – irate customers or mentally-ill patrons – can pose threats as well, due to the library’s nature as an informal and inviting public place. (McGrath & Goulding, 1996) These threats can range from verbal abuse up to physical assaults or deliberate destruction of library facilities or materials. Apart from the costs of legal action, mitigating damage, and compensating injuries that can be incurred as a result of a physical attack, there is also a likelihood of negative publicity for the library regardless of its liability. (Holt, 2007) Depending on the extent of the damage or injuries, there could also be significant regulatory consequences. Risk Probability: 4 – High Risk Impact: 4 – Serious Risk Profile: 16 2. Road Accident: Because the library offers mobile services, the likelihood that a library vehicle will be involved in a road accident is very great. It is perhaps even more significant because the mobile services are operated during normal daytime business hours, when traffic on the roadways is highest. Potential impacts are serious and include loss or damage to library vehicles and their contents; loss or damage of other drivers’ vehicles and their contents; potentially serious injuries or death for library personnel, other vehicle occupants, or bystanders; insurance, medical, and legal compensation costs; negative publicity for the library; and interruption of normal mobile service activities. Risk Probability: 4 – High Risk Impact: 4 – Serious Risk Profile: 16 3. Infectious Disease Outbreak: While the A/H1N1 or “swine flu” appears to be a relatively mild disease, it and possible future outbreaks of more serious illnesses present considerable risks to the library. A/H1N1 is said to affect those with other illnesses or weakened physical conditions more severely than healthy people, and this is a serious concern for the library; many of the library’s patrons are children, and the mobile services serve a large number of elderly and physically disabled citizens. If the A/H1N1 or any future outbreak becomes serious enough, a suspension of mobile services and closure of library facilities to prevent people from gathering are likely impacts, along with the secondary impacts of temporary unemployment for the staff and loss of income from paid library services. Risk Probability: 5 – Very High Risk Impact: 3 – Moderate Risk Profile: 15 4. Computer Virus/Network DOS (Denial-of-Service) Attack: Networked library systems with relatively free public access to the Internet are potentially at very great risk for such attacks, which take the form of either damaging software code or an overwhelming number of system access requests; both have the immediate result of preventing normal use of the system. In most cases, the most serious impacts will be loss of the system for staff and patron use while repairs are being made, plus the costs associated for technical assistance. In worse cases, permanent damage to digital resources and collections could occur, with correspondingly higher costs. Risk Probability: 5 – Very High Risk Impact: 3 – Moderate Risk Profile: 15 5. Fire: The library is at risk of fire in several different ways. Library facilities by their nature contain a large amount of inflammable materials, making the risk of even a small fire very great. Library staff can be properly trained in responding to a fire emergency, but patrons are unlikely to be familiar with safety procedures, making their protection more difficult. Although library facilities are inspected and subject to fire regulations they are in some cases connected to or within mixed-use buildings, making their fire safety at least partially-dependent on the soundness of surrounding structures. The materials provided by the mobile services are also subject to the fire risk of the clients’ buildings where the materials are used. The most obvious impacts from a fire include total or partial loss of library facilities, materials, equipment, and other resources; potential serious injury or death of staff or patrons; collateral damage to nearby structures and businesses; legal actions; regulatory investigation and possible consequences; and adverse publicity. Risk Probability: 3 – Moderate Risk Impact: 5 – Very Serious Risk Profile: 15 6. IT System Hack: A deliberate action to access the library’s IT system networks is one of the more serious risks associated with the modern digital character of libraries, and has a potentially greater impact than unintentional human error, technical difficulties, or virus/DOS attacks. (Kelly, et al., 2009) The system could be damaged by a hacker, sensitive information – such as personal employment information about the staff or library business records – could be stolen, or digital repositories could be damaged or destroyed. Loss of the network for any period of time needed to repair and re-secure the system will mean a loss of usability for patrons and cause disruptions in library operations, and mitigation costs could be considerable. If the hacking involves something particularly news-worthy such as a loss of confidential employee data or library records, adverse publicity is also likely. Risk Probability: 3 – Moderate Risk Impact: 4 – High Risk Profile: 12 7. Theft of Materials: This could occur in a number of different ways, including patrons’ failing to return borrowed materials, actual pilfering from library facilities, or as a consequence of another problem, such as if a library vehicle containing materials is stolen. The library would incur unforeseen costs for legal services in prosecuting offenders and recovering stolen material, or replacing stolen materials if no suspects are caught. Some materials may be irreplaceable, which would lower the value of the library as a whole. While materials are missing, the value to patrons of the library is reduced, and could result in fewer visitors to the library. Risk Probability: 4 – High Risk Impact: 3 – Moderate Risk Profile: 12 8. Vandalism: This can take many forms, including damage to buildings or facilities, damage to library vehicles, and damage or destruction of library materials. Depending on the nature of the vandalism, buildings, furnishings, equipment, or vehicles could be damaged in such a way as to pose a risk of injury to staff or patrons. The library will incur costs for mitigation of the damage, either in the form of repairs, replacement, compensation for injuries, or some combination of those; additional costs would be incurred for legal proceedings against suspects. As with theft, there is some risk of regulatory consequences in the case of vandalism, possibly costing time and resources to review and modify security procedures and training. Risk Probability: 4 – High Risk Impact: 3 – Moderate Risk Profile: 12 9. Loss of Funding: A loss or significant reduction in funding for the library would have numerous negative impacts. Library services would be reduced, and closure of some facilities might be made. A number of staff would be made redundant as well, and the library’s ability to maintain and add to its material collections would be severely limited if not curtailed entirely. The likelihood of this risk is somewhat increased at the present time, due to the ongoing worldwide economic recession. Risk Probability: 2 – Low Risk Impact: 5 – Very Serious Risk Profile: 10 10. Snowstorm: Snow is a part of life in wintertime Glasgow, and very strong snowstorms are almost considered normal. Heavy snowfall poses the risks of library services being interrupted due to power failures or the inability of the staff to report to work. Mobile services are more at risk due to the dangers of driving in snowy conditions, and would likely be suspended with greater frequency for safety reasons. There is a minor risk to buildings and contents from circumstances associated with heavy snowfall, such as burst water pipes or roof damage. Risk Probability: 5 – Very High Risk Impact: 2 – Minor Risk Profile: 10 11. Accidental Injury to Staff/Patrons: Apart from this risk as it is associated with other risks such as physical assault, fire, or natural disasters, injuries could occur from a variety of other reasons such as slip & falls, poor work habits in doing physical tasks (lifting & carrying), or even injuries associated with computer use such as eyestrain or carpal tunnel syndrome. Impacts associated with this risk are mainly financial and include compensation for injured persons, insurance costs, and possible damages from legal actions. If the injury is to a staff member, there would be at least a temporary loss of trained personnel with a corresponding reduction in the level of service the library is able to provide. Negative publicity and regulatory consequences may also result, depending on the circumstances and nature of the injury. Risk Probability: 2 – Low Risk Impact: 4 – Serious Risk Profile: 8 12. IT System Failure: Failure of library IT resources due to hardware breakdown or obsolescence would have a serious impact on the abilities of the library to deliver services and conduct normal operations. Important data and digital resources could be damaged or lost as well, and considerable costs would result for repairs and upgrades. Risk Probability: 2 – Low Risk Impact: 4 – Serious Risk Profile: 8 13. Water or Smoke Damage from Fire in Nearby Building: Unlike the risk associated with a fire in a library facility, the risk from collateral damage from a nearby building is largely beyond the library’s ability to anticipate or mitigate; all the library can do is to ascertain whether or not neighbouring buildings comply with appropriate fire and safety regulations. Smoke and water from a nearby fire can heavily damage library buildings and materials, resulting in significant costs for repairs and recovery, as well as reduction in services while the facility is affected. There are also health risks, which might not be immediately apparent, for library staff in the clean-up and repair of smoke- and water-damaged facilities and materials. (Matthews & Eden, 1996: 34) Risk Probability: 2 – Low Risk Impact: 4 – Serious Risk Profile: 8 14. Robbery/Carjacking: Library staff and vehicles operating as part of the mobile services could be vulnerable to robbery or “carjacking”, since they necessarily operate in public areas beyond the reach of most library security coverage. Potential impacts include loss or damage to library vehicles and the materials and equipment they are transporting, injury to library staff (at a minimum, stress and anxiety from the incident), legal costs, and some negative publicity. Risk Probability: 2 – Low Risk Impact: 4 – Serious Risk Profile: 8 15. Building Equipment Failure (Ventilation/Electrical/Plumbing etc.): A failure of any of the physical equipment in a library facility, such as the heating or air conditioning systems, the electrical systems, or plumbing systems would result, at a minimum, in short-term increased costs for repairs, as well as render the affected facility partially or completely out of service for a period of time. Serious failures could lead to other problems, such as a fire, or in the case of a serious water leak, flooding damage to the building and possible damage to materials. Risk Probability: 3 – Moderate Risk Impact: 2 – Minor Risk Profile: 6 16. Tornado/Violent Wind: Strong storms with damaging winds are fortunately not common around Glasgow, but they do occur occasionally. These could cause physical damage of any degree of severity to library facilities, and cause damage to IT systems and building mechanical equipment due to power losses. Books and other library resources could be damaged as well, including those items in other places because of the mobile services program. Library staff and patrons are also at risk of injury; mobile services personnel who happen to be in transit at the time of the storm are particularly vulnerable. Risk Probability: 2 – Low Risk Impact: 3 – Moderate Risk Profile: 6 17. Resignation/Termination of Staff: Regardless of the reason behind the departure of a staff member – which may represent an entirely separate risk – the impact will be increased costs associated with hiring and training a replacement, and a temporary reduction in the level of service the library is able to provide its patrons. Depending on the reason for the departure, there could be additional costs and regulatory consequences, for example, if the staff member’s release from employment is deemed to be wrongful. In these cases, negative publicity would most likely also occur. Fortunately, human resource management is a key priority throughout all British libraries (British Library Board, n.d.) and so many of the potential problems have already been anticipated, but unforeseen situations are always possible. Risk Probability: 5 – Very High Risk Impact: 1 – Insignificant Risk Profile: 5 18. Loss of Suppliers: Economic conditions have affected many businesses, and there is an increased risk that suppliers to the library may be unable to continue to provide materials and supplies. The impacts of this are increased costs in money and effort to find replacement suppliers, and a possible temporary reduction in some library services due to the lack of suppliers. Risk Probability: 2 – Low Risk Impact: 2 – Minor Risk Profile: 4 19. Earthquake: While the UK is not considered a highly-active seismic region, damaging earthquakes have occurred throughout the country in the past, and will very likely occur again in the future. The city of Glasgow lies not too far away from the largest seismic fault in the British Isles, the Great Glen Fault, and is moderately at risk of a significant earthquake. The British Geological Service estimates the probability of a magnitude 5.6 or higher earthquake – sufficient to cause damage to buildings and contents – occurring somewhere in the UK at once in every 100 years. (BGS, 2003) Apart from the potential damage to structures and injuries or deaths from the earthquake itself, there are associated risks of fire and/or water damage occurring after the earthquake. Risk Probability: 1 – Very Low Risk Impact: 4 – Serious Risk Profile: 4 20. Gaps in Staff Training/Operations Procedures: Oversights in training or developing procedures for library staff could potentially result in poor or inadequate responses to a problem, making the situation worse. For example, staff not properly trained in the handling of unruly customers might be at greater risk of being injured. In another example, staff members who have not been instructed in the proper handling of damaged materials might cause further damage while attempting to clean up and recover from an emergency such as a fire or flood. (Matthews & Eden, 1996) The most significant potential impacts of inadequate training are legal liability, adverse publicity, and possible regulatory consequences. Risk Probability: 1 – Very Low Risk Impact: 3 – Moderate Risk Profile: 3 Conclusion The logical next steps after the completion of this risk register – which is presented in summary form in the Appendix – would be to determine the responsible parties for monitoring and mitigating the different risks and to develop a mitigation and response plan. At that point, the risk that remains after all possible mitigation actions have been taken becomes the residual risk. (Gibb, 2006, and Secretariat, U. of Cambridge, 2008) The objective of the risk mitigation plan should be to reduce all unacceptable “red” risks to at least the “yellow” level, and to attempt to reduce all moderate “yellow” risks to the minor “green” level. Works Cited British Geological Survey. (2003) Seismicity and earthquake hazard in the UK [Internet], 25 June 2003. Available from: The British Library Board. (n.d.) Risk Management in the British Library [Internet]. Available from: Eden, Paul, and Matthews, Graham. (1997) Disaster management in libraries. Facilities, 15(1/2): 42-49. Available from: Farrugia, Sarah. (2002) A dangerous occupation? Violence in public libraries. New Library World, 103(9): 309-319. Available from: Gibb, Forbes. (2006) Service Management. Glasgow: University of Strathclyde. Glasgow City Council. (2009) More About Glasgow Libraries [Internet], updated 9 June 2009. Available from: Holt, Glen. (2007) Dollars and sense in library crises. The Bottom Line: Managing Library Finances, 20(4): 148-152. Available from: Joint, Nicholas. (2007) Applying general risk management principles to library administration. Library Review, 56(7): 543-551. Kelly, Brian, Bevan, Paul, Akerman, Richard, Alcock, Jo, and Fraser, Jodie. (2009) Library 2.0: balancing the risks and benefits to maximise the dividends. Program: electronic library and information systems, 43(3): 311-327. Available from: Longley, Paul. (2005) Library risk management [Internet], November 2005. Australian Library and Information Association (ALIA). Available from: Matthews, Graham, and Eden, Paul. (1996) Disaster management training in libraries. Library Review, 45(1): 30-38. Available from: McGrath, Hannah, and Goulding, Anne. (1996) Part of the job: violence in public libraries. New Library World, 97(3): 4-13. Available from: Natarajan, M. (2005) Risk Management: Its Implication for Libraries and Information Centres [Internet/book chapter], November 2005. Available from: Secretariat, University of Cambridge. (2008) Risk Management Documentation [Internet]. Available from: < http://www.admin.cam.ac.uk/offices/secretariat/risk/toolkit/> Risk #1 Physical Attack on Staff/Patrons Risk Probability: 4 – High Risk Impact: 4 – Serious Risk Profile: 16 Injury to staff or patrons Legal consequences Regulatory consequences Negative publicity Appendix: Summary Risk Register (adapted from U. of Cambridge, 2008) Risk #2 Road Accident Risk Probability: 4 – High Risk Impact: 4 – Serious Risk Profile: 16 Injury to staff or third parties Loss/damage to library vehicle & materials Legal consequences Regulatory consequences Negative publicity Risk #3 Infectious Disease Outbreak Risk Probability: 5 – Very High Risk Impact: 3 – Moderate Risk Profile: 15 Closure of libraries/suspension of services Temporary unemployment of staff Loss of library income Risk #4 Computer Virus/Network DOS (Denial-of-Service) Attack Risk Probability: 5 – Very High Risk Impact: 3 – Moderate Risk Profile: 15 Interruption of services and operations Confidential information compromised Mitigation/recovery costs Risk #5 Fire Risk Probability: 3 – Moderate Risk Impact: 5 – Very High Risk Profile: 15 Injury to staff/patrons Loss/damage of facilities and materials Mitigation/recovery costs Legal consequences Regulatory consequences Risk #6 IT System Hack Risk Probability: 3 – Moderate Risk Impact: 4 – High Risk Profile: 12 Service disruptions Confidential information compromised Mitigation/recovery costs Negative publicity Risk #7 Theft of Materials Risk Probability: 4 – High Risk Impact: 3 – Moderate Risk Profile: 12 Replacement/recovery costs Legal consequences Negative impact on service Risk #8 Vandalism Risk Probability: 4 – High Risk Impact: 3 – Moderate Risk Profile: 12 Loss/damage of facilities and materials Injury to staff/patrons Mitigation/recovery costs Legal consequences Regulatory consequences Risk #9 Loss of Funding Risk Probability: 2 – Low Risk Impact: 5 – Very Serious Risk Profile: 10 Suspension/reduction of services Closure of facilities Redundancy of staff Risk #10 Snowstorm Risk Probability: 5 – Very High Risk Impact: 2 – Minor Risk Profile: 10 Service disruptions Damage to facilities Risk #11 Accidental Injury to Staff/Patrons Risk Probability: 2 – Low Risk Impact: 4 – Serious Risk Profile: 8 Compensation costs Legal consequences Regulatory consequences Negative publicity Risk #12 IT System Failure Risk Probability: 2 – Low Risk Impact: 4 – Serious Risk Profile: 8 Service disruptions Digital resources damaged/lost Confidential/operational data damaged/lost Mitigation/recovery costs Risk #13 Water or Smoke Damage from Fire in Nearby Building Risk Probability: 2 – Low Risk Impact: 4 – Serious Risk Profile: 8 Service disruptions Damage to facilities/materials Health risk to staff Mitigation/recovery costs Legal consequences Risk #14 Robbery/Carjacking Risk Probability: 2 – Low Risk Impact: 4 – Serious Risk Profile: 8 Service disruptions Injury to staff Loss/damage to library vehicles and materials Mitigation/recovery costs Legal consequences Risk #15 Building Equipment Failure (Ventilation/Electrical/Plumbing etc.) Risk Probability: 3 – Moderate Risk Impact: 2 – Minor Risk Profile: 6 Service disruptions Damage to library facilities and materials Injury to staff/patrons Mitigation/recovery costs Risk #16 Tornado/Violent Wind Risk Probability: 2 – Low Risk Impact: 3 – Moderate Risk Profile: 6 Service disruptions Damage to library facilities and materials Injury to staff/patrons Mitigation/recovery costs Risk #17 Resignation/Termination of Staff Risk Probability: 5 – Very High Risk Impact: 1 – Insignificant Risk Profile: 5 Increased hiring/training costs Possible service disruptions Legal consequences Regulatory consequences Risk #18 Loss of Suppliers Risk Probability: 2 – Low Risk Impact: 2 – Minor Risk Profile: 4 Service disruptions Increased procurement costs Risk #19 Earthquake Risk Probability: 1 – Very Low Risk Impact: 4 – Serious Risk Profile: 4 Service disruptions Damage/loss to library facilities and materials Injury to staff/patrons Mitigation/recovery costs Risk #20 Gaps in Staff Training/Operations Procedures Risk Probability: 1 – Very Low Risk Impact: 3 – Moderate Risk Profile: 3 Legal consequences Regulatory consequences Negative publicity Read More