BY ORDER OF THE AIR FORCE PAMPHLET 91-215 SECRETARY ...

5.5. Implement Risk Controls. Once control strategies have been selected, an implementation strategy
needs to be developed and then applied by management and the work force. Implementation requires
commitment of time and resources.
5.6. Supervise and Review. Risk management is a process that continues throughout the life cycle of the
system, mission, or activity. Leaders at every level must fulfill their respective roles in assuring controls are
sustained over time. Once controls are in place, the process must be periodically reevaluated to ensure
their effectiveness.
6. How to Use the ORM Process Model. To get maximum benefit from this powerful tool, there are
several factors to keep in mind.
6.1. Apply the Steps in Sequence. Each of the steps is a building block for the next step. It is important
to complete each step, however briefly, before proceeding to the next step. For example, if the hazard
identification step is interrupted to focus on control of a particular hazard before the identification step is
complete, other more important hazards may be overlooked and the ORM process may be distorted. Until
the hazard identification step is complete, it is not possible to properly prioritize risk control efforts.
6.2. Maintain Balance in the Process. All six steps are important. If an hour is available to apply the
ORM process, it is important not to lose sight of the total process. Spending 50 minutes of the hour on
hazard identification may not leave enough time to effectively apply the other five steps of the process.
The result is suboptimal risk management. Of course, it would be simplistic to rigidly insist that each of
the six steps gets 10 minutes. The idea is to assess the time and resources available for ORM activities and
allocate them to the six steps in a manner most likely to produce the best overall result.
6.3. Apply the Process as a Cycle. Notice that the “Supervise and Review” step feeds back into the first
step. It is this cyclic characteristic that generates the continuous improvement characteristics of the ORM
process. When the “Supervise and Review” step establishes that some risks have been significantly
reduced, the hazard identification step is reapplied to find new hazard targets. In this way, the ORM
process is continually reevaluating the risks.
6.4. Involve People Fully. The only way to assure the ORM process is supportive is to provide for the full
involvement of the people actually exposed to the risks. Take the time to periodically revalidate ORM
procedures and assure that they are mission supportive and are viewed by personnel as positive.
7. ORM Integration. A key objective of ORM is to accomplish the ORM process as an integrated aspect
of mainstream mission processes. When ORM is effectively integrated, it quickly ceases to be consciously
identifiable as a separate process. To effectively apply risk management, commanders must dedicate time
and resources to incorporate risk management principles into the planning processes. Risks are more easily
assessed and managed in the planning stages of an operation. Integrating risk management into planning as
early as possible provides the decision maker the greatest opportunity to apply ORM principles.
8. Types of Risk. Figure 3 depicts the relationship between the various types of risk.
8.1. Total Risk is the sum of Identified Risk and Unidentified Risk.
8