38
An investigator’s introduction to risk management

An investigator’s introduction to risk management

  • Upload
    others

  • View
    6

  • Download
    0

Embed Size (px)

Citation preview

Page 1: An investigator’s introduction to risk management

An investigator’s introduction to risk management

Page 2: An investigator’s introduction to risk management

-  Risk and risk perception -  Disaster management -  Societal safety

Disclaimer: I’ve adapted and simplified the academic literature (a lot).

My background

2

Page 3: An investigator’s introduction to risk management

Risk is context specific and constantly evolving — At the end of the day, you are responsible for your risk. If you have a particularly high level of risk, seek training and professional

advice

Investigate your risk — Risk assessment is a mindset, not a checklist — ... and it requires collaboration, too.

Before we start

3

Page 4: An investigator’s introduction to risk management

RISK ASSESSMENT 1

4

Page 5: An investigator’s introduction to risk management

Defining risk

Risk has many definitions! (but one is especially useful) Risk is the answer to three questions: ◉ What can happen? ◉ How likely is it? ◉ What will the consequences be? 5

Page 6: An investigator’s introduction to risk management

What can happen?

One way to answer this question is to use scenarios. Success Scenario (S0): Defines what a “normal situation” means in a specific context.

Risk Scenario (Sn): Any “abnormal situation” that deviates from S0.

6

Page 7: An investigator’s introduction to risk management

What can happen?

7

Page 8: An investigator’s introduction to risk management

What can happen?

8

Page 9: An investigator’s introduction to risk management

Example: Collecting pesticide samples

à Adapted example from The Kit — Away From Your Screen, Out in the Field by Mario Rautner.

Objectives: -  “Collect 50 water samples from private and public groundwater wells

over a three-week period after high levels of herbicide use.

-  Follow scientific sampling protocols and ship the samples to be tested for herbicides to an accredited lab.

-  Carry out and film interviews with local communities about the impact herbicide spraying has had on their lives.”

9

Page 10: An investigator’s introduction to risk management

Example: Collecting pesticide samples

Transport/ Accommodation Sampling Testing Interview

Success Scenario

(S0)

Drive to and from site with a

camper van

Collect 50 water samples

Send samples to lab for analysis

Conduct and record

interviews

Potential Risk

Scenarios (Sn)

-  Driving accident

-  Arriving late -  Getting lost -  Other

-  Getting arrested

-  Acute poisoning

-  Other

-  Problem with shipment

-  Other

-  Confrontation -  Loss or theft

of equipment -  Other

10

Page 11: An investigator’s introduction to risk management

Example: Collecting pesticide samples

11

Transport/ Accommodation Sampling Testing Interview

Success Scenario

(S0)

Drive to and from site with a

camper van

Collect 50 water samples

Send samples to lab for analysis

Conduct and record

interviews

Potential Risk

Scenarios (Sn)

-  Driving accident

-  Arriving late -  Getting lost -  Other

-  Getting arrested

-  Acute poisoning

-  Other

-  Problem with shipment

-  Other

-  Confrontation -  Loss or theft

of equipment -  Other

à Include scenarios that you cannot foresee.

Page 12: An investigator’s introduction to risk management

What can happen?

Worst (credible) scenario: Describes the worst that can happen (but things could always get worse).

VS

Most likely scenario: Describes the most likely to happen (but that may not be the most important scenario to prepare for).

à How likely is it? What will the consequences be?

12

Page 13: An investigator’s introduction to risk management

Likelihood? Consequences?

◉ Describing likelihood: ○  Very unlikely / Unlikely / Likely / Very Likely... ○  Scale 1 to 5 ○  Etc.

◉ Describing consequences: ○  Minimal / Minor / Major / Serious / Catastrophic... ○  Scale 1 to 5 ○  Etc.

13

Page 14: An investigator’s introduction to risk management

Example: Collecting pesticide samples

Potential threat Likelihood Consequence

Issues with transport Likely Minor

Getting arrested Unlikely Serious

Pesticide poisoning Very Unlikely Catastrophic

Confrontation Likely Major

Problem with shipment Very likely Serious

Loss or theft of material Unlikely Serious

14

Page 15: An investigator’s introduction to risk management

Risk Matrix

15

The concept

Page 16: An investigator’s introduction to risk management

Risk Matrix

16

The reality: not as “squared”

Page 17: An investigator’s introduction to risk management

Example: Collecting pesticide samples

Potential Threat Likelihood Consequence Priority

Problem with shipment Very likely Major 1

Confrontation Likely Major 2

Issue with transport Likely Minor 3

Getting arrested Unlikely Serious 4

Poisoning Very Unlikely Catastrophic 5

Loss or theft of material Unlikely Serious 6

17 à Assessing and prioritizing scenarios is very subjective.

Page 18: An investigator’s introduction to risk management

Recap

Identify risk scenarios

Prioritize them

Assess their likelihood &

consequences

18

Page 19: An investigator’s introduction to risk management

RISK PERCEPTION 2

19

Page 20: An investigator’s introduction to risk management

Risk perception

Risk perception — Our subjective judgement of a risk, as well as its related likelihood and consequence. à  Influences our assessments, actions and behaviour.

20

Page 21: An investigator’s introduction to risk management

Risk perception is affected by:

What we value Our identity & world view

Our culture & communities

21

Page 22: An investigator’s introduction to risk management

Risk perception is affected by:

Our perception of the world

Our knowledge & experience

Our fears & biases

22

Page 23: An investigator’s introduction to risk management

Risk perception

23

Page 24: An investigator’s introduction to risk management

Risk acceptability

24

The perceived origin of a risk also influences our assessment.

Page 25: An investigator’s introduction to risk management

Risk is inherited

Investigating influences other people’s risk (i.e. sources, collaborators, subjects of the investigation, bystanders, etc.). At the same time, their risk level also influences our own. DO NO HARM Can your investigation create additional harm? For whom?

à Be ready not to investigate (?)

25

Page 26: An investigator’s introduction to risk management

Some thoughts:

◉ Risk is much more than likelihood vs consequences

◉ Humans are often the weakest link — communicate with your team!

à Plan, prepare, question

26

Page 27: An investigator’s introduction to risk management

Extra: real examples

27

Many examples of the relationship between investigation and preparedness (or lack thereof).

Page 28: An investigator’s introduction to risk management

RISK MANAGEMENT 3

28

Page 29: An investigator’s introduction to risk management

Risk management

Assessment is only the first step. Risk management — To reduce the likelihood or consequences of a risk scenario, or mitigate its effects after it has happened.

29

Page 30: An investigator’s introduction to risk management

Risk management

Reduce likelihood -  Eliminate the risk -  Modify the risk -  Warning systems -  Etc.

Reduce consequences -  Separate/Isolate

the risk -  Training and

exercises -  Equip to better

handle the risk -  Etc.

Fix the damage -  Response if

accident occurs -  Relief and

rehabilitation -  Etc.

30

Page 31: An investigator’s introduction to risk management

Example: Collecting pesticide samples

Threats Potential Mitigation strategies

Faulty shipment -  Physically bring the samples to the analysis lab -  Split the shipment

Confrontation -  Avoid confrontation -  Use de-escalation techniques.

Issue with transport -  Plan for alternative routes

Getting arrested -  Put a warning system in place -  Prepare response plan with lawyers

Poisoning -  Carry protective equipment -  Gather more information

Loss or theft of material -  Subscribe to an insurance 31

Page 32: An investigator’s introduction to risk management

Phasing risk management

◉ Using risk levels to investigate — By changing our actions and behaviour, we can attempt to reduce uncertainty. — E.g. organise the investigation from low to high-risk activities.

à Keep in mind:

The unexpected may still happen, so prepare for it.

32

Page 33: An investigator’s introduction to risk management

Risk and collaboration

◉ When dealing with risk, collaboration is key à By collaborating, we can:

— Increase our knowledge & reduce uncertainty — Question our risk perception — Strengthen our plans & prepare better — Share best practices & learn

33

Page 34: An investigator’s introduction to risk management

Tactical Tech’s resources

34

Holistic Security Guide — https://holistic-security.tacticaltech.org/index.html

Security in-a-box — https://securityinabox.org/en/

Exposing the Invisible - The Kit — https://kit.exposingtheinvisible.org/en/index.html

Page 35: An investigator’s introduction to risk management

Other resources

35

Committee to Protect Journalists — https://cpj.org/emergency-response/pre-assignment-preparations/

Rory Peck Trust — https://rorypecktrust.org/freelance-resources/safety-and-risk-assessment/

Page 36: An investigator’s introduction to risk management

Other resources

36

Electronic Frontier Foundation — https://www.eff.org/issues/security

Global Investigative Journalism Network — https://gijn.org/safety-and-security-organizations/

Page 37: An investigator’s introduction to risk management

Other resources

37

BSAFE, the UN’s security awareness training — https://training.dss.un.org/thematicarea/category?id=6

Front Line Defenders — https://www.frontlinedefenders.org/en/programme/risk-analysis-protection-training

Page 38: An investigator’s introduction to risk management

Any questions? ◉  @lsalzenstein ◉  [email protected]

Thanks!

38