Inexplicablemente – o no – la reciente norma ISO 9001:2015 introduce una nueva definición del término «riesgo», alejándose de lo indicado en la norma ISO 31000 sobre gestión del riesgo. La definición incluida en la nueva ISO 9001 es «efecto de la incertidumbre en el resultado esperado» (“effect of uncertainty on an expected result.”).
Se trata de la cuadragésima definición de riesgo empleada en las distintas normas ISO, algo ciertamente paradójico, pues presuntamente ISO debería estandarizar, entre otras cosas, las definiciones. Las cuarenta definiciones, que recogemos a continuación – en inglés, para no traicionarlas con una mala traducción- son las siguientes:
1. a function of the probability of occurrence of a given threat and the potential adverse consequences of that threat’s occurrence.
2. chance of injury, damage or loss postulated by considering the consequence of a threat and the likelihood of its occurrence
3. combination of the chance that a specified hazardous event will occur and the severity of the consequences of the event
4. combination of the frequency, or probability, of occurrence and the consequence of a specified hazardous event
5. combination of the likelihood of an occurrence of a hazardous event or exposure(s) and the severity of the incident caused
6. combination of the likelihood of occurrence of harm and the severity of that harm
7. combination of the probability and the degree of the possible injury or damage to health in a hazardous situation
8. combination of the probability of an event and its consequence
9. combination of the probability of an event and the consequences of the event
10. combination of the probability of harm and the severity of that harm
11. combination of the probability of occurrence of harm and the severity of that harm
12. combination of the probability of occurrence of harm and the severity of that harm; indicating the probability that an adverse effect on soil functions will occur under defined conditions and the magnitude of the consequences of the effect occurring (see ISO/IEC Guide 51:1990)
13. combination of the probability of the occurrence of a hazard in a particular situation and the consequences or extent of harm to the individual to be expected from the hazard
14. combination of the probability or frequency of occurrence of an event and the magnitude of its consequence
15. combination of the probability that a specified undesirable event will occur combined with the severity of the consequences of that event
16. effect of uncertainty
17. effect of uncertainty on an expected result
18. effect of uncertainty on objectives
19. exposure to the chance of injury or loss as applies to safety
20. expression of the probability that an adverse effect on soil functions will occur under defined conditions and the magnitude of the consequences of the effect occurring
21. factor, R, that reflects both likelihood, L, of the occurrence of a hazard in a particular situation and severity, S, of the consequences or extent of harm to the individual to be expected from the hazard R = L × S
22. function of the probability of occurrence of a given threat and the potential adverse consequences of that threat’s occurrence
23. likelihood of a security threat materializing and the consequences
24. likelihood of the occurrence of an event or failure and the consequences or impact of that event or failure
25. numerical estimate of the probability or likelihood that a given hazard will occur
26. potential that a given threat will exploit vulnerabilities of an asset or group of assets and thereby cause harm to the organization
27. probability of a specific undesired event occurring so that a hazard is realized
28. probability of an event (e.g. failure, damage) multiplied by its consequences (e.g. cost, fatalities, exposure to personal or environmental hazard)
29. probability of loss or injury from a hazard
30. probability of the occurrence of a hazard and the severity of its outcome
31. product of probability and consequences for an undesired event or action
32. qualitative or quantitative likelihood of an event occurring, considered in conjunction with the consequence of the event
33. quantitative or qualitative measure for the severity of a potential damage and the probability of incurring that damage
34. term describing an event encompassing what can happen (scenario), its likelihood (probability) and its level or degree of damage (consequences)
35. the combination of the probability of an event and its consequence.
36. the possibility that a particular threat will exploit a particular vulnerability of a data processing system.
37. the potential for realisation of an unwanted event, which is a function of the hazard, its probability and its consequences
38. the probable rate of occurrence of a hazard causing harm and the degree of severity of the harm
39. undesirable situation or circumstance that has both a likelihood of occurring and a potential negative consequence on a project
40. value of what can be lost if infringement occurs
Para saber en qué normas aparece cada una de las definiciones, pueden recurrir al enlace que damos más abajo.
Asimismo adjuntamos un enlace a un documento de ISO en el que se explica el sentido de la utilización del término «riesgo» en la ISO 9001:2015. Menos mal.
La noticia en Oxbridge
¿Dónde aparece cada definición?
El término riesgo en la ISO 9001:2015