A complete risk matrix

1. Regulatory Concept & Core Standards

In this video we will consolidate a skill: create a usable reviewable risk entry. Use the case to test what you would do in a similar situation. We will explain the proposed response step by step so that you can understand each choice and recognise when more information would be needed. The matrix connects process, possible breach, control and owner. A number is not an official legal decision. Regulation 630 addressees have a risk-assessment duty, while the illustrated table is a recommended method to adapt to actual work.

A matrix links process, event, reasoned assessment, measure and owner so another person can understand the decision. Review after changes or control results, not merely by changing a date. Regulation 630 review rules apply to its addressees.

Apply the following rule: The law covers work-related information about breaches that may harm the public interest. It is not limited to the Directive’s listed EU-law fields. Purely personal grievances and knowingly false information are excluded; sections 2–3 also contain specific limits.

2. Practical Implementation & Procedure

Complete a row and check risk-control connection. Define implementation evidence and review triggers. Separate fact and assumption, identifying actual legal duties and who they concern. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

A connected-supplier preference entry links exposure to overlapping roles. It assigns interest checking and independent decisions, with review after process change. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: When is the matrix usable? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

When owners understand tasks and results can be checked. Completed cells are insufficient if purpose or responsibility remains unclear.

One mistake to avoid is: stopping at a completed table without implementation.

Now apply the national rule to a second decision. A report is automatically recognised as protected because it contains the word corruption. What check is missing?

Check work context, possible public-interest harm, belief in truth and statutory conditions. A category does not replace sections 1–3 assessment. A personal complaint may also contain a public-interest breach; assess facts rather than title. Record reasons and necessary clarification.