Article 9 Risk Management for High Risk Systems

Understanding High Risk System Classification

Article 9 establishes specific requirements for systems identified as high risk through the risk assessment process. These systems typically include those that could cause serious harm to individuals, property, or the environment if they fail or operate incorrectly. The classification process requires practitioners to evaluate potential consequences against established criteria rather than simply assuming a system is high risk based on its complexity or size.

Consider a healthcare monitoring system that tracks patient vital signs and alerts medical staff to abnormalities. This system would likely be classified as high risk due to potential patient harm from delayed or incorrect alerts. Similarly, an automated braking system in vehicles or a nuclear power plant control system would fall into this category.

The classification must be documented clearly with specific examples of potential failure modes and their consequences.

• Medical device software that controls life-support equipment
• Transportation safety systems including air traffic control
• Industrial process control systems in chemical plants
• Financial trading platforms with significant market impact
• Infrastructure monitoring systems such as bridge or dam safety

Risk Management Controls for High Risk Systems

Once a system is classified as high risk, Article 9 requires specific risk management controls that go beyond standard risk treatment measures. These controls must address both technical and organisational aspects of risk management. Technical controls include redundant systems, fail-safe mechanisms, and continuous monitoring capabilities.

Organisational controls focus on processes, training, and governance structures that support safe operation.

A manufacturing plant’s automated quality control system represents a practical example. The system must include multiple independent verification processes, backup monitoring systems, and clear protocols for human intervention when automated processes fail. The risk management approach must account for potential single points of failure, such as a single sensor that could cause entire production lines to halt incorrectly.

Organisational controls for high risk systems often involve:

• Regular risk assessment reviews by senior management
• Specific training programmes for operators and maintenance staff
• Clear escalation procedures for identified risks
• Documentation requirements for all risk-related decisions
• Regular testing and validation of risk controls

Implementation of these controls requires careful planning and resource allocation. The risk assessment team must work closely with system operators, maintenance staff, and senior management to ensure that controls are practical and effective. Regular reviews must be scheduled to maintain the effectiveness of these controls as systems evolve or operating conditions change.

Documentation and Review Requirements

Article 9 places significant emphasis on maintaining detailed documentation of risk management activities for high risk systems. This documentation serves multiple purposes including audit readiness, regulatory compliance, and continuous improvement. The documentation must clearly show how risk assessments were conducted, what controls were implemented, and how these controls were tested and validated.

For example, a financial institution’s algorithmic trading system requires extensive documentation of risk parameters, testing procedures, and monitoring protocols. The documentation must demonstrate that the system was tested under various market conditions and that appropriate controls exist to prevent excessive losses. This documentation must be readily available for regulatory review or internal audit purposes.

Key documentation elements required by Article 9 include:

• System architecture diagrams showing risk pathways
• Control effectiveness testing records
• Incident reports and corrective actions
• Training records for personnel working with high risk systems
• Regular risk assessment update records

The review process must occur at regular intervals, typically annually or whenever significant changes occur to the system. These reviews should involve stakeholders from different areas including technical operations, risk management, and senior management. The review process must identify any new risks that have emerged or existing controls that may no longer be effective.

Effective risk management for high risk systems requires ongoing attention and investment. The resources allocated to these systems must reflect their potential impact on safety, compliance, and organisational reputation. Regular training, testing, and updating of risk controls ensure that these systems continue to operate safely and effectively over time.