For each hazard the enterprise should judge how likely a harmful event is and how severe its consequences could be, and rate the risk against defined criteria. The assessment should be done by people who know the workplace, including supervisors and workers from the process, and should cover normal operation and abnormal events such as shutdowns, power loss and emergencies, draw on safety data sheets and other hazard information, consider exposure and the engineering, work-practice and hygiene controls needed, and keep records of the method and conclusions. Results drive an action plan that tackles the most important risks first, feed the OSH objectives, and are reviewed so the assessment stays current.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.