Use the concepts to examine a situation and explain your judgement.
These fictional cases illustrate the approach. Each includes questions and an analysis to compare with your own account.
Case 01 · Describing risk and examining controls
A cooling failure overnight
A café stores its chilled ingredients in one cold room. Its staff check the temperature at opening and closing. A cooling fault develops after the café closes. The owner is considering an alarm that sends an alert to a staff member’s phone.
Questions
- How would you describe the risk?
- What do the existing checks achieve?
- What would the proposed alarm need to do to help limit the loss?
- What remains uncertain?
Read the analysis
A risk description
The café could lose chilled stock if a cooling failure overnight goes undetected until opening.
The control’s purpose
The opening and closing checks can identify a temperature problem at those times. The proposed alarm aims to detect a problem between checks and notify someone who can act.
Conditions and evidence
Limiting the loss depends on detection, delivery of the alert and a timely response. Testing the alert supports a claim about notification. The ability to respond also needs to be examined.
What remains uncertain
The case gives no grounds for estimating the chance of a fault, the value of stock affected or the time available before stock is lost. These are questions for investigation.
Plain Risk, developed by Dr Julien Maréchal. © 2026 The Governance Practice.
Original materials: CC BY 4.0. Scope and attribution.
Logos, third-party material, and website software are excluded.