Risk Management at CERN
Risk management supports CERN’s scientific mission by helping the Organization systematically identify, assess, manage and monitor risks that could significantly affect its objectives and interests. It enables informed decisions about uncertainty, priorities and resources, while supporting scientific and technological ambition.
Within the OSI Department, Risk Management forms part of the CERN Resilience Function, alongside business continuity and crisis management. The Risk Management Lead is responsible for establishing, implementing and continuously improving CERN’s common risk-management framework.
Risk management is part of normal management responsibility. Assessment, treatment and oversight should be proportionate to the significance, complexity and uncertainty of the risks involved.
Approved principles
Two approved documents establish CERN’s institutional approach:
Risk Appetite and Tolerance Principles
Define CERN’s approach to risk-taking and the principles governing tolerance, escalation and risk acceptance. Read in EDMS (PDF)
Risk Management Governance Principles
Define accountability, oversight, independent assurance and decision authority. Read in EDMS (PDF)
These principles complement existing CERN mandates and specialist requirements. Risk appetite never authorises non-compliance with applicable law, CERN rules or binding Safety requirements.
Supporting guidance and implementation
The approved principles provide for detailed methods, criteria and operating guidance to be maintained in separate, controlled documents under the relevant authorities.