Perusriskien

Perusriskien is a Finnish term used in risk management to describe the baseline or fundamental risks inherent in an organization, process, product, or system. The genitive form perusriskien is often seen in phrases such as perusriskien hallinta, meaning the management of basic risks. It is typically contrasted with project-specific risks or external, situational risks.

The concept focuses on risks that arise from normal operations, governance, and interfaces between functions, rather than from a single project or a one-off external event. Typical domains of perusriskit include operational risks (equipment failure, process inefficiencies), safety and health risks (injuries, non-conformances), financial risks (revenue loss, cost overruns), regulatory and compliance risks (breaches of law, non-compliance), and technology or cyber risks (system outages, data loss).

Identification and assessment of perusriskien are usually carried out through risk workshops, process mapping, incident histories, audits, and control assessments. Each risk is evaluated in terms of likelihood and impact, and combined to form a baseline risk level for the organization. Based on this assessment, preventive and detective controls are selected, and owners are assigned accountability for monitoring and mitigation.

Monitoring relies on indicators such as key risk indicators (KRIs) and periodic reviews, which are updated when there are significant changes to the business, processes, or external environment. The concept emphasizes maintaining a stable risk posture over time by addressing core, recurring risks that affect multiple areas of the organization.