Riskikohteita

Riskikohteita, or risk targets, are assets, processes, or activities that may be harmed by adverse events or may themselves create risk. They form the focus of risk assessments and risk management in organizations, infrastructure, and services.

Riskikohteita are identified through hazard identification, vulnerability analysis, exposure assessment, and evaluation of likelihood and impact. The process follows risk management standards such as ISO 31000 and sector-specific regulations. Risk level is commonly estimated as likelihood times consequence, guiding prioritization and resource allocation.

They can be physical assets (machinery, buildings), human elements (workers, customers), information assets (data, software), or infrastructure (power, networks). They may be targets for physical harm, cyber threats, chemical releases, or natural hazards. Examples include a plant reactor, a data center, a hospital information system, a substation, or a transportation hub.

Mitigation involves implementing controls to reduce probability or impact, including engineering safeguards, procedures, redundancy, monitoring, and incident response. Training and security measures are often part of the approach. Residual risk is assessed against the organization’s risk appetite and is managed accordingly.

Regulatory context: In Finland and many other countries, risk assessments are required by occupational safety, environmental, and business-continuity regulations. Riskikohteita should be reviewed regularly and updated after incidents, changes, or new information to maintain an up-to-date risk picture.