A M Water Services Limited — Integrated Management System

APP_05 · Risk & Opportunity Log

Reference
APP_05
Issue
4
Issue date
9 September 2026
Owner
Sean Ashton (HSQE Consultant)
Approved by
Aaron Mason, Director
Review
1 June 2027
ISO
9001 6.1.1 / 6.1.2 · 14001 6.1 · 45001 6.1
Status as at
27/09/2026
Every business risk and opportunity AMWS tracks, scored before and after the controls in place, with the treatment option chosen, the owner and the target.
26Risks and opportunities
22Risks
4Opportunities
22Reduced by the controls in place
2High or Very High after controls
RefRisk or opportunityInherentResidualResidual bandOwnerTarget

The document

Purpose

This register identifies, scores and manages the risks and opportunities that could affect A M Water Services Limited’s ability to achieve its objectives, maintain certification and deliver safely. It is the operational output of Clause 6.1 and the working register that feeds every Management Review.

Scope

Strategic, operational and compliance risks across all business activities
Opportunities for improvement, innovation or competitive advantage
The scoring method and criteria
Control measures and the residual, post-control risk
The treatment option chosen for each entry
Integration with business planning and the Management Review cycle

How an entry is scored

Each of four factors is scored 1 to 4 against a stated definition.

Factor1234
A. Impact on the businessLowNoticeableGreatSevere
B. Legal requirement at stakeNo regulationsGuidance / ACoPsStandardsLaws / Regulations
C. Likelihood of occurrence< 0.1 %10 %50 %> 95 %
D. Frequency of exposureAlmost neverRareRegularAlways

Risk Score = A + B + (C × D), giving a range of 3 to 24. The band follows from the score:

ScoreExposureAction requiredTimeframe
3–7<span class="risk-low">Low</span>Monitor only — review annually12 months +
8–13<span class="risk-moderate">Medium</span>Mitigate through management controlsWithin 6 months
14–19<span class="risk-high">High</span>Implement controls to reduceWithin 3 months
20–24<span class="risk-very-high">Very High</span>Cease activity until reducedImmediate

Treatment options

OptionDescription
AcceptCurrent controls deemed appropriate. Monitor. Develop contingency plans where practicable.
TransferShift responsibility via contract or insurance. Can be whole or shared.
MitigateReduce likelihood through management controls. Reduce consequences via contingency planning / BCP / liability cover.
AvoidDo not proceed with the activity or choose an alternative approach. Risk management — not aversion.

What the controls are doing

Every entry carries an inherent score, before the controls in place, and a residual score after them. 22 of 26 entries are reduced by the controls, and 2 remain High or Very High after them. Counted from the rows at build time.

An entry whose residual score equals its inherent score is not an error: it means the controls in place hold the position rather than improve it, which is what Accept describes.

Horizon scan — watching brief

Emerging items not yet formally on the register but under active monitoring (in scope for review earlier than Rev 4):

  • UK Cyber Security & Resilience Bill — expected to expand incident-reporting duties on water-sector contractors (DESNZ / DSIT)
  • DVSA Earned Recognition eligibility once grab fleet reaches scheme threshold
  • EN-590 diesel FAME content changes being debated at EU level, which may affect winter-grade performance in bulk tanks
  • ONS commentary on reinstated operative benchmarks following post-Brexit labour-market data revisions in 2025

Review and update

This register is:

  • Reviewed quarterly by Sean Ashton (HSQE Consultant) and Aaron Mason
  • Updated on change — new risks added when identified (incident, audit finding, legislation, client contract, supplier failure)
  • Presented at Management Review — Section 6 of the MR agenda
  • Cross-referenced with: audit findings, incident investigations, supplier-performance evaluations, Management Review minutes

Responsibilities

RoleResponsibility
Aaron Mason
Director
Owns the strategic and operational risks and the decisions that treat them
Leanne Mason
Director, HR & Admin
Owns the financial, commercial and people risks
Sean Ashton
HSQE Consultant
Maintains the register, scores the entries and reports the position to the Management Review
Jason May
Supervisor
Reports operational risks as they arise on site

How this document is approved

Approved by the Directors. Reviewed as a whole annually, and any entry may be re-scored at any time on an incident, a change of scope or a change in the law. The register is a standing input to the Management Review.

Related documents

Revision history

IssueDateApproved byChange
101/06/2024Aaron Mason, DirectorInitial issue — 13 risks.
201/06/2025Aaron Mason, DirectorAI, climate change, supply chain added.
301/06/2026Aaron Mason, DirectorRegister reorganised by category (R-01..R-21). 8 new 2026 risks added: R-06 Benzene, R-10 Water (Special Measures) Act 2025, R-11 Employment Rights Act 2025, R-12 Worker Protection Act 2023, R-13 ISO standards transition, R-14.
409/09/2026Aaron Mason, DirectorR-22 Kier added as a prospective principal-contractor client, operations anticipated from late October 2026. Residual bands corrected to the AMWS scale — Low, Medium, High, Very High — which the scoring key already set; thirteen entries had been carried as Moderate, Watch or Plan. Four opportunities withdrawn as commercial development rather than management-system matters.
Generated from the controlled source on the AMWS IMS portal. Issue 4, 9 September 2026. Uncontrolled when printed.