A M Water Services Ltd — Integrated Management System

SOP 3.2 Business Risk & Opportunity Planning

Issue 3 | 1 May 2026
Document ReferenceSOP_3.2
Issue Number3
Issue Date01/05/2026
Next Review01/05/2027
Approved ByAaron Mason, Director
Controlled ByAaron / Leanne Mason · Sean Ashton

Business Risk & Opportunity Planning

ISO 9001:2015 Clause 6.1 · ISO 14001:2015 Clause 6.1 · ISO 45001:2018 Clause 6.1 — Actions to address risks and opportunities at the business level

Procedure overview
A M Water Services maintains a single Risk & Opportunity Register (APP_05) covering both operational HSQE risks and broader business risks and opportunities. Significant business-level risks and opportunities are identified by the Directors with HSQE Consultant support and recorded with associated actions; the register is reviewed at least annually at the Management Review (SOP 6.4). Where new risks, opportunities or required actions are identified, the register and the action plan are updated. Records are retained per SOP 4.7. SOP 3.2 sits alongside SOP 3.1 Identification & Evaluation of Risk; 3.1 covers operational HSQE hazard-level risk while 3.2 covers strategic business-level risk and opportunity. Currency is maintained through the routine HSQE compliance cycle — weekly Director / HSQE compliance calls and monthly Onyx site visits.

Business Risk & Opportunity Planning — Process Flow

Directors & HSQE Consultant
Aaron Mason (MD)
Leanne Mason (Director)
Sean Ashton
Identify & Register
Identify significant risks and opportunities to the business (operational, financial, strategic, regulatory, environmental, reputational)
Produce / update the Register of significant risks & opportunities
APP_05 Risk & Opportunity Register
Produce actions to address each risk and exploit each opportunity
Directors
Aaron Mason (MD)
Leanne Mason (Director)
Annual Review
Review risks & opportunities at least annually at Management Review
SOP 6.4 Management Review
New risks or opportunities identified?
Yes
Add new entries to the Risk & Opportunity Register
No
Confirm register currency and continue
New action(s) identified?
Yes
Add actions with named owner and due date
No
Continue
Director (Finance & Admin)
Leanne Mason
Maintain Records
Update Risk & Opportunity Register with all changes
Maintain records of risks, opportunities, actions, owners and outcomes
SOP 4.7 Control of Records
Process / Activity
Decision Point
Document / Cross-reference
Continue
Action Required
SOP 3.1 vs SOP 3.2 — how the two procedures relate
SOP 3.1 Identification and Evaluation of Risk covers operational, hazard-level HSQE risk — site activities, plant, manual handling, COSHH exposures, environmental aspects. Outputs are individual risk assessments scored against the AMWS 5×5 matrix. SOP 3.2 Business Risk & Opportunity Planning covers strategic business-level risks and opportunities — market changes, regulatory shifts, supplier dependencies, business continuity, growth opportunities. Both feed the same Risk & Opportunity Register (APP_05) but in distinct columns; the register is the single source of truth for ISO 9001/14001/45001 ยง6.1 compliance.