High Priority of D&A Testing in Risk Management Formally, business risk management is defined as the identification, analysis, monitoring, and mitigation of uncertainty as related to decision-making and operations. Risks are events or circumstances that can bring negative consequences to a business, and the goal is to minimise these types of events and circumstances. There are many different types, including operational and environmental risks. Ultimately, the impact of risk to the business is financial loss. However, high risk business related events and activities can also have an impact on people and places that are not stakeholders. For example, a worker driving a delivery van while under the influence of alcohol is a risk to other drivers, in addition to co-workers and customers. A manufacturing assembly line worker using illicit drugs threatens the health and welfare of co-workers and end-product users. Drug & alcohol testing programs clearly fit within the risk management program. Policies are designed to identify and control the general risks by establishing a substance free workplace and methods for mitigating risks. The actual testing of workers serves as the means for monitoring substance use and reducing the potential risks associated with substance abuse. A risk management plan should reflect all potential business risks as much as possible, which means fitting random, safety-risk, and for-cause testing into the plan. Risk Priorities and Major Consequences A useful tool called the Risk Management – Risk Analysis Matrix was developed by the Small Business Development Corporation of the Western Australia government. 1 It provides an excellent starting point for understanding and rating risk priorities, which include no risk, low risk, moderate risk, high risk, and extreme risk The matrix can be applied to the risk of drug and alcohol use in the workplace. For example, the mining industry has a documented problem with drug and alcohol use among the fly in-fly out miners. Using the matrix, the event (drug use) would have a likelihood of ‘certain’, indicating an occurrence at least once per week. The consequence of risk expression is either ‘major’, ‘fatality’, or ‘multiple fatalities.’ The choice depends on the history of the particular business and industry. No matter what selection of consequences is made in the mining example, the risk rating will establish a risk priority of ‘extreme’, meaning involved work processes should cease and immediate corrective action taken.