At what level should risk decisions be made according to ORM principles?

Risk decisions should be made by the person who can effectively address the hazard, as this aligns with the principles of Operational Risk Management (ORM). This approach emphasizes that individuals closest to the risk and who have the best knowledge of how to mitigate it should have the authority to make decisions regarding it. By empowering those with relevant experience and situational awareness, organizations can ensure that decisions are pragmatic, timely, and informed by real-time conditions.

This principle also facilitates quicker responses to emerging risks, as the designated individuals can act without unnecessary delays from higher authority levels or external agencies that may not have the same level of familiarity with the specific operational context. Overall, letting those with direct responsibility for safety and effectiveness handle risks leads to more effective risk management, improving overall mission success and safety.