How should I practice Domain 3?

Separate hazard identification from risk analysis and risk evaluation. Prioritize controls using a defensible, risk-based decision process. Understand avoidance, retention, sharing, transfer, loss prevention, and loss reduction. Then open the lesson list above and check the worked case before you move on. No practice product can guarantee a CSP result.

What is residual risk?

Residual risk is the risk remaining after selected controls or treatments have been applied and their expected effectiveness is considered.

Why challenge low-likelihood estimates?

Sparse data, weak safeguards, changing conditions, or severe consequences can make apparently rare scenarios important enough to require additional review.

Does insurance reduce operational risk?

Insurance can transfer selected financial consequences, but it does not remove the physical hazard or prevent the event.

CSP-11 Domain 3 · 15%

Risk Management: Turn Uncertainty into Defensible Decisions

CSP-11 expects safety professionals to evaluate risk systematically, select mitigation strategies, understand financial risk treatment, and keep risk under active review.

Updated 25 September 2026. Independent CSP-11 practice. Not BCSP-endorsed. No pass guarantee.

This domain contains 4 Master objectives and 9 detailed lessons. The objective layer organizes the blueprint; the lesson layer provides focused study and practice.

Domain overview

Risk Management

Risk management begins by defining credible hazard scenarios, understanding exposure, estimating likelihood and consequence, and examining the safeguards that influence the outcome. A risk matrix can organize judgment, but it cannot replace a clear scenario, defensible assumptions, and evidence about control reliability.

Treatment follows analysis. The practitioner should eliminate or reduce hazards where feasible, strengthen preventive and mitigative barriers, distinguish operational controls from financial risk strategies, and evaluate the residual risk that remains after treatment.

CSP-style judgment also requires active review. Risk changes when operations, people, equipment, contractors, environments, or safeguards change. A useful risk process therefore documents uncertainty, assigns ownership, communicates priorities, and monitors whether selected treatments continue to perform.

BLUEPRINT WEIGHT

15%

MASTER OBJECTIVES

DETAILED LESSONS

What Domain 3 asks you to do

Make risk visible, ranked, and actionable. Study the published tasks below, then open a class for the decision rule and exam traps.

Risk evaluation
Hazard analysis
Hierarchy of Controls
Financial risk
Risk monitoring
Emergency & fire risk

Apply the safety risk process: identify, analyze, evaluate, monitor, and communicate risk.
Apply risk strategies to EHS hazards using risk analysis, JHA/PHA concepts, and the hierarchy of controls.
Differentiate financial risk treatments including avoidance, retention, sharing, transfer, prevention, and reduction.
Identify, rank, and monitor risk in areas such as emergency preparedness, fire prevention, occupational health, hazardous materials, and environmental compliance.

Decision rule

How to reason in Domain 3

Define the hazard scenario clearly, challenge weak assumptions, prioritize higher-order controls, and reassess residual risk after treatment. Use scores to support—not replace—professional judgment.

Blueprint note: CSP-11 Domain 3 covers systematic risk identification, analysis, evaluation, treatment, financial strategies, monitoring, and communication.

Field case

Apply the domain under real constraints

A team rates a toxic-release scenario as low risk because no similar event has occurred at the site. The losing answer is to accept that history as proof of low likelihood. The transfer system has aging components and one critical safeguard has not been function-tested recently. A stronger assessment examines failure modes, exposure frequency, barrier reliability, consequence severity, uncertainty, and additional controls before accepting residual risk.

Exam traps

Common reasoning errors to avoid

Treating absence of previous incidents as proof that a credible high-consequence scenario is adequately controlled.
Using a risk score without examining the assumptions, barriers, exposure frequency, and uncertainty behind it.
Confusing insurance or financial transfer with physical hazard reduction.

Curriculum map

Master objectives

Open all 47 objectives

D3.01

Safety Risk Evaluation

1 mapped lesson · open full mapping →

D3.02

EHS Risk Management

3 mapped lessons · open full mapping →

D3.03

Financial Risk Mitigation

3 mapped lessons · open full mapping →

D3.04

Risk Analysis and Monitoring

2 mapped lessons · open full mapping →

Study layer