HOW TO USE THE TEMPLATE

This Risk Management (RM) template consists of 4 sheets:

1) How-to-use the template (this sheet)

2) Risk Assessment. This is the actual template that shall be filled out.
3) Value list. This sheet contains the values for the drop down menus. This must not be changed
4) Risk scales. This defines risk threshold level (risk acceptance level), pluss risk probability and
consequence scales

How to fill out the risk assessment -

(Also see Procedure "GPRO_03 Risk Management" that details responsiblity and needed actions and
reporting related to Risk Management)

Preparations:

0) Define the risk threshold levels. Threshold level defines yellow and red levels.
, consequence- and probability scale to be used for the risk assessment.

Risk assessment:

1) Start with describing the risk elements in column B

2) All risk elements shall be tagged with one of the predefined risk areas in column A. Choose from the
drop-down value list.
3) Describe the potential consequence if the risk is not mitigated in (column C). Here you should also
describe the significance of the risk
4) If mititation measures for the risk element are already taken, describe these in column D
5) Define risk probability and consequence in column E and F. Use the drop-down value list. How to
understand the scales are described in the tab "risk scales".
6) The risk level is calculated in column G and colour green, yellow or red will be automatically set based
on your defined threshold level under the "Ras Scales" sheet. Red means critical risk that needs mitigation
measures to be defined and followed up until closure. Yellow means that risk mitigation should be
considered from case to case. Whether mitigations are needed is decided by local management from case
to case.

If the risk is critical the following steps are required:

7) Define actions (column H) that will be initiated to reduce risk element. Risk can be reduced by reducing
probasbility and/or consequence.
8) Appoint a person (name required) responsible for the risk and minigation actions (colums I) and the
function he/she belongs to (choose from drop-down list in column J)
9) Define due date for completeing action in column K
10) Set status on actions using drop-down list in column L
11) Comment in the status in column M to give a description of the mitigation efforsts.
12) The risk assessment shall be updated monthly (as minimum) until all critical risks are mitigated and
shown as non-critical

See procedure "GPRO_03 Risk Management" for further details.

GFORM_015 Risk Management Matrix Valid on date of print only. Printed: 02/06/2022
Prepared by: hehvno
Approved by: frvano
 RISK ASSESSMENT
RISK ANALYSIS RISK MITIGATION
Entry date Description of risk element Risk area Description of consequence Mitigation measures already in Proba Conse Risk Actions to reduce risk Risk owner Function Due date Status Comment to status
place bility quenc level
e
03.04.2018 Accepting too many projects Operational Engineers might unable to cope due Engineers to recommend more 3 3 9 Engineers to recommend more PJ Engineering In
to workload standardized solutions standardized solutions progress
03.06.2018 Unable to get desired Operational Spending more time on finding Nil 4 3 12 Engineers to work closely with PJ Engineering In
parts/components due to lead alternative part, redesigning purchasing side to find out those progress
time mechanical due to fitting and would components having long lead time,
affect lead time, alternative parts and determine the alternative parts
might cost more as well available before final design to
reduce reworks

01.08.2018 Unable to confirm 100% for Operational Even though incoming checks are 3D drawings for more 3 3 9 3D drawings with component for PJ Engineering In
incoming mechanical parts done, unless all the components are complicated design more complicated design progress
checks mounted, then able to confirmed
that mechanical design are correct

20.12.2018 Design changes in short notice Operational Spending more time on redesigning Engineers to inform Sales that 4 2 8 Reschedule the project timeline to PJ Engineering In
affecting lead time redesigning takes more time and ensure that proper design is done progress
Sales to communicate with
customers on potential delays of
projects
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0
0

GFORM_015 Risk Management Matrix Valid on date of print only. Printed: 02/06/2022
Prepared by: hehvno
Approved by: frvano
Date: 2017-06-08
 0
0
0
0

GFORM_015 Risk Management Matrix Valid on date of print only. Printed: 02/06/2022
Prepared by: hehvno
Approved by: frvano
Date: 2017-06-08
 VALUE LISTS

Risk area
Strategic Risks associated with the long-term strategy and the implementation of the
strategy, incl. the ability to reach the planned objectives. Can be affected by
i.e. industry, capital, legal requirements, political issues, technology, reputation
and competitor activities
Financial Risks associated with the effective management and control of finances incl.
macro risks, risk of being part of the financial market, financing of the
company, liquidity/cash flow, financial reporting etc.
Compliance Risks associated with compliance to regulatory requirements, incl. tax, legal,
accounting, health and safety, environment and data-protection
Business Risks Risk related to management decisions and use of resources, including
reliability/ relationships to customers and suppliers
Operational Risks associated with our day to day operations and the efficiency and safety
of the business processes involved
Political Risk associated with the political stability in the countries where Eltek operates
or are involved
Fraud/corruption Risk associated with corruption or fraudulent activities, e.g. employees
enriching themselves illegally or unethically
Security/IT Risks associated with security over group assets incl. data/personnel
resources and the relationship to various stakeholders
HR Risk associated with attracting the right competence and employees, ability to
retain key personnel and development of skills and competence
Reputation Risk associated with Eltek's name and standing in the market place
Safety Risk associated with safety over personnel and group assets
Environment Risk associated with environmental damage.

Functional Areas
Engineering
Production
Store
Finance
Purchase
Sales / Marketing
HR
QA
CS
Logistic
Status
Not started
In progress
Closed

GFORM_015 Risk Management Matrix Valid on date of print only. Printed: 02/06/2022
Prepared by: hehvno
Approved by: frvano

Risk threshold levels Value
Level 1 14
Level 2 10
Risk Concequence Scale
Value Description Example: Financial impact
1 Small
2 Moderate
3 Medium
4 High
5 Very high
Risk Probability Scale
Value Description
1 Small
2 Moderate
3 Medium
4 High
5 Very high
GFORM_015 Risk Management Matrix
Prepared by: hehvno
Approved by: frvano
RISK SCALES
Decription
Critical risk level. Mitigation is required.
Important risk that should be adressed (local management to decide from case to case)
Example: HSE impact
EBITDA impact <0,1% No injury
Minor injury with no absence
EBITDA impact 0,1<x<0,4 from work
Moderate/major injury resulting
EBITDA impact 0,4<x<1,0 in absence from work
Permanent disability resulting in
EBITDA impact 1,0<x<5 absence from work
Permanent disability resulting in
EBITDA impact >5 full job loss or death
Example: occurance frequency
More than 10 years
Once every 5-10 years
Once every 2-5 years
Once every 1-2 years
Once a year
Valid on date of print only . Printed: 02/06/2022