What auditors really look for
- Crisp linkage between hazards, hazardous situations and sequences of events.
- Risk controls tied to specific causes and verified by evidence.
- Residual risk rationale that maps to your policy and benefit‑risk.
Structure that keeps teams fast
Keep columns purposeful. If a field never informs a decision or a control, drop it. Your traceability and clarity matter more than page count.
Example row skeleton
Function → Potential Failure Mode → Effects → Causes → Current Controls → S (1–5) → O (1–5) → D (1–5) → RPN
Recommended Actions → Owner → Due → Verification Evidence → Residual Risk → Link to Hazard/HS