in example, to a fire in a paper mill plant. When evaluating the fire
risk using our method, since the product F C equals 0, it might
happen that the proposed method evaluates it as less relevant
compared to other risks; an expert, instead, could see the fire risk
as the most relevant risk, simply because of the serious consequences of fire accident occurrence. So, which is the right way to watch to the problem? In our opinion, clearly, the right way to assess the risk is the one proposed here. In fact, the gravity of the fire
risk is accounted for with the second term of Eq. (10), while, if no
accident happened in the history of a firm, this means that the corresponding safety level is acceptable and, specifically, the prevention actions in place are effective. A conclusion which we might
draw from this example is that, if the prevention and protection
measure in place in a firm produced a history with no accidents,
this has to force the attention of the auditor not only towards risks
with major consequences but also towards other risks, more relevant in that firm and, as retrievable from the firm’s safety history,
not properly managed in the past.