Who decides that information is not a risk?

Analysis starts after selection

A risk register shows only what has already been recognised and reported. It does not show events treated as ordinary operational problems, information retained at one organisational level or issues that nobody connected to the contract.

The filter is not always deliberate

A project director, site manager, designer and contract specialist see the same event through different duties and objectives. Each may rationally overlook an element that is contractually significant from another perspective.

The system should reduce blind spots

Direct information sources, regular reviews, permission to challenge and a clear escalation path are needed. The purpose is not to create more alarms, but to ensure that a decision that something is not a risk also has a basis.

Technology amplifies the process that already exists

AI can compare documents, detect inconsistencies and connect information from different sources. If the organisation does not supply the data or assign responsibility for assessing it, technology simply processes an incomplete picture more quickly.

The most important risk filter often operates before the formal risk-management process begins.