Our sites use InControl to manage Management of Change. The current risk matrix is limited to the overall risk of the change rather than individual risk assessments for People, Plant, Property, Productivity, Environment etc. We also need to 2 risk assessments 1 for "Current Risk" (where the risks are) and 1 for "Potential Risks" (would could go wrong and what is the impact)