Business Risks -- Overview of the Risk Environment There are various types of business risks in the business environment, and these risks, of course, can differ from environment to environment depending on the type of business or organization. The severity and category of the risk also depends on the largeness of the organization and on various other factors, such as location, personality of employer, quantity of employees employed, and so forth (Crockford, 1986).

Generally, the most common risks are the following:

Workplace safety -- Every workplace environment runs the risk of not evidencing workplace safety according to the regulations of Occupational Safety and Health Environment (OSHA). Workplace safety applies to conditions of safety that exists both between workplace manager and his employees and between workplace and those who frequent, or profit from the services of the workplace. As regards the hospitality industry, for instance particularly the spa, workplace safety is inordinately important since lack of it can not only destroy the reputation of the spa but can also involve the manager in numerous and exorbitant law suits. As regards safety in the environment of the spa, many factors are involved from cooking utensils and hygienic restaurant / cocking environment to ascertaining the tidiness and roominess of the place itself with particular attention focused on guests' safety and comfort. Attention too must be allocated to elderly guests.

2. Employee conflicts - these run the gamut from miscommunication amongst employees to conflict between employees and employer over work-related issues. Managers must ascertain that conflict is 'nipped in the bud' before it progresses to contaminate the workplace and destroy the harmonious work environment. Rules such as those implemented by the Equal Employment Opportunity Commission should also be carefully followed. This will ensure that all proper procedures are maintained. Conformance to such rules are all the more important in a hospitality environment such as a spa where ethnicities and backgrounds of employees are likely to be diversified, where employee base is likely to be large, and where there is all the more opportunity for conflict.

3. Product quality -- for companies that serve or provide certain products to the public this may be a source of concern where the product may run the risk of being contaminated and harm a consumer, running the company into expensive suit cases and possibly into bankruptcy. The company has to take proper steps to meet its quality requirements being careful o abstain from negligence of products and service.

Such an instance may manifest itself in the spa in various ways ranging form the food provided (e.g. food contamination) to a person drowning in the pool. All instances must be carefully thought of to prevent risk from occurring in these situations.

4. Workplace violence - This is similar to workplace conflict but extend beyond that to actual aggressive risk. The Bureau of Justice Statistics from between 1992 to 2006, more than 11,00 deaths occurred on the workplace. Not all of this is between employees and the hospitality sector in general and spas, in specific, have to be particularly careful between violence between its mix of employees and violence between its mix of guests. Thefts, too, can be a problem. The employer must take steps in preventing these risks from occurring for otherwise he can be accused of negligence and the business may mortally suffer (Crockford, 1986).

Other risks may proceed from uncertainty in financial transactions, as well as from competition, and from factors in both external and internal environment. Threats include credit risk, accidents, natural disasters, and challenging unpredictable events that include political factors. All business have their risks. The spa, as per hospitality factors, has its own degree of risks which may, in some aspects be more intensified than those occurring in other businesses.

The need for risk management and the effect of risk on service / tourism / spa factor

It is well-known that there is a great deal of global risks in both natural and human systems. As Faulkner et al. (2010) point out; tourism is not immune to this and, on the contrary, may be more susceptible to these risks than most other -- if not all other industries and services. Mores so, authors such as Drabek (1995) hypothesize that the increased volume of global tourism make these risks all the more possible and that tourists are exposed to ever grater levels of risk. Despite this factor, Faulkner et al. (2010) urge the need for grater levels of risk assessment and risk management in the tourism industry point out that not only is little research done in this area but that governments and tourism sectors themselves should go to more greater lengths of enhancing and intensifying their risk management factors than they do at the moment. This is particularly important in the post November 11 tragedy.

Crisis...

In both instances, the disaster not only impacted the services of the organization at the moment but also destroyed its ability to regain normal operations and continue its standing.
All tourism industries have to work in conjunction with the government in developing risk management programs. The development of effective plans within the tourist sector is contingent upon the following:

Regular inter-institution meetings and liaison

Implementation of a risk management process

Development of plans to that extent

Community consultation

Training of personnel

Constant and efficient review of their standards. (AICST, 2006)

Risk management plans for tourism industries should focus on the safety of visitors and employees as well as ensure security of buildings from disaster, have supply resources in stock, and create procedures for returning their organization to original working conditions.

The organization too has to distinguish between hazard and risk with hazard being a source of potential harm to the community or organization and risk being a disaster to the organization's objective. A hazard may also be a source of risk, but may not be in itself a disaster. The best example is an earthquake occurring in the town where the spa is located. The earthquake is a hazard. Yet it may not be a risk in that it may not attack the spa.

Strategic management approaches to risk and the process of risk management

Several risk management standards have been developed by organizations such as the Project Management Institute, the National Institute of Science and Technology, International Organization for Standardization (ISO) standards, and actuarial societies. The methods and objectives vary, of course, from business to business with risk management standards depending on the type of organization and service.

Risk management is defined by a prioritization process where risks are prioritized according to their intensity of importance and according to their greatest probability of occurrence. Those with greatest probability and greatest intensity are handled first. This helps the organization allocate its resources and attention profitably.

The method that the organization adopts in its risk management is most frequently the following:

1. It identifies and defines possible threats to its industry or service

2. It asses the vulnerability of its assets to the threats

3. It determines the risk and other consequence of the threats on the specific assets

4. It brainstorms ways to reduce these risks, and

5. It prioritizes risk reduction measures according to certain strategies or tools (Dorfman, 2007).

The principles of risk management, according to the International Organization for Standardization (ISO) involves the following elements: it should be systematic and structures, be planned by the entire organization and stakeholders, be constructive and accurately address the issues, consider human factors, be constantly monitored and reviewed, be premised on reliable and current information, be responsive to change, be profitable and not involve too much pain and expense to the organization, be flexible, and address uncertainties and assumptions (i.e. take into account contingency situations) (Committee Draft of ISO 31000 Risk management).

The risk management models vary based upon culture and industry as well as problems that the industry sector may face. The most common risk management methods are the following:

Scenario-based risk identification model - where various scenarios are mapped and any event that triggers an undesirable scenario in regards to the organization is identified and tagged as risk

Objectives-based risk identification - The organization or industry has objectives. Any challenges and threats to those objectives are termed risks.

Taxonomy -- based risk identification - The taxonomy works according to a breakdown and identification of possible risk sources. A questionnaire is crated, based on taxonomy and the knowledge of what to do in risk management situations

Common-risk checking. This strategy lists all known risks that may be existent in that particular work environment and tehn checks off to see whether those risks apply in the particular work environment in question and…