ALARP is often used in HSE management. But how to actually implement it? This post covers what ALARP means, where it comes from, and how to work through it systematically.
What Does ALARP Mean?
ALARP stands for As Low As Reasonably Practicable. It is a principle used in safety management that states a risk-reducing measure should be implemented, unless the costs of doing so are grossly disproportionate to the benefits gained.
The key word is “unless.” The starting point of ALARP is that you implement the measure. The burden of proof sits on whoever wants to argue against implementation. You have to actively demonstrate that the costs are unreasonable, not simply that they are higher than the benefits obtained.
This makes ALARP fundamentally different from a standard cost-benefit approach, where a measure is only implemented if the benefits outweigh the costs. ALARP favours protection first. It is closer in spirit to a precautionary principle than to a pure economic calculation.
Where Is ALARP Used?
ALARP originated in the United Kingdom, where it became a legal requirement following the Health and Safety at Work Act of 1974. It is central to how the UK Health and Safety Executive (HSE) regulates workplace safety. If you operate in a regulated industry in the UK, demonstrating ALARP is a legal obligation.
Beyond the UK, ALARP has been adopted widely in industries where the consequences of failure are severe and often irreversible. The offshore petroleum industry uses it extensively, as do aviation, nuclear energy, and process industries such as chemicals and pharmaceuticals. Anywhere you find hazards with catastrophic potential and long regulatory traditions, you will find ALARP.
In academic risk analysis, the concept is discussed alongside the three-zone framework. Risks are divided into an intolerable zone, where the risk must be reduced regardless of cost, an acceptable zone, where no further measures are required, and an ALARP zone in between, where the obligation to reduce risk is qualified by proportionality.
The Problem With How ALARP Is Usually Applied
The most common way of verifying ALARP is to calculate an expected net present value (ENPV). If the expected benefits exceed the expected costs, the measure is implemented. If not, it is not. Simple enough.
The problem is that this approach reduces a protection principle to an expected value calculation. Expected values are averages. They do not capture uncertainty, they do not account for the possibility of surprises, and they say nothing about whether the situation is robust enough to handle things going wrong. A measure might have a negative ENPV on paper and still be worth implementing if it reduces the chance of a catastrophic event, or if the cost estimates are themselves uncertain.
Rather than relying on a single calculation, Aven and Vinnem (2007) proposed a layered approach that works through progressively more detailed analysis, stopping when the answer becomes clear. Analysis is only as extensive as it needs to be, so straightforward cases are resolved quickly, and resources are reserved for decisions that require them.
How to Determine ALARP: The Layered Approach
The process has three layers, each escalating in complexity. The idea is that many decisions can be resolved early, without going through the full analysis. Only genuinely difficult cases require the detailed qualitative assessment at the end.
Layer 1: The crude screen. The first question is straightforward. Are the costs small, and is the effect on safety clearly positive? If yes, implement the measure. No calculation needed. This layer resolves a large share of practical ALARP decisions, particularly for measures that are cheap and obviously beneficial.
Layer 2: Economic assessment. If the costs are significant, a more structured analysis is warranted. This is where ENPV and ICAF come in. ENPV is the expected net present value of the measure, calculated as expected benefits minus expected costs. ICAF is the implied cost of averting a fatality, which is the cost of the measure divided by the expected number of lives saved. ICAF is then compared to the Value of a Statistical Life (VSL), a benchmark representing how much the decision-maker is willing to spend to prevent one expected fatality. If ENPV is positive, or if ICAF falls below VSL, the economic case for implementation is made. If the picture is still unclear, proceed to Layer 3.
Layer 3: Robustness and uncertainty. This is the qualitative layer. Here you assess whether the measure reduces uncertainty, improves robustness or resilience, applies best available technology, addresses personnel safety directly, and carries strategic or reputational value. A measure that scores well on these criteria can still be justified even when the expected value calculation does not favour it. The reasoning, as Aven and Vinnem put it, is that if a measure strongly contributes to robustness and resilience, it may still be recommended for implementation, even when the cost-benefit analysis is unfavourable.
The ALARP Check Tool
This tool walks you through this process. It starts by asking where the risk sits in the three-zone framework. If the risk is already acceptable, the process ends immediately. If it is intolerable, ALARP does not apply and the risk must be reduced unconditionally. Only risks in the ALARP zone proceed into the layered analysis.
From there, the tool takes you through each layer in sequence. It exists early wherever the answer is clear and proceeds to the next layer only when ambiguity remains. At the end, it generates a verdict with a log of all inputs, which you can screenshot or copy directly into a report.