vaayaa Inclusive Education
Technical risk assessment

Geospatial Engineering and Surveying Technology Risk Assessment: Control Accuracy, Field Safety and Data Risks

A worked example of how a small surveying and geospatial team identifies, scores and controls the risks that threaten data accuracy, field safety, data security and client trust, from instrument faults to unsafe site access.

Updated November 2026 8 hazards assessed Review every 6 months Highest risk: Critical to Medium
See the Geospatial Engineering and Surveying Technology course

Executive summary

This assessment shows how a small surveying and geospatial team can find, rate and control the risks that matter most to the accuracy of its data and the safety of its people. Eight risks were chosen because they are plausible in everyday field capture, processing and delivery. Field exposure to traffic, terrain and overhead services carries the highest inherent score, while control point errors and processing mismatches are frequent and can spread quietly into design decisions. Each risk is scored before controls and again after existing and added controls. Most risks fall to Medium or Low once the proposed controls are in place, but field safety stays at Medium because the impact of a serious incident remains severe. The first actions are a written field risk assessment for every job, routine checks against known control points, a tested data backup and a drone pre flight log. The scores illustrate method only.

Focus area
Geospatial engineering and surveying technology
Setting
Survey and geospatial team capturing field data and producing digital maps and models for civil engineering and land projects
Method
Five by five likelihood and severity risk register

Scope

This assessment covers a small geospatial and surveying team that captures field data with total stations, GNSS receivers and unmanned aerial systems, processes it in specialist software and delivers coordinates, models and maps to engineering clients. It covers accuracy, equipment, field safety, data security, supplier dependence and legal duties for land access and data use. It does not cover legal title determination or any specific site. Jurisdiction, equipment make, project size and reference frames are assumptions made for teaching only, and any real survey needs specialist review and a site-specific assessment.

Context

The team has a survey lead, two field surveyors, a geospatial analyst and a data manager. Field work uses total stations, GNSS receivers, levels and a small fleet of drones, with data returned to the office for processing and quality checks. Projects include road alignments, building setting out and topographic models for design teams. Each risk is scored before controls to show its natural level, then again after existing controls and the additional controls proposed here. Scores are examples for learning rather than measurements from a real firm.

Objectives, assets and stakeholders

The objective is to deliver accurate, traceable and safe survey and geospatial products that engineers can rely on, while protecting field crews, the public and the data entrusted to the team. Assets in scope are survey instruments and drones, field and office software, coordinate datasets and models, client and landowner information, and the reputation of the team. Stakeholders include field surveyors, the survey lead, the data manager, engineering clients, landowners, the public near work areas, equipment suppliers and the professional bodies that govern surveying practice in the relevant jurisdiction. Every risk has one owner role, and the survey lead keeps the register current and reviews it with the team each quarter.

Risk matrix: before and after controls

Each cell shows hazard numbers placed by likelihood and impact. Compare the two grids to see how controls move each hazard.

Before controls

Inherent risk

Risk before controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely Likelihood 4, impact 3, score 12, high: H04 Likelihood 4, impact 4, score 16, high: H01 Likelihood 4, impact 5, score 20, critical: H03
3 Possible Likelihood 3, impact 3, score 9, medium: H07 Likelihood 3, impact 4, score 12, high: H02 H06 H08 Likelihood 3, impact 5, score 15, high: H05
2 Unlikely
1 Rare

After controls

Residual risk

Risk after controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely
3 Possible
2 Unlikely Likelihood 2, impact 3, score 6, medium: H01 H02 H04 H06 H08 Likelihood 2, impact 4, score 8, medium: H03 H05
1 Rare Likelihood 1, impact 2, score 2, low: H07
  • Low 1 to 4
  • Medium 5 to 9
  • High 10 to 16
  • Critical 17 to 25

Hazard register

A summary first, then the detail for each hazard.

Summary of hazards with scores before and after controls
No.HazardBeforeAfterOwner
H01 Control point and reference frame errors 16 High 6 Medium Senior field surveyor
H02 Instrument calibration and GNSS fault 12 High 6 Medium Survey equipment lead
H03 Field crew exposure to traffic, terrain and overhead services 20 Critical 8 Medium Survey lead
H04 Data processing errors and software version mismatch 12 High 6 Medium Geospatial analyst lead
H05 Unmanned aircraft flight incidents and airspace breaches 15 High 8 Medium Drone operations lead
H06 Loss of confidentiality for infrastructure and property data 12 High 6 Medium Data manager
H07 Supplier and subcontractor dependence 9 Medium 2 Low Procurement lead
H08 Land access, boundary and data sharing duties 12 High 6 Medium Survey lead
H01

Control point and reference frame errors

Technology and data Before 16 After 6

Coordinates are computed against a wrong, outdated or mis-transformed reference frame, or control points are misidentified, so every dependent measurement and design inherits a systematic offset.

Who or what is affected: Design engineers, contractors and the public using the data

Causes

Mixed datasets from several sources, rushed setup and transformations applied by hand.

Consequences

Misplaced foundations, rework, boundary disputes and loss of client trust.

Existing controls

  • Control points are connected to a national network at the start of each project.
  • Processing software records the reference frame used for every dataset.

Control gaps

Daily checks are not logged, and client supplied control is accepted without a test.

Additional controls

  • Prevent: Keep a written reference frame and transformation checklist that a second person signs before issue.
  • Detect: Check at least two known control points at the start and end of each day and log the result.
Likelihood 4 x impact 4 before; 2 x 3 after Owner: Senior field surveyor Target: Within 30 days Early warning: Control point checks that differ from known values by more than the agreed tolerance.
H02

Instrument calibration and GNSS fault

Operational Before 12 After 6

Total stations, levels or GNSS receivers drift out of calibration, lose satellite lock or suffer a battery or firmware fault, so readings look valid but are biased or incomplete.

Who or what is affected: Field surveyors, clients and the project team

Causes

Knocks in transit, ageing equipment, cold or wet conditions and firmware changes.

Consequences

Biased coordinates, repeat visits, delayed programmes and disputed measurements.

Existing controls

  • Instruments are sent for external calibration on a fixed cycle.
  • Field staff check level and collimation before each session.

Control gaps

Field checks are not recorded, and GNSS quality flags are not reviewed before data leaves the site.

Additional controls

  • Prevent: Keep a calibration register and remove any instrument with an expired certificate from service.
  • Respond: Re-observe the affected points with a second instrument before any data is issued.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Survey equipment lead Target: Within 45 days Early warning: Calibration certificates past their due date or GNSS quality flags outside the agreed limits.
H03

Field crew exposure to traffic, terrain and overhead services

Safety Before 20 After 8

Surveyors work beside live traffic, on steep or unstable ground and near buried or overhead utilities, where a vehicle strike, fall or contact with a live service can cause serious injury or death.

Who or what is affected: Field surveyors, drivers, road users and utility workers

Causes

Pressure to meet programme, poor utility records, weather and fatigue from long days.

Consequences

Serious injury, fatal harm, prosecution and suspension of work.

Existing controls

  • A site induction is given before entry to live roads or utility areas.
  • High visibility clothing and traffic management are used where roads are open.

Control gaps

Utility records are often out of date, and traffic plans are not reviewed when conditions change.

Additional controls

  • Prevent: Require a written method statement and a utility search for every job before crews enter the site.
  • Detect: Check traffic control and exclusion zones at the start of each shift and record the result.
  • Respond: Stop work at once if a live service or vehicle is close, and reassess the task.
Likelihood 4 x impact 5 before; 2 x 4 after Owner: Survey lead Target: Within 30 days Early warning: Near miss reports involving vehicles or services that are not closed within 7 days.
H04

Data processing errors and software version mismatch

Technology and data Before 12 After 6

Processing software, transformation settings or point cloud filters differ between versions or users, so the same raw data gives different outputs, and errors are not caught before a model is issued.

Who or what is affected: Data users, designers and the data manager

Causes

Software updates, untracked manual edits and filter choices made without notes.

Consequences

Inconsistent models, rework, wrong quantities and loss of confidence in outputs.

Existing controls

  • Processing settings are saved in a project template.
  • Outputs are reviewed by a second analyst before issue.

Control gaps

Software updates are installed without a test, and review does not check filter settings.

Additional controls

  • Prevent: Lock software versions and settings per project and record them in the job file.
  • Detect: Compare a test dataset with a known result after each software update.
Likelihood 4 x impact 3 before; 2 x 3 after Owner: Geospatial analyst lead Target: Within 60 days Early warning: Outputs that cannot be reproduced from the saved job file and settings.
H05

Unmanned aircraft flight incidents and airspace breaches

Safety Before 15 After 8

A drone loses link, battery or GNSS, strikes people or property, or enters restricted airspace during a survey flight, causing injury, damage and regulatory action.

Who or what is affected: Pilots, bystanders, property owners and other airspace users

Causes

Low battery, weak signal, strong wind, obstruction by trees or buildings and rushed flights.

Consequences

Injury, damage to property, loss of the aircraft and enforcement action.

Existing controls

  • Only trained pilots fly the aircraft under a written operations procedure.
  • Flights are planned with a map of restricted areas before each job.

Control gaps

Flight logs are completed after the job rather than before, and link loss procedures are not rehearsed.

Additional controls

  • Prevent: Complete a pre flight check with battery, link and GPS status recorded before every flight.
  • Respond: Use a planned return and landing area, with a stop rule when wind or link quality exceeds set limits.
Likelihood 3 x impact 5 before; 2 x 4 after Owner: Drone operations lead Target: Within 30 days Early warning: Flights with signal or battery warnings that were not recorded in the flight log.
H06

Loss of confidentiality for infrastructure and property data

Technology and data Before 12 After 6

Survey models of critical utilities, security sensitive sites or private land are copied, shared through insecure links or exposed in a breach, giving outsiders detail they should not hold.

Who or what is affected: Clients, landowners, utility operators and the public

Causes

Lost or stolen field devices, phishing and sharing files by email for convenience.

Consequences

Disclosure of sensitive assets, breach of client terms, legal claims and reputational loss.

Existing controls

  • Project folders are restricted to named staff.
  • Files are shared with clients through an access controlled portal.

Control gaps

Field tablets are not always encrypted, and access rights are not reviewed after projects close.

Additional controls

  • Prevent: Enable multi factor sign in, encrypt field devices and remove public share links.
  • Recover: Test restoring project data from an offline backup each quarter and record the result.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Data manager Target: Within 30 days Early warning: Public or unexpected share links to project folders found during an access review.
H07

Supplier and subcontractor dependence

Supplier Before 9 After 2

A key supplier of imagery, calibration, software licences or subcontract crews fails, changes terms or delivers below standard, leaving a project without the data or capacity it was planned around.

Who or what is affected: Project team, clients and programme managers

Causes

Single source supply, licence expiry and a small supplier base.

Consequences

Delayed programmes, extra cost and outputs that need rework.

Existing controls

  • An approved supplier list with agreed service levels is kept.
  • Contracts include a written notice period for changes.

Control gaps

Supplier performance is not scored, and contingency suppliers are not tested.

Additional controls

  • Prevent: Hold a second approved supplier for imagery and calibration and review the list each year.
  • Detect: Check each supplier delivery against agreed acceptance criteria before payment is released.
Likelihood 3 x impact 3 before; 1 x 2 after Owner: Procurement lead Target: Within 90 days Early warning: Supplier deliveries that are late or returned for rework twice in one quarter.
H08

Land access, boundary and data sharing duties

Legal and compliance Before 12 After 6

Crews enter private land without valid permission, survey across boundaries in dispute or share data beyond what the client or the applicable rules allow, creating legal claims and regulatory notices.

Who or what is affected: Landowners, clients, the public and the survey team

Causes

Unclear ownership records, verbal permissions and pressure to start early.

Consequences

Trespass claims, withdrawn consent, legal costs and damage to the professional record.

Existing controls

  • Access permission is requested before work on private land.
  • Boundary disputes are referred to the client's legal adviser.

Control gaps

Consent is often verbal, and data sharing terms are not checked against each project.

Additional controls

  • Prevent: Record written access consent and the scope of the survey before any entry to private land.
  • Respond: Pause work and notify the survey lead when a boundary or access dispute is raised.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Survey lead Target: Within 60 days Early warning: Access permission missing or dated after the first site visit.

Rating method and evaluation

Each risk is rated on two five-point scales. Likelihood runs from Rare to Almost certain, and severity runs from Negligible to Catastrophic, each with a value from 1 to 5. Multiplying the two gives a score from 1 to 25, which falls into one of four bands: Low from 1 to 4, Medium from 5 to 9, High from 10 to 16 and Critical from 17 to 25. Inherent risk is the score before any controls, judged as if the work had no safeguards. Residual risk is the score after existing and proposed controls are in place. Severity is judged on harm to people first, then on data accuracy, rework cost, project delay and reputation. A risk is never rated down only because it has not happened yet. Critical risks stop work until a named owner confirms controls, High risks need senior attention and a dated plan, Medium risks need routine controls with a named owner, and Low risks are accepted and watched. Ratings are challenged by field surveyors during briefings, by a second person during data review, and by the survey lead at each quarterly review. Any rating is revisited when an indicator reaches its threshold or when equipment, software or a project changes.

Likelihood, impact and rating bands

Likelihood

  • 5 Almost certain: Expected to happen in most circumstances.
  • 4 Likely: Will probably happen in many circumstances.
  • 3 Possible: Could happen at some time.
  • 2 Unlikely: Not expected, but it could happen.
  • 1 Rare: Only in exceptional circumstances.

Impact

  • 1 Insignificant: No lasting effect. Handled within routine work.
  • 2 Minor: Small effect that is quickly corrected.
  • 3 Moderate: Noticeable effect that needs managed effort to correct.
  • 4 Major: Serious effect on people, delivery or reputation.
  • 5 Catastrophic: Severe or lasting effect that threatens the whole activity.

Bands (likelihood x impact)

  • Low (1 to 4): Accept and monitor.
  • Medium (5 to 9): Manage with routine controls.
  • High (10 to 16): Senior attention and a treatment plan.
  • Critical (17 to 25): Act first. Do not proceed until reduced.

Monitoring, escalation and review

Review this assessment every 6 months, and sooner when an indicator below reaches its threshold.

Early-warning indicators and escalation thresholds
Indicator to watchEscalate when
Instrument calibration certificates past their due date.Escalate to the survey lead at once, and withdraw the instrument from use until it is recertified.
Control point checks that differ from known values by more than the agreed tolerance.Escalate to the survey lead before any further data is issued, and to the client if a delivered product is affected.
Field jobs started without a completed risk assessment or briefing.Escalate to the survey lead on the same day and stop the job until the assessment is complete.
Drone flights logged without a completed pre flight check.Escalate to the drone operations lead at once and ground the aircraft until checks are complete.
Failed or overdue backup restore tests on project data.Escalate to the data manager within one working day, and to the survey lead if a test still fails after 14 days.

Contingency arrangements

If a serious event occurs, such as a field injury, a drone crash, a confirmed data breach or a control error found after a design was issued, the survey lead stops related work and secures the site. The data manager isolates affected files and restores them from the latest tested backup. The affected client and, where required, the professional and regulatory bodies are informed through the survey lead as the applicable rules require. Corrected deliverables are reissued with a clear note of what changed, and an independent check is made before reuse.

Prioritized action plan

  1. Adopt a written field risk assessment and briefing for every job, owner survey lead, within 30 days.
  2. Schedule pre flight checks and a drone flight log with a named pilot in command, owner drone operations lead, within 30 days.
  3. Set a routine check of at least two known control points at the start and end of each day, owner senior field surveyor, within 45 days.
  4. Enable multi factor sign in, encrypt field devices and test a restore from backup, owner data manager, within 30 days.
  5. Review supplier calibration records and qualify a second imagery source, owner procurement lead, within 60 days.

Conclusion

Reliable survey work depends on steady habits: checks against known control points, calibrated equipment, a written risk assessment for every field job, tested backups and clear rules for drone flights and data sharing. The highest inherent scores sit with field safety and control errors, and each has actions that bring the residual score down. Treat the register as a living record, review it on the stated cycle and seek qualified advice for any real surveying, engineering, legal or safety question.

Assumptions and limitations

Assumptions

  • Jurisdiction is not specified, so land access, licensing and data rules are described in general terms only.
  • Equipment is calibrated by an external provider on a fixed cycle, and staff are trained in its use.
  • Control points and reference frames are supplied by a client or national network, and their accuracy is assumed to be documented.

Limitations

  • The scores are examples for learning and do not describe any real survey or project.
  • Surveying, mapping, aviation and licensing rules differ by location and change over time, so specialist review is needed.
  • This is educational content and is not professional surveying, engineering, legal or safety advice.

Related frameworks to study

  • Hierarchy of controls for ranking mitigations
  • Likelihood and severity risk matrix
  • Plan, Do, Check, Act review cycle
  • Permit to work and site induction process
  • Quality management system internal audit

Technical Risk Assessment

China, India, United States, Indonesia, Pakistan, Nigeria, Brazil, Bangladesh, Russia, Japan, Mexico, Philippines, Vietnam, Egypt, Turkey, Germany, United Kingdom, France, Italy, Canada, South Korea, Australia, Spain.

For Learning Reference Only: This assessment demonstrates how risk assessment principles are applied in a practical setting, providing a useful reference for learning and understanding. Actual assessments may be adapted to suit specific site conditions and circumstances.

Keep learning

Study the subject behind this assessment.

Geospatial Engineering and Surveying Technology course Read the best practices for this course

More Technical risk assessments

Hourly Active: 45,552 Learners