vaayaa Inclusive Education
Technical risk assessment

Telecommunications and Wireless Network Engineering Risk Assessment: Site, Radio and Network Controls

A worked example of how an engineering team finds, scores and controls the risks in planning, building and running a wireless and telecommunications network, from site work and radio exposure to configuration errors and supplier delays.

Updated November 2026 8 hazards assessed Review every 6 months Highest risk: Critical to High
See the Telecommunications and Wireless Network Engineering course

Executive summary

This assessment shows how a regional wireless and telecommunications team can find, rate and control the risks that matter most to people, service continuity and network integrity. Eight hazards were chosen because they are plausible in planning, installing and running radio and transport networks. Work at height and radio exposure are the most serious for people, while configuration errors and supplier delays are the most likely to disrupt service. Each hazard is scored before controls and again after existing and added controls. Most fall to Medium or Low once the proposed controls are in place, but cyber exposure stays High until multi-factor sign in is verified. The first actions are a permit to work system for towers, a second check on configuration changes, a tested power and battery plan and an agreed spares holding. The network is a teaching example, so each score illustrates method, not a real operator.

Focus area
Telecommunications and wireless network engineering
Setting
Engineering and operations team for a regional wireless access and transport network with owned and leased sites
Method
Five by five likelihood and impact risk register

Scope

This assessment covers the design, installation, commissioning and operation of a regional wireless access network, including radio sites, backhaul links, core equipment and the change process that alters them. It considers risks to people on site, service continuity, network security, customer data and compliance duties. It does not cover any real network, operator or jurisdiction. Site count, equipment vendors, licensing regime and jurisdiction are assumptions made for teaching. This is educational content and does not replace a formal site-specific assessment.

Context

The network has a planning team that selects sites and frequencies, a field crew that installs masts, antennas and cabinets, and an operations centre that monitors alarms and applies configuration changes. Equipment comes from several suppliers, power is mains with battery backup, and some links run over leased fibre. Each hazard is scored before controls to show its natural level, then again after the existing controls and the additional controls proposed here.

Objectives, assets and stakeholders

The objective is to build and run a reliable network that keeps people safe, protects customer data, meets licence and safety duties, and delivers the service customers expect. The assets in scope are masts and rooftop sites, antennas and radios, power and battery systems, backhaul links, core and access equipment, configuration and management systems, and the network data that passes through them. Stakeholders include field crews, the operations centre, site owners and landlords, equipment suppliers, customers, emergency services and the regulator. Every hazard has one owner role, and the network engineering manager reviews the register each quarter and reports to the operations board.

Risk matrix: before and after controls

Each cell shows hazard numbers placed by likelihood and impact. Compare the two grids to see how controls move each hazard.

Before controls

Inherent risk

Risk before controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant
2
Minor
3
Moderate
4
Major
5
Catastrophic
5 Almost certain
4 Likely Likelihood 4, impact 3, score 12, high: H07 Likelihood 4, impact 4, score 16, high: H05 Likelihood 4, impact 5, score 20, critical: H01
3 Possible Likelihood 3, impact 3, score 9, medium: H04 Likelihood 3, impact 4, score 12, high: H03 Likelihood 3, impact 5, score 15, high: H02 H06
2 Unlikely Likelihood 2, impact 4, score 8, medium: H08
1 Rare

After controls

Residual risk

Risk after controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant
2
Minor
3
Moderate
4
Major
5
Catastrophic
5 Almost certain
4 Likely
3 Possible Likelihood 3, impact 2, score 6, medium: H07 Likelihood 3, impact 4, score 12, high: H06
2 Unlikely Likelihood 2, impact 2, score 4, low: H04 Likelihood 2, impact 3, score 6, medium: H03 H05 Likelihood 2, impact 4, score 8, medium: H01 H02
1 Rare Likelihood 1, impact 4, score 4, low: H08
  • Low 1 to 4
  • Medium 5 to 9
  • High 10 to 16
  • Critical 17 to 25

Hazard register

A summary first, then the detail for each hazard.

Summary of hazards with scores before and after controls
No.HazardBeforeAfterOwner
H01 Falls and injuries during work at height on masts and rooftops 20 Critical 8 Medium Site safety lead
H02 Exposure to radio frequency energy near active antennas 15 High 8 Medium Site safety lead
H03 Electric shock and arc flash in site power cabinets 12 High 6 Medium Power systems engineer
H04 Loss of site power and battery failure 9 Medium 4 Low Power systems engineer
H05 Configuration errors causing wide network faults 16 High 6 Medium Network engineering manager
H06 Cyber intrusion into network management systems 15 High 12 High Network security lead
H07 Supplier delay, defective equipment and spares shortage 12 High 6 Medium Supply chain lead
H08 Lapsed licences and missed regulatory filings 8 Medium 4 Low Regulatory affairs manager
H01

Falls and injuries during work at height on masts and rooftops

Safety Before 20 After 8

Engineers climb masts and rooftops to install or repair antennas, and a fall, dropped tool or failed anchor could cause serious injury or death.

Who or what is affected: Field crews, contractors and members of the public near sites

Causes

Long masts, time pressure to restore service, weather and unclear rescue plans.

Consequences

Serious injury or death, prosecution risk, loss of crew and stopped work on the network.

Existing controls

  • Climbers hold a basic working at height training record.
  • Ladders and harnesses are inspected before use.

Control gaps

Permits are used only for large jobs, and rescue drills are not recorded.

Additional controls

  • Prevent: Require a signed permit to work and a rescue plan for every tower visit.
  • Detect: Check harness and anchor points before each climb and log any defect found.
  • Respond: Carry rescue equipment and rehearse a casualty recovery each quarter.
Likelihood 4 x impact 5 before; 2 x 4 after Owner: Site safety lead Target: Within 30 days Early warning: Tower visits made without a signed permit or fall protection check.
H02

Exposure to radio frequency energy near active antennas

Safety Before 15 After 8

Staff working in front of or near active antennas may enter an exposure zone above agreed limits, especially when transmitters are left on during maintenance.

Who or what is affected: Field crews, site owners and nearby workers

Causes

Antennas left active during work, nearby sites added over time and unclear boundary marking.

Consequences

Health harm to workers, enforcement action and loss of site access.

Existing controls

  • Warning signs mark the exposure boundary at each site.
  • Staff complete a short induction on exposure limits.

Control gaps

Exposure surveys are done at commissioning only and not after later changes.

Additional controls

  • Prevent: Power down or isolate transmitters before any work inside the exposure boundary.
  • Detect: Survey radio exposure levels at each site after any antenna change.
  • Respond: Stop work and withdraw from the boundary if a reading exceeds the agreed limit.
Likelihood 3 x impact 5 before; 2 x 4 after Owner: Site safety lead Target: Within 30 days Early warning: A maintenance task started with transmitters still active inside the boundary.
H03

Electric shock and arc flash in site power cabinets

Safety Before 12 After 6

Technicians open cabinets carrying mains and direct current supplies while live, and a fault or dropped tool can cause shock, burns or an arc flash.

Who or what is affected: Field technicians and contractors at sites

Causes

Live work under time pressure, worn insulation and missing labels on circuits.

Consequences

Electric shock, burns, equipment damage and injury to staff.

Existing controls

  • Cabinets are locked and keyed to authorized staff only.
  • Electrical work is limited to qualified technicians.

Control gaps

Lock out is not checked on every visit and circuit labels are incomplete.

Additional controls

  • Prevent: Lock out and test supplies to dead before opening any power cabinet.
  • Respond: Keep first aid and isolation tools with each site kit.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Power systems engineer Target: Within 45 days Early warning: A cabinet opened without a recorded isolation and voltage test.
H04

Loss of site power and battery failure

Operational Before 9 After 4

Mains supply fails and backup batteries have aged or been poorly sized, so sites go down during an outage and customers lose service.

Who or what is affected: Customers, the operations centre and emergency service users

Causes

Ageing batteries, long outages, undersized backup and no generator test record.

Consequences

Service loss, customer complaints and a need for emergency repair visits.

Existing controls

  • Batteries provide a short runtime at each main site.
  • Alarms report mains loss to the operations centre.

Control gaps

Battery runtime is assumed rather than tested at most sites.

Additional controls

  • Detect: Test battery runtime and voltage on a fixed cycle and alarm any shortfall.
  • Recover: Restore power from the standby generator and log the cause of each outage.
Likelihood 3 x impact 3 before; 2 x 2 after Owner: Power systems engineer Target: Within 60 days Early warning: A site whose battery runtime on test falls below the agreed minimum.
H05

Configuration errors causing wide network faults

Technology and data Before 16 After 6

An incorrect routing, frequency or power setting is pushed to live equipment, causing interference, loops or loss of service across many sites.

Who or what is affected: Customers, the operations centre and neighboring networks

Causes

Manual entry of settings, copied templates and pressure to finish changes in the window.

Consequences

Wide service outage, interference with other networks and costly emergency fixes.

Existing controls

  • Changes are logged in a central configuration system.
  • Changes are applied in an agreed maintenance window.

Control gaps

Changes are checked only by the engineer who made them.

Additional controls

  • Prevent: Require a second engineer to approve every configuration change before it goes live.
  • Recover: Keep verified configuration backups and roll back a faulty change within 30 minutes.
Likelihood 4 x impact 4 before; 2 x 3 after Owner: Network engineering manager Target: Within 30 days Early warning: A configuration change deployed without a second engineer sign off.
H06

Cyber intrusion into network management systems

Technology and data Before 15 After 12

An attacker gains access to management interfaces through weak credentials or unpatched software, and then alters settings, reads customer data or disrupts traffic.

Who or what is affected: Customers, network staff and the owners of the network data

Causes

Reused passwords, delayed software patches and remote access left open after maintenance.

Consequences

Service disruption, data exposure, regulator notice and loss of customer trust.

Existing controls

  • Management interfaces sit on a separate network segment.
  • Administrator accounts use individual logins.

Control gaps

Patch status is not reported, and remote access is not reviewed after work ends.

Additional controls

  • Prevent: Enforce multi-factor sign in and remove management accounts that are no longer used.
  • Detect: Review management logs weekly for unknown logins or unexpected configuration changes.
Likelihood 3 x impact 5 before; 3 x 4 after Owner: Network security lead Target: Within 30 days Early warning: A management login from an unknown location or outside working hours.
H07

Supplier delay, defective equipment and spares shortage

Supplier Before 12 After 6

A key vendor delivers late, ships defective radios or cannot supply spares, so planned builds slip and faulty units stay in service longer than planned.

Who or what is affected: Operations team, customers and approved suppliers

Causes

Single source components, long lead times and no agreed spares holding.

Consequences

Delayed service launch, longer outages and higher emergency costs.

Existing controls

  • Two suppliers are approved for core equipment.
  • Orders are tracked against planned installation dates.

Control gaps

Defect rates are not compared across vendors and spares levels are not reviewed.

Additional controls

  • Prevent: Agree spares holdings and supplier lead times in writing for critical equipment.
  • Respond: Use a preapproved alternative vendor for urgent replacements.
Likelihood 4 x impact 3 before; 3 x 2 after Owner: Supply chain lead Target: Within 60 days Early warning: Critical spares below the agreed stock level or supplier lead time above plan.
H08

Lapsed licences and missed regulatory filings

Legal and compliance Before 8 After 4

A spectrum licence, site permit or compliance filing lapses or is submitted late, so the network may operate without proper authority.

Who or what is affected: Network operators, customers and the regulator

Causes

Renewal dates tracked informally, staff changes and unclear duties after site moves.

Consequences

Penalties, forced switch off of sites and damaged regulator relations.

Existing controls

  • Licence renewals appear on a shared calendar.
  • Key filings are reviewed by a manager before submission.

Control gaps

Renewal reminders go to one mailbox and are not checked against site lists.

Additional controls

  • Prevent: Assign a named owner and a backup owner for each licence duty.
  • Recover: Submit any late filing with a written explanation and a corrective plan.
Likelihood 2 x impact 4 before; 1 x 4 after Owner: Regulatory affairs manager Target: Within 45 days Early warning: A licence or filing due within 10 days with no named preparer.

Rating method and evaluation

Each hazard is rated on two five-point scales. Likelihood runs from Rare to Almost certain, and impact runs from Insignificant to Catastrophic, with the effect on people weighted most heavily. Multiplying the two gives a score from 1 to 25, placed in one of four bands: Low from 1 to 4, Medium from 5 to 9, High from 10 to 16 and Critical from 17 to 25. Inherent risk is the score before any controls, and residual risk is the score after existing and added controls are working. A residual score must never be higher than the inherent score, and where inherent is 10 or more the residual must be lower. Anything Critical stops related work until a senior engineer approves it. High items need a dated plan and senior attention, Medium items need routine controls and a named owner, and Low items are accepted and watched. Field crews and operators who do the work challenge the ratings, each High score gets a peer review, and the register is reviewed whenever an indicator reaches its threshold. Scores guide the order of work and are not measurements.

Likelihood, impact and rating bands

Likelihood

  • 5 Almost certain: Expected to happen in most circumstances.
  • 4 Likely: Will probably happen in many circumstances.
  • 3 Possible: Could happen at some time.
  • 2 Unlikely: Not expected, but it could happen.
  • 1 Rare: Only in exceptional circumstances.

Impact

  • 1 Insignificant: No lasting effect. Handled within routine work.
  • 2 Minor: Small effect that is quickly corrected.
  • 3 Moderate: Noticeable effect that needs managed effort to correct.
  • 4 Major: Serious effect on people, delivery or reputation.
  • 5 Catastrophic: Severe or lasting effect that threatens the whole activity.

Bands (likelihood x impact)

  • Low (1 to 4): Accept and monitor.
  • Medium (5 to 9): Manage with routine controls.
  • High (10 to 16): Senior attention and a treatment plan.
  • Critical (17 to 25): Act first. Do not proceed until reduced.

Monitoring, escalation and review

Review this assessment every 6 months, and sooner when an indicator below reaches its threshold.

Early-warning indicators and escalation thresholds
Indicator to watchEscalate when
Tower visits made without a signed permit or fall protection check.Escalate to the site safety lead at once and stop the visit, and to the operations director if repeated within a month.
Configuration changes deployed without a second engineer sign off.Escalate to the network engineering manager at once, roll back the change, and review the team process within a week.
Sites where battery runtime falls below the agreed minimum on test.Escalate to the power systems engineer when any site falls below the minimum, and to the operations director if it stays below for a month.
Critical spares below the agreed stock level or supplier lead time above plan.Escalate to the supply chain lead when stock falls below the floor, and to the operations director if supply is not restored within 14 days.
Licence or compliance filings due within 10 days with no named preparer.Escalate to the regulatory affairs manager at once, and to the operations director if still open after 3 days.

Contingency arrangements

If a serious event occurs, such as a fall from height, an electrical fault at a site or a core outage, the operations lead makes the site safe first, stops related work and informs the duty manager. Emergency services are called where people are hurt. The network team isolates the faulty element, moves traffic to the alternative route and restores configuration from the last verified backup. Spares and a standby power source are held at agreed locations, and customers and the regulator are told what they need to know early and in plain terms.

Prioritized action plan

  1. Introduce a permit to work and fall protection check for every tower visit, owner site safety lead, within 30 days.
  2. Require a second engineer to check every configuration change before it goes live, owner network engineering manager, within 30 days.
  3. Test battery runtime and generator changeover at priority sites, owner power systems engineer, within 60 days.
  4. Agree spares and supplier lead times for critical equipment, owner supply chain lead, within 60 days.
  5. Set up a licence and compliance calendar with a backup owner for each duty, owner regulatory affairs manager, within 45 days.

Conclusion

Reliable networks depend on a few steady habits: permits for every tower visit, a second check on every configuration change, tested power backup, careful supplier management and a calendar for licence duties. The highest scores sit with work at height, radio exposure and configuration faults, and each has controls that bring residual scores down. Keep the register as a living record, review it on the stated cycle, and seek qualified engineering, safety and legal advice for any real site, licence or regulatory question.

Assumptions and limitations

Assumptions

  • Jurisdiction and licensing regime are not specified, so legal duties are described only in general terms.
  • Sites include rooftop and tower installations worked on by trained contractors using managed equipment.
  • Equipment is a mix of current vendor products managed through a central configuration system.

Limitations

  • The scores are examples for learning and do not describe any real network or operator.
  • Radio exposure limits and electrical rules differ by country and change over time, so specialist review is needed.
  • This is educational content and is not engineering, safety or legal advice.

Related frameworks to study

  • Hierarchy of controls
  • Radio frequency exposure assessment practice for work near antennas
  • Change and configuration management practice
  • Business continuity planning for critical services

Technical Risk Assessment

China, India, United States, Indonesia, Pakistan, Nigeria, Brazil, Bangladesh, Russia, Japan, Mexico, Philippines, Vietnam, Egypt, Turkey, Germany, United Kingdom, France, Italy, Canada, South Korea, Australia, Spain.

For Learning Reference Only: This assessment demonstrates how risk assessment principles are applied in a practical setting, providing a useful reference for learning and understanding. Actual assessments may be adapted to suit specific site conditions and circumstances.

Keep learning

Study the subject behind this assessment.

More Technical risk assessments

Hourly Active: 45,552 Learners