What Is a Workplace Risk Assessment?
A risk assessment is a structured process of identifying hazards in the workplace, evaluating the likelihood and severity of potential harm, and deciding what measures need to be implemented to reduce that risk to an acceptable level. It is a legal requirement in most jurisdictions and forms the backbone of any occupational health and safety management system.
A good risk assessment is not a paper exercise — it's a living process that drives real action to protect workers.
Who Should Conduct a Risk Assessment?
Risk assessments should be conducted by a competent person — someone with the knowledge, skills, and experience to identify hazards and understand their implications. In larger organizations this may be a dedicated OHS professional. In smaller workplaces, it's often the owner, manager, or an experienced worker who has received appropriate training. Frontline workers should always be involved because they have first-hand knowledge of how work is actually performed.
The Five-Step Risk Assessment Process
Step 1: Identify the Hazards
Walk through the workplace and observe all tasks, equipment, materials, and processes. Consult workers, review incident logs and near-miss reports, and check manufacturer instructions and Safety Data Sheets (SDS). Consider:
- Routine and non-routine tasks
- Work performed by contractors and visitors
- Maintenance, start-up, and shutdown activities
- Emergency situations
Step 2: Determine Who Might Be Harmed and How
Identify which workers, contractors, or members of the public could be affected by each hazard. Consider groups who may be at heightened risk: new or young workers, pregnant employees, workers with disabilities, and lone workers. Understanding who is at risk shapes how controls are prioritized.
Step 3: Evaluate the Risk and Decide on Controls
For each hazard, assess the risk using two dimensions:
- Likelihood: How probable is it that harm will occur? (Rare / Unlikely / Possible / Likely / Almost Certain)
- Severity: How serious would the harm be? (Negligible / Minor / Moderate / Major / Catastrophic)
Multiply or matrix-score these to get a risk rating. Then determine controls using the hierarchy: Elimination → Substitution → Engineering → Administrative → PPE.
| Risk Level | Rating | Action Required |
|---|---|---|
| Low | 1–4 | Monitor; manage with routine procedures |
| Medium | 5–9 | Implement controls within a defined timeframe |
| High | 10–16 | Immediate corrective action required |
| Critical | 17–25 | Stop work until controls are in place |
Step 4: Record Your Findings and Implement Controls
Document each hazard, the risk rating, the controls to be implemented, who is responsible for each action, and the target completion date. This record — often called a risk register or hazard register — becomes your working safety document. Assign clear ownership; unassigned actions rarely get done.
Step 5: Review and Update the Assessment
Risk assessments are not one-time events. Review them:
- After any incident or near-miss
- When new equipment, processes, or chemicals are introduced
- When work procedures change significantly
- Periodically (at minimum annually for higher-risk environments)
Common Mistakes to Avoid
- Conducting assessments in an office without visiting the actual worksite. Real conditions often differ from procedures on paper.
- Underestimating psychosocial and ergonomic hazards. Not all hazards are visible or immediately dangerous.
- Failing to involve workers. Top-down assessments miss critical on-the-ground knowledge.
- Not following up on corrective actions. An assessment without action is just paperwork.
- Treating the document as final. Workplaces change; assessments must keep pace.
Risk Assessment Templates and Tools
Many regulatory agencies — including OSHA (USA), HSE (UK), and Safe Work Australia — provide free risk assessment templates and guidance documents on their websites. These are excellent starting points for small and medium-sized businesses developing their first formal assessment. Adapt them to reflect the specific hazards and conditions in your workplace rather than using them as generic checklists.
The Bottom Line
A well-executed risk assessment is one of the most valuable investments a workplace can make. It clarifies where risks are concentrated, guides resource allocation, demonstrates due diligence, and — most importantly — prevents workers from getting hurt. Make it collaborative, make it current, and make it actionable.