Risk assessment procedure
Purpose and scope is not being exceeded (for example, by using
noise meters to measure noise levels and using
This procedure outlines a process to identify gas detectors to analyse oxygen levels in confined
hazards from undertaking tasks, determine spaces).
the risk rating for each hazard, implement risk
controls and review the controls. A risk assessment may be appropriate to reuse in
situations where all the hazards, tasks, things,
This procedure applies to everyone at (your workers or circumstances are the same and no
business name). worker or other person will be exposed to greater,
additional or different risks. However, as stated
Definitions above, if there are any changes at the workplace,
a new risk assessment should be performed.
Hazard: is a situation or a thing that has the
potential to hurt or harm a person
Procedure
Risk: the likelihood and consequences of the
hazard causing harm 1) Identify all of the risks associated with the
hazard. Use the following Examples of Common
A risk assessment is carried out when Hazards as a prompt.
2) Assess the risk/s using the following Risk
There is uncertainty about how a hazard may
Assessment Matrix
result in injury or illness
3) Determine the appropriate control/s to mitigate
The work activity involves a number of
the risk of the hazard causing harm as far as is
different hazards and there is a lack of
understanding about how the hazards may reasonably practicable. Use the following
interact with each other to produce new or Hierarchy of Control to implement the most
greater risks, or effective controls. Document the results on the
Risk Assessment Form.
There are changes at the workplace that may
impact on the effectiveness of control 4) Determine the priority or urgency with which the
measures or may require new control hazard should be controlled. Use the Risk
measures such as the introduction of a new Assessment Action Plan to list the hazards and
process or piece of equipment. track the implementation of the controls.
In some circumstances, a risk assessment will
Risk action priority
assist to:
identify which workers are at risk of exposure Here are some suggested action timelines. The
risk level that remains after any applicable
determine what sources and processes are
controls are applied is called residual risk. The
causing the risk
residual risk could still be at a high level (extreme,
identify if and what kind of control measures very high, high) even after controls are applied. In
should be implemented, and this case the business would need to accept the
check the effectiveness of existing control risk if there are no other practicable controls
measures. available.
A risk assessment is mandatory under the WHS Extreme Risk – immediate action required
Regulations for certain activities that are high risk Very High Risk – prioritised action within a
such as, but not limited to; high risk construction month
work, entry into confined spaces and live electrical
work. High Risk – prioritised action within three
months
Some hazards that have exposure standards,
Medium Risk – planned action required
such as noise and airborne contaminants, may
require scientific testing or measurement by a Low Risk – manage with current procedures
competent person to accurately assess the risk
and to check that the relevant exposure standard
Examples of common hazards
Biological – infectious diseases, COVID-19, hepatitis, Chemical – burns, breathing, explosion, eyes,
legionnaires’ disease, ingestion, suffocation, passive smoking
Q-fever, HIV/AIDS, allergies, chicken pox
Ergonomic – musculoskeletal (MSD) injuries due to: Physical – burns from heat / friction / radiation,
prolonged posture, repetitive movements, excessive cuts / punctures, crushing, shearing,
force, awkward movements, awkward controls, entanglement, fire, explosion, high pressure fluid,
sedentary or static work, vibration. In addition poor slips / trips / falls, vibration, falls from height,
lighting and noise. thermal comfort, environmental, noise, radiation
Psychosocial – Health and Wellbeing – low fitness, ageing
workers, overweight workers, poor eating and
Culture - bullying / harassment, poorly managed
drinking habits, alcohol / drugs at work and home,
change, organisational injustice; inadequate reward and
sleep disturbances, work / life balance, poor
recognition
mental health, heart disease, increased sick days
Job - excessive or prolonged time pressure, poorly
defined work roles, lack of job control, shift work / hours Electrical – contact with exposed terminals,
of work, fatigue, remote / isolated work, too much or too overloaded circuits, damaged wires, water near
little work / responsibility, poorly designed or managed circuits, poor insulation
work environment, violence and aggression, traumatic
Striking – vehicles, mobile and fixed plant,
event, poor or unequal recognition and reward
powered and unpowered equipment, uncontrolled
Support - lack of supervisor and/or co-worker support, part or object, machine action, disengaged item
lack of or inadequate training / competency
Note re psychosocial factors and hazards:
• It is important that risk factors are not viewed in isolation as they can interact with each other. For
example, high demands, low control, low support = a highly stressful work environment. However, when
high demands are combined with high support, the high support can moderate the level of work-related
stress etc.
• Once you have identified the hazards (it should be emphasised that this is only the first step in the risk
management process), you need to look at how you can eliminate or minimise risks – refer to the next
step (e.g. assess risk) in the process.
• Many workplaces are good at identifying the psychosocial hazards, but don’t go to the next step of doing
something about it; or don’t examine them in a proper and thorough risk management fashion.
• Please note psychological risk and injury is cumulative. The likelihood of injury increases over time if the
risks are not controlled adequately.
Risk assessment matrix
The following table provides a Risk Rating once the Likelihood and Consequence are determined:
Consequence
Insignificant Minor Moderate Major Catastrophic
Risk Matrix Near Miss First Aid Medical Treatment Medical Treatment Death or
< 2 days lost > 2 days lost permanent injury
Not life altering Not life altering Temporary effect Permanent effect
on life on life
Very Likely
Low High Very High Extreme Extreme
Almost Certain
Likely
Low Medium High Very High Extreme
Strong Possibility
Likelihood
Possible
Low Medium Medium High Very High
Once a Year
Unlikely
Low Low Medium High Very High
Once in 3 years
Highly
Low Low Low Medium High
Unlikely
Risk control
Where a risk to health & safety has been identified, controls must be introduced to reduce risk levels to an
acceptable level. When introducing a control measure, consideration should be given to what is “practicable”
in each instance. “Practicable” means having regard to:
the severity of the hazard or risk in question
the knowledge about the hazard or risk and ways of removing or mitigating that hazard or risk
the availability & suitability of ways to remove or mitigate that hazard or risk
the cost of removing or mitigating that hazard or risk
The following Hierarchy of Control to control risk should be adopted.
Elimination of the hazard or risk (most effective)
Substitution of the plant or activity to one with a lower level of risk
Engineering redesign or alter the plant or equipment to ensure the work is performed safely
Administrative procedures/ instructions to ensure the work is performed safely
Personal Protective Equipment (PPE) should always be the last control option (least effective)
A combination of controls may be appropriate, however the solution should follow the Hierarchy of Control.
Hierarchy of risk control
HIGHEST MOST
Level 1
Eliminate the hazards
Level of health and safety protection
Reliability of control measures
Level 2
Substitute the hazard with something safer
Isolate the hazard from people
Reduce the risks through engineering controls
Level 3
Reduce exposure to the hazard using administrative
controls
Use personal protective equipment
LOWEST LEAST
Reference
Code of Practice – How to Manage Work Health and Safety Risks
