What is a risk assessment?

    Short answer

    A risk assessment is the process of identifying hazards in a task, area or process, analysing the likelihood and consequence of harm from each, deciding what controls will reduce the risk so far as is reasonably practicable, and recording the result. Under Australian WHS law it is the expected way to meet the duty to manage risks, and it must be reviewed when things change.

    Last updated · TeamAssurance

    The four steps

    1. Identify hazards. Walk the area, talk to the people who do the work, read the incident and near-miss history, check manufacturer information and safety data sheets.
    2. Assess the risk. For each hazard, how likely is harm and how severe would it be? A 5 × 5 risk matrix combines the two into a rating (low, medium, high, extreme).
    3. Control the risk. Choose controls using the hierarchy of control, highest practicable level first, and work out the residual risk.
    4. Review. Check the controls are in place and working, and repeat the assessment when the task, equipment, people or incident history changes.

    The risk matrix

    InsignificantMinorModerateMajorCatastrophic
    Almost certainMediumHighExtremeExtremeExtreme
    LikelyMediumHighHighExtremeExtreme
    PossibleLowMediumHighHighExtreme
    UnlikelyLowLowMediumHighHigh
    RareLowLowMediumMediumHigh

    Sites define what each likelihood and consequence word means in their own terms; the matrix is a shared language, not a measurement.

    When a risk assessment is required

    Australian WHS regulations require a formal, documented assessment for specific activities, including hazardous chemicals, confined spaces, diving, and high-risk construction work (where a safe work method statement is the required form). For everything else the duty is to manage risk; a documented assessment is the usual evidence that you have.

    Types

    • Generic: a task or area, reviewed annually.
    • Task-based: a JSA or SWMS written for one job with the crew.
    • Dynamic / point of work: a take 5 done by the worker before starting.
    • Change: triggered by management of change when equipment, materials or methods alter.

    Risk assessment inside daily management

    A risk assessment filed in a register changes nothing on the floor. The controls it selects have to become standard work steps, checklist items and audit questions, and the hazards it rates high belong on the safety section of the tier board until the control is in place. New hazards raised at the daily huddle feed back into the assessment, which is how it stays current.

    How TeamAssurance helps

    In TeamAssurance, controls from a risk assessment become checklist steps and layered-audit questions assigned to the right people, high-rated hazards appear as actions on the safety section of the tier board until closed, and hazards and near misses raised daily give the evidence to revisit the rating.

    Frequently asked questions

    What is the difference between a hazard and a risk?

    A hazard is something with the potential to cause harm (a moving blade). Risk is the likelihood that harm occurs combined with how severe it would be.

    How often should a risk assessment be reviewed?

    When the task, equipment, materials, people or environment change, after an incident or near miss, and otherwise at a fixed interval, commonly annually.

    Who should do a risk assessment?

    A person with knowledge of the task, with the workers who do it. Consultation with workers is a legal duty in Australia, not an option.