Risk Assessment
Risk Assessment
Risk Assessment
Identify hazards and risk factors that have the potential to cause harm (hazard
identification).
Analyze and evaluate the risk associated with that hazard (risk analysis, and risk
evaluation).
Determine appropriate ways to eliminate the hazard, or control the risk when the hazard
cannot be eliminated (risk control).
A risk assessment is a thorough look at your workplace to identify those things, situations,
processes, etc. that may cause harm, particularly to people. After identification is made, you
analyze and evaluate how likely and severe the risk is. When this determination is made, you
can next, decide what measures should be in place to effectively eliminate or control the harm
from happening.
The CSA Standard Z1002 "Occupational health and safety - Hazard identification and
elimination and risk assessment and control" uses the following terms:
Risk analysis – a process for comprehending the nature of hazards and determining
the level of risk.
Notes:
(1) Risk analysis provides a basis for risk evaluation and decisions about risk control.
(2) Information can include current and historical data, theoretical analysis, informed
opinions, and the concerns of stakeholders.
Risk evaluation – the process of comparing an estimated risk against given risk
criteria to determine the significance of the risk.
Note: Risk control can involve monitoring, re-evaluation, and compliance with
decisions.
For definitions and more information about what hazards and risks are, please see the OSH
Answers document Hazard and Risk.
Identify who may be at risk (e.g., employees, cleaners, visitors, contractors, the public,
etc.).
Prevent injuries or illnesses, especially when done at the design or planning stage.
What the scope of your risk assessment will be (e.g., be specific about what you are
assessing such as the lifetime of the product, the physical area where the work activity
takes place, or the types of hazards).
The resources needed (e.g., train a team of individuals to carry out the assessment, the
types of information sources, etc.).
What type of risk analysis measures will be used (e.g., how exact the scale or
parameters need to be in order to provide the most relevant evaluation).
Who are the stakeholders involved (e.g., manager, supervisors, workers, worker
representatives, suppliers, etc.).
What relevant laws, regulations, codes, or standards may apply in your jurisdiction, as
well as organizational policies and procedures.
Identify hazards.
Determine the likelihood of harm, such as an injury or illness occurring, and its severity.
Consider normal operational situations as well as non-standard events such as
maintenance, shutdowns, power outages, emergencies, extreme weather, etc.
Review all available health and safety information about the hazard such as Safety
Data Sheet (SDS), manufacturers literature, information from reputable
organizations, results of testing, workplace inspection reports, records of
workplace incidents (accidents), including information about the type and
frequency of the occurrence, illnesses, injuries, near misses, etc.
Identify actions necessary to eliminate the hazard, or control the risk using the hierarchy
of risk control methods.
Evaluate to confirm if the hazard has been eliminated or if the risk is appropriately
controlled.
Keep any documents or records that may be necessary. Documentation may include
detailing the process used to assess the risk, outlining any evaluations, or detailing how
conclusions were made.
The methods and procedures used in the processing, use, handling or storage of the
substance, etc.
The actual and the potential exposure of workers (e.g., how many workers may be
exposed, what that exposure is/will be, and how often they will be exposed).
The duration and frequency of the task (how long and how often a task is done).
Any possible interactions with other activities in the area and if the task could affect
others (e.g., cleaners, visitors, etc.).
The lifecycle of the product, process or service (e.g., design, construction, uses,
decommissioning).
How a person would react in a particular situation (e.g., what would be the most
common reaction by a person if the machine failed or malfunctioned).
It is important to remember that the assessment must take into account not only the current
state of the workplace but any potential situations as well.
By determining the level of risk associated with the hazard, the employer, and the health and
safety committee (where appropriate), can decide whether a control program is required and
to what level.
Include people who work off site either at home, on other job sites, drivers, teleworkers,
with clients, etc.
Look at the way the work is organized or done (include experience of people doing the
work, systems being used, etc).
Look at foreseeable unusual conditions (for example: possible impact on hazard control
procedures that may be unavailable in an emergency situation, power outage, etc.).
Consider the groups of people that may have a different level of risk such as young or
inexperienced workers, persons with disabilities, or new or expectant mothers.
How do you know if the hazard will cause harm (poses a risk)?
Each hazard should be studied to determine its' level of risk. To research the hazard, you can
look at:
Health and safety material about the hazard such as safety data sheets (SDSs),
research studies, or other manufacturer information.
Information about previous injuries, illnesses, near misses, incident reports, etc.
Remember to include factors that contribute to the level of risk such as:
The way the source may cause harm (e.g., inhalation, ingestion, etc.).
There is no one simple or single way to determine the level of risk. Nor will a single technique
apply in all situations. The organization has to determine which technique will work best for
each situation. Ranking hazards requires the knowledge of the workplace activities, urgency
of situations, and most importantly, objective judgement.
As an example, consider this simple risk matrix. Table 1 shows the relationship between
probability and severity.
High: major fracture, poisoning, significant loss of blood, serious head injury, or fatal
disease
Medium: sprain, strain, localized burn, dermatitis, asthma, injury requiring days off work
Low: an injury that requires first aid only; short-term pain, irritation, or dizziness
Medium risk: keep the process going; however, a control plan must be developed and
should be implemented as soon as possible
Low risk: keep the process going, but monitor regularly. A control plan should also be
investigated
Let's use an example: When painting a room, a step stool must be used to reach higher
areas. The individual will not be standing higher than 1 metre (3 feet) at any time. The
assessment team reviewed the situation and agrees that working from a step stool at 1 m is
likely to:
Cause a short-term injury such as a strain or sprain if the individual falls. A severe sprain
may require days off work. This outcome is similar to a medium severity rating.
When compared to the risk matrix chart (Table 1), these values correspond to a low risk.
The workplace decides to implement risk control measures, including the use of a stool with a
large top that will allow the individual to maintain stability when standing on the stool. They
also determined that while the floor surface is flat, they provided training to the individual on
the importance of making sure the stool's legs always rest on the flat surface. The training
also included steps to avoid excess reaching while painting.
Engineering controls.
Administrative controls.
For more details, please see the OSH Answers Hazard Control.
It is good practice to review your assessment on a regular basis to make sure your control
methods are effective.
Legislated requirements.
Disclaimer
Although every effort is made to ensure the accuracy, currency and completeness of the
information, CCOHS does not guarantee, warrant, represent or undertake that the information
provided is correct, accurate or current. CCOHS is not liable for any loss, claim, or demand
arising directly or indirectly from any use or reliance upon the information.