Hazard Identification, Risk Assessment and Risk Control
Core concepts
You must be able to distinguish a hazard (source of harm) from a risk (likelihood and severity of harm). Know the hierarchy of control: eliminate, substitute, engineering controls, administrative controls, then PPE last. Understand risk assessment methods - qualitative matrices, task-based assessment, HAZID, HAZOP, JSA - and when each is appropriate. Learn to define likelihood and consequence scales, calculate a risk rating, and set acceptability criteria against a risk tolerance matrix. Recognise the difference between residual risk (after controls) and inherent risk (before controls).
Traps
- Calling PPE a control of first resort; questions often reward the highest-order feasible control.
- Treating a low rating as no risk; residual risk must still be monitored.
- Missing dynamic risk assessment for non-routine tasks or change.
- Confusing hazard identification (what can hurt us) with risk evaluation (how bad and how likely).
- Forgetting human factors and organisational factors as hazards.
Worked example / rule of thumb
A worker uses a solvent in a small room. Hazard = solvent vapour (health) and flammability (safety). Inherent risk = high. Apply hierarchy: can we eliminate the solvent? If not, substitute a less hazardous product; then local exhaust ventilation; then training and procedures; PPE (respirator, gloves) last. Residual risk = medium, with monitoring and health surveillance. Rule of thumb: if your first control is PPE, you have probably skipped a step.
Practical skills to demonstrate
Write a clear risk statement ("harm to X from Y, resulting in Z"), record the basis for ratings, and define who owns and reviews the assessment.