Hazard Identification, Risk Assessment and Risk Management
Domain scope
This domain tests hazard identification, risk evaluation and treatment. You must distinguish hazard from risk, select suitable assessment methods and apply controls in the correct order.
Core rules and concepts
- A hazard is a source of harm; risk is the combination of likelihood and severity of harm.
- ISO 31000:2018 provides principles: risk management is integrated, structured, customised, inclusive and dynamic.
- Common methods include inspections, job safety analysis, HAZOP for process plant, FMEA, bowtie and 5x5 risk matrices.
- The hierarchy of controls is elimination, substitution, engineering, administrative and PPE. PPE is last.
- ALARP means reducing risk as low as reasonably practicable; residual risk must be recorded and reviewed.
- Assessment must be recorded, communicated, reviewed when work changes and involve workers.
Worked example
A worker lifts 20 kg boxes 40 times an hour for eight hours. Likelihood is scored 4 and severity 4, giving 16 (high). Controls: install a conveyor to eliminate manual lifting; if not feasible, provide a vacuum lifter and team lifting, redesign the workstation, train and supervise. Residual likelihood 2 and severity 3 gives 6 (medium). The assessment is signed, workers are briefed and a review date is set.
Traps
Calling a hazard a risk; starting with PPE; copying a generic matrix without definitions; ignoring psychosocial or organisational hazards; and leaving residual risk unrecorded.