Introduction
Hazard identification and risk assessment are central requirements of ISO 45001.
They form the foundation for preventing injuries, reducing incidents, and improving workplace safety.
Most organizations have risk assessments in place. However, in practice, these assessments often do not reflect how work is actually performed.
What Hazard Identification and Risk Assessment Should Achieve
A well-functioning system should:
- Identify all relevant hazards (not just obvious ones)
- Evaluate risks based on real conditions
- Support practical control measures
- Be regularly updated and actively used
In other words, risk assessment should be a living tool, not a static document.
Common Gaps Observed in Practice
In my experience, several issues appear repeatedly:
- Generic hazard identification
Hazards are listed at a high level (e.g., “chemical exposure”) without linking them to specific tasks or conditions. - Limited involvement of employees
Risk assessments are often created by management or safety personnel without input from those performing the work. - Failure to consider non-routine activities
Maintenance, cleaning, emergencies, and unusual operations are often overlooked. - Outdated assessments
Risk assessments are not updated after:- Process changes
- New equipment
- Incidents or near misses
- Over-reliance on templates
Standard templates are used without adapting them to real conditions.
Why These Issues Occur
- Risk assessments treated as a compliance requirement
- Time constraints and competing priorities
- Lack of structured methodology
- Limited communication between management and operations
What Effective Hazard Identification Looks Like
- Process-based identification
Hazards are identified at the level of actual tasks and activities. - Inclusion of real working conditions
Consider:- Equipment condition
- Environmental factors (heat, humidity, noise)
- Human factors (fatigue, workload)
- Employee involvement
Operators often provide the most accurate insight into risks. - Coverage of all scenarios
Including:- Routine tasks
- Non-routine tasks
- Emergency situations
Practical, Step-by-Step Approach
Step 1: Walk the Process
Observe work being performed — not just documented procedures.
Step 2: Engage Employees
Ask:
- “What can go wrong here?”
- “Where do you see risks?”
Step 3: Use Multiple Data Sources
- Incident reports
- Near misses
- Audit findings
- Maintenance records
Step 4: Evaluate Risks Realistically
Avoid overcomplicated scoring systems — focus on:
- Likelihood
- Severity
- Practical impact
Step 5: Define Practical Controls
Controls should be:
- Clear
- Feasible
- Actually used
Step 6: Review and Update Regularly
Especially after:
- Changes in operations
- New hazards identified
- Incidents
Additional Considerations
- Include contractors and visitors
- Consider interaction between processes
- Evaluate human behavior and decision-making
- Link risk assessments to training and procedures
Key Insight
The most effective hazard identification happens where the work takes place — not in a conference room.
Conclusion
Hazard identification and risk assessment should reflect reality, not documentation.
Organizations that take a practical, process-based approach create safer workplaces and more effective ISO 45001 systems.