An effective risk assessment begins with a clear understanding of how work is actually performed. Documents are important, but the strongest controls are built from observation, consultation and evidence.

1. Define activities and exposed persons

Break the operation into tasks and identify employees, contractors, visitors and other people who may be affected.

2. Identify hazards

Review equipment, energy sources, materials, the environment and human factors. Include routine, non-routine and emergency situations.

3. Evaluate the risk

Consider both likelihood and potential consequence. Existing controls must be assessed for effectiveness, not merely recorded.

4. Prioritise additional controls

Use the hierarchy of controls and assign clear responsibilities, resources and deadlines.

5. Review and improve

Update the assessment after changes, incidents, new information or when monitoring shows that a control is not working as intended.