Risk Assessment and Management

TL;DR

Risk assessment is the process of identifying potential hazards and analyzing the risks they pose to health, safety, and the environment. It involves evaluating the likelihood and severity of harm to prioritize control measures. Effective risk management ensures you proactively reduce risks to an acceptable level.

1. The Mental Model

Think of risk assessment as being a detective looking for dangers and then a planner figuring out how to stop them from causing harm. You're trying to anticipate what could go wrong and put protections in place before anyone gets hurt or the environment is damaged.

2. The Core Material

Risk assessment and management is a systematic process to ensure a safe and healthy workplace and protect the environment. It generally follows a five-step approach, though specific methodologies might vary.

Step 1: Identify Hazards

Photo by Nguyen Duc Toan on Pexels

A hazard is anything that has the potential to cause harm. This is the first and most crucial step, as you can't manage risks you don't know about. Hazards can be:
* Physical: Noise, vibration, radiation, slips, trips, falls, heat, cold.
* Chemical: Toxic, corrosive, flammable substances.
* Biological: Bacteria, viruses, fungi, parasites.
* Ergonomic: Poor workstation design, repetitive tasks, heavy lifting.
* Psychological: Stress, bullying, violence.
* Environmental: Pollution, waste, resource depletion.

You can identify hazards through:
* Workplace inspections and walk-throughs.
* Reviewing accident/incident reports and near-misses.
* Consulting with employees and safety representatives (they often know best!).
* Checking manufacturers' instructions and safety data sheets (SDS).
* Reviewing legal requirements and industry standards.

Step 2: Identify Who Might Be Harmed and How

Once you've found a hazard, you need to think about who might be affected. This isn't just direct employees; it could be contractors, visitors, or even the public, and how the environment might be impacted. Consider:
* Workers operating specific machinery.
* Cleaners, maintenance staff.
* Pregnant workers, young workers, or those with disabilities.
* The surrounding ecosystem.

Step 3: Evaluate the Risks and Decide on Precautions

Photo by Markus Winkler on Pexels

This is where you assess the risk. Risk is the likelihood that a hazard will cause harm, and the severity of that harm.
Risk = Likelihood x Severity

• Likelihood: How probable is it that harm will occur? (e.g., very likely, likely, unlikely, very unlikely).
• Severity: How serious would the harm be? (e.g., minor injury, major injury, fatality, minor environmental impact, catastrophic environmental damage).

You can use a simple risk matrix to help with this evaluation:

Numbers in parentheses are for illustration; actual scales vary.

Based on your evaluation, you then decide what precautions (control measures) are needed. The Hierarchy of Control is a crucial framework for this:

graph LR
    A["Elimination (Remove the hazard entirely)"] --> B["Substitution (Replace the hazard with a safer alternative)"]
    B --> C["Engineering Controls (Isolate people from the hazard)"]
    C --> D["Administrative Controls (Change the way people work)"]
    D --> E["Personal Protective Equipment (PPE) (Protect the individual worker)"]

You should always try to apply controls from the top of the hierarchy first, as they are generally more effective.

Step 4: Record Your Findings and Implement Them

Photo by SHVETS production on Pexels

For any significant hazards, you must record your findings. This includes:
* The hazards identified.
* Who might be harmed and how.
* What you've already done to control the risks.
* What further actions are needed.
* Who is responsible for those actions and when they'll be completed.

Then, you must put these control measures into practice. Communicating the changes to affected individuals is also vital.

Step 5: Review and Update

Risk assessments aren't a one-time event. You need to review them regularly to ensure they remain effective. Review your assessments:
* If there's a significant change in the workplace (new equipment, processes, substances).
* After an accident or near-miss.
* If new information about a hazard becomes available.
* Periodically (e.g., annually) as a matter of routine.

This feedback loop is critical for continuous improvement in your safety and environmental performance.

3. Worked Example

Let's say you're managing a small workshop where employees use a grinding machine.

Step 1: Identify Hazards
* Hazard: Grinding machine generates sparks and metal dust. (Physical hazard)
* Hazard: Machine produces high noise levels. (Physical hazard)
* Hazard: Potential for kickback if material isn't secured. (Physical hazard)

Step 2: Identify Who Might Be Harmed and How
* Operator: Eye injuries from sparks/dust, respiratory issues from inhaled dust, hearing damage from noise, hand/finger injuries from kickback.
* Nearby workers: Eye injuries from stray sparks.
* Environment: Dust dispersal.

Step 3: Evaluate Risks and Decide on Precautions
* Spark/Dust Hazard:
* Likelihood: High (it's always produced). Severity: Moderate (eye irritation, minor cuts, respiratory issues). Risk: Medium-High.
* Controls (Hierarchy):
1. Engineering: Install a local exhaust ventilation (LEV) system to capture dust at the source. Install a transparent safety guard that contains sparks.
2. Administrative: Ensure clear work zones around the grinder.
3. PPE: Provide safety glasses and dust masks.

• Noise Hazard:

  • Likelihood: High (machine is always noisy). Severity: Moderate (hearing damage over time). Risk: Medium.
  • Controls (Hierarchy):
    1. Engineering: Enclose the machine in a sound-dampening cabinet (if feasible).
    2. Administrative: Limit exposure time, provide breaks from noisy areas.
    3. PPE: Provide ear defenders or earplugs.

• Kickback Hazard:

  • Likelihood: Unlikely (if trained). Severity: Major (broken bones, lacerations). Risk: Medium.
  • Controls (Hierarchy):
    1. Engineering: Ensure work rests are properly adjusted and secure.
    2. Administrative: Mandatory training on safe grinding techniques, using clamps or jigs to secure workpieces.
    3. PPE: Safety gloves (though care needed not to get caught).

Step 4: Record Findings and Implement
You'd document these hazards, assessed risks, and chosen controls in a risk assessment form. Then, you'd order the LEV, guards, and PPE, schedule training, and install everything.

Step 5: Review and Update
After a few months, you'd check if the LEV is working well, if workers are consistently using PPE, and if there have been any near-misses related to grinding. If a new type of material is introduced, you'd reassess the dust and kickback risks.

4. Key Takeaways

• Risk assessment is a proactive process to identify hazards and prevent harm before it occurs.
• The "Hierarchy of Control" is your best guide for choosing effective risk reduction measures, prioritizing elimination and substitution.
• Risk is a combination of how likely harm is and how severe it would be.
• Always involve those who do the work in the assessment process; they often have valuable insights.
• Risk assessments aren't static; they need regular review and updates, especially after changes or incidents.
• Document your findings for significant risks to ensure clarity and accountability.

Common Mistakes to Avoid:
- Not identifying all hazards: Rushing this step leaves gaps in your safety plan.
- Underestimating risk: Being overly optimistic about likelihood or severity can lead to inadequate controls.
- Jumping straight to PPE: Relying only on personal protective equipment without exploring higher-level controls (like elimination) is often ineffective and less safe.
- "One and done" approach: Treating risk assessment as a static document rather than an ongoing process.
- Not communicating: Failing to inform workers about identified risks and the controls put in place.

5. Now Try It

Choose a common activity you perform regularly (e.g., making coffee in the kitchen, driving to work, using a specific tool). Spend 15 minutes following the five steps of risk assessment for that activity.
1. Identify at least three hazards.
2. Consider who could be harmed and how.
3. Evaluate the likelihood and severity for each.
4. Propose at least two control measures for each hazard, trying to use the Hierarchy of Control.
5. Think about when and how you would review your assessment for this activity.

Success looks like you having a clear, actionable list of potential dangers and practical ways to make your chosen activity safer.