Risk Assessment 101: What it is, Why It Matters, and How to Get It Right

This is the second in a four-part series on building a comprehensive workplace safety management system.

Risk Assessment 101: What it is, Why It Matters, and How to Get It Right

In short: Risk assessment is the structured way we judge how likely a hazard is to injure someone, how severe that harm could be, and which controls will reduce the danger. Rating likelihood against consequence lets you determine priorities, meet compliance obligations, and direct effort where exposure is greatest. Below is a practical guide to the five-step method, the matrix behind it, and the traps worth avoiding.

Understanding the Difference: Hazard vs. Risk

Last week, we focused on identifying hazards — anything with the potential to cause harm. Now we turn to risk, the next critical step in maturing your safety programme. Grasping this distinction underpins effective safety management:

• A hazard is the source of potential harm. Treat it as a static state or object.
  • Examples: a wet floor, an unguarded machine blade, or a manual handling task involving a heavy box.
• A risk is a measure of the likelihood that a hazard will cause harm, combined with the potential severity of that outcome. Think of it as dynamic probability.
  • Examples: someone slipping on a wet floor and sustaining a serious head injury, or a worker losing a finger to an unguarded blade.

The Purpose of a Risk Assessment

Simply spotting a hazard isn't enough. Risk assessment gives you a formal process for evaluating the risks associated with each hazard, so you can determine whether a fresh control is warranted.

Not all hazards are created equal. A small trip point in a rarely used corner rates differently to faulty equipment on a high-traffic production line. Assessing risks answers two questions that guide priorities:

• Likelihood: How likely is it that exposure ends in harm?
• Consequence: How severe would that harm be if the incident occurred?

Weighing both factors reveals the overall level of risk. Every safety management system stands or falls on the quality of these judgements, which should be informed, data-driven, and documented well enough to support compliance with Australian WHS legislation and recognised industry standards. Free resources published by Safe Work Australia explain the legal duty to eliminate or minimise risk so far as is reasonably practicable.

How to Use a Risk Matrix

A risk matrix is a common and powerful tool for assessing risks. Such a visual aid combines likelihood and consequence to produce a rating (Low, Medium, High or Extreme). Health and safety teams rely on one daily across construction, manufacturing and healthcare sites.

Here's a typical example:

To apply one effectively, follow these steps:

1. Be realistic about likelihood: consider how often people are exposed to a hazard and how easily an incident could occur.
2. Consider the worst credible case: for consequence, look beyond minor injuries. What is the most serious result that could reasonably happen?

Plotting each hazard on the grid gives a clear indication of priority. A low-likelihood, major-consequence problem may sit below something likely with moderate severity. Our Risk Assessment Matrix template supplies the grid, wording and scoring guide so ratings stay consistent between supervisors and operational crews.

The Five-Step Risk Assessment Process

Good assessment involves more than filling out a matrix. Treat it as a complete cycle, repeated whenever tasks, plant or personnel change, and feed each result back into your wider safety management framework.

1. Identify the hazard: use the methods from Week 1 — walkarounds, consultation, incident data review — to surface potential dangers.
2. Assess the risk: weigh probability against severity using a matrix to determine the rating, allowing for whatever controls already exist.
3. Control the risk: where a rating proves unacceptable, apply the Hierarchy of Controls, covered in detail during Week 3.
4. Implement and document: put your control measures into practice and record them, as explained in our article on why every business needs a risk register.
5. Review: check regularly that treatments still work. Reviewing risk controls is our focus in Week 4.

Getting it Right in Your Workplace

• Involve your team: ask workers for input. Frontline crews hold valuable insight into how tasks are performed, and into dangers you may not have considered.
• Don't overlook "soft" risks: assess psychosocial hazards such as stress, bullying, unreasonable deadlines and worries about job security, all of which shape mental health. A fatigue risk assessment form helps here too.
• Think beyond machinery: lone working, site security and after-hours access deserve the same scrutiny as guarding or chemical storage.
• Document everything: capturing the information you gather is not merely good practice — often it is a legal requirement. Ready-made risk assessment forms and a printable risk assessment form keep records consistent.

Moving from hazard identification to formal rating lets you rank problems honestly and choose controls with confidence. For a deeper look at how both disciplines connect, read our guide to hazard identification and risk assessment.

Frequently Asked Questions

Do I need a formal risk assessment for every task?

Not necessarily. For routine, low-risk work a quick mental check may suffice. Documented evaluation becomes essential for new activities, high-risk jobs, or whenever conditions change.

What is the difference between inherent and residual risk?

Inherent risk describes the level present before any treatment is applied. Residual risk is whatever remains once your controls operate as intended. Your objective is reducing that remainder to an acceptable level.

Who should be involved in a risk assessment?

Under Australian WHS law, consultation with workers is mandatory. The strongest results come from collaboration between supervisors, the people who carry out the task, and health and safety representatives.

Prioritise with a Free Toolkit from SafetyDocs by SafetyCulture

Assessing risk can seem complex, yet our Risk Assessment Template + How-To Guide makes it straightforward. Ready to use and free, that resource sits inside our National Safe Work Month Safety Essentials Pack. Each guide supplies a clear framework plus step-by-step instructions, so teams can rate hazards confidently and get on with building safer worksites.

Click here to download the pack and take control of your safety system.

Ready for the next stage? Our team of specialists can help. Whether you need more information, tailored policies, or complete safety management systems, we're here to protect your business, and we can guide you toward suitable risk management plans for every site. Contact our Customer Care Specialists to learn about the full suite of professional resources.

Author - Craig Cruickshank is the HSEQ Manager and Senior Technical Advisor at SafetyDocs by SafetyCulture.

Craig comes from a construction and environmental background, with experience across private and public sectors, and is passionate about making workplace safety information easy to find and understand for everyone.

Learn more about Craig's work on LinkedIn

Available for instant download and supplied in fully editable MS Word format for use in your business.

Please note that the above information is provided as a comment only and should not be relied on as professional, legal or financial advice.