5 Steps of Risk Assessment Explained with Examples
A risk assessment is the foundation of every effective safety management system.
It helps employers identify potential hazards, evaluate their severity, and implement control measures to keep people safe.
But despite being a core requirement of occupational safety, many professionals still find risk assessments confusing — especially when it comes to how to do them properly.
That’s why the Health and Safety Executive (HSE) and other global authorities recommend following a simple, structured process known as the “5 Steps of Risk Assessment.”
In this article, we’ll break down these five steps in detail, show you practical examples, and explain how each step helps reduce workplace risk.
What Is a Risk Assessment?
A risk assessment is a systematic process used to identify hazards, evaluate the risk level (likelihood × severity), and determine the best control measures to prevent harm.
In simple terms:
“Risk assessment is about looking at what could go wrong, how bad it could be, and what you’ll do to stop it.”
A well-conducted risk assessment not only helps protect people from injury or illness but also ensures compliance with legal requirements, reduces downtime, and improves safety culture.
Why Is Risk Assessment Important?
Risk assessment plays a crucial role in ensuring that:
- Workers can perform their jobs safely.
- Management understands the level of risk in each operation.
- Preventive actions are taken before incidents happen.
- Resources are prioritized effectively.
- Compliance with national regulations (like OSHA, HSE, ISO 45001) is achieved.
Without it, decisions are made blindly — leading to accidents, fines, or loss of life.
The 5 Steps of Risk Assessment (HSE Model)
The HSE 5-step model provides a clear framework that can be applied in any workplace, from construction sites to offices.
Let’s go through each step with practical examples.
Step 1: Identify the Hazards
The first step in any risk assessment is to find out what could cause harm. A hazard is anything that has the potential to cause injury, illness, or damage.
How to identify hazards:
- Walk around the workplace and observe tasks.
- Talk to workers and supervisors.
- Review accident, near-miss, and inspection reports.
- Check manufacturer manuals, MSDS/SDS sheets, and job safety procedures.
- Consider both routine and non-routine activities.
Common categories of hazards:
- Physical hazards: noise, heat, vibration, radiation, slips/falls, machinery.
- Chemical hazards: fumes, vapors, cleaning agents, solvents.
- Biological hazards: bacteria, viruses, insects, or mold.
- Ergonomic hazards: poor posture, manual handling, repetitive motion.
- Psychosocial hazards: stress, workload, bullying, fatigue.
✅ Example: Hazard Identification
Workplace: Manufacturing workshop
Task: Welding operation
Identified Hazards:
- Exposure to welding fumes (chemical).
- Hot sparks causing burns (physical).
- Electric shock (electrical).
- Poor posture while welding (ergonomic).
- Fire due to flammable materials nearby (environmental).
By listing all these hazards, the safety team creates a clear foundation for the next steps.
Step 2: Decide Who Might Be Harmed and How
Once hazards are identified, the next step is to determine who could be affected and how they might be harmed.
This ensures that you consider all individuals — not just the workers directly involved.
Who might be harmed:
- Direct employees performing the task.
- Contractors or visitors in the area.
- Cleaners or maintenance staff.
- The public (if hazards can escape the site).
- Office staff near noisy or dusty work zones.
How they might be harmed:
- Injury (cuts, burns, fractures).
- Ill health (lung disease, hearing loss).
- Psychological stress or fatigue.
- Long-term exposure risks (cancer, musculoskeletal issues).
✅ Example: Who Might Be Harmed
Continuing the welding example:
- Welders: burns, eye injury, fume inhalation.
- Helpers: struck by sparks, tripping hazards.
- Maintenance staff: exposure to residual fumes.
- Visitors: risk of burns if entering the work zone without PPE.
This helps tailor control measures to protect everyone potentially exposed.
Step 3: Evaluate the Risks and Decide on Precautions
This is the heart of the risk assessment — analyzing how likely it is that harm could occur and how severe it might be.
How to evaluate risk:
Use a risk matrix combining:
- Likelihood: How probable is it that the hazard will occur?
- Severity: How serious could the outcome be?
Then assign a risk rating (Low, Medium, or High).
Formula:
Risk = Likelihood × Severity
Example: Risk Evaluation
| Hazard | Likelihood | Severity | Risk Level |
|---|---|---|---|
| Welding fumes inhalation | Medium | High | High |
| Sparks causing burns | High | Medium | High |
| Electric shock | Low | High | Medium |
| Fire due to nearby materials | Medium | High | High |
Now that you’ve rated the risks, the next task is to decide on control measures using the Hierarchy of Controls.
Hierarchy of Controls:
- Elimination – Remove the hazard entirely.
- Substitution – Replace it with something less hazardous.
- Engineering Controls – Isolate people from the hazard.
- Administrative Controls – Change how people work (training, supervision).
- PPE – Use personal protective equipment as the last line of defense.
✅ Example: Precautions for Welding Operation
- Elimination: Use mechanical joining methods where possible.
- Substitution: Use low-fume welding rods.
- Engineering: Install local exhaust ventilation (LEV) near weld points.
- Administrative: Provide welding training, job rotation, and permit-to-work systems.
- PPE: Flame-resistant gloves, welding helmet, leather apron, and safety boots.
By applying these controls, you reduce the risk from High to Low.
Step 4: Record Your Findings and Implement Them
Documenting the assessment is both a legal requirement and a practical necessity. It shows that you have systematically identified, evaluated, and controlled the risks.
What to record:
- Task or process name.
- Identified hazards.
- Who might be harmed and how.
- Risk ratings (before and after controls).
- Control measures implemented.
- Names of assessors and review date.
Keep it simple and clear — the record should help workers understand what’s required to stay safe.
✅ Example: Risk Assessment Record (Simplified)
| Step | Hazard | Who Might Be Harmed | Control Measures | Risk Level (Residual) |
|---|---|---|---|---|
| 1 | Welding fumes | Welder, helpers | LEV system, fume extractor, PPE | Low |
| 2 | Hot sparks | Welder, nearby staff | Welding screens, flame-proof clothing | Low |
| 3 | Electrical shock | Welder | Insulated tools, equipment inspection | Low |
| 4 | Fire | All in area | Fire extinguishers, remove flammables | Low |
This record becomes part of your safety documentation and should be accessible to everyone involved.
Step 5: Review and Update the Risk Assessment
Risk assessment isn’t a one-time exercise.
You must review and update it regularly or whenever conditions change.
Review your assessment when:
- There’s a change in work process, materials, or equipment.
- A new hazard is identified.
- An accident, near-miss, or incident occurs.
- Workers raise safety concerns.
- Periodic audits or inspections are conducted.
✅ Example: Review Trigger
Six months after the welding operation started, the company replaced traditional welding machines with new robotic welding arms.
This changed the risk profile — introducing new hazards such as:
- Pinch points on robotic joints.
- Maintenance risks during programming.
Therefore, the risk assessment was reviewed and updated to include these new hazards and control measures.
Practical Example: Office Environment Risk Assessment
Not all workplaces are industrial. Even offices require risk assessments.
Hazards identified:
- Poor posture and screen use → musculoskeletal strain.
- Slips and trips from cables or clutter.
- Electrical faults from overloaded sockets.
- Stress from workload or poor ergonomics.
Controls:
- Ergonomic chairs and monitor stands.
- Cable management systems.
- Regular electrical testing (PAT).
- Stress management policies and breaks.
Even low-risk environments benefit greatly from regular risk assessments.
Common Mistakes to Avoid in Risk Assessment
- Using generic templates without customizing them.
- Not involving workers who know the job best.
- Focusing only on physical hazards, ignoring ergonomic or psychosocial risks.
- Relying solely on PPE instead of addressing root causes.
- Failing to review after changes or incidents.
Avoiding these mistakes ensures your assessment remains effective and credible.
The Link Between Risk Assessment and Safety Culture
Risk assessments are not just compliance tools — they are communication tools.
When done well, they:
- Encourage employee participation.
- Foster awareness of hazards and controls.
- Promote shared responsibility for safety.
- Build trust between management and workers.
A workplace that values proactive risk assessment naturally builds a strong safety culture and reduces both incidents and downtime.
Legal Requirements and Standards
In most countries, conducting a risk assessment is a legal duty under occupational health and safety laws.
Examples:
- HSE (UK): Employers must assess risks and take reasonable steps to eliminate or control them (Management of Health and Safety at Work Regulations 1999).
- OSHA (USA): Employers are required to identify and control hazards under the General Duty Clause, Section 5(a)(1).
- ISO 45001: Requires risk-based thinking and documentation as part of the Occupational Health and Safety Management System.
Summary of the 5 Steps of Risk Assessment
| Step | Description | Example |
|---|---|---|
| 1 | Identify the hazards | Welding fumes, slips, chemicals |
| 2 | Decide who might be harmed and how | Workers, visitors, maintenance staff |
| 3 | Evaluate the risks and decide on precautions | Use risk matrix, apply hierarchy of controls |
| 4 | Record your findings and implement | Document hazards, controls, and responsibilities |
| 5 | Review and update | Revise after changes, incidents, or annually |
Conclusion
The 5 Steps of Risk Assessment provide a structured and practical approach to identifying, evaluating, and controlling workplace hazards.
By applying these steps consistently — and reviewing them regularly — organizations can prevent incidents, meet legal requirements, and foster a proactive safety culture.
“Safety doesn’t happen by accident — it starts with a good risk assessment.”
For checklist and templates visit The HSE Tools.
Behavioral Safety Observations and Their Role in Risk Reduction
Common Mistakes in Workplace Risk Assessments and How to Avoid Them
How to Conduct a Job Safety Analysis (JSA) Step by Step
