Risk management - different hazards, same approach

Managing the risk of workplace hazards is the duty of the person conducting the business or undertaking (PCBU). However, as each workplace is different, the way in which these risks are eliminated or controlled will differ.

Luckily, the risk management process applies to all hazards and risks and can be used for physical hazards and psychosocial hazards alike.

The risk management process

The PCBU has a duty to manage risk by taking reasonably practicable steps:

  • To identify any hazard or risk that may be associated with the business or undertaking
  • To eliminate risks, and
  • Where it is not reasonably practicable to eliminate the risks, to minimise them.

The process of risk management involves four distinct activities:

  • Identifying the hazards
  • Assessing the risks
  • Controlling the risks, and
  • Reviewing the controls.

Risk management can be applied to all types of hazards whether they are physical or psychosocial.

Example of the risk management approach

Physical hazard

Risk management step

Psychosocial hazard

An unguarded edge near a two metre drop

Identify the hazards

Hazards are things and situations that could harm a person in a workplace.

Isolated worker interacting with clients

Risk: A worker falls down two metres

Consequence: Serious injury

Likelihood: Moderate

Outcome: High risk

Assess the risks

Look at what could happen if someone is exposed to a hazard and the likelihood of it happening.

Risk: A worker is sexually harassed

Consequence: Serious injury

Likelihood: Moderate

Outcome: High risk

Eliminate: Work at ground level away from an unguarded edge

Engineering controls: Install guard rails

Administrative controls: Install warning signs and limit access

PPE: Provide fall arrest systems

Control the risks

Where practicable you should eliminate the risks.

Where this is not possible, use the hierarchy of controls.

Eliminate: Change the design of work so there is no direct interaction with clients

Engineering controls: Ensure interactions are in an open, visible space

Administrative controls: Develop and promote behaviour standards for clients

PPE: Provide back to base duress alarms

Review the controls

Review your control measures to make sure they work as planned.

Schedule for review:

  • After an incident or near miss   in the workplace
  • When workers or their   representatives say that it is needed
  • After significant workplace   changes
  • At regular intervals

Recording your risk assessment

As the PCBU, you should record your risk management process and the outcomes, including your consultation with workers. This demonstrates you have met your work health and safety duties and will assist you when you need to monitor or review the hazards you have identified and controls you have put in place.

Your records may include the outcomes of consultation, the hazards you identified, how you assessed the risks, the control measures implemented, and the training provided.

You should select a method of recording the risk management process and outcomes to suit your circumstances. For example, you can use a risk register such as the one in the Code of Practice: How to manage work health and safety risks.

A work health and safety Inspector may ask to see a copy of records relating to the risk management processes if they visit your workplace. If you do not have a written record, you will need to demonstrate by other means how you have met your duties.

On this page