Hazard Identification and Risk Assessment in ISO 45001:2018

Introduction

Hazard identification is the foundation of any effective Occupational Health and Safety (OH&S) management system. You cannot manage risks you don’t know about. ISO 45001:2018 places a strong emphasis on a proactive approach to finding and fixing hazards before they cause harm.

Understanding Hazards

A hazard is a source with a potential to cause injury and ill health. Hazards can be physical, chemical, biological, psychosocial, mechanical, electrical, or based on the general organization of work.

Common Hazard Categories

• Physical: Noise, vibration, radiation, temperature extremes.
• Chemical: Cleaning agents, fumes, dusts, gases.
• Biological: Bacteria, viruses, fungi.
• Ergonomic: Repetitive movements, manual handling, poor workstation design.
• Psychosocial: Workload, bullying, harassment, lack of control.
• Safety: Slipping/tripping hazards, moving machinery, working at heights.

The Process (Clause 6.1.2)

1. Hazard Identification (6.1.2.1)

The standard requires an ongoing, proactive process. Consider:

• Routine and non-routine activities.
• Emergency situations.
• People (workers, contractors, visitors).
• Changes in the organization.
• Past incidents.

2. Assessment of OH&S Risks (6.1.2.2)

Once hazards are identified, assess the risk. Risk is a combination of the likelihood of an occurrence and the severity of the injury or ill health.

• Likelihood: How likely is it to happen?
• Severity: How bad could the injury be?

Use a Risk Matrix to prioritize risks (e.g., Low, Medium, High).

3. Assessment of OH&S Opportunities (6.1.2.3)

Look for opportunities to enhance safety.

• Can we eliminate a hazard entirely?
• Can we adapt work to workers?
• Can we use new technology to reduce risk?

Hierarchy of Controls (Clause 8.1.2)

When determining controls, follow the hierarchy:

1. Elimination: Remove the hazard (e.g., stop using a toxic chemical).
2. Substitution: Replace with something less hazardous (e.g., use a water-based cleaner).
3. Engineering Controls: Isolate people from the hazard (e.g., machine guards, ventilation).
4. Administrative Controls: Change how people work (e.g., training, rotation, signage).
5. PPE: Protect the worker with Personal Protective Equipment (e.g., gloves, safety glasses).

Documentation

Maintain documented information on:

• The methodology and criteria for assessment.
• The identified hazards, risks, and opportunities.
• The actions taken to address them.

Conclusion

Effective hazard identification is not a one-time event. It is a continuous cycle of looking for trouble before it finds you. By systematically identifying hazards and assessing risks, you create a safer, healthier workplace.