The risk assessment process must identify what could cause harm in the workplace, who and how it could harm, and consider what control measures are required to reduce the risk to As Low As Reasonably Practicable (ALARP)and tolerable.
Control measures that have been identified must be implemented, clearly communicated to personnel, maintained, and used properly.
All risk assessments must be carried out considering the ‘hierarchy of controls’ (the measures to control risk). The order must be followed; for example, always try to eliminate the hazard first and do not simply jump to the easiest control. It may require a combination of measures to control risk.
The order of the hierarchy of controls is as follows:
- Elimination
Redesign the job or use a different process, substance, or piece of equipment and so on so that the hazard is removed or eliminated (for example, avoid working at height if possible). - Substitution
Replace the process, substance, or equipment with a less hazardous one (for example, use a mobile elevating work platform instead of step ladders). Care should be taken to make sure the alternative is safer than the original. - Engineering controls
Engineer the equipment to protect the operator (for example, by making the equipment less noisy) or separate the hazard from the operator (for example, by having screens or guards on dangerous items of machinery or equipment). - Administrative controls
These are all about identifying and implementing the procedures that need to be followed to work safely (for example, rotating tasks to reduce the time workers are exposed to hazards, banning the use of mobile phones in hazardous areas, putting up safety signs, and carrying out risk assessments and so on). - Personal protective equipment
If all the previous hierarchy of control measures have been evaluated and found to be ineffective or not able to reduce risks to ALARP, personal protective equipment (PPE) must be used. For example, when you cannot eliminate the risk of a fall, use work equipment or other measures (such as harnesses) to minimize the
consequences of a possible fall. PPE is the final control measure to be considered as it relies on the wearing of and reliance on human behavior. This control measure requires proactive supervision to make sure this is sufficiently applied/followed.
Consideration must be given to the effects or new hazards that may be introduced as a result of implementing any of the controls.
Management is responsible for controlling risk in the workplace, so they must make sure risk assessments are carried out and dynamically assessed throughout the duration of the task/activity. They may delegate the responsibility for carrying out a risk assessment to a competent person, but they:
a. must make sure that the risk assessment is suitable and sufficient; and
b. are responsible for approving it and remaining accountable for it.
Once the risk assessment has been approved, it must be followed by all personnel involved with or affected by the activity. A manager or supervisor or any person who has been delegated the responsibility to carry out a risk assessment must be competent in risk assessment having successfully completed recognized risk assessment training. The person carrying out the risk assessment should have a good understanding of the activity, process, or substance that is being assessed and must carry out the assessment in consultation with the personnel taking part in/or affected by the activity and use local HS&EP support and SME’s where appropriate.
If the risk assessment has been delegated to a competent person, the significant findings must be explained to management personnel responsible for the risk, along with details of any control measures that need to be put in place to reduce those risks.
Generic risk assessments can be produced for some activities that share the same hazards and controls (for example, routine maintenance or cleaning). However, the assessment must consider the environment and the situation where the activity is being carried out.
Where control measures have been put in place, yet significant residual risk resulting from activities remains, this information must be evaluated to assess the need for additional control measures to bring the residual risk to ALARP and tolerable.
Where the residual risk identified is significant, this must be recorded in the risk assessment and communicated to those undertaking the activity. Where circumstances change, the risk assessment and control measures must be reviewed and modified as necessary.
Source: UK’s HSE Publication: Risk assessment and safe systems of work
