RosterElf Logo
Start trial
FREE HR TEMPLATE Last updated 27 June 2026

Hazard identification & risk assessment policy template

A free, ready-to-edit hazard identification and risk assessment (HIRA) policy template for Australian workplaces. Set out a systematic process to identify hazards, assess risk with a matrix and control it through the hierarchy of controls — helping your business meet its WHS duties. No signup required.

Hazard & risk policy

PDF format • Ready to download

Five-step HIRA process
Risk matrix & hierarchy of controls
Worker consultation built in
Documentation & review schedule

By downloading, you agree to our template disclaimer

This hazard identification and risk assessment policy template reflects Australian model work health and safety (WHS) requirements at the time of publication and is provided as a general guide to adapt for your business and specific workplace hazards. It does not constitute legal, HR, or professional advice and should not be relied on as a substitute for advice specific to your business, workforce, or circumstances.

Why your workplace needs a hazard & risk policy

Under Australian WHS law, every PCBU (person conducting a business or undertaking) must manage risks to health and safety so far as is reasonably practicable. That means identifying hazards before they cause harm, assessing the risk they create, and putting controls in place. A documented hazard identification and risk assessment (HIRA) policy is your evidence that you meet this primary duty of care.

Risk assessment is not a one-off exercise. Effective safety management depends on ongoing hazard identification, regular review of existing assessments, and continuous improvement driven by incidents and near misses. A clear policy gives everyone — from management to frontline workers — a consistent, repeatable process to follow. It also sits at the centre of your wider safety framework, working alongside your WHS policy and risk management policy.

The policy applies to all employees, contractors, volunteers and visitors. Store it and capture acknowledgements in your HR software so you can show every worker has read and understood how to identify and report hazards.

Worker conducting a workplace safety inspection

What a hazard & risk policy should cover

The building blocks of a systematic HIRA process

Hazard identification

Structured methods for spotting hazards — inspections, incident reviews and worker input.

Risk assessment

Rating risk by likelihood and consequence so the worst hazards are tackled first.

Risk matrix

A simple grid that turns likelihood and consequence into a clear risk rating.

Hierarchy of controls

Eliminate first, then substitute, isolate, engineer, administrative controls and PPE.

Documentation

Recording hazards, assessments and controls in a register you can rely on.

Worker consultation

Involving workers and HSRs throughout, as WHS law requires.

What's included in this template

A complete framework for identifying, assessing and controlling workplace risk

Purpose & scope

The policy's objectives and who and where it applies across the organisation.

Definitions

Plain-English meaning of hazard, risk, likelihood, consequence and control.

Hazard identification methods

Workplace inspections, incident analysis and job safety analysis (JSA).

Risk assessment process

A step-by-step approach to evaluating each identified hazard.

Risk matrix explained

How to combine likelihood and consequence to set a risk rating.

Hierarchy of controls

Applying elimination, substitution, isolation, engineering, administrative controls and PPE.

Responsibilities

What management, supervisors and workers must each do.

Documentation requirements

Recording hazards, assessments and controls in a risk register.

Review & monitoring

When to review — on change, after incidents, and at set intervals.

Worker consultation & training

Involving workers and building competency to assess risk.

How to do a hazard identification & risk assessment

A repeatable five-step process your team can follow every time

Hazard vs risk — know the difference

A hazard is anything with the potential to cause harm — a wet floor, a chemical, moving machinery. Risk is the likelihood that the hazard actually causes harm, combined with how serious that harm would be. Naming both clearly is what lets you prioritise the right controls.

Work down the hierarchy of controls

Always try to eliminate a hazard first. If you can’t, work down the order — substitute, isolate, use engineering controls, then administrative controls, and only rely on PPE as a last resort. Higher controls protect more people and don’t depend on individual behaviour.

The five-step HIRA process

1. Identify hazards

Walk the workplace, review incidents and near misses, and talk to workers.

2. Assess the risk

Rate each hazard by likelihood and consequence using a risk matrix.

3. Control the risk

Apply the hierarchy of controls, eliminating or minimising risk so far as is reasonably practicable.

4. Record & review

Document findings in a risk register and review on change, after incidents and at set intervals.

Consult workers at every step — they often see hazards first, and consultation is a legal requirement under the model WHS laws. For a worked example, see our guide on conducting a WHS assessment.

Document each assessment so you can demonstrate due diligence: record the hazard, who could be harmed, the existing controls, the risk rating, any further action, who is responsible and the review date. Safe Work Australia’s model WHS laws and Codes of Practice set out the legal framework, and your state or territory regulator can advise on industry-specific requirements. Capturing this in HR software keeps your risk register, policy versions and worker acknowledgements in one auditable place.

Who should use this template?

Every Australian PCBU has a duty to manage workplace risk

Essential for supervisors and HSRs, who carry out most day-to-day hazard identification and risk assessments.

Manage your safety policies the easy way

RosterElf helps Australian businesses store WHS policies, capture employee acknowledgements at onboarding and keep an audit trail — all in one place.

Start free trial See HR software
FAQ

Hazard & risk policy FAQ

  • A hazard identification and risk assessment (HIRA) policy sets out the structured process a workplace uses to identify hazards, assess the risk they create and put controls in place. It typically covers the policy’s purpose, its scope (all employees, contractors, volunteers and visitors), responsibilities, the risk assessment method and matrix, the hierarchy of controls, documentation and review. It helps a business meet its primary duty of care under the WHS Act.

  • Start with this template and tailor it to your workplace. Set the purpose and scope, define hazard and risk, describe how hazards are identified (inspections, incident reviews, worker input), explain your risk matrix, set out the hierarchy of controls, and define who is responsible for what. Consult your workers and health and safety representatives, add documentation and review requirements, then have it approved. Our guide on writing a workplace policy walks through the structure.

  • Yes. The template gives you a solid foundation, but you should tailor it to your specific workplace hazards, industry and the WHS legislation that applies in your state or territory. Consult your workers and health and safety representatives during customisation, and seek independent WHS advice for high-risk work.