How to conduct a WHS risk assessment
A complete guide to identifying hazards, assessing risks, and implementing controls that comply with Australian WHS laws. Supports your WHS policy obligations.
Written by
Georgia Morgan
General information only – not legal advice
This guide provides general information about WHS risk assessments in Australia. It does not constitute legal, HR, or professional advice and should not be relied on as a substitute for advice specific to your business, workforce, or circumstances.
What is a WHS risk assessment?
A WHS risk assessment is a systematic process of identifying hazards in your workplace, evaluating the risks they pose, and determining appropriate controls to eliminate or minimise those risks.
Under Australian WHS laws, persons conducting a business or undertaking (PCBUs) must ensure the health and safety of workers and others at the workplace so far as is reasonably practicable. Risk assessment is the foundation of meeting this duty.
6 steps to conducting a WHS assessment
Follow this risk management process to identify and control workplace hazards.
Prepare for the assessment
Gather relevant information, assemble your team, and plan the scope of the assessment.
Tips:
- Review previous incident reports, hazard registers, and past assessments
- Involve workers and health and safety representatives (HSRs) in the process
- Define assessment scope: full workplace, specific area, or particular task
- Gather relevant Safe Work Australia codes of practice for your industry
Identify hazards
Systematically identify all hazards that could cause harm to workers or others in the workplace.
Tips:
- Walk through the workplace observing work practices and conditions
- Talk to workers about hazards they've noticed or experienced
- Review safety data sheets (SDS) for hazardous chemicals
- Consider all hazard types: physical, chemical, biological, ergonomic, psychosocial
Assess the risks
Evaluate each hazard to determine the level of risk based on likelihood and potential consequence.
Tips:
- Consider how likely it is that harm will occur
- Consider how severe the harm could be (minor injury to fatality)
- Factor in who might be harmed and how many people are exposed
- Use a risk matrix to categorise risks as low, medium, high, or extreme
Control the risks
Implement control measures using the hierarchy of controls, starting with elimination where possible.
Tips:
- Elimination: Remove the hazard completely (most effective)
- Substitution: Replace with something less hazardous
- Isolation: Separate people from the hazard
- Engineering controls: Physical changes to the workplace
- Administrative controls: Safe work procedures, training, signage
- PPE: Last resort when other controls aren't reasonably practicable
Document the assessment
Record hazards, risk ratings, control measures, and responsible persons in a risk register.
Tips:
- Use a standardised risk assessment template
- Record the date, assessor names, and area/task assessed
- Document both existing and additional controls required
- Assign responsibility and due dates for implementing new controls
Review and monitor
Schedule regular reviews and monitor the effectiveness of control measures.
Tips:
- Review after incidents, near-misses, or worker concerns
- Review when work processes, equipment, or chemicals change
- Review if control measures don't seem to be working
- Schedule routine reviews at least annually for ongoing risks
Track WHS compliance
RosterElf HR Hub helps you document safety assessments, training records, and compliance requirements. Built for Australian small businesses.
Common workplace hazards
Consider all these hazard categories when conducting your assessment.
Physical hazards
- Slips, trips, falls
- Moving machinery
- Electrical hazards
- Working at heights
- Noise
- Manual handling
Common in: All industries, especially construction, manufacturing, hospitality
Chemical hazards
- Cleaning chemicals
- Fumes and gases
- Dust and particles
- Flammable substances
Common in: Cleaning, manufacturing, agriculture, healthcare
Biological hazards
- Infectious diseases
- Blood and bodily fluids
- Mould and bacteria
- Animal bites/stings
Common in: Healthcare, aged care, childcare, hospitality
Ergonomic hazards
- Repetitive movements
- Poor workstation setup
- Heavy lifting
- Prolonged standing
Common in: Retail, office work, manufacturing, hospitality
Psychosocial hazards
- Work overload
- Bullying and harassment
- Violence and aggression
- Fatigue from shift work
Common in: All industries - now regulated in most states
Environmental hazards
- Extreme temperatures
- UV radiation
- Poor lighting
- Weather conditions
Common in: Construction, agriculture, outdoor work, transport
Controlling risks effectively
Always work through the hierarchy from top to bottom. Higher-level controls are more effective.
Elimination
Most effectivePhysically remove the hazard from the workplace
Example: Remove a trip hazard by fixing uneven flooring permanently
Substitution
Highly effectiveReplace the hazard with a less dangerous option
Example: Use a less toxic cleaning chemical
Isolation
Very effectiveSeparate people from the hazard
Example: Install guards around machinery
Engineering controls
EffectiveDesign the hazard out of the process
Example: Install ventilation to remove fumes
Administrative controls
ModerateChange the way people work
Example: Implement safe work procedures and training
PPE
Least effectiveProvide personal protective equipment
Example: Provide safety glasses, gloves, hearing protection
Important: PPE should only be used when higher-level controls aren't reasonably practicable, or as an interim measure while implementing better controls. It relies on correct selection, fit, maintenance, and consistent use.
Risk assessment mistakes
These common errors can leave workers at risk and expose your business to liability.
Not involving workers
Risk: Missing hazards that workers experience daily. May breach WHS consultation requirements.
Solution: Include workers and HSRs in hazard identification and risk assessment discussions.
Only assessing after incidents
Risk: Reactive rather than preventive approach. Injuries occur before action is taken.
Solution: Conduct proactive assessments for all work activities, not just after something goes wrong.
Jumping straight to PPE
Risk: Relying on least effective control. Higher risk of harm if PPE fails or isn't worn.
Solution: Always work through hierarchy of controls. Use PPE as last resort.
Not documenting
Risk: No evidence of due diligence. Harder to demonstrate compliance.
Solution: Keep written records of all assessments, including hazards, risks, and controls.
Set and forget
Risk: Controls may become ineffective over time. New hazards may emerge.
Solution: Schedule regular reviews and update assessments when circumstances change.
Frequently asked questions
- Under WHS laws, PCBUs (persons conducting a business or undertaking) must eliminate risks so far as is reasonably practicable, or if elimination isn't reasonably practicable, minimise risks so far as is reasonably practicable. While risk assessments aren't explicitly mandated for all hazards, they're the standard method to demonstrate you've met your duties. Some regulations specifically require documented assessments (e.g., hazardous chemicals, confined spaces).
- Assessments should be conducted by people with knowledge of the work processes, hazards, and control options. This typically includes supervisors, managers, and workers familiar with the tasks. For complex or high-risk activities, a qualified WHS professional may be needed. Workers and HSRs must be consulted as part of the process.
- Review assessments when: an incident or near-miss occurs, a worker raises a concern, work processes change, new equipment or substances are introduced, control measures aren't working effectively, or at scheduled intervals (commonly annually). Some high-risk activities may require more frequent review.
- Keep records of risk assessments including: date, assessor names, hazards identified, risk ratings, control measures (existing and planned), responsible persons, and review dates. Some regulations specify record retention periods (e.g., 30 years for health monitoring). Good practice is to keep assessment records for at least 7 years.
Regulatory sources
This guide is aligned with official Australian WHS regulations.
Related guides
More resources for workplace health and safety.
Reduce compliance risk
Join thousands of Australian businesses using RosterElf to support your compliance efforts with workplace laws. Built for Australian small businesses.