What is a risk assessment?
A risk assessment is a systematic process of identifying, analysing, and responding to risks. Under the Work Health and Safety Regulation 2011 (Qld), a person conducting a business or undertaking (PCBU) must identify reasonably foreseeable hazards, eliminate risks so far as is reasonably practicable (or minimise them if elimination is not practicable) and review control measures when needed. Some work needs a written risk assessment: for a confined space, the risk assessment must be done by a competent person and recorded in writing (section 66 of the WHS Regulation 2011 (Qld)).
When to do a risk assessment
A risk assessment should be carried out whenever there is a change in the business or its environment. This could be a new product or service, a change in the workplace, or an expansion into new markets. Control measures must also be reviewed and, as necessary, revised when a control measure is not controlling the risk (for example, after a notifiable incident caused by the risk), before a change at the workplace that is likely to create a new or different risk, when a new hazard or risk is identified, or when consultation or a health and safety representative indicates a review is needed (WHS Regulation 2011 (Qld), section 38). Section 38 sets review triggers rather than a fixed time interval, so regular reviews at other times are good practice. Separately, if a PCBU has chosen to appoint a work health and safety officer under Part 5A of the WHS Act 2011 (Qld) (an optional role), that officer must assess risks at least every 12 months, or at another interval agreed with the health and safety committee if there is one (section 103D of the Act).
How to do a risk assessment
- Identify the hazards: The first step is to identify the hazards that could potentially affect the business. This can be done through a variety of methods, such as brainstorming sessions, interviews, inspections, and research.
- Analyse the risks: Once the hazards have been identified, they need to be analysed in order to determine the potential impact on the business. This step includes assessing the likelihood of each hazard occurring and its potential severity.
- Develop a plan: The next step is to develop a plan to mitigate the risks. This plan should be tailored to the specific needs of the business and may include a variety of measures, such as changes in policies or procedures, training programs, and emergency response plans.
- Implement the plan: The final step is to implement the risk mitigation plan. This includes putting the measures in place and making sure they are followed by all employees.
Who is in charge of risk assessment?
The person in charge of risk assessment will vary from business to business. In some cases, it may be the owner or manager. In others, it may be a designated health and safety officer. Ultimately, it is up to the individual business to decide who carries out risk assessments, but the PCBU stays legally responsible for managing risks, because a work health and safety duty cannot be transferred to another person (section 14 of the Work Health and Safety Act 2011 (Qld)). Workers must also be consulted when hazards are identified and risks assessed (section 49).
A risk assessment is a vital part of any business. By following these steps, you can identify potential risks and develop a plan to mitigate them. By doing so, you can protect your employees and your business.
Where can I find risk assessment templates?
We have several risk assessment templates available on our store, check them out below!
Templates for this job
Ready-to-edit Word and Excel templates for Queensland workplaces.


