Hazard Identification and Risk Assessment (HIRA)

Why HIRA Matters

Hazards that stay unnamed stay unmanaged. Serious injuries and process upsets are often preceded by conditions people “sort of knew about” but never wrote down, never rated, and never owned. Hazard identification and risk assessment (HIRA) turns vague unease into a decision: is residual risk acceptable with current controls, or must something change before work continues?

Done well, HIRA is a shared language for supervisors, operators, maintainers, and contractors. It answers what can go wrong, who might be harmed, how severe it could be, what will be done, and who will verify the action stuck. Done poorly, it becomes a copy-paste form that matches neither the job nor the layout — and front-line trust collapses.

Use HIRA when planning routine and non-routine work, when something changes, after incidents and near misses, and on a scheduled review cadence for higher-risk activities. The aim is fewer surprises, not a thicker binder.

Hazard Versus Risk

A hazard is anything with potential to cause harm — energy, substances, environments, human factors, or combinations of those. Risk is the chance that harm will occur, considering likelihood, severity, and the controls that actually operate in real conditions, not only the controls written on a wall chart.

Keep descriptions plain. “Wet floor at the loading bay during wash-down while trucks still reverse” beats vague labels. Write so a night-shift colleague recognises the situation without a private briefing from the author.

Separate inherent risk (before controls) from residual risk (after controls you truly have). If a control is unreliable under time pressure, say so and strengthen it.

A Practical Sequence

1. Define the scope. Task, area, equipment, process, or project boundary. State what is in and out of scope so the assessment neither sprawls nor misses interfaces with adjacent work.
2. Gather facts. Walk the job when possible. Speak with people who do the work. Review procedures, previous incidents, near misses, observation trends, and known weak points such as weather, darkness, fatigue, contractors, and simultaneous operations.
3. Identify hazards. Prompt by energy types (gravity, motion, electricity, heat, chemical, pressure, biological, and psychosocial where relevant) and by step-by-step “what if” questions along the task.
4. Who might be harmed and how. Employees, contractors, visitors, the public, and anyone with reduced mobility or language barriers. Name the pathway to harm.
5. Evaluate risk. Use your organisation’s likelihood and severity scales. Score residual risk after existing controls — avoid fantasy scores that assume perfect compliance every time.
6. Select further controls. Prefer elimination and substitution, then engineering, then administrative measures, then PPE. PPE is rarely enough alone where residual risk remains high.
7. Assign actions. Single owner, due date, and a clear definition of done. Link urgent controls to permits, isolations, or stop-work authority where required.
8. Communicate and set review triggers. Brief people affected. Reopen after change, incident, near miss, repeated observations, or the scheduled review date.

What to Capture on the Record

Worked Mini-Example

Scope: weekly wash-down of a loading bay while operations continue nearby.

Hazard: water and residue create slip risk; hoses create trip risk; reversing vehicles interact with people on foot.

Who: bay staff, visiting drivers, cleaners, anyone cutting through the bay.

Gap: signs used inconsistently; wash timing ad hoc; no barrier plan; dry-down not verified before reopening traffic.

Controls: fixed wash window with traffic hold; physical segregation; dry-down check; footwear rule; hose routing off walk paths; owner = bay supervisor; review after first month and after any slip or near miss.

The industry detail matters less than the habit: hazard → people → honest rating → controls → owner → review.

How to Facilitate Well

For higher-risk or unfamiliar jobs, assess as a small group rather than alone. Include at least one person who regularly performs the task and one person with authority to commit resources. Time-box the session so it finishes with actions, not only discussion.

Separate “what could happen” from “what we hope people will remember.” If a control depends entirely on perfect memory under time pressure, strengthen it with engineering, scheduling, or a hard gate such as a permit step.

When people disagree on scores, write down the assumptions. Disagreement is useful — it often reveals different mental models of how the job is really done.

Common Pitfalls

• Copy-paste assessments that ignore layout, season, or crew changes
• Stopping at PPE while elimination or engineering is feasible
• Rating risk as if procedures are always followed
• Actions without owners, dates, or definition of done
• No reopen after MOC, incidents, or repeated observations
• Excluding contractors, visitors, or cleaners from “who is harmed”
• Writing the HIRA after the job “for the file”
• Treating a low score as permission to skip briefing the crew

Cadence, Triggers, and Governance

Use three rhythms. Task-based HIRA before non-routine or higher-risk work. Scheduled review of standing assessments for ongoing processes. Event-based reopen after incidents, near misses, changes, or clusters of observations.

Maintain a simple index of live assessments: title, area, owner, last review, next review. That index often prevents more harm than perfect formatting on any single form.

Leaders should sample a few assessments each month: Is the description real? Are actions closed? Did a recent near miss reopen the right sheet? Sampling beats mass signature exercises.

Connecting HIRA to Daily Work

HIRA should show up in pre-job briefs, permit requests, contractor kick-offs, and shift handovers — not only in a filing cabinet. If crews cannot find the relevant assessment in under two minutes, access is part of the problem.

When observations or near misses repeat the same theme, reopen the assessment rather than writing another disconnected note. Patterns are cheaper to fix than individual events after harm occurs.

Building a Living Hazard Register

Beyond one-off assessments, many sites keep a living hazard register for standing hazards that do not disappear after a single job. The register lists location, hazard, residual risk, owner, and next review. It is not a dumping ground for every trivial note; it is the short list of conditions that must remain visible to leadership.

When a new assessment identifies a standing hazard, add it to the register. When engineering removes the hazard, close the line with evidence. When seasonal conditions return each year, the register should already remind you to reopen controls before the season starts.

Review the register in the same forum where you review incidents. If a serious event maps to a known register line with open actions, that is a governance failure, not bad luck.

Human Factors in Assessment Quality

Assessments fail when they assume ideal humans: fully trained, well rested, fluent in the procedure language, and never rushed. Real crews include new people, fatigue, production pressure, and workarounds that feel normal.

Ask explicitly how the job is done at 2 a.m., during shutdowns, and when a critical person is absent. Those scenarios often hold the true residual risk. If a control depends on perfect memory, redesign the control.

Involve people who disagree. Quiet dissent in a risk workshop is a gift. Record the dissenting view and the decision taken so later investigators understand the trade-offs.

From Paper to Briefing

An assessment that never appears in a pre-job brief is unfinished. Translate the top hazards into three plain sentences the crew can repeat. Point to physical controls they can see: barriers, isolation points, ventilation state, required PPE.

After the job, spend two minutes asking what felt different from the assessment. That micro-feedback loop improves the next document more than an annual rewrite project.

Link repeated brief findings back to corrective actions with owners. Briefing is part of the control system, not a courtesy.