Back to Policies & Procedures
POL-003cautionv1.0February 2026

Risk Management Policy & Procedure

POL-003 | Risk Management Policy & Procedure | Version 1.0 | February 2026

Purpose

To establish a systematic approach to identifying hazards, assessing risks, and implementing controls to eliminate or minimise risks to health and safety at [YOUR BUSINESS NAME].

Scope

Applies to all work activities, plant, substances, and processes at all [YOUR BUSINESS NAME] sites.

The Hierarchy of Controls

When controlling risks, [YOUR BUSINESS NAME] will apply the hierarchy of controls in the following order:

LevelControl TypeExample
1Elimination — remove the hazard entirelyRemove a trip hazard from the floor
2Substitution — replace with something less hazardousUse a less toxic cleaning chemical
3Isolation — separate people from the hazardForklift exclusion zones
4Engineering controls — physical safeguardsMachine guards, barriers
5Administrative controls — procedures, trainingSOPs, signage, training
6PPE — last resortGloves, hard hat, safety boots
Note: PPE is the lowest level of control and must never be the only control measure in place.

Risk Assessment Process

Step 1 — Hazard Identification

Identify all hazards before starting any new task or when conditions change. Use:

  • Walk-through inspections
  • Consultation with workers
  • Review of incident and near-miss reports
  • Review of manufacturer's instructions and SDS
  • Step 2 — Risk Assessment

    Assess the likelihood and consequence of harm using the 5×5 risk matrix:

    Likelihood:
    RatingDescription
    1 — RareCould happen but probably never will
    2 — UnlikelyCould happen but not expected
    3 — PossibleMight happen occasionally
    4 — LikelyWill probably happen
    5 — Almost CertainExpected to happen regularly
    Consequence:
    RatingDescription
    1 — InsignificantFirst aid only, no lost time
    2 — MinorMedical treatment, short-term lost time
    3 — ModerateSignificant injury, extended lost time
    4 — MajorPermanent disability or multiple injuries
    5 — CatastrophicDeath or multiple fatalities
    Risk Rating = Likelihood × Consequence:
  • 1–4: Low — Manage by routine procedures
  • 5–9: Moderate — Manage by specific procedures, monitor
  • 10–16: High — Senior management attention required, urgent action
  • 17–25: Critical — Immediate action, stop work if necessary
  • Step 3 — Control Measures

    Select and implement controls using the hierarchy of controls. Document in the Hazard Register.

    Step 4 — Review

    Review controls after implementation to confirm they are effective. Review whenever:

  • A new hazard is identified
  • An incident or near-miss occurs
  • Work processes change
  • At least annually
  • Responsibilities

  • PCBU/Management: Ensure resources are available for risk management. Approve high and critical risk controls.
  • Supervisors: Conduct risk assessments for their work areas. Implement and monitor controls.
  • Workers: Report hazards immediately. Participate in risk assessments. Follow control measures.
  • Related Documents: POL-004, FORM-003, REG-001 | Legislation: WHS Act 2011 (Qld) s.17; WHS Regulation 2011 (Qld) Part 3.1; Code of Practice: How to Manage Work Health and Safety Risks