POL-003 | Risk Management Policy & Procedure | Version 1.0 | February 2026
Purpose
To establish a systematic approach to identifying hazards, assessing risks, and implementing controls to eliminate or minimise risks to health and safety at [YOUR BUSINESS NAME].
Scope
Applies to all work activities, plant, substances, and processes at all [YOUR BUSINESS NAME] sites.
The Hierarchy of Controls
When controlling risks, [YOUR BUSINESS NAME] will apply the hierarchy of controls in the following order:
| 1 | Elimination — remove the hazard entirely | Remove a trip hazard from the floor |
| 2 | Substitution — replace with something less hazardous | Use a less toxic cleaning chemical |
| 3 | Isolation — separate people from the hazard | Forklift exclusion zones |
| 4 | Engineering controls — physical safeguards | Machine guards, barriers |
| 5 | Administrative controls — procedures, training | SOPs, signage, training |
| 6 | PPE — last resort | Gloves, hard hat, safety boots |
Note: PPE is the lowest level of control and must never be the only control measure in place.
Risk Assessment Process
Step 1 — Hazard Identification
Identify all hazards before starting any new task or when conditions change. Use:
Walk-through inspections
Consultation with workers
Review of incident and near-miss reports
Review of manufacturer's instructions and SDS
Step 2 — Risk Assessment
Assess the likelihood and consequence of harm using the 5×5 risk matrix:
Likelihood:
| 1 — Rare | Could happen but probably never will |
| 2 — Unlikely | Could happen but not expected |
| 3 — Possible | Might happen occasionally |
| 4 — Likely | Will probably happen |
| 5 — Almost Certain | Expected to happen regularly |
Consequence:
| 1 — Insignificant | First aid only, no lost time |
| 2 — Minor | Medical treatment, short-term lost time |
| 3 — Moderate | Significant injury, extended lost time |
| 4 — Major | Permanent disability or multiple injuries |
| 5 — Catastrophic | Death or multiple fatalities |
Risk Rating = Likelihood × Consequence:
1–4: Low — Manage by routine procedures
5–9: Moderate — Manage by specific procedures, monitor
10–16: High — Senior management attention required, urgent action
17–25: Critical — Immediate action, stop work if necessary
Step 3 — Control Measures
Select and implement controls using the hierarchy of controls. Document in the Hazard Register.
Step 4 — Review
Review controls after implementation to confirm they are effective. Review whenever:
A new hazard is identified
An incident or near-miss occurs
Work processes change
At least annually
Responsibilities
PCBU/Management: Ensure resources are available for risk management. Approve high and critical risk controls.
Supervisors: Conduct risk assessments for their work areas. Implement and monitor controls.
Workers: Report hazards immediately. Participate in risk assessments. Follow control measures.
Related Documents: POL-004, FORM-003, REG-001 |
Legislation: WHS Act 2011 (Qld) s.17; WHS Regulation 2011 (Qld) Part 3.1; Code of Practice: How to Manage Work Health and Safety Risks