1. Scope of a Risk Management System:
Protect workers from work-related hazards
Eliminate work-related injuries, ill-health, diseases, accidents & deaths

2. Risk Management Occupational Health & Safety Authority Act (27/2000):
Art 6.1: “It shall be the duty of an employer to ensure the health and safety at all times of all persons who may be affected by the work carried out …”

3. Risk Management
Art 6.2: “The measures that need to be taken by an employer to prevent physical and psychological occupational ill-health, injury or death, shall be on the basis of the following general principles of prevention:
Avoidance of risk
Identification of hazards associated with work
Evaluation of those risks which cannot be avoided
Control at source of those risks which cannot be avoided

4. Risk Management
Taking all necessary measures to reduce risk as much as reasonably practicable …
Giving collective protective measures priority over individual ones
Adapting the work to the worker ( re design of work places, choice of work equip of working & production methods – alleviating monotonous work, …
Adapting to technical progress in the interest of OHS
Developing of a coherent overall prevention policy covering technology, organisation of work, working conditions, social relationships & the influence of factors related to working environment.”

5. Risk Management
Legal Notice 36 / 2003 Occupational Health & Safety Authority Act (General Provisions for H&S at Work places Regulations):
Reg 4.2: “An employer shall make such appropriate arrangements for the effective planning, organisation, control, monitoring & review of the preventive & protective measures, taking into consideration the nature of the activities & size of the undertaking”

6. Risk Management Main elements of the OHS-Mgt System Policy Organizing
(source: ILO Guidelines)
Policy
Organizing
Planning & implementation
Evaluation
Action for improvement

7. Risk Management specific to the organization
Policy
The employer, in consultation with workers and their representatives, should set out in writing an OSH policy, which should be:
specific to the organization

8. Risk Management concise, clear, dated and signed by employer
Policy …
concise, clear, dated and signed by employer
Communicated /accessible to all persons at their place of work

9. Risk Management Reviewed regularly
Policy…
Reviewed regularly
Made available to relevant external interested parties (OHSA, auditors, clients...), as appropriate

10. Risk Management Organizing
The employer has overall responsibility for the protection of workers' H&S and should:
allocate roles, responsibility, accountability & authority for the development, implementation & performance
of the OHS-MS & achievement of the
OHS objectives.

11. Risk Management Organizing … The employer should:
Establish structures and processes needed to:
- ensure OHS responsibility is known and accepted at all levels
establish and implement OHS policy
have effective communication, supervision, instruction and training
identify & eliminate or control work-related hazards and risks

12. Risk Management Organizing … The employer should:
Establish structures and processes needed to:
- promote health at work through prevention and health promotion programmes
ensure effective & full participation of workers & their representatives
provide resources to enable fulfilment of obligations (£, time, people,..)
Keep adequate documentation of work-related injuries, …

13. Risk Management Planning & implementation Initial review
- identify, anticipate & evaluate hazards
- are existing controls are adequate?
Formulate action plan based on review
- set priorities, responsibilities for implementation & resources, target dates performance measurement criteria
Establish OHS objectives
- specific, realistic, achievable, documented, communicated & updated

14. Risk Management Planning & implementation… Hazard prevention
- identify & assess risks on an ongoing basis
- implement preventive & protective measures to
eliminate hazards
control hazards at source (engineering & organisational controls)
minimise hazards (design of work systems & administrative measures)
provide ppe for residual risks

15. Risk Management Emergency prevention, preparedness & response:
Planning & implementation …
Emergency prevention, preparedness & response:
- provide internal information, communication & coordination to protect all people in case of emergency at work site
- provide info to & communicate with external competent authorities & emergency response services

16. Risk Management Emergency prevention, preparedness & response
Planning & implementation …
Emergency prevention, preparedness & response
- provide for First Aid, medical assistance, fire-fighting & evacuation of all at work site
- provide information & training to all members of organisation at all levels
- hold regular drills

17. Risk Management For all members of the organization
TRAINING should be
For all members of the organization
At no cost to the workers
Carried out during work hours
Conducted by competent persons
Given at initial stage + refresher
Evaluated for comprehension & retention
Reviewed periodically
documented

18. Risk Management Planning & implementation … Manage change
Evaluate impact of internal (recruitment, new process or layout, ) & external (laws, regulations, technologies) changes on OHS & act as need be
Carry out a risk assessment before any modification or introduction of new work methods, materials, processes or machinery

19. Risk Management Procurement Planning & implementation …
- compliance with OHS requirements evaluated & incorporated into purchasing specifications
- OHS legal requirements identified prior to procurement of goods & services
- ensure conformance to OHS requirements prior to use

20. Risk Management Performance monitoring and measurement
Evaluation
Performance monitoring and measurement
Investigation of work-related injuries, ill health, diseases and incidents, and their impact on safety and health performance
Audit
Management review

21. Risk Management Preventive and corrective action Continual improvement
Action for improvement
Preventive and corrective action
Continual improvement

22. Risk Assessment Risk assessments are very important
as they form an integral part of a good OH&S Management plan.
They help to:
create awareness of hazards & risks
identify who may be at risk … employees, cleaners, contractors, visitors, the public, etc),

23. Risk Assessment What is the goal of risk assessment?
The aim of the RA process is to create a safer and healthier workplace by:
identification & removal of hazards,
reduction of risk by addition of precautions or control measures

24. Risk Assessment What is a risk assessment?
Risk assessment is the process of:
identify hazards,
Analysing / evaluate the associated risk
determining appropriate ways to
eliminate or control the hazard

25. Risk Assessment
Risk assessments help to….
determine if existing control measures are adequate or if more should be done
prevent injuries or illnesses when done at the design or planning stage
prioritize hazards and control measures

26. Risk Assessment Hazard – the potential for something to
cause harm– an intrinsic property…
Risk – the likelihood of that hazard to
actually cause harm…
Risk =
likelihood of an event
(Probability) X
severity of outcome

27. Risk Assessment Risk category 1: remaining risk is acceptable
2: no immediate measures need to be taken
3: measures are to be taken in the medium term
4: measures must be taken as soon as possible
5: measures must be taken immediately

28. Risk Assessment
How do you do a risk assessment?
Assessments should be done by a competent team of individuals who have a good working knowledge of the workplace.
Involved / include staff, supervisors & workers who work with the process under review as they are the most
familiar with the operation.

29. How do you do a risk assessment? …
include both people familiar with the work area, as well as people who are not – in this way you have both the "experienced" and "fresh" eye to conduct the inspection.

30. Risk Assessment identify hazards,
How do you do a risk assessment? … To do an assessment:
identify hazards,
evaluate the likelihood of an injury or illness occurring, and its severity,
consider normal operational situations as well as non-standard events such as shutdowns, power cuts, emergencies, etc.,

31. Risk Assessment
How do you do a risk assessment? … To do an assessment:
review all available heath and safety information about the hazard such as MSDS’s, manufacturers literature, information from reputable organizations, results of testing, etc.,
identify actions necessary to eliminate or control the risk

32. Risk Assessment
How do you do a risk assessment? … To do an assessment:
monitor and re-evaluate to confirm the risk is controlled,
keep any documentation or records that may be necessary (eg detailing the process used to assess the risk, outlining any evaluations, or detailing how conclusions were made).

33. Risk Assessment
How do you do a risk assessment? … When doing an assessment, take into account:
the methods and procedures used in the processing, use, handling or storage of the substance, etc..
the actual and the potential exposure of workers

34. Risk Assessment
How do you do a risk assessment? … When doing an assessment take into account:
the measures and procedures needed to control such exposure by means of engineering controls, work practices, hygiene practices & facilities.

35. Risk Assessment look at all aspects of the work, include
How are the hazards identified?
To be sure that all hazards are found:
look at all aspects of the work, include
Non-routine activities such as repair,
maintenance or cleaning,
look at accident / incident / near-miss
records,
include people who work "off site"
either at home, on other job sites,
drivers, teleworkers, with clients, etc.,

36. Risk Assessment How are the hazards identified?
To be sure that all hazards are found…
look at the way the work is organised
or “carried out" (include experience and
age of people doing the work, systems
being used, etc),

37. Risk Assessment look at foreseeable unusual conditions
How are the hazards identified?
To be sure that all hazards are found:
look at foreseeable unusual conditions
(eg possible impact on hazard control
procedures that may be unavailable in
an emergency situation, power cut, etc.),
examine risks to visitors or the public

38. Risk Assessment
How are the hazards identified?
To be sure that all hazards are found:
include groups that may have a different level of risk such as young or
inexperienced workers, persons with
disabilities, or new or expectant mothers.

39. Risk Assessment RA should be: Suitable
A RA should take into account the
severity of hazards well known in the
type of activity / business.
It can only refer to concrete findings
(or anticipated risks) on site and at a certain point of time.

40. Risk Assessment RA should be: Sufficient
A RA should derive prioritised
measures to improve the
occupational health and safety
situation according to the well
known “hierarchy of prevention”
and according to established
legal principles…

41. Risk Assessment RA should be: Systematic
It should follow a defined and
logical methodology.
It should systematically lead
to evidence based conclusions.

42. Table 1 Example of Risk Assessment
Task
Hazard
Risk
 Priority 
 Control 
Delivering product to customers
Drivers work alone
May be unable to call for help if needed
Drivers have to occasionally work long hours
Fatigue, short rest time between shifts
Drivers are often in very congested traffic
Increased chance of collision
Longer working hours
Drivers have to lift boxes when deliverying product
Injury to back from lifting, reaching, carrying, etc.

43. Risk Management

44. Risk Assessment Definitions for Likelihood of Harm
Very Likely - Typically experienced at least once every six months by an individual.
Likely - Typically experienced once every 5 years by an individual.
Unlikely - Typically experienced once during the working lifetime of an individual.
Very unlikely - Less than 1% chance of being experienced by an individual during working lifetime.

45. Definitions for Severity of Harm
Risk Level - Tolerability Guidance on
necessary action and timescale
Very low - These risks are considered acceptable.
No further action is necessary other than to
ensure that the controls are maintained.
Low - No additional controls are required
unless they can be implemented at very low
cost (in terms of time, money, and effort).
Actions to further reduce these risks are
assigned low priority. Arrangements should
be made to ensure that the controls are maintained.

46. Medium - Consideration should be as to whether the
Definitions for Severity of Harm
Medium - Consideration should be as to whether the
risks can be lowered, where applicable, to a tolerable level and preferably to an acceptable level, but the costs of additional risk reduction measures should be taken into account. The risk reduction measures should be implemented within a defined time period.
Arrangements should be made to ensure that controls are maintained, particularly if the risk
levels area associated with harmful consequences.

47. Definitions for Severity of Harm
High - Substantial efforts should be made to reduce
the risk. Risk reduction measures should be
implemented urgently within a defined time period
and it might be necessary to consider suspending
or restricting the activity, or to apply interim risk
control measures, until this has been completed.
Considerable resources might have to be
allocated to additional control measures.
Arrangements should be made to ensure that
controls are maintained, particularly if the risk
levels are associated with extremely harmful
consequences and very harmful consequences.

48. Definitions for Severity of Harm
Very high - These risk are unacceptable.
Substantial improvements in risk control measures are necessary so that the risk is reduced to a tolerable or acceptable level.
The work activity should be halted until risk controls are implemented that reduces the risk so that it
is no longer very high. If it is not possible to
reduce the risk, the work should remain
prohibited. Adapted From: Occupational health and
safety management systems –
Guide: British Standard, BS 8800:2004.

49. Risk Assessment product information / manufacturer documentation
How do you know if the hazard is serious (poses a risk)?
To research the hazard & determine its risklevel look at:
product information / manufacturer documentation
past experience (workers, etc)
legislated requirements and/or applicable standards

50. Risk Assessment industry codes of practice / best practices
How do you know if the hazard is serious (poses a risk)?
To research the hazard & determine its risk level look at:
industry codes of practice / best practices
material safety data sheets (MSDSs),
information from reputable organizations
results of testing (atmospheric, air sampling of workplace, biological, etc)

51. Risk Assessment
How do you know if the hazard is serious (poses a risk)?
To research the hazard & determine its risk level look at:
the expertise of a occupational health and safety professional
information about previous injuries,
illnesses "near misses", accident reports, etc.

52. Risk Assessment
Include factors that contribute to the level of risk such as the:
work environment (layout, condition...)
capability, skill, experience of workers
who do the work
systems of work being used.

53. Risk Assessment
How do you rank or prioritize the risks?
Ranking or prioritizing hazards is one way to help determine which hazard is the most serious and thus which hazard to control first.
Priority is usually established by taking into account the employee exposure and the potential for accident, injury or illness.

54. Risk Assessment Assigning a priority to the hazards,
How do you rank or prioritize the risks?
Assigning a priority to the hazards,
creates a ranking or an action list.
The following factors play an important role:
percentage of workforce exposed,
frequency of exposure,
degree of harm likely to result from the exposure
probability of occurrence.

55. Table 2 Risk Assessment by the British Standards Organization
What options exist to rank or prioritize risks?
One option is to use a table similar to the following as established by the British Standards Organization:
Table 2 Risk Assessment by the British Standards Organization
Likelihood of Harm
Severity of Harm
Slight Harm
Moderate Harm
Extreme Harm
Very unlikely
Very low risk
High risk
Unlikely
Medium risk
Very high risk
Likely
Low risk
Very likely
Note: These categorizations and the resulting asymmetry of the matrix arise from the examples of harm and likelihood illustrated within the British Standard. Organizations should adjust the design and size of the matrix to suit their needs.

56. Risk Assessment Once you have established your top priorities,
What are methods of hazard control?
Once you have established your top priorities,
you can decide on ways to control each
specific hazard. Hazard control methods are
often grouped into the following categories:
elimination (including substitution),
engineering controls, administrative controls,
personal protective equipment.

57. Risk Assessment Review and monitoring of RA
important to know if risk assessment
was complete and accurate.
essential to ensure if changes in
workplace introduced new hazards or
changed low-ranked hazards to a higher
priority.
good practice to review assessment
regularly to ensure control methods
are effective.

58. Risk Assessment Triggers for a review can also include:
the start of a new project
change in the work process or flow
change or addition to tools, equipment,
machinery (including locations or the way they are used)
new employees
moving to a new building or work area,
introduction of new chemicals/substances
when new information becomes
available about a current product.

59. Risk Assessment Documentation for a risk assessment
Keeping records of RA & any control
actions taken is very important.
RA have to be made available to OHSA
Officers & workers’ H&S representatives.
Level of documentation/record keeping
depends on: risks involved, legislation
requirements and/or requirements of
the management system in place.

60. Risk Assessment Records should show that you:
Documentation for a risk assessment…
Records should show that you:
conducted a good hazard review,
determined the risks of those hazards,
implemented control measures suitable
for the risk, reviewed and monitored all
hazards in the workplace.
Document last updated on April 5, 2006 Copyright © Canadian Centre for Occupational Health & Safety