Knowing how to build a risk register is one of the most practical safety tools a business can have. It helps you identify what could go wrong, assess how serious the risk is, and document what you’re doing to keep people safe.
More importantly, it provides clear evidence that you’re proactively managing safety – not just reacting when something goes wrong. Where businesses go wrong a lot of the time is that they are doing everything they can do keep their workplace safe, but they don’t know how to build a risk register.
A well-maintained risk register helps you to:
- Understand what can hurt people on site.
- Assess and prioritise risks.
- Document existing controls.
- Identify where improvements are needed.
- Involve workers in safety conversations.
- Put clear plans in place to manage hazards over time.
Your risk register should be treated as an organic document. It should be reviewed and updated as tasks, people, and equipment change, or if ever there is a safety incident on site. This guide will walk you through every step of how to build a risk register.
Step 1: Identify Hazards and High-Risk Tasks
Start by identifying anything that has the potential to cause harm. This includes:
- Machinery and vehicle operations.
- Manual handling tasks.
- Working at heights.
- Handling chemicals.
- Fatigue and heat exposure.
Useful ways to identify hazards include:
- Reviewing previous incidents or near misses.
- Conducting site inspections.
- Talking with workers about what feels unsafe or difficult.
Your team often has the best insight into where risks really sit.
| TASK/ HAZARD | NEGATIVE OUTCOME | RISK | |
| CONTROL MEASURES | |||
| Welding | |||
| Cutting/ grinding |
Step 2: Consider What Could Go Wrong
Once hazards are identified, think about the potential outcome.
Ask yourself:
- What type of injury could occur?
- Could this result in serious harm or fatality?
This step helps you understand the true impact if something goes wrong, not just how often it might happen.
| TASK/ HAZARD | NEGATIVE OUTCOME | RISK | |
| CONTROL MEASURES | |||
| Welding | Flash burn – Eyes. Flash burn – Skin. Welding rods. Electrocution. Sparks/ heat – fire. | ||
| Cutting/ grinding | Airbourne particles – Pulmonary fibrosis/ eye injury. Burst disc – Blast injury. Hand entrapment – Cut/ laceration. Sparks/ heat – fire. |
Step 3: Calculate the Risk
Next, assess the level of risk by considering:
- Likelihood: how likely is harm to occur?
- Consequence: how serious would the outcome be?
| Likelihood: | |
| Unlikely | The event rarely or never occurs and would require significant system failures to occur. |
| Possible | The event seems reasonably possible to occur under system failures. |
| Likely | The event is expected to occur under system failures. |
| Consequences: | |
| Minor | First aid injury/ illness, medically treated injury/ illness, minor environmental impact, minor asset damage. |
| Serious | Restricted duties injury/ illness, lost time injury/ illness, serious environmental impact, serious asset damage. |
| Major | Disability or fatality, major environmental impact, major asset damage. |
Where these two parameters meet is the risk score. This allows you to prioritise higher-risk activities first, rather than treating all hazards the same.
| Risk Matrix | ||||
| Consequence | ||||
| Likelihood | Minor | Serious | Major | |
| Likely | Moderate | High | High | |
| Possible | Low | Moderate | High | |
| Unlikely | Low | Moderate | High | |
| TASK/ HAZARD | NEGATIVE OUTCOME | RISK | |
| CONTROL MEASURES | |||
| Welding | Flash burn – Eyes. Flash burn – Skin. Welding rods. Electrocution. Sparks/ heat – fire. | Moderate | |
| Cutting/ grinding | Airbourne particles – Pulmonary fibrosis/ eye injury. Burst disc – Blast injury. Hand entrapment – Cut/ laceration. Sparks/ heat – fire. | High |
Step 4: Record What You’re Already Doing
Many businesses already have controls in place, they’re just not written down. This might include:
- Face-to-face inductions.
- Verbal instructions.
- Safe work practices.
- PPE use.
- Supervision.
Your risk register should capture these existing controls, even if they’re informal. Documenting what you already do is an important part of demonstrating compliance.
| TASK/ HAZARD | NEGATIVE OUTCOME | RISK | |
| CONTROL MEASURES | |||
| Welding | Flash burn – Eyes. Flash burn – Skin. Welding rods. Electrocution. Sparks/ heat – fire. | Moderate | Wear appropriate PPE at all times, including long-sleeve shirt, long pants, welding gloves and welding helmet. Do not weld in wet conditions – ensure no water or moisture is near welding equipment. Remove all flammable materials from the surrounding area before starting work. Keep firefighting equipment readily available and accessible during welding activities. |
| Cutting/ grinding | Airbourne particles – Pulmonary fibrosis/ eye injury. Burst disc – Blast injury. Hand entrapment – Cut/ laceration Sparks/ heat – fire. | High | Wear eye protection, respiratory protection and hearing protection. Ensure workers are trained in the correct use of disc grinders, particularly when changing discs. Dispose of cracked or chipped discs immediately. Never remove safety guards from equipment. Remove all flammable materials from surrounding areas. Keep firefighting equipment on standby. |
Step 5: Identify What Else You Could Do
After recording current controls, consider what additional measures could reduce risk further.
Use the hierarchy of controls to guide improvements:
- Eliminate the hazard where possible.
- Substitute safer options.
- Apply engineering controls.
- Introduce administrative controls.
- Use PPE as a last line of defence.
A Practical Tip
Your risk register should be reviewed:
- At least annually.
- After incidents or near misses.
- When new machinery, tasks, or workers are introduced.
- During busy or seasonal periods.
Maintaining it regularly ensures it remains a practical and effective resource, rather than a document that is created and then left unused.
A risk register isn’t just paperwork. It supports safer decision-making, clearer communication with workers, improved safety culture, and stronger compliance if your business is ever audited or investigated.
It also helps demonstrate that safety is being proactively managed, something regulators like SafeWork Australia expect from businesses.
Most importantly, it helps protect your people.
If you’d like support building or reviewing your risk register, or need help strengthening your WHS systems, the ProcessWorx team can help.
We work alongside businesses to identify risks, document practical controls, and build safety systems that actually work on the ground – contact ProcessWorx on (08) 9316 9896 or email enquiries@processworx.com.au.
