A good risk assessment is not a completed table. It is traceable logic from task and exposure to control, owner, evidence and residual risk.
Applied case · Industrial coating activity
- Challenge
- The assessment focused on PPE while overlooking chemical preparation, ventilation and operational interfaces.
- Response
- The task was split by exposure stage, the hierarchy of control was applied and residual risk was retested.
- Outcome
- Isolation, ventilation, testing and stop boundaries became visible before work started.
Start with real exposure
Break the task into stages and identify people, assets, materials, energy and environment affected at each stage.
- Map every hazard to a step.
- Include non-routine and emergency states.
- Test contractor interfaces.
Challenge control strength
A control must be specific, executable, verifiable and materially reduce exposure before reliance on PPE.
- Apply the hierarchy of control.
- Name the owner and verification time.
- Link the control to field evidence.
Justify residual risk
Do not lower a score automatically after adding text. Reassess likelihood and consequence against real controls and their limits.
- Record rating logic.
- Escalate unacceptable risk.
- Set a stop rule for control failure.
What must be visible before acceptance?
- Map every hazard to a step.
- Include non-routine and emergency states.
- Test contractor interfaces.
- Apply the hierarchy of control.
- Name the owner and verification time.
- Link the control to field evidence.
- Record rating logic.
- Escalate unacceptable risk.
- Set a stop rule for control failure.

