Risk Assessment — Hospitality & Tourism Edition
A structured procedure for identifying workplace hazards, assessing the associated risks, and determining appropriate control measures in accordance with Australian WHS risk management requirements.
Purpose
To systematically identify hazards, evaluate the level of risk, and implement effective controls to eliminate or minimise the risk of harm to workers and others, meeting the PCBU's duty under the WHS Act.
Scope
Applies to all workplace activities, tasks, processes, and environments. Covers new operations, changes to existing operations, and periodic reviews of existing risk assessments.
Prerequisites
- Risk management framework or policy aligned with the WHS Act and AS/NZS ISO 31000
- Risk assessment template with the organisation's risk matrix
- Competent personnel trained in risk assessment methodology
- Access to relevant SDS, equipment manuals, incident data, and industry guidance
Includes food safety compliance (HACCP), RSA requirements, liquor licensing documentation, and tourism accreditation record keeping.
Step-by-Step Procedure
Define the Context and Scope
Establish the scope of the risk assessment including the task, process, or area to be assessed, and the objectives of the assessment.
- 1.1Identify the specific task, process, or workplace area being assessed
- 1.2Determine the reason for the assessment — new task, change, review, incident
- 1.3Identify who may be affected — workers, contractors, visitors, public
- 1.4Gather relevant information — procedures, SDS, incident history, legislation
Identify Hazards
Systematically identify all hazards associated with the task, process, or area. Use multiple methods to ensure comprehensive identification.
- 2.1Walk through the workplace or observe the task being performed
- 2.2Consult workers who perform the task for firsthand knowledge
- 2.3Review incident and near-miss records for the task or area
- 2.4Review SDS, equipment manuals, and industry guidance for known hazards
- 2.5Consider physical, chemical, biological, ergonomic, and psychosocial hazards
- Do not overlook routine tasks — familiarity can lead to hazard blindness
Assess the Risk for Each Hazard
For each identified hazard, assess the level of risk by considering the likelihood of harm occurring and the potential consequence or severity.
- 3.1Determine the likelihood — how likely is it that the hazard will cause harm?
- 3.2Determine the consequence — what is the worst credible outcome?
- 3.3Use the risk matrix to determine the overall risk rating
- 3.4Consider existing controls and their effectiveness when rating the risk
- Assess the residual risk — the risk remaining after existing controls are considered
Determine Control Measures
For each hazard rated above acceptable levels, identify control measures using the hierarchy of controls to eliminate or minimise the risk.
- 4.1Elimination — can the hazard be completely removed?
- 4.2Substitution — can a less hazardous alternative be used?
- 4.3Isolation — can the hazard be physically separated from workers?
- 4.4Engineering — can equipment or design changes reduce the risk?
- 4.5Administrative — can procedures, training, or signage reduce the risk?
- 4.6PPE — is personal protective equipment needed as a supplementary control?
- Always start at the top of the hierarchy — the most effective controls eliminate the hazard entirely
Document the Risk Assessment
Record all findings in the risk assessment template, including identified hazards, risk ratings, controls, and responsible persons.
- 5.1Complete the risk assessment form for each hazard
- 5.2Record the initial risk rating, controls applied, and residual risk rating
- 5.3Assign an owner for each control measure
- 5.4Have the risk assessment reviewed and signed by the relevant manager
Implement Control Measures
Put the identified control measures into practice. Ensure workers are trained on new controls and procedures are updated accordingly.
- 6.1Implement controls in priority booking — highest risk first
- 6.2Update safe work procedures and work instructions
- 6.3Train affected workers on the new controls and procedures
- 6.4Procure any required equipment, signage, or PPE
Communicate the Assessment Results
Share the risk assessment findings and implemented controls with all affected workers, supervisors, and relevant stakeholders.
- 7.1Brief affected workers on identified hazards and controls
- 7.2Post the risk assessment or a summary in the relevant work area
- 7.3Include the risk assessment in toolbox talks or team meetings
Review and Update the Risk Assessment
Schedule regular reviews and update the risk assessment when triggered by changes, incidents, or new information.
- 8.1Set a review date based on the risk level — high risk reviewed more frequently
- 8.2Trigger a review after incidents, near-misses, or changes to the task or environment
- 8.3Monitor the effectiveness of controls through observation and feedback
- 8.4Update the risk assessment document and communicate any changes
Quality Checkpoints
Common Mistakes to Avoid
Expected Outcomes
Percentage of workplace tasks and areas with a current, documented risk assessment
Percentage of identified control measures implemented within the target timeframe
Percentage of risk assessments reviewed within their scheduled review period
Frequently Asked Questions
When is a risk assessment required?
A risk assessment should be conducted for new tasks or processes, when changes are made to existing activities, after an incident or near-miss, when new hazard information becomes available, and periodically as part of routine WHS management. Some specific regulations mandate risk assessments, such as for hazardous chemicals, confined spaces, and manual handling.
What is the difference between a hazard and a risk?
A hazard is anything that has the potential to cause harm — for example, a wet floor, a chemical substance, or working at height. A risk is the likelihood that the hazard will actually cause harm and the severity of that harm. Risk assessments evaluate both to determine the level of risk and appropriate controls.
How long should risk assessment records be kept?
WHS regulations do not specify a universal retention period for risk assessments, but best practice is to retain them for at least the duration of the activity plus seven years. Records related to health surveillance or hazardous substances may have specific longer retention requirements.
Who should be involved in the risk assessment?
Risk assessments should involve the WHS officer or a competent person, the supervisor or manager responsible for the area, and workers who perform the task. Worker consultation is a legal requirement under the WHS Act and brings practical knowledge that improves hazard identification.
Want this customised for YOUR business?
We'll tailor every step to your exact operations, tools, and team structure.