A workplace hazard assessment ISO 45001 Clause 8.1.2 requires goes further than most teams realise — it is not a one-time walk-round with a form, but an ongoing process covering routine work, non-routine work, and even how people actually behave under pressure. Get the hazard identification step wrong and everything downstream — risk assessment, controls, training — inherits the gap.
Here is how Clause 8.1.2 actually works, and a free hazard register template to put it into practice today.
WORKPLACE HAZARD ASSESSMENT ISO 45001 — WHAT CLAUSE 8.1.2 REQUIRES YOU TO CONSIDER
Clause 8.1.2 of the ISO 45001:2018 standard expects hazard identification to be proactive and ongoing, not reactive. Specifically, it requires you to consider:
- How work is actually organised, social factors, and human behaviour, capability, and other human factors
- Routine and non-routine activities and situations, including emergencies
- Past incidents, both internal and external to the organisation
- New or changed activities, materials, processes, or the work environment itself
- People without direct control over the workplace who could still be affected (visitors, delivery drivers, the public)
Most hazard assessments stop at the physical and equipment hazards that are easy to see. The clause explicitly pulls in human factors and organisational knowledge — the things that actually drive most incidents.
STEP 1 — BREAK WORK DOWN INTO TASKS, NOT JOB TITLES
“Maintenance technician” is not a hazard assessment unit — it covers dozens of distinct tasks, each with its own hazard profile. Break every role into discrete tasks (working at height, confined space entry, manual handling, machine operation) and assess each one separately.
STEP 2 — IDENTIFY HAZARDS FOR EACH TASK
For each task, work through hazard categories systematically: physical (noise, vibration, temperature), mechanical (moving parts, pinch points), chemical, biological, ergonomic, and psychosocial. Don’t rely on memory — walk the actual workplace, and talk to the people who do the task daily. They will surface hazards a desk-based review misses every time.
STEP 3 — ASSESS LIKELIHOOD AND SEVERITY
Rate each hazard on likelihood (how probable is it that harm occurs) and severity (how bad would the outcome be), then multiply the two for a risk score. This isn’t about false precision — it’s about creating a consistent, defensible way to prioritise where to act first.
STEP 4 — APPLY THE HIERARCHY OF CONTROLS IN ORDER
Work through controls in this order, and document why you moved to the next level if a higher one wasn’t feasible:
- Elimination — remove the hazard entirely
- Substitution — replace it with something less hazardous
- Engineering controls — isolate people from the hazard (guarding, ventilation)
- Administrative controls — change how people work (procedures, signage, training)
- PPE — the last line of defence, not the first
Auditors consistently flag hazard assessments that jump straight to PPE without documenting why elimination or substitution weren’t possible.
STEP 5 — RECORD RESIDUAL RISK, NOT JUST THE ORIGINAL SCORE
After controls are applied, reassess likelihood and severity to get the residual risk score. If residual risk is still high, the assessment isn’t finished — it’s telling you the current controls aren’t enough.
STEP 6 — REVIEW ON A SCHEDULE, NOT JUST AFTER AN INCIDENT
Set a review date for every assessment, and trigger an earlier review whenever the task, equipment, materials, or work environment changes. A hazard assessment that hasn’t been touched since the process it covers changed is a live gap, not a historical record.
HOW THIS CONNECTS TO YOUR WIDER RISK ASSESSMENT PROCESS
Hazard identification under Clause 8.1.2 feeds directly into the broader risk assessment obligations covered in our step-by-step risk assessment guide — this post focuses specifically on getting the hazard identification step right, since a risk assessment built on an incomplete hazard list is only ever as good as its weakest input.
If contractors work in your facility, make sure their activities go through the same process — see our contractor safety ISO 45001 guide for how Clause 8.1.4 extends this obligation to anyone working on your behalf. For GCC-specific seasonal hazards, our heat stress management GCC guide applies the same hierarchy-of-controls logic to extreme temperature work. The ILO hazard identification guidance is a useful additional reference if you’re building this process from the ground up.
GET THE FREE TEMPLATE
We’ve built a ready-to-use hazard assessment register — task breakdown, likelihood and severity scoring, automatic risk level calculation, hierarchy of controls, and residual risk tracking, all in one spreadsheet.
👉 [Download the free Workplace Hazard Assessment Template]
Preparing for a surveillance audit? Pair this with our ISO 45001 compliance checklist, or see the full ISO 45001 document pack for the complete set of procedures and templates.