RiskPro BD logo RPB-HAC 101 · Module 5 of 9

Module 5: Risk Assessment and the Risk Matrix

Provider: Riskprobd.com Trainer: Engr Mohammad Mohin Uddin LinkedIn

In this module

Objectives covered: LO 2.5.1, LO 2.5.2. By the end you will be able to:

  • Rate likelihood and severity using a 5 × 5 risk matrix.
  • Decide whether a risk is acceptable, tolerable or unacceptable.
  • Explain ALARP and residual risk.

5.1 Two questions

For each hazard, ask two questions:

  1. Likelihood: how likely is it that harm will happen?
  2. Severity: if it does happen, how bad is the most likely serious outcome?

Risk = Likelihood × Severity. Many companies use a 5 × 5 matrix, giving a score from 1 to 25.

ScoreLikelihoodSeverity
1Rare: almost neverMinor: first aid only
2Unlikely: could happen sometimeMedical treatment
3Possible: has happened in the industryLost-time injury
4Likely: has happened herePermanent disability
5Almost certain: happens oftenFatality or multiple fatalities
Risk scoreLevelAction
1 to 4LowAcceptable. Manage with normal procedures.
5 to 9MediumReduce where reasonably practicable. Supervisor approves.
10 to 16HighAdd controls before work. Manager approves.
20 to 25ExtremeDo not start or continue the work until the risk is reduced.

5.2 Worked example

Workers carry 50 kg cement bags up a ladder to a first-floor slab. Falls with a load have happened on this site before (likelihood 4) and could cause permanent injury (severity 4). Risk = 4 × 4 = 16, High.

Controls: use a hoist or material lift (engineering), use 25 kg bags (substitution), and keep the ladder for people only. New likelihood 2, severity 4: residual risk = 8, Medium, and acceptable with supervision.

5.3 ALARP and residual risk

Residual risk is the risk that remains after controls are in place. It is never zero. ALARP means "As Low As Reasonably Practicable": keep reducing the risk until the cost, time and effort of further reduction is grossly out of proportion to the benefit. A cheap control that prevents a fatality is always reasonably practicable.

Remember

Rate the risk twice: before controls (initial risk) and after controls (residual risk). If the residual risk is still high, the controls are not enough.

Standards and rules
  • ISO 31000:2018 and IEC 31010:2019: risk management and risk assessment techniques, including the consequence and likelihood matrix.
  • ISO 45001 clause 6.1.2.2: assessment of OH&S risks.
  • The ALARP principle comes from UK law and is widely used in oil and gas worldwide.
Bangladesh industry example

In June 2022 a fire and explosion at the BM Container Depot in Sitakunda killed around 50 people, including firefighters. Containers of hydrogen peroxide were stored without proper hazard classification or separation. A simple risk assessment would have rated the likelihood of fire as possible and the severity as multiple fatalities, an extreme risk that demanded segregation, labelling and an emergency plan before storage.

Learning Check

Answer these two questions to check your understanding. You can try again as many times as you like.