When conducting a required assessment of the various hazards in a workplace, employers must systematically walk through each area, identify every source of potential harm, and match those hazards to the right protective measures. Under OSHA’s general industry standard (29 CFR 1910.132), this assessment is a legal obligation, not a suggestion. It determines which personal protective equipment workers need, how serious each risk is, and what controls should be put in place. Here’s how the process works from start to finish.
Why the Assessment Is Required
OSHA mandates that employers assess the workplace to determine if hazards are present, or are likely to be present, that would require personal protective equipment. The regulation covers a broad range of threats: environmental hazards, chemical exposures, radiological hazards, and mechanical irritants that could cause injury through absorption, inhalation, or physical contact. The standard applies to protection for the eyes, face, head, extremities, and the full body, as well as respiratory devices and protective barriers.
This isn’t a one-time exercise. OSHA directs employers to reassess whenever they change operations, workstations, or workflow, make major organizational changes, or introduce new equipment, materials, or processes. A facility that installs a new machine, switches to a different chemical solvent, or reorganizes a production line needs to evaluate those changes for new or altered risks before work begins.
How to Structure the Assessment
OSHA’s Job Hazard Analysis framework lays out a clear sequence. The process starts well before anyone picks up a checklist.
Involve employees first. Workers have direct knowledge of day-to-day risks that managers may never see. Their input minimizes blind spots and builds buy-in for whatever safety measures follow. OSHA considers this step essential, not optional.
Review your accident history. Look at past injuries, illnesses that required treatment, equipment damage, and near-misses. Near-misses are especially valuable because they reveal gaps in existing controls before someone gets hurt.
Conduct a preliminary walkthrough. Tour the workplace with employees and brainstorm about known hazards. If anything poses an immediate danger to life or health, act on it right away. Problems with simple fixes should also be corrected immediately rather than waiting for the full analysis to wrap up. This shows a genuine commitment to safety and lets the team focus remaining effort on more complex hazards.
Rank and prioritize. List every job that involves unacceptable risk, then sort them by two factors: how likely the hazard is to cause harm and how severe the consequences would be. The highest-priority jobs get analyzed first.
Break each job into steps. Watch an employee perform the task and record each step in enough detail to be useful without becoming unwieldy. Then review those steps with the worker to fill in anything you missed. The goal at each step is to answer two questions: what can go wrong, and what are the consequences?
Categories of Hazards to Evaluate
A thorough assessment covers multiple categories of workplace hazards, and it’s easy to overlook entire categories if you don’t approach them deliberately.
- Physical hazards: falling objects, exposed pipes or beams workers could strike their heads on, slippery surfaces, heavy items that could roll onto feet, sharp objects like nails or spikes, noise levels above 85 decibels over an 8-hour shift, and hot or wet surfaces.
- Chemical hazards: splashes from acids or solvents, fumes, contact with molten metals, and exposure to hazardous substances through skin absorption or inhalation.
- Biological hazards: contact with potentially infectious materials like blood or bodily fluids, airborne pathogens, and exposure to microorganisms that can enter the body through mucosal contact, inhalation, ingestion, or needle sticks.
- Radiological hazards: exposure to harmful rays from welding, lasers, or radioactive materials.
- Ergonomic and mechanical hazards: repetitive motions, impacts from tools and machinery, cuts from sharp equipment, and awkward postures that lead to musculoskeletal injury over time.
Each category requires a different lens. A warehouse assessment focuses heavily on physical hazards like falling objects and forklift traffic. A healthcare setting demands close attention to biological risks, including the stability of pathogens in the environment, their routes of transmission, the types of procedures being performed, and whether staff are immunocompromised or pregnant. A manufacturing floor might combine chemical, physical, and noise hazards in a single workstation.
Scoring Risk With a Matrix
Once hazards are identified, you need a consistent way to rank them. Most organizations use a risk assessment matrix that plots two dimensions: how likely the hazard is to cause harm (from unlikely to frequent) and how severe the outcome would be (from negligible to catastrophic).
The combination produces a risk rating:
- Extremely high: Catastrophic or critical injuries are likely. The activity may need to be eliminated or fundamentally redesigned, even after applying every reasonable control measure.
- High: Serious risks are likely to occur. Proactive controls are needed, and the organization should look for ways to modify or remove the source of risk entirely.
- Moderate: Some level of risk exists but is unlikely to occur. Controls should still be considered to prevent negative outcomes.
- Low: Minimal risk, unlikely to occur. The activity can proceed as planned.
This ranking system prevents the common mistake of treating all hazards equally. A low-probability annoyance shouldn’t consume the same resources as a likely source of severe injury. The matrix forces the conversation toward the risks that matter most.
Matching Hazards to Protective Equipment
The assessment’s practical output is a set of PPE decisions. OSHA requires employers to select equipment that protects against the specific hazards identified, communicate those selections to every affected employee, and ensure the PPE fits each person properly.
The mapping is hazard-specific. For eye and face protection, the type of operation dictates the choice: chemical handling calls for splash goggles (with a face shield added for severe exposure), while arc welding requires a welding helmet combined with tinted safety spectacles. Grinding operations need impact-rated safety glasses or goggles depending on whether the work is light or heavy.
Head protection is required wherever objects could fall from above, workers might bump fixed structures like exposed beams, or employees work near live electrical conductors. Foot protection applies when heavy objects could fall or roll onto feet, sharp items could puncture shoe soles, or molten metal could splash. Hand protection depends on the specific operation: the nature of the hazard, whether it involves chemicals, heat, cuts, or infectious materials, determines the glove material and thickness.
Hearing protection kicks in at specific thresholds. Workers exposed to noise averaging 90 decibels or more over an 8-hour shift must wear hearing protection. Those exposed to 85 decibels who already show measured hearing loss are also required to use it.
Documenting the Assessment
OSHA doesn’t just require you to do the assessment. You must prove you did it. The regulation calls for a written certification that includes four specific elements: the workplace that was evaluated, the name of the person certifying the evaluation was performed, the date or dates of the assessment, and a statement identifying the document as a certification of hazard assessment.
This certification matters during inspections. Without it, an employer has no evidence the assessment occurred, which can result in citations even if PPE is otherwise in use. The documentation also serves as a baseline. When conditions change and a reassessment is triggered, the previous certification shows what was evaluated before and helps identify what’s different.
Biological Hazard Assessments in Clinical Settings
Healthcare and laboratory environments require a more layered analysis. The CDC’s biological risk assessment framework evaluates both the likelihood of an exposure event and the consequences if exposure occurs.
On the likelihood side, assessors consider the biological agent’s stability in the environment (some organisms form spores that resist disinfectants), its routes of transmission, whether it’s common in the local population or exotic, and whether lab procedures amplify the agent through culturing or generate aerosols. The physical infrastructure matters too: the type of facility, how well ventilation systems function, and whether engineering controls like biosafety cabinets are in place.
On the consequences side, the assessment weighs the agent’s virulence, the severity of infection it causes, its infectious dose, and whether vaccines or treatments exist. The health status of staff plays a direct role. Immunocompromised workers, pregnant employees, or those with pre-existing conditions face higher consequences from the same exposure, which can shift the risk rating and require additional controls.
Human factors also feed into the analysis. Staff competency, training level, risk tolerance, stress, and willingness to follow safe work practices all affect how likely an exposure event is to happen in the first place.
International Standards and Continuous Improvement
Beyond OSHA requirements, ISO 45001 provides an internationally recognized framework for managing occupational health and safety. The standard uses a Plan-Do-Check-Act cycle: plan hazard identification and risk controls, implement them, audit the results, and revise the system based on what you find. Organizations certified under ISO 45001 commit to continual improvement rather than treating the assessment as a static snapshot.
The practical difference is that ISO 45001 treats hazard assessment as an ongoing management system, not a compliance checkbox. It requires leadership commitment, worker participation at every stage, emergency preparedness planning, and formal incident investigation. For organizations operating across multiple countries or industries, the standard provides a consistent structure that satisfies regulators in different jurisdictions while driving real reductions in workplace injuries.