
Darren Tang
Director
Hazard Identification, Risk Assessment and Risk Control (HIRARC) have become fundamental to the practice of planning, management and the operation of a business as a basic of risk management.
– 3 mins read
In the subset of social criteria in Environmental, Social and Governance (ESG), organizations are required to ensure health and safety of workers are protected. In this newsletter, let’s take a look at a tool which we can use to protect the health and safety of workers, the Hazard Identification, Risk Assessment and Risk Control, or commonly known as HIRARC.
HIRARC is used to identify hazards, assess risks and prioritize the risks at the organization, where if the risks are significant, then necessary control measures would need to be implemented.
Hazard Identification
Hazard means the source with a potential to cause injury and ill health. First thing an organization has to do is to identify the hazards that exist in the organization’s workplace. Areas that an organization should consider during hazard identification includes:
- Routine activities example daily operation processes and non-routine activities example repairing of broken machine.
- How work is organized, social factors and the culture in the organization, example if there are long working hours, whether there are any breaks in between, work standing or sitting, any harassment or bullying at the workplace etc.
- People at the workplace and their activities, example internal workers, contractors, suppliers, visitors.
- The design of work areas, processes, installations, machinery/ equipment, operating procedures and work organization, example if machine is automated or manual, is there any fencing to rotating parts of the machine, etc.
- Past incident or accident which occurred before.
- Potential emergency situations, example potential fire, flood etc.
Risk Assessment
Upon identifying the hazards, assess the risks by working out how likely the hazards will harm workers and how serious the harm could be. Risk is the combination of the likelihood of occurrence of a work-related hazardous event and the severity of injury and ill health that can be caused by the event.
For each hazard identified, assess the risk by asking two questions:
- how likely is it that the hazard could harm the worker? Example if workers were to do welding, the hazard is sparks which may most likely hit their eyes.
- how badly could the workers be harmed? Example workers may get blinded from the sparks during the welding activity.
In assessing the risk, take into consideration of the current control method used to reduce or eliminate the potential hazards, example wearing face mask during welding works to prevent sparks from getting into the eyes.
Risk can then be categorised as low risk, moderate risk or high risk. A common method in determining whether the risk low, moderate or high is through the combination of the likelihood of an occurrence (example rare, unlikely, moderate, likely or very likely) and the severity (negligible, minor, serious, fatal or catastrophic) that can be caused by the hazard. Risk = Likelihood x Severity.
Risk Control
Every significant risk should be brought under control. The following Risk Control Hierarchy can be used when considering the risk controls at the workplace:
- Elimination: Some hazardous job, tools, process or machine can be eliminated entirely, example instead of climbing a building to do painting works and risking a fatal fall, it can be climbing can be eliminated by installing building cradle as a working platform.
- Substitution: Employing alternative methods if practicable or usage of alternative materials, example substituting toxic glue with non-toxic glue.
- Engineering Control: Separating the hazards from people, example by marking the hazardous area, installing or putting up safety barriers/ fence like fencing of rotating parts.
- Administration Control: Instructing workers to carry out works safely, example developing, training and enforcing safe work procedures.
- Personal protective equipment (PPE): Using PPE if risks remain after the above risk controls method have been considered. PPE such as safety glasses, gloves, helmets and ear muffs can protect workers from hazards associated with jobs such as handling chemicals or working in a noisy environment.
The key to ensuring health and safety of workers are protected is to carry out Hazard Identification, Risk Assessment and Risk Control before work commence. All significant risks should be mitigated or eliminated. Maintain a register of the Hazard Identification, Risk Assessment and Risk Control, and periodically review when there are changes to new process, new development or modified activities, new product, new location of activity or when incident or accident occurred at the workplace.
Feel free to contact us to learn more about ESG
More Article
ISO 14001:2026 Transition Guide: How to Upgrade from ISO 14001:2015
Chief Operating OfficerWhat’s inside: Transition timeline, key changes (Clause 4.1 climate, Clause 6.3 change management), step-by-step migration, and common mistakes to avoid.🚨 Critical Update: The ISO 14001 Landscape has ShiftedWith the formalization of the 2026...
ISO 14001:2026 Update: Everything Businesses Need to Prepare For
Chief Operating OfficerWhat is the ISO 14001:2026 update? Learn the key changes, risks, and practical steps to prepare your EMS early and stay ahead of compliance and ESG expectations.Input Key Update: The ISO 14001:2026 revision (released April 2026) introduces a...
Governance Trends in Malaysia’s Construction Industry: The Shift Towards ISO 37001
Chief Operating OfficerCIDB mandates ISO 37001 for G7 contractors by Jan 2027. Stay ahead of governance trends and protect your G7 license with a robust ABMS framework.Malaysia’s construction industry is entering a new era: one where governance, integrity, and...
ISO 37001 Mandatory for G7 Contractors by 2027: What You Must Know Now
Chief Operating OfficerCIDB mandates ISO 37001 for G7 contractors by Jan 2027. Learn how to bridge compliance gaps and protect your business under MACC Section 17A.The landscape of compliance in Malaysia’s construction industry is changing rapidly. With increasing...




