Understanding the Different Types of Risk Assessments

Originally published by Jessica Urquhart.

When it comes to managing risk in the workplace, not all risk assessments are created equal. Depending on the task, industry, or level of complexity, we need different tools in our risk toolbox.

In this article, we'll break down the different and most common types of risk assessments; Traditional Risk Assessment, WRAC, JSEA, SWMS, Bowtie, HAZOP, HAZID, and personal risk assessments like SLAM and Take 5—so you can understand when to use each, and why.

Traditional Risk Assessment

Traditional risk assessments are often the first step organisations take to understand their hazards and risks. They're typically high-level and use a simple risk matrix to assess likelihood vs consequence.

This approach is:

• Common in many industries
• Often qualitative
• Based on known hazards and perceived severity

Use it when: You need a general overview or you're meeting basic compliance requirements.

Limitation: It's often subjective, relies on assumptions, and doesn't always identify specific control failures.

WRAC – Workplace Risk Assessment and Control

WRAC is a more structured approach that brings a team together to evaluate hazards and controls in a systematic way. It's commonly used in mining, construction, and manufacturing.

It focuses on:

• Hazard identification
• Consequence description
• Existing controls
• Risk rating
• Control adequacy and recommendations

Use it when: You're reviewing tasks, processes, or systems and want a collaborative and semi-quantitative method.

Limitation: WRAC can still miss causal pathways or interactions between risks and controls unless coupled with more analytical tools.

JSEA – Job Safety and Environmental Analysis / JHA - Job Hazard Analysis

JSEA (also called a JSA or JHA) breaks down a job into steps, identifies hazards for each step, and puts controls in place to manage them.

It's task-focused and includes:

• Step-by-step analysis
• Hazards and controls for each task
• Environmental considerations

Use it when: Planning routine or non-routine tasks that involve multiple hazards or coordination.

Limitation: It often becomes a "tick-and-flick" document unless well-integrated into planning and communication.

SWMS – Safe Work Method Statement

Mandatory for high-risk construction work under WHS legislation, a SWMS documents how risks will be managed safely.

• Includes job steps, hazards, controls, and responsible persons
• Legal requirement under WHS Regulation 299
• Must be communicated and understood before work starts

Limitation: Many are written just to 'tick the box'—not to actually manage risk. If your SWMS is 20 pages long and no one reads it, it's not effective.

Bowtie Risk Analysis

Bowtie risk analysis provides a visual representation of how a hazard can lead to an unwanted event and what controls are in place to prevent or mitigate the consequence. Bowties are also used in incident investigation.

It includes:

• Hazards
• Threats (causes)
• Preventing controls
• The 'Top Event'
• Mitigating controls
• Consequences

Use it when: You want to understand cause and effect, assign critical controls, or develop performance standards.

Limitation: Requires expertise and time to do well—but it's worth it for high-risk scenarios or critical risks.

HAZOP – Hazard and Operability Study

HAZOP is a formal, detailed, and structured technique used in process industries to assess design and operational risks.

It involves:

• Multidisciplinary team workshops
• Guidewords (e.g., more, less, none)
• Deviation analysis
• Cause and consequence identification
• Safeguards and actions

Use it when: You're designing or modifying complex systems like chemical processing, energy generation, or infrastructure.

Limitation: It's time-consuming and resource-intensive—best suited for large-scale or technical projects.

HAZID – Hazard Identification Study

HAZID is a high-level, early-phase review to brainstorm potential hazards. It's less technical than HAZOP but often used to inform design and project planning.

• Conducted early in project lifecycle
• Involves multidisciplinary teams
• Supports safety-in-design and early mitigation

Limitation: Not always sufficient on its own—HAZID is more about what could go wrong, not how it might play out.

Personal Risk Assessments: SLAM and Take 5

These are dynamic, frontline tools used by workers to assess risks in real-time.

• SLAM (Stop, Look, Assess, Manage): Encourages mindfulness, observation, and decision-making before starting a task.
• Take 5: A quick checklist workers complete before starting work, focusing on task-specific hazards and controls.

Use it when: You want to promote personal accountability and hazard awareness for everyday tasks.

Limitation: Can become ineffective if rushed or seen as a formality. Needs a strong safety culture to support real use.

So… Which Risk Assessment Should You Use?

The right tool depends on your task, risk profile, and desired outcome.

• Quick daily check before work – SLAM / Take 5
• Routine or one-off tasks – JSEA / JHA / SWMS
• Operational or team reviews – WRAC
• Visualising cause-effect pathways – Bowtie
• Early-stage project review – HAZID
• Technical process safety analysis – HAZOP
• High-level organisational scan – Traditional Risk Assessment

Are You Using the Right Tools?

Have you ever considered whether your current assessments are actually helping you manage risk or just meeting compliance? If your risk assessments feel like paperwork, it's time to lift the game.