Risk Assessment and Hazard Identification: A Singapore Guide

Why Risk Assessment and Hazard Identification Matter in Singapore Workplaces

Workplace injuries and occupational diseases cost Singapore businesses far more than immediate medical bills. Lost productivity, regulatory penalties, reputational damage, and higher insurance premiums all compound the true cost of preventable incidents. Under the Workplace Safety and Health Act (Cap. 354A), employers carry a clear legal duty to take all reasonably practicable measures to protect every person at their workplace — employees, contractors, and visitors alike.

The WSH (Risk Management) Regulations 2006, administered by the Ministry of Manpower (MOM), translate that duty into a concrete obligation: every employer, self-employed person, and principal must conduct a formal risk assessment before work begins, whenever a new hazard is introduced, and at least once every three years. Failure to comply can result in fines, stop-work orders, and — in serious cases — prosecution.

Beyond legal compliance, a rigorous risk management process is the foundation of bizSAFE certification. Organisations cannot progress beyond bizSAFE Level 2 without demonstrating a functioning Risk Assessment framework, making this not just a regulatory requirement but a commercial necessity for businesses tendering for contracts in Singapore’s construction, marine, and manufacturing sectors.

What the Process Actually Involves

Hazard Identification

A hazard is any source, situation, or act with the potential to cause harm. Hazards can be physical (unguarded machinery, working at height), chemical (solvent exposure, welding fumes), biological (mould, infectious agents), ergonomic (repetitive strain, manual handling), or psychosocial (workplace stress, fatigue). Identifying hazards systematically — before incidents occur — is the entire purpose of the exercise.

Effective hazard identification requires direct observation of actual work activities, not just a review of written procedures. Workers performing the task often spot hazards that supervisors and safety officers miss from the office. Involving frontline employees at this stage is both a regulatory expectation and a practical necessity.

Risk Evaluation

Once hazards are identified, each must be evaluated by estimating two factors: the likelihood of harm occurring and the severity of potential consequences. Combining these produces a risk level — commonly expressed as Low, Medium, or High — that determines how urgently controls must be applied. MOM’s risk matrix guidance provides a straightforward framework for this step, and most organisations document their evaluations in a standardised RA table.

Risk Control

Controls must be applied in accordance with the Hierarchy of Controls, in descending order of effectiveness:

• Elimination — remove the hazard entirely from the workplace.
• Substitution — replace a hazardous material or process with a less dangerous alternative.
• Engineering controls — isolate people from the hazard through physical means (guards, ventilation, interlocks).
• Administrative controls — reduce exposure through safe work procedures, job rotation, or permit-to-work systems.
• Personal Protective Equipment (PPE) — the last line of defence, not the first.

Relying on PPE alone, without exhausting higher-order controls, is one of the most common compliance failures MOM inspectors identify during workplace audits.

Step-by-Step: Conducting a Compliant Risk Assessment in Singapore

Step 1 — Assemble a Competent RA Team

Include workers who perform the task, a direct supervisor, and — where required — a WSH Officer or bizSAFE-trained Risk Management Champion. The team should be competent to identify hazards relevant to the specific work activity, not simply familiar with generic safety principles.

Step 2 — Define and Break Down Work Activities

List every task involved in the work process and break each one into discrete steps. Vague activity descriptions produce vague hazard identification. The more granular your task breakdown, the more thorough your assessment will be.

Step 3 — Identify All Associated Hazards

For each task step, ask: what could go wrong, and what is the source of potential harm? Consider routine activities, non-routine tasks (maintenance, start-up, shutdown), and foreseeable emergencies. Reference WSHC industry-specific guidelines where available — they provide sector-relevant hazard checklists for construction, logistics, healthcare, and other high-risk industries.

Step 4 — Evaluate Risk Levels

Apply MOM’s likelihood-severity matrix to assign a risk rating to each identified hazard. Document your reasoning. Ratings should reflect actual site conditions, not best-case assumptions.

Step 5 — Determine and Implement Controls

Work down the Hierarchy of Controls for each Medium or High risk item. Document the specific control measures selected, assign responsibility for implementation, and set a target completion date. Residual risk — the risk remaining after controls are applied — should also be recorded.

Step 6 — Communicate, Train, and Review

The completed RA must be communicated to all affected workers in a language and format they understand. Toolbox briefings, site inductions, and posted safe work procedures are common methods. The RA must then be reviewed after any incident, whenever work processes change significantly, or on a three-yearly cycle — whichever comes first. MOM inspectors may request RA records at any time; ensure documentation is current, accessible, and signed off by a responsible person.

Aligning with ISO 45001 and Singapore’s WSH Framework

Organisations pursuing ISO 45001:2018 certification will find that its requirements closely mirror Singapore’s WSH (Risk Management) Regulations. Both frameworks demand ongoing hazard identification embedded into day-to-day operations — not a once-every-three-years paperwork exercise. ISO 45001 additionally requires organisations to consider opportunities for improving OHS performance alongside risks, encouraging a proactive rather than reactive safety culture.

For Singapore businesses, aligning internal processes with both MOM requirements and ISO 45001 creates a robust, audit-ready safety management system that satisfies regulators, clients, and insurers simultaneously. Our ISO 45001 implementation guidance outlines how to integrate these requirements efficiently without duplicating effort.

Common Mistakes That Undermine Risk Assessments

• Generic, copy-paste RAs that do not reflect actual site conditions or specific work activities.
• Excluding frontline workers from the hazard identification process.
• Over-reliance on PPE as the primary control measure.
• Failing to review RAs after incidents or process changes.
• Poor documentation — assessments that exist but cannot be produced during an MOM audit.

Each of these failures not only exposes your organisation to regulatory risk but, more importantly, leaves real hazards uncontrolled and workers unprotected.

Build a Stronger Safety Foundation

Risk assessment and hazard identification are not administrative burdens — they are the practical mechanism through which Singapore’s WSH framework protects lives. Done well, they reduce incident rates, support bizSAFE progression, and demonstrate to clients and regulators that your organisation takes workplace safety seriously.

For a deeper understanding of how risk assessment fits into a comprehensive workplace safety strategy, read our detailed guide: Risk Assessment: A Key to Workplace Safety. If you would like expert support conducting or reviewing your organisation’s risk assessments, contact the Sage Shield team — our WSH consultants work with businesses across Singapore’s highest-risk industries every day.