Workplace Safety Risk Assessment Singapore: WSH Act Guide

What is workplace safety risk assessment in Singapore?

Workplace safety risk assessment is a structured process required by the Workplace Safety and Health Act (Cap 354A) and the WSH (Risk Management) Regulations. Every Singapore employer must identify hazards in the workplace, evaluate the risks they pose, and put control measures in place to reduce those risks to as low as reasonably practicable.

It is not optional, not a paperwork exercise, and not a one-off. The Risk Management Regulations require risk assessments to be reviewed at least once every three years, and earlier if there’s a change in process, equipment, personnel, or after any incident.

The five-step risk assessment process required by MOM

The Ministry of Manpower (MOM) and the WSH Council prescribe a five-step methodology that has been the operational standard since the WSH Act came into force:

Step 1: Hazard identification

For every work activity, list every hazard a reasonably observant person would notice. Hazards fall into six categories:

• Mechanical — moving parts, lifting equipment, vehicles, falling objects
• Chemical — solvents, dust, fumes, corrosives, flammables
• Biological — pathogens, contaminated materials, animal handling
• Physical — noise, heat, vibration, radiation, lighting
• Ergonomic — manual handling, repetitive tasks, posture, workstation design
• Psychosocial — workload, harassment, fatigue, lone working

The MOM Risk Management Code of Practice expects you to walk the actual work area, talk to actual workers, and observe actual practice — not transcribe a template from a competitor.

Step 2: Risk evaluation

For each identified hazard, assess two dimensions:

1. Severity — how serious is the worst credible outcome? (typical scale 1-5: from minor first aid to fatality / catastrophic)
2. Likelihood — how often is this likely to happen? (typical scale 1-5: from rare to almost certain)

Risk Level = Severity × Likelihood. Low risk (≤6) typically requires routine controls; medium risk (7-12) requires specific control measures and monitoring; high risk (≥15) requires immediate action and may require stopping work until controls are in place.

Step 3: Risk control — apply the hierarchy

The WSH Risk Management Code of Practice requires controls to be selected in this priority order:

1. Elimination — remove the hazard entirely (e.g. eliminate working at height by using ground-level mechanised tools)
2. Substitution — replace with something less hazardous (e.g. switch from solvent-based to water-based paint)
3. Engineering controls — physical barriers, machine guards, local exhaust ventilation, interlocks
4. Administrative controls — Safe Work Procedures, training, signage, Permit-to-Work systems, job rotation
5. Personal Protective Equipment (PPE) — last line of defence, never the first or only control

MOM inspectors will challenge a risk assessment that jumps straight to PPE without considering the higher tiers. Document why higher-tier controls are not reasonably practicable.

Step 4: Implementation and communication

Controls only reduce risk if they’re actually implemented. This step covers:

• Procuring and installing engineering controls
• Writing and rolling out Safe Work Procedures
• Training affected workers on new controls
• Communicating residual risk to workers in their working language
• Updating Permit-to-Work conditions to reflect new controls

Step 5: Review and revision

The Risk Management Regulations require reviews:

• At least once every three years
• After any incident, near-miss, or dangerous occurrence
• Whenever there’s a change in process, equipment, materials, or personnel
• When new information on hazards becomes available (e.g. updated safety data sheets)

Documents required for a compliant risk assessment package

A risk assessment package that satisfies MOM and WSH Council audit requirements typically includes:

1. Risk Assessment Form (RA Form) — one per work activity, with hazards, severity, likelihood, controls, residual risk, and approver signatures
2. Inventory of Work Activities — master list of every routine and non-routine work activity
3. Master Hazard List — consolidated list of all hazards across all activities
4. Safe Work Procedures (SWPs) — operational procedures referenced by the RA Forms
5. Risk Assessment Team minutes — evidence of multidisciplinary review (production + safety + worker representative)
6. Approval records — typically signed off by the WSH Officer, supervisor, and occupier
7. Communication records — toolbox briefings, training attendance, multilingual versions where needed

Common risk assessment pitfalls in Singapore workplaces

1. Generic templates lifted from another company — the fastest path to MOM rejection. Hazards must reflect your activities.
2. Single-person assessment — the regulations require a multidisciplinary team. A solo assessment by the safety officer is non-compliant.
3. No worker consultation — Clause 5 of the Code of Practice requires workers’ involvement. Document attendance.
4. Outdated severity scales — using a 3×3 matrix when your industry standard is 5×5 (or vice versa) signals laziness; pick the appropriate matrix and apply consistently.
5. PPE-first thinking — auditors will downgrade an RA that doesn’t show evidence that elimination, substitution, and engineering were considered first.
6. Not reviewing after incidents — every reportable incident triggers an RA review. Skipping this is a common audit non-conformity.

Risk assessment for bizSAFE Level 3 and ISO 45001

The risk assessment process described here is the same process required for bizSAFE Level 3 certification and the foundation of ISO 45001 Clause 6.1.2 hazard identification. Companies pursuing either certification will find the WSH Act methodology already meets the documentary requirements — the difference is in audit rigour.

FAQ

Who is legally responsible for risk assessment in a Singapore workplace?
The occupier of the workplace bears statutory responsibility under the WSH Act. In practice, this is delegated to the WSH Officer or WSH Coordinator, but the occupier remains accountable.

How often must a risk assessment be reviewed?
At least every three years under the WSH (Risk Management) Regulations, plus after any incident, change in operations, or new hazard information.

Do I need to submit my risk assessment to MOM?
Risk assessments are not routinely submitted to MOM, but they must be available for inspection on request. They may also be required as supporting documentation when applying for certain permits or licenses.

Can I use a software tool for risk assessment?
Yes — digital tools can streamline RA management, especially for multi-site operations. However, the methodology and competence requirements are the same regardless of medium.

Get expert support on your risk assessment

Sage Shield Safety Consultants conducts risk assessments across construction, manufacturing, marine, healthcare, F&B, and professional services in Singapore. Our consultants are registered WSH Officers with deep experience preparing companies for bizSAFE Level 3, ISO 45001, and MOM audits.

WhatsApp us or call +65 8332 8220 / +65 9004 2666 to scope your risk assessment project.