Hazard Identification, Risk Assessment and Risk Control

Table of Contents

HAZARD IDENTIFICATION, RISK ASSESSMENT AND RISK CONTROL

Why this topic matters: Emergency care is delivered in changing environments: a crowded emergency department, a moving ambulance, a roadside crash, a patient’s home or a disaster scene. Hazards may be obvious, hidden, intermittent or introduced by a new process. A safe EMT does not wait for an injury before acting. Hazard identification finds what can cause harm, risk assessment prioritises what needs urgent attention, and risk control changes the work so people are protected. Together, these activities form the practical foundation of occupational safety and patient safety.

Learning outcomes

By the end of this lesson, the emergency medical care student should be able to:

Define hazard, risk, exposure, harm, incident, accident, near miss, control and residual risk.
Classify hazards in hospitals, ambulances, laboratories, communities and emergency scenes.
Use proactive and reactive methods to identify hazards before injury occurs.
Conduct a structured risk assessment, including likelihood, consequence, exposure and vulnerable people.
Use a risk matrix and risk register to prioritise action without creating false precision.
Select controls using the hierarchy of controls and verify that they work in practice.
Apply dynamic risk assessment during rapidly changing EMS calls.
Explain the responsibilities of employers, supervisors, workers, students and safety committees.
Document hazards, controls, near misses and review dates in a way that supports learning.

1. Foundational terms

Term	Meaning	Emergency-care example
Hazard	Anything with the potential to cause injury, illness, property damage, service disruption or environmental harm.	Unrestrained oxygen cylinder, infectious blood, violent person or wet floor.
Risk	The combination of likelihood that harm will occur and the severity of that harm, considering exposure and controls.	Chance of a crew member being struck by traffic while treating a roadside patient.
Exposure	Contact with a hazard in a way that can produce harm; includes frequency, duration, route and intensity.	Repeatedly working beside a patient coughing blood without suitable controls.
Harm	Actual injury, disease, psychological trauma, death, damage or loss resulting from an event.	Needlestick injury, back strain, burn or post-traumatic symptoms.
Incident	An unplanned event that caused or could have caused harm; it includes accidents and near misses.	A trolley rolls toward a patient but is stopped before impact.
Accident	An incident that results in injury, illness, damage or other loss.	A worker falls on a wet floor and fractures a wrist.
Near miss/close call	An event with no injury or loss, although the potential was present.	A wrong medication reaches the bedside but is detected during the final check.
Control	A measure that eliminates a hazard or reduces exposure, likelihood or consequence.	Sharps container at the point of use, traffic control and a powered patient lift.
Residual risk	Risk that remains after controls are implemented.	Even with barriers, a small residual risk remains during ambulance roadside work.
Risk owner	The person or team responsible for ensuring a control is implemented, maintained and reviewed.	ED manager responsible for violence-prevention controls.

Remember: A hazard is not the same as harm. Blood is a biological hazard; hepatitis infection is possible harm. A risk assessment asks who may be exposed, how exposure could occur, how likely it is, how serious the outcome could be, and which controls are needed.

2. Why risk management is essential in emergency medicine

Emergency medical work combines urgency, uncertainty and movement. A hazard that was acceptable in a controlled ward may become intolerable at a roadside crash or during a mass-casualty incident. Risk management protects three connected systems:

Worker safety: prevents injury, infection, fatigue, trauma and occupational disease.
Patient safety: prevents falls, treatment delays, medication errors, contamination and loss of dignity.
Service resilience: maintains staff availability, equipment, transport, communication and public trust.

Effective programmes are continuous, participatory and proportionate. OSHA recommends collecting hazard information, conducting initial and periodic inspections, investigating injuries and close calls, identifying trends, and involving workers. NIOSH places controls in an order that prioritises removing hazards and protecting people at the source.

3. Types of hazards to identify

Hazard class	What to look for	EMS/health-facility example
Biological	Blood, body fluids, infectious patients, sharps, contaminated equipment and vectors.	Needlestick during resuscitation or aerosol exposure during airway care.
Chemical	Medicines, disinfectants, sterilants, gases, vapours, laboratory reagents and spills.	Chlorine vapour from a mixing error or hazardous drug exposure.
Physical	Noise, heat, cold, radiation, vibration, electricity, poor lighting and pressure.	Traffic noise, X-ray exposure or heat stress at an outdoor scene.
Mechanical/ergonomic	Moving parts, crush points, lifting, pushing, repetition, awkward posture and equipment failure.	Stretcher collapse, back injury during transfer or trolley wheel failure.
Psychosocial	Violence, harassment, workload, shift work, moral distress, trauma and low control.	Threats from relatives, repeated night duty and inadequate staffing.
Environmental	Weather, terrain, fire, flooding, unsafe buildings, animals, traffic and crowding.	Unstable structure, rain, mud and uncontrolled traffic at a crash.
Security/information	Unauthorised access, missing communication, privacy breach and lost patient information.	Working without a reliable radio or exposing a patient file in public.

4. Principles of hazard identification

Look for hazards before harm: use observation, consultation and data, not only injury statistics.
Consider routine and non-routine work: include cleaning, maintenance, emergencies, transport, night duty and power failure.
Examine the task, not just the job title: an EMT may drive, lift, treat, communicate, clean and document in one shift.
Include people who may be overlooked: students, cleaners, security staff, drivers, contractors, visitors, patients and bystanders.
Ask what changes: new equipment, new drugs, new building, new patient population, outbreak, staffing change or new policy.
Find underlying causes: “worker failed to follow procedure” is not a complete investigation; ask why the procedure was difficult, unavailable or unrealistic.
Use worker knowledge: frontline staff see workarounds and near misses that may never appear in a formal report.
Control the hazard at its source: PPE and warnings support, but do not replace, elimination and engineering controls.
Review effectiveness: a control is successful only when exposure and risk actually reduce during real work.

5. Proactive and reactive identification

Approach	Methods	Strength and limitation
Proactive (before harm)	Walk-through inspection, task observation, worker interview, design review, safety huddle, equipment pre-use check, simulation and job hazard analysis.	Finds hazards early; requires time, openness and trained observers.
Reactive (after a signal)	Incident, injury, illness, near-miss, complaint, audit finding, absenteeism or equipment-failure investigation.	Provides real evidence; misses hazards that have not yet produced a report.
Predictive/trend-based	Review repeated events by shift, location, task, equipment, season or worker group.	Shows patterns and emerging risk; data quality and under-reporting matter.
Participatory	Safety committee, focus group, anonymous survey and worker-led hazard mapping.	Reveals hidden work; requires trust and protection from retaliation.

6. Hazard identification methods in detail

A. Workplace walk-through

Map the area: entrance, triage, treatment bays, procedure room, storage, waste route, exit and ambulance bay.
Observe people, equipment, substances, movement, posture, communication and environmental conditions.
Ask workers what can go wrong, what usually goes wrong and what they do to make the work possible.
Record exact location, task, hazard, exposed people, existing controls and proposed action.
Photograph or sketch the hazard only within privacy and policy requirements; do not expose patient identifiers.

B. Task observation and job hazard analysis

Choose a task such as ambulance loading, triage, blood sampling, suction, transfer or cleaning.
Break it into steps in the order actually performed.
For each step ask: what can cause harm, who is exposed, what triggers it, and what happens if the control fails?
Rate the risk and select a control for the hazard at that step.
Test the procedure with the people who perform the task and update it after learning.

C. Records and information review

Incident, near-miss, injury, occupational illness and first-aid records.
Sharps, exposure, violence, falls, vehicle and equipment-failure reports.
Staffing, overtime, sickness absence, turnover, complaints and patient-safety data.
Manufacturer instructions, maintenance logs, safety data sheets and equipment capacity limits.
Inspection, audit, fire drill, infection-control and waste-management findings.
National laws, facility policies, clinical guidelines and emergency plans.

7. The complete risk-assessment process

Prepare and define scope: identify the area, service, task, people, time period and purpose.
Collect information: review procedures, previous events, equipment instructions, layout, substances and work patterns.
Identify hazards: observe work, consult staff and include routine, non-routine and emergency conditions.
Identify exposed people: include workers, students, patients, visitors, contractors and members of the public.
Determine how harm could occur: describe the exposure route, trigger, frequency and likely consequence.
Evaluate existing controls: ask whether controls are present, suitable, used, maintained and effective.
Estimate risk: combine likelihood, consequence, exposure and uncertainty using the facility’s method.
Prioritise: address intolerable and high risks first; set realistic timescales for medium and low risks.
Select additional controls: use elimination, substitution, engineering, administrative controls and PPE in that order.
Implement: assign a risk owner, resources, deadline, communication and training.
Verify and review: confirm the control works, monitor residual risk and revise after changes or incidents.

8. Likelihood, consequence and exposure

Risk matrices are aids to judgement, not a replacement for judgement. A rare event with catastrophic consequences may require controls even when its numerical score appears moderate. Consider:

Likelihood: how often the hazard is present, how many people are exposed, whether failure is foreseeable, and whether the event has happened before.
Consequence: minor first aid, serious injury, permanent disability, death, multiple casualties, infection, psychological harm, property damage or service interruption.
Exposure: number of people, duration, frequency, intensity, route, proximity and ability to escape.
Control reliability: whether it depends on memory, is vulnerable to power failure, is easy to bypass or is maintained.
Uncertainty: incomplete information should prompt precaution, not an assumption that the risk is zero.

Illustrative five-by-five matrix

Likelihood \ Consequence	1 Minor	2 Moderate	3 Serious	4 Major	5 Catastrophic
5 Almost certain	5	10	15	20	25
4 Likely	4	8	12	16	20
3 Possible	3	6	9	12	15
2 Unlikely	2	4	6	8	10
1 Rare	1	2	3	4	5

Score	Illustrative action
1–4 Low	Maintain controls, monitor and improve when practical.
5–9 Moderate	Plan additional controls, assign an owner and review by a stated date.
10–16 High	Act promptly; senior supervision and interim controls may be required.
17–25 Very high/intolerable	Stop or restrict the activity until effective controls reduce risk.

Important: Facilities may use different scales and labels. Never compare numbers from two systems without checking their definitions. A score is a communication tool, not proof that a hazard is safe.

9. Vulnerable and specially exposed groups

Group	Why exposure may be higher	Risk-management action
Students/new staff	Unfamiliar tasks, fear of asking questions, limited authority and incomplete orientation.	Supervision, induction, graded responsibility and stop-work permission.
Night/lone workers	Less supervision, fatigue, violence risk and delayed rescue.	Check-in system, safe communications, staffing and withdrawal authority.
Pregnant/postpartum workers	Different physical, biological, chemical or fatigue considerations.	Individual assessment, reasonable adjustments and confidential medical advice.
Workers with disabilities	Inaccessible equipment, emergency exits, alarms or training.	Reasonable accommodation and inclusive emergency planning.
Contractors/cleaners	May not know clinical hazards, routes or local procedures.	Induction, communication, PPE and coordination with facility supervisors.
Patients/visitors	Cannot be expected to know staff procedures or danger zones.	Supervision, barriers, communication, safe waiting areas and signage.

10. Hierarchy of risk controls

The hierarchy ranks controls by their expected reliability. Combining levels is often necessary, but lower-level controls should not be used as an excuse to ignore a feasible higher-level solution.

Level	Action	Emergency-care example
1. Elimination	Physically remove the hazard or unnecessary step.	Remove a defective stretcher from service; eliminate manual lifting of fully dependent patients.
2. Substitution	Replace the hazard with a safer alternative.	Use a less hazardous disinfectant or needle-free device where clinically suitable.
3. Engineering controls	Isolate people from the hazard through design or equipment.	Sharps containers, ventilation, safety interlocks, guardrails, powered lifts and traffic barriers.
4. Administrative controls	Change the way work is organised, scheduled, supervised and communicated.	Safe-work procedure, staffing, training, rotation, permits, checklists and incident review.
5. PPE	Protect the worker when residual exposure remains.	Gloves, respirator, eye protection, gown, helmet or high-visibility vest.

Control quality test: A control should prevent or reduce harm, protect everyone who may be exposed, be practical and maintained, not create a new hazard, and remain effective during foreseeable emergencies.

11. Matching controls to common EMS hazards

Hazard	Weak response	Stronger layered control
Roadside traffic	Tell staff to “be careful.”	Safe parking, warning lights, high-visibility clothing, traffic control, safe treatment zone, communication and withdrawal plan.
Needlestick	Remind staff to pay attention.	Needleless options, safety devices, point-of-use sharps containers, no-recapping policy, training and exposure pathway.
Patient violence	Ask one worker to manage the person alone.	Security access, environmental design, de-escalation, staffing, alarm, escape route and incident follow-up.
Patient lifting	Tell workers to lift with their legs.	Mechanical aid, patient assessment, adequate team, height-adjustable equipment, safe-handling policy and training.
Chemical spill	Wipe it quickly with bare hands.	Substitution, closed containers, ventilation, spill kit, SDS, restricted area, trained response and appropriate PPE.
Fatigue	Tell staff to sleep better after work.	Staffing, roster design, protected breaks, overtime limits, fatigue reporting and safe transport after duty.

12. Risk register

A risk register keeps the assessment visible and converts observations into assigned actions. It should be reviewed, not filed and forgotten.

Field	What to record
Hazard and location	Specific hazard, task, room/vehicle/scene and date identified.
Exposed people	Workers, patients, students, visitors, contractors and vulnerable groups.
Possible harm	Injury, illness, infection, psychological harm, death, damage or service disruption.
Existing controls	What is already in place and evidence that it is used and maintained.
Initial risk	Likelihood, consequence and rationale using the facility’s method.
Additional action	Specific control, not vague wording such as “improve safety.”
Risk owner/resources	Named responsible person, budget, equipment, policy or technical support.
Due date/status	Target date, interim controls, progress and completion evidence.
Residual risk/review	Risk after action, review date and trigger for earlier reassessment.

13. Dynamic risk assessment in emergency response

A dynamic risk assessment is a rapid, repeated assessment made as new information appears. It does not replace formal planning; it protects the crew when the real scene differs from dispatch information.

Pause: before entering, take a few seconds to scan rather than rushing directly to the patient.
Look: identify traffic, fire, electricity, violence, animals, hazardous substances, unstable structures, crowds and weather.
Think: ask what can harm the crew or patient, who is exposed, and what could change suddenly.
Act: apply controls—park safely, use PPE, request police/fire/rescue support, isolate energy or move to a safe zone.
Review: reassess after patient movement, new people arrive, weather changes, equipment fails or violence escalates.

STOP–SCAN–CONTROL–REVIEW

Stop before entry; scan hazards and escape routes; control or request help; review continuously as the scene changes.

14. Job Safety Analysis example: ambulance loading

Step	Hazard	Potential harm	Controls
Move cot to vehicle	Traffic, uneven ground, rollaway.	Struck-by injury, fall, patient drop.	Safe parking, brakes, crew communication, clear route and spotter.
Raise/lower cot	Pinch points, heavy load, mechanism failure.	Crush injury or loss of control.	Hands on designated handles, keep clear, inspect latch and follow capacity.
Load into ambulance	Ramp force, threshold, sudden movement.	Back/shoulder strain, cot collapse.	Powered loading or sufficient trained crew, one leader and controlled speed.
Secure patient/equipment	Loose straps, cylinders and monitors.	Projectile or patient fall during braking.	Rated restraints, equipment storage and final check before movement.
Transport	Vehicle collision, vibration, poor access.	Worker/patient injury and treatment error.	Seat belts where possible, stop safely for high-risk procedures, safe driving.

15. Bow-tie thinking: threats, event and consequences

A bow-tie model helps teams see how prevention and mitigation work together. The central event is the loss of control; threats act before it and consequences occur after it.

Example: oxygen cylinder becomes uncontrolled	Risk-management question
Threats	Loose restraint, damaged bracket, overloaded ambulance, rough road or rushed loading.
Preventive barriers	Rated storage, inspection, securing procedure, capacity limit, driver training and maintenance.
Top event	Cylinder breaks loose or valve is damaged.
Mitigating barriers	Cabin separation, protective valve cap, emergency stop/parking, first aid and fire response.
Consequences	Impact injury, gas release, fire, treatment interruption or vehicle damage.
Recovery/learning	Report, quarantine equipment, investigate root causes and verify corrective action.

16. Control implementation and residual risk

Choose the control that addresses the hazard at source and is suitable for real work.
Use interim controls immediately when the permanent solution will take time.
Assign a named owner with authority and resources.
Communicate what is changing, why it matters, who is affected and how success will be checked.
Train and demonstrate the task; observe actual use rather than relying only on attendance records.
Monitor leading indicators such as completed checks, equipment availability, reported hazards and training competence.
Monitor lagging indicators such as injuries, illness, exposures, near misses, complaints and lost work time.
Reassess residual risk and accept it only through the facility’s authorised process.

17. Change management and triggers for review

Reassess when conditions change, not only on an annual calendar. Important triggers include:

New equipment, medication, chemical, vehicle, building, procedure or patient population.
Change in staffing, shift pattern, workload, contractor or supervisor.
Outbreak, mass casualty, disaster, security threat or unusual seasonal condition.
Incident, near miss, complaint, audit finding, occupational illness or equipment failure.
Evidence that workers are bypassing a control or using an unsafe workaround.
New law, standard, manufacturer warning or clinical guidance.
Control is not maintained, unavailable, too difficult, or creating a new hazard.

18. Responsibilities in risk management

Role	Responsibilities
Employer/facility leadership	Provide a safe system, resources, competent staff, equipment, policies, consultation and review.
Supervisor/team leader	Plan work, conduct dynamic assessments, enforce controls, respond to reports and stop unsafe tasks.
Worker/EMT	Follow procedures, use controls, report hazards/near misses, inspect equipment, ask for help and stop when seriously unsafe.
Student	Work within scope and supervision, ask questions, report hazards and never operate unfamiliar equipment alone.
Safety/IPC committee	Review trends, involve workers, recommend controls, monitor action plans and communicate learning.
Maintenance/technical staff	Maintain, isolate, repair and release equipment competently; document defects and tests.
Occupational-health service	Support exposure assessment, health surveillance, early intervention, referral and return to work.

19. Reporting without blame

A strong reporting system asks what happened, what normally happens, what conditions made the action likely and what will prevent recurrence. It distinguishes human error, at-risk behaviour and reckless behaviour, then responds fairly. Punishing every report drives hazards underground.

Report facts, time, place, task, equipment and immediate controls.
Protect patient and staff confidentiality; do not include unnecessary identifiers.
Report near misses as well as injuries.
Provide feedback: staff should know what changed after they reported.
Investigate system factors such as staffing, design, workload, training, maintenance and communication.

20. Risk-control scenarios

Scenario 1 – Wet ED floor: A cleaner mops beside a resuscitation bay while staff move rapidly. The hazard is slip risk plus interruption. Isolate the area, use signage and rapid-drying methods, reroute traffic, schedule cleaning safely and review staffing/cleaning workflow.

Scenario 2 – Roadside crash: Dispatch reports a simple collision, but the crew finds leaking fuel and moving traffic. The dynamic assessment changes. Withdraw to a safe zone, request fire/police support, control traffic and enter only after hazards are managed.

Scenario 3 – Repeated needlestick: Staff report recapping because sharps containers are full or far away. The underlying hazard is system design. Provide point-of-use containers and safer devices, remove recapping, adjust waste collection and review compliance.

Scenario 4 – Violence: Relatives become aggressive during a long wait. Risk controls include visible communication, triage updates, security access, an escape route, trained de-escalation and early assistance—not simply telling staff to remain calm.

Scenario 5 – Manual transfer: A bariatric patient needs movement but the powered lift is unavailable. Stop and assess; call trained staff, use an approved alternative, document the equipment gap and do not improvise a dangerous lift.

Scenario 6 – Chemical spill: Disinfectant is mixed incorrectly and fumes appear. Evacuate/isolated the area, avoid entering without appropriate protection, consult the SDS and spill procedure, ventilate safely and report for prevention.

21. Common errors in risk assessment

Copying an old assessment without observing current work.
Listing hazards without identifying exposed people, possible harm or controls.
Using a numerical score to make a catastrophic hazard appear acceptable.
Relying on PPE, warnings and training when elimination or engineering is feasible.
Ignoring non-routine work, maintenance, cleaning, transport and emergencies.
Blaming the worker for a workaround without examining why the official process failed.
Failing to assign an owner, deadline and evidence of completion.
Assuming a control works because a policy exists.
Leaving workers out of assessment or ignoring students, cleaners and contractors.
Not reviewing after a near miss, process change or new information.

22. Practical inspection checklist

What can injure, infect, poison, burn, overwhelm, crush, cut or traumatise someone here?
Who is exposed, including patients, visitors, students, contractors and bystanders?
What happens during routine, emergency, cleaning, maintenance and power-failure conditions?
Are controls available at the point of work, functional, used and maintained?
Can the task be eliminated, substituted or redesigned to reduce exposure?
Are escape routes, communication, lighting, security and first-aid arrangements adequate?
What near misses, complaints, injuries or workarounds have occurred?
What is the immediate interim control, who owns the permanent action and when will it be checked?

23. High-yield comparisons

Comparison	Difference	Exam clue
Hazard vs risk	Hazard has potential to harm; risk estimates likelihood and consequence of exposure.	Unsecured cylinder is hazard; chance and severity of being struck is risk.
Risk assessment vs risk control	Assessment understands and prioritises risk; control changes the work to reduce it.	A matrix alone does not protect anyone.
Proactive vs reactive	Proactive finds hazards before harm; reactive learns from events and signals.	Use both; near-miss reports are valuable.
Initial vs residual risk	Initial risk exists before new controls; residual risk remains after controls.	Residual risk must be accepted and monitored through policy.
Administrative vs engineering control	Administrative changes behaviour or organisation; engineering isolates people from the hazard.	Training to avoid a needle is weaker than a safety device and point-of-use container.
Dynamic vs formal assessment	Dynamic assessment is rapid and repeated at the scene; formal assessment is documented and systematic.	EMS needs both.

24. Revision questions

Define hazard, risk and exposure.
Differentiate an incident, accident and near miss.
List seven hazard classes relevant to emergency medical care.
Why should risk management be continuous?
State five principles of hazard identification.
Differentiate proactive and reactive identification.
List five information sources used during assessment.
Outline the complete risk-assessment process.
What factors influence likelihood and consequence?
Why is a risk matrix not a substitute for professional judgement?
Explain the five levels of the hierarchy of controls.
Apply the hierarchy to a needlestick hazard.
What is a risk register and which fields should it contain?
Describe dynamic risk assessment at a roadside crash.
What triggers a review of an existing assessment?
Why should workers participate in hazard identification?
Describe the responsibilities of an EMS team leader.
How should a service respond to a near miss?
Differentiate initial and residual risk.
What makes a control effective?
Why must non-routine work be included?
Describe a job hazard analysis for ambulance loading.
How can risk assessment protect patients and workers simultaneously?
What errors make risk assessments unreliable?
Design a short pre-entry safety scan for an emergency scene.

Summary

Hazard identification finds what can cause harm; risk assessment determines who may be harmed, how, how likely and how severe the outcome could be; risk control changes the work to remove or reduce the risk. Emergency medical care requires both formal assessment and dynamic scene assessment. Use worker knowledge, inspect routine and non-routine work, learn from near misses, prioritise high-consequence hazards, apply the hierarchy of controls, assign owners and verify that controls work in practice. A completed form is not safety—the reduced exposure is safety.