Risk Assessment and Management Module
Risk assessment is critical for occupational health, safety and environmental (OHS&E) processes of your business.
Supported Methodologies
Choose the risk assessment methodology that suits your needs
5x5 L Matrix Method
Evaluate risks on a 5x5 matrix using probability and severity parameters.
Fine-Kinney Method
Perform detailed risk scoring with probability, frequency, and severity factors.
Module Features
Comprehensive features that facilitate your risk assessment processes
5x5 L Matrix and Fine-Kinney Methodologies
Perform comprehensive risk analysis with different risk assessment methodologies.
Ready Control Pool
Select control topics from the ready control topics pool or manually add your own controls.
Ready Control Templates
Use ready templates based on legislation, sector, equipment, activity, and work environment.
OHS Professional Based Separation
Separate and manage control topics according to OHS professionals.
Legislation Association
Controls in the system pool are individually associated thanks to the special legislation association infrastructure.
Hazard and Risk Management
Systematically record all potential hazards, exposures, and preventive measures in the workplace.
Role Distribution and Assignment
Assign a precaution officer in risk assessment. Send task notifications via SMS and Email.
Corrective Action (CAPA) Tracking
Open and track relevant corrective actions for each defined risk.
Multi-Format Report Output
Prepare your risk reports in PDF, Excel, or Word formats, print them out, sign them, and upload them back to the system.
Historical Record and Comparison
Access historical records of risks and compare them with previous assessments.
Equipment Based Controls
Create special control points for your machinery, equipment, and vehicles.
Work Environment Controls
Perform customized risk assessments for different work environments.
Why Risk Assessment Module?
- Continuous ImprovementAchieve your continuous improvement goals by comparing with historical data.
- Regulatory ComplianceMeet legal requirements with all controls associated with legislation.
- Time SavingPerform rapid risk assessment with ready templates and control pool.
- Team CollaborationStrengthen intra-team coordination with role distribution and automatic notifications.
Try Our Free Risk Assessment Tool
Use our free tool to discover the risk assessment capabilities of the Optifora platform. Analyze with 6 methodologies.
Legal basis
The table shows the obligations of the legislation region you pick in the top bar; it refreshes without reloading the page when the region changes.
Legal basis — Türkiye
| Obligation | Legal basis | How the module covers it |
|---|---|---|
| Carry out or have carried out an occupational health and safety risk assessment | Regulation on Occupational Health and Safety Risk Assessment, art. 5(1) — the employer carries out or has carried out a risk assessment in order to provide, maintain and improve the health and safety of the working environment and of the workers. Its counterpart in the law is art. 10(1) of Law no. 6331. | The 5x5 L matrix and Fine-Kinney methods, a ready control pool and templates are built into the module; an assessment is opened with one of these methods. |
| Run the assessment with a team set up by the employer | Same Regulation, art. 6(1) — the risk assessment is carried out by a team set up by the employer; the team includes the employer or the employer's representative, occupational safety specialists and workplace physicians, worker representatives, support staff and workers chosen to represent every unit. | Control topics are split between OHS professionals; role distribution, assignment of the measure owner and task notification by SMS and e-mail all run from the same record. |
| Plan the agreed control measures with an owner and a schedule, and monitor implementation | Same Regulation, art. 10(1)(c) and the following "monitoring of implementation" step — plans are prepared covering the work steps, the person or unit that will carry them out, the responsible person and the start and end dates; implementation is monitored and audited regularly and corrective and preventive actions are completed where it falls behind. | A corrective action is opened and followed for every identified risk; the owner, the date and the status stay on the same row. |
| Document the assessment with the minimum content, have it signed and keep it | Same Regulation, art. 11 — the document covers the name and address of the workplace, the names, titles and certificate details of those who carried it out, the date it was performed and its validity date, the hazard sources identified, the risks found, the method used, the analysis results and the corrective and preventive measures. Pages are numbered and initialled and the last page is signed; the document may be prepared and archived electronically (art. 11(3)). | The report is exported as PDF, Excel or Word and uploaded back into the system once signed; earlier versions are not deleted. |
| Renew the assessment on time and after triggering events | Same Regulation, art. 12(1) — it is renewed at least every two, four and six years in very hazardous, hazardous and less hazardous workplaces respectively. In the cases listed in art. 12(2) (relocation, a change in technology or equipment, a change in the production method, an accident at work, an occupational disease or a near miss, a change in the legislation on limit values, measurement and health surveillance results, a new external hazard) it is renewed without waiting for that period. | Past records are accessible and can be compared with earlier assessments; a renewal is opened as a new version. |
These rows are for Turkish legislation and the basis of every row was read from the downloaded source text. Administrative fine amounts change every year with the revaluation rate, so they are not kept in this table; the current amounts are published in the free penalty tables on this site.
Legal basis — European Union
| Obligation | Legal basis | How the module covers it |
|---|---|---|
| Evaluate the risks to the safety and health of workers, inter alia in the choice of work equipment, of the chemical substances or preparations used and in the fitting-out of work places | Framework Directive 89/391/EEC, Article 6(3)(a) | Analysis is carried out with the 5x5 L matrix and Fine-Kinney methods; separate control points are created for machinery, equipment and vehicles and for different working environments. |
| Be in possession of an assessment of the risks to safety and health at work, including those facing groups of workers exposed to particular risks | Framework Directive 89/391/EEC, Article 9(1)(a) | All potential hazards, exposures and preventive measures are recorded systematically; past records of each risk can be opened and compared with earlier assessments. |
| Implement the measures on the basis of the general principles of prevention: avoiding risks, evaluating the risks which cannot be avoided, combating the risks at source and giving collective protective measures priority | Framework Directive 89/391/EEC, Article 6(2) | A ready-made control pool is used together with templates based on legislation, sector, equipment, activity and working environment; every control in the system pool is individually linked to legislation. |
| Decide on the protective measures to be taken and integrate the outcome of the assessment into all the activities of the undertaking and at all hierarchical levels | Framework Directive 89/391/EEC, Article 9(1)(b) and Article 6(3)(a) | A corrective action is opened and followed up for every identified risk; a person responsible for the measure is assigned and notified by SMS and e-mail. |
In the EU, risk assessment rests on the Framework Directive; the criteria, the method and the retention period are set by the national law of each Member State. Article numbers are read from the downloaded directive text.
Legal basis — United Kingdom
| Obligation | Legal basis | How the module covers it |
|---|---|---|
| The employer must make a suitable and sufficient assessment of the risks to employees while at work and of the risks to persons not in their employment arising from the conduct of the undertaking. | Management of Health and Safety at Work Regulations 1999 (S.I. 1999/3242), reg. 3(1) | All potential hazards, exposures and preventive measures in the workplace are recorded systematically; comprehensive analysis is carried out with the 5x5 L matrix and Fine-Kinney methodologies. |
| The assessment must be reviewed if there is reason to suspect it is no longer valid or there has been a significant change in the matters to which it relates, and any resulting changes must be made. | Management of Health and Safety at Work Regulations 1999 (S.I. 1999/3242), reg. 3(3) | Past records of the risks can be opened and compared with earlier assessments. |
| An employer with five or more employees must record the significant findings of the assessment and any group of employees identified as being especially at risk. | Management of Health and Safety at Work Regulations 1999 (S.I. 1999/3242), reg. 3(6) | Risk reports are produced in PDF, Excel or Word format, exported, and uploaded back into the system once signed. |
| Where an employer implements preventive and protective measures, they must do so on the basis of the principles of prevention specified in Schedule 1 to the Regulations. | Management of Health and Safety at Work Regulations 1999 (S.I. 1999/3242), reg. 4 and Schedule 1 | Ready-made templates by legislation, sector, equipment, activity and working environment are used together with a pool of ready control topics. |
| The employer must make and give effect to arrangements for the effective planning, organisation, control, monitoring and review of the preventive and protective measures, and record those arrangements where five or more employees are employed. | Management of Health and Safety at Work Regulations 1999 (S.I. 1999/3242), reg. 5(1)-(2) | Corrective actions are opened and tracked for every identified risk; an owner is assigned for each measure and the task notice is sent by SMS and e-mail. |
In Great Britain the framework for risk assessment is the 1999 Management Regulations; no method (5x5, Fine-Kinney and the like) is imposed by law, the test is that the assessment is suitable and sufficient. Recording it in writing is tied to employers with five or more employees. Regulation 3(4)-(5) also requires a separate assessment for young persons; the module page does not describe a field for young persons, so no row was written for it.
Legal basis — United States
| Obligation | Legal basis | How the module covers it |
|---|---|---|
| Furnish a place of employment free from recognized hazards | 29 U.S.C. 654(a)(1) — OSH Act 1970, sec. 5(a)(1): each employer shall furnish employment and a place of employment free from recognized hazards that are causing or are likely to cause death or serious physical harm | The module systematically records every potential hazard, exposure and preventive measure in the workplace; control topics are picked from the ready-made control pool or added manually. |
| Perform a process hazard analysis on covered processes and document the priority order | 29 CFR 1910.119(e)(1) — the employer shall perform an initial process hazard analysis on processes covered by this standard; the analysis shall be appropriate to the complexity of the process and shall identify, evaluate and control the hazards involved | Comprehensive risk analysis is carried out with different assessment methodologies; ready templates exist per legislation, per sector, per equipment, per activity and per work environment. |
| Use one of the accepted analysis methodologies | 29 CFR 1910.119(e)(2)(i)-(vii) — What-If, Checklist, What-If/Checklist, Hazard and Operability Study (HAZOP), Failure Mode and Effects Analysis (FMEA), Fault Tree Analysis or an appropriate equivalent methodology | The free risk assessment tool works with six methodologies: 5x5 and 3x3 L-matrix, Fine-Kinney, FMEA and HAZOP; the module itself ships with the 5x5 L-matrix and Fine-Kinney methods. |
| Resolve findings and recommendations in a timely manner and document the resolution and the actions | 29 CFR 1910.119(e)(5) — the employer shall establish a system to promptly address the team's findings and recommendations, assure the recommendations are resolved in a timely manner and that the resolution is documented, document what actions are to be taken, develop a written schedule and communicate the actions | A corrective action is opened and tracked for every identified risk; a person responsible for the measure is assigned and the assignment notice is sent by SMS and e-mail. |
| Update and revalidate the analysis at least every five years | 29 CFR 1910.119(e)(6) — at least every five years after completion of the initial process hazard analysis, it shall be updated and revalidated by a team meeting the requirements of paragraph (e)(4) | Past risk records are accessible and can be compared with earlier assessments; comparison with historical data is the basis for continual improvement. |
| Retain the analyses, updates and the documented resolution for the life of the process | 29 CFR 1910.119(e)(7) — employers shall retain process hazard analyses and updates or revalidations for each covered process, as well as the documented resolution of recommendations described in paragraph (e)(5), for the life of the process | Risk reports are produced as PDF, Excel or Word, exported and uploaded back into the system once signed; past records are not deleted and stay open for comparison. |
At the United States federal level the risk assessment duty arises from three places: the general duty clause of the OSH Act 1970 (29 U.S.C. 654(a)(1)), the hazard assessment for personal protective equipment (29 CFR 1910.132(d)) and the process hazard analysis for processes involving highly hazardous chemicals (29 CFR 1910.119(e)). The rows below were read from these three sources; the process hazard analysis binds only the processes covered by 1910.119.
Digitize Your Risk Management
Increase your workplace safety, manage risks, and comply with legislation with Optifora.
Talk to an Expert