Occupational Health and Safety Risk Assessment Under ISO 45001 (Clause 6.1.2) and IEC 31010: Hazard Identification, 5x5 Matrix, Fine-Kinney, HAZOP, and Hierarchy of Controls

OH&S risk assessment under ISO 45001 (adopted in Ukraine as DSTU ISO 45001:2019, Occupational health and safety management systems) forms the engineering core of any working safety management system. Older post-Soviet compliance models treated workplace safety as an archive of signed briefing logs and standardized instructions copied from industry directories. That paper archive rarely prevented accidents because an office manager's instruction and a submerged-arc welder's instruction often looked identical except for the job title on page one. The international ISO 45001 standard replaces static prescription folders with proactive risk engineering: you identify physical, chemical, biological, ergonomic, and psychosocial hazards on your specific shop floor, quantify the probability and consequence of exposure, and install physical barriers before an injury or occupational disease occurs.

Data compiled by the International Labour Organization (ILO) and the European Agency for Safety and Health at Work (EU-OSHA) consistently shows that severe and fatal industrial incidents cluster around non-routine maintenance, unguarded machinery, and contractor operations where formal safety rules were disconnected from shop-floor reality. When the engineering team at Ekontrol (Еконтроль) leads management system implementation projects, we start on the factory floor rather than in a conference room, translating every mechanical, thermal, electrical, and atmospheric hazard into a measurable risk index.

Differentiating Hazard, OH&S Risk, and OH&S Opportunity Under ISO 45001

In casual shop-floor conversation, engineers often swap the words "hazard" and "risk" as if they meant the same thing. In Clause 3 and Clause 6.1.2 of ISO 45001, these terms represent distinct engineering variables that certification auditors accredited by the National Accreditation Agency of Ukraine (NAAU) or European bodies under the EA MLA (European co-operation for Accreditation) verify at every stage of the audit:

• Hazard (небезпечний чинник, ISO 45001 Clause 3.19): an intrinsic property or source with a potential to cause work-related injury and ill health. A hazard is present whenever energy, a hazardous substance, or an unsafe working posture exists: a lathe spindle rotating at $1500\text{ rpm}$, a $380\text{ V}$ busbar inside a switchgear cabinet, hexavalent chromium and manganese fumes in a welding bay, combustible grain dust inside a bucket elevator, or maintenance work performed at a height of $+6.5\text{ m}$. Naming the hazard tells you what can hurt a worker, but it doesn't tell you how likely that harm is.
• Occupational Health and Safety Risk (ризик для ОЗіБП, ISO 45001 Clause 3.21 and Clause 6.1.2.2): the combination of the likelihood of occurrence of a work-related hazardous event or exposure(s) and the severity of injury and ill health that can be caused by the event or exposure(s). Mathematically, risk is expressed as a two-parameter product $R = L \times S$ or a three-parameter product $R = P \times E \times C$. Consider concentrated nitric acid ($\text{HNO}_3$): a sealed drum stored inside a bunded, ventilated chemical cabinet with restricted access carries the exact same intrinsic chemical hazard as an open bucket of nitric acid carried up a steep metal staircase by hand, yet the OH&S risk ($R$) between those two scenarios differs by two orders of magnitude.
• OH&S Opportunity (можливість для ОЗіБП, ISO 45001 Clause 3.22 and Clause 6.1.2.3): a circumstance or set of circumstances that can lead to an improvement of OH&S performance. Clause 6.1.2.3 requires your team to identify not only threats that must be suppressed, but also engineering opportunities to upgrade workplace ergonomics, automate manual handling of $50\text{ kg}$ sacks with vacuum lifters, deploy real-time wireless gas telemetry, or redesign shift schedules to reduce operator fatigue.

For a complete breakdown of all ten clauses of the standard, audit duration rules, and certification stages, read our complete ISO 45001 certification guide and our practical manual on building an occupational health and safety management system (SUOP).

Clause 6.1.2.1 of ISO 45001 obliges the organization to establish, implement, and maintain an ongoing, proactive process for hazard identification. "Proactive" means your engineering and safety team identifies sources of harm when designing a new layout, purchasing a CNC press brake, or planning a boiler overhaul, long before an incident investigation committee has to fill out statutory form H-1.

Eight Mandatory Operational Dimensions Under Clause 6.1.2.1 (a-h)

The fastest way to fail Stage 2 of an ISO 45001 audit is to present a hazard register that only describes normal daytime production. Clause 6.1.2.1 requires your hazard identification process to systematically cover eight operational dimensions:

1. Routine and non-routine activities: up to 60% of severe industrial injuries don't happen during normal automated production runs; they happen when an operator climbs into a jam-packed auger to clear a blockage, when a technician bypasses an interlock to jog a stamping press during die setup, during start-up and shutdown sequences, during annual plant turnarounds, or during night-shift sanitation.
2. Potential emergency situations (linked to Clause 8.2): loss of containment in an ammonia refrigeration compressor room, flash fire in a solvent mixing vessel, deflagration of combustible grain dust inside a silo elevator, crane cable failure, sudden grid blackouts caused by energy infrastructure strikes that cut off exhaust ventilation, and wartime security protocols (ballistic missile and drone alerts, blast-wave glass fragmentation hazards, safe emergency shutdown of furnaces, and rapid evacuation routes to certified bomb shelters).
3. Human and organizational factors: sensory or physical limitations, monotony on high-speed packaging lines, human tendency to defeat safety switches when piecework bonuses reward speed over caution, and acoustic masking in noisy halls where workers can't hear reversing forklifts.
4. All categories of people with access to the workplace: besides full-time shop-floor staff, your assessment must account for third-party construction, maintenance, and cleaning contractors (Clause 8.1.4.2), external truck drivers standing near loading bays, laboratory interns, visitors, and neighboring personnel affected by plant emissions or traffic.
5. Workplace infrastructure, equipment, materials, and physical layout: intersections between pedestrian walkways and forklift aisles, blind spots around storage racks, stair pitch angles, illumination levels in inspection zones, earthing continuity, and thermal insulation.
6. Actual or proposed changes in organization, operations, or processes (Management of Change, Clause 8.1.3): introducing a new chemical reagent with a different Safety Data Sheet (SDS), relocating machinery, or cutting maintenance crew headcount.

Engineering Classification Across Five Hazard Groups

During on-site walkthroughs (Gemba safety walks), multidisciplinary teams classify hazards across five engineering categories:

• Physical and mechanical hazards: kinetic energy of unguarded rotating or reciprocating parts (exposed belt, chain, and gear drives, shafts, screw conveyors, cutter blades, hydraulic press rams); gravitational potential energy of suspended loads and work at height above $1.3\text{ m}$ (unprotected floor openings, inspection pits, roofs, ladders); electrical hazards (direct or indirect contact with live parts, high-energy Arc Flash in $0.4\text{-}10\text{ kV}$ switchgear, electrostatic charge accumulation during pneumatic conveying of powders or transfer of non-conductive solvents); occupational noise exceeding an 8-hour time-weighted average ($L_{\text{EX,8h}}$) of $80\text{ dBA}$; whole-body and hand-arm vibration; radiant heat from smelting furnaces, cryogenic burns, ionizing radiation, and Class 3B/4 industrial lasers.
• Chemical hazards: toxic, corrosive, sensitizing, and carcinogenic gases, vapors, and aerosols in the worker's breathing zone (carbon monoxide $\text{CO}$, nitrogen oxides $\text{NO}x$, ozone, welding fume containing manganese oxides and hexavalent chromium $\text{Cr(VI)}$, organic solvent vapors such as xylene, toluene, and ethyl acetate, sulfuric and hydrochloric acid mists in electroplating shops); respirable fibrogenic dusts (crystalline silica $\text{SiO}2$ in the $\text{PM}{2.5}\text{-PM}{10}$ fraction, grain, flour, coal, and cement dust); flammable gas-air and combustible dust-air atmospheres.
• Biological hazards: Risk Group 1-4 microorganisms in microbiological and food-testing laboratories, zoonotic pathogens (Brucella, Leptospira) in livestock and meat processing, mold spores (Aspergillus) and mycotoxins bound to grain elevator dust, Legionella pneumophila proliferation in industrial cooling towers, and raw sewage exposure in wastewater treatment plants.
• Ergonomic and biomechanical hazards: manual lifting and carrying of loads above statutory mass limits, trunk flexion exceeding $30^\circ$, high-frequency repetitive wrist movements on sorting conveyors leading to carpal tunnel syndrome, prolonged static standing, and visual strain at SCADA control desks.
• Psychosocial hazards (further detailed in ISO 45003): circadian disruption from rotating 12-hour night shifts, isolated work in remote pump stations or underground galleries (lone workers operating without Man-Down telemetry), chronic workload pressure, and acute psychological stress during air-raid alarms.

Non-Managerial Worker Participation Under Clause 5.4

ISO 45001 strictly forbids turning risk assessment into a solo desk exercise by the safety officer. Clause 5.4 (Consultation and participation of workers) requires documented involvement of non-managerial workers in identifying hazards, assessing risks, and selecting controls. Only the millwright who actually greases the conveyor bearing knows that the access platform is 40 centimeters too short, forcing him to stand on a steam pipe. Pairing joint shop-floor walkthroughs with a blame-free Near Miss reporting channel uncovers up to 70% of latent mechanical and organizational hazards before someone gets hurt.

Once hazards are mapped across all operational modes, ISO 45001 Clause 6.1.2.2 (Assessment of OH&S risks and other risks to the OH&S management system) comes into play. While the standard doesn't mandate a single mathematical formula, it requires that your methodology be defined with respect to its scope, nature, and timing, be proactive rather than reactive, and provide consistent, reproducible scores across different assessors. The international reference standard for selecting risk assessment methodologies is IEC 31010 (Risk management: Risk assessment techniques).

In professional safety engineering, every identified hazard is scored twice:

1. Initial (Inherent) Risk ($R_0$): the baseline risk score considering only existing controls before additional engineering upgrades are installed;
2. Residual Risk ($R_{\text{res}}$): the recalculated and verified risk score after new controls selected via the Clause 8.1.2 hierarchy are implemented and tested on the shop floor. Your control plan is effective only when $R_{\text{res}} < R_0$ and $R_{\text{res}} \le R_{\text{tol}}$ (where $R_{\text{tol}}$ is your organization's maximum tolerable risk threshold).

1. The Calibrated $5 \times 5$ Semi-Quantitative Risk Matrix ($R = L \times S$)

In a standard two-dimensional $5 \times 5$ matrix, the occupational risk index $R$ is calculated as the product of the Likelihood of occurrence of the hazardous event ($L \in {1, 2, 3, 4, 5}$) and the Severity of potential injury or ill health ($S \in {1, 2, 3, 4, 5}$):

$$R = L \times S$$

To prevent two shop supervisors from scoring the same machine differently, the $L$ and $S$ axes must be anchored to objective engineering and medical criteria:

• Calibrating the Likelihood Scale ($L$):
  • $L = 1$ (Rare / Virtually Impossible): event hasn't occurred in the industry in over 10 years; the hazard zone is isolated by high-integrity safety interlocks (Performance Level PL d / PL e under ISO 13849-1), and exposure requires simultaneous failure of two independent technical barriers.
  • $L = 2$ (Unlikely): event could occur once every 3-5 years; collective physical guards and documented procedures are in place, though human error during maintenance remains conceivable.
  • $L = 3$ (Possible): an incident or Near Miss has occurred on site within the past 1-3 years; protection relies primarily on administrative rules, signage, and operator attentiveness.
  • $L = 4$ (Likely): hazardous exposure occurs monthly or several times a year; physical guards are missing or easily bypassed, and workers regularly enter the danger zone.
  • $L = 5$ (Almost Certain): continuous daily shift exposure without collective engineering controls (for example, 8-hour work in an $92\text{ dBA}$ noise zone or manual part feeding into an unguarded press); injury or occupational illness is imminent.
• Calibrating the Severity Scale ($S$):
  • $S = 1$ (Negligible): superficial microtrauma (minor abrasion, bruise, small cut) treated on site via a first-aid kit (First Aid Case) with zero lost workdays.
  • $S = 2$ (Minor): reversible injury or mild irritation requiring medical treatment and short-term sick leave (up to 3-7 lost workdays) followed by 100% recovery.
  • $S = 3$ (Moderate): Lost Time Injury (LTI) exceeding 7-14 days, such as a simple bone fracture, second-degree burn, ligament tear, or early reversible stage of occupational illness.
  • $S = 4$ (Major): severe industrial injury causing permanent partial or total disability (amputation of fingers or limbs, crushing injury, loss of sight or hearing, or chronic occupational disease such as silicosis, vibration white finger, or manganese neurotoxicity).
  • $S = 5$ (Catastrophic): single fatality, multiple fatalities, or acute mass poisoning.

2. The Three-Factor Fine-Kinney Method ($R = P \times E \times C$)

A two-dimensional $5 \times 5$ matrix often struggles to differentiate between a high-hazard task performed for 20 minutes twice a year (such as entering a fuel storage tank for inspection) and a task where an operator stands next to a moving mechanism for 480 minutes every shift. To capture exposure duration accurately, Ekontrol engineers deploy the Fine-Kinney method (developed by G.F. Kinney and A.D. Wiruth, 1976), which computes the Risk Score ($R$) as the product of three non-linear variables:

$$R = P \times E \times C$$

Each factor is assigned from a calibrated logarithmic scale:

• Probability that the hazardous event occurs once exposed ($P$): $0.1$ (virtually impossible) $\rightarrow 0.2$ (practically impossible) $\rightarrow 0.5$ (conceivable but unlikely) $\rightarrow 1.0$ (unusual but possible) $\rightarrow 3.0$ (quite possible, 50/50 chance) $\rightarrow 6.0$ (highly likely) $\rightarrow 10.0$ (expected continuously upon exposure);
• Exposure frequency in the hazard zone ($E$): $0.5$ (very rarely: less than once per year) $\rightarrow 1.0$ (rarely: a few times per year) $\rightarrow 2.0$ (occasionally: once per month) $\rightarrow 3.0$ (periodically: once or twice per week) $\rightarrow 6.0$ (regularly: daily during the shift) $\rightarrow 10.0$ (continuously: throughout the entire 8-hour shift);
• Consequence severity ($C$): $1$ (noticeable first-aid injury, no lost time) $\rightarrow 3$ (important injury with lost workdays) $\rightarrow 7$ (serious injury requiring hospitalization) $\rightarrow 15$ (very serious injury: amputation or permanent disability) $\rightarrow 40$ (disaster: single fatality) $\rightarrow 100$ (catastrophe: multiple fatalities).

Worked Fine-Kinney Engineering Calculation: suppose an operator manually feeds sheet metal blanks into an older mechanical eccentric press equipped only with a foot pedal. Here, $P = 3.0$ (hand-foot coordination slip is quite possible), $E = 10.0$ (continuous exposure over 2,000 strokes per shift), and $C = 15$ (traumatic finger amputation). The Initial Risk score is:

$$R_0 = 3.0 \times 10.0 \times 15 = 450\text{ points (Very High / Critical Risk: immediate work stoppage required above } R > 400\text{)}$$

After retrofitting the press with a Type 4 optoelectronic safety light curtain (IEC 61496) wired into a dual-channel safety relay and two-hand control station, the probability of the ram descending while hands are in the die drops to $P = 0.2$, exposure inside the open tooling occurs only during locked-out die changes ($E = 2.0$), and severity remains $C = 15$. The Residual Risk becomes:

$$R_{\text{res}} = 0.2 \times 2.0 \times 15 = 6.0\text{ points (Acceptable Risk, } R \le 20\text{)}$$

Presenting this exact calculation ($R_0 = 450 \to R_{\text{res}} = 6.0$) gives both the plant director and the ISO 45001 certification auditor indisputable mathematical proof that the engineering control reduced workplace risk by 98.7%.

When an enterprise operates high-hazard facilities such as ammonia refrigeration plants, chemical reactors, high-pressure steam boilers, hexane solvent extraction lines, or large grain elevators, a simple $5 \times 5$ matrix can't capture multi-stage process deviations. For complex industrial systems, IEC 31010 and EU-OSHA guidance point to three specialized engineering techniques: HAZOP, Bow-Tie analysis, and Job Safety Analysis (JSA / JHA).

1. HAZOP (Hazard and Operability Study, IEC 61882) for Chemical, Energy, and Grain-Elevator ATEX Processes

A HAZOP study divides a Piping and Instrumentation Diagram (P&ID) or material flow sheet into discrete functional Nodes and systematically applies Guide Words (NO / NOT, MORE, LESS, AS WELL AS, PART OF, REVERSE, OTHER THAN) to process parameters (flow rate, pressure, temperature, level, belt speed, dust concentration, electrostatic potential) to uncover how operational deviations trigger explosions, fires, or toxic releases.

In Ukraine's agro-industrial and port infrastructure, one of the most valuable applications of HAZOP is preventing combustible grain dust explosions (ATEX) inside bucket elevators (норії), silos, and aspiration systems:

• Combustible Dust Physics: fine organic dust generated during handling of wheat, corn, sunflower meal, or sugar (particle size $< 500\text{ }\mu\text{m}$, moisture $< 14%$) forms an explosive dust-air cloud inside an enclosed bucket elevator casing whenever airborne concentration crosses the Lower Explosive Limit ($\text{LEL} \approx 20\text{-}60\text{ g/m}^3$). A mechanical spark, hot bearing, or electrostatic discharge exceeding the Minimum Ignition Energy ($\text{MIE} \approx 10\text{-}30\text{ mJ}$) and minimum cloud ignition temperature ($210\text{-}260,^\circ\text{C}$) triggers a primary deflagration.
• Worked HAZOP Node Example (Node 3: Vertical Bucket Elevator, capacity 175 t/h):
  • Parameter: Elevator belt speed and tension. Guide Word: LESS (belt slippage on the head drive pulley due to boot choking) or OTHER THAN (belt misalignment causing steel buckets to scrape against the metal leg casing).
  • Deviation and Consequence: friction heating of the drive drum above $+250,^\circ\text{C}$ or mechanical impact sparks inside a dense dust cloud $\rightarrow$ primary dust explosion in the elevator head or boot $\rightarrow$ pressure wave and flame front propagating through aspiration ductwork into the silo gallery, igniting settled dust layers into a catastrophic secondary explosion.
  • Engineering Safeguards Mandated by HAZOP: replacing steel buckets with non-sparking antistatic polymer buckets; installing inductive under-speed sensors (tripping the motor drive if belt speed drops by $> 10\text{-}15%$) and belt misalignment rub-block sensors at the head and boot; continuous bearing temperature monitoring via PT100 RTD sensors wired to PLC alarm ($+70,^\circ\text{C}$) and automatic trip ($+80,^\circ\text{C}$); continuous local aspiration maintaining negative pressure; installing ATEX explosion relief panels (or Flameless Venting units indoors) and rotary airlock flame-isolation valves on connecting chutes.

2. Bow-Tie Analysis: Preventive Barriers vs. Mitigative Barriers

Bow-Tie analysis maps the complete causal pathway of a major accident hazard around a central Top Event (the exact moment control over a hazard is lost, such as loss of containment or loss of structural stability):

• Left Side of the Bow-Tie (Preventive Barriers): placed between root Threats/Causes and the Top Event to eliminate the cause or drive down Likelihood ($L$). For a Top Event defined as "Loss of containment of anhydrous ammonia ($\text{NH}_3$) in the refrigeration machinery room," preventive barriers include ultrasonic pipe wall thickness testing, pressure relief valves routed to a water absorption tank, automated emergency shut-off valves, and electrochemical ammonia gas detectors set to alarm at $20\text{ mg/m}^3$.
• Right Side of the Bow-Tie (Mitigative / Recovery Barriers): placed between the Top Event and ultimate Consequences to limit Severity ($S$) if a release has already occurred. These include automatic startup of explosion-proof emergency exhaust ventilation (8-10 air changes per hour), external water-curtain deluge nozzles to knock down the ammonia plume, self-contained breathing apparatus (SCBA) staged outside the entrance doors, audible/visual evacuation alarms, and quarterly emergency response drills under ISO 45001 Clause 8.2.
• Escalation Factor Control: Bow-Tie diagrams also identify conditions that defeat a barrier (for example, a power outage disabling emergency exhaust fans during a leak) and specify secondary safeguards (automatic transfer switch to an uninterruptible power supply and backup diesel generator).

3. Job Safety Analysis (JSA / JHA) for Non-Routine Maintenance Tasks

While HAZOP examines process equipment, Job Safety Analysis (JSA, or Job Hazard Analysis) examines human-machine interaction during high-risk non-routine tasks. The maintenance team breaks a specific job (such as "Confined-space entry into a grain silo to clear bridged meal" or "Hot work repair on a steam header") into 6 to 10 sequential steps, identifies the pinch points, atmospheric hazards, and energy sources at each step, and locks in specific controls directly onto the Permit-to-Work before the crew picks up a tool.

Once Initial Risk ($R_0$) is quantified, ISO 45001 Clause 8.1.2 (Eliminating hazards and reducing OH&S risks) dictates how you select risk reduction measures. You can't simply pick whichever control is cheapest or fastest. The standard requires organizations to apply the Hierarchy of Controls (known in safety engineering as ERICPD: Eliminate, Reduce/Substitute, Isolate/Engineering, Control/Administrative, PPE, Discipline) in strict top-down order.

Five Engineering Tiers Under ISO 45001 Clause 8.1.2

1. Tier 1. Elimination (Physically removing the hazard): The most effective control because $R_{\text{res}} \to 0$ when the hazard no longer exists. Practical industrial examples include:
   • relocating pressure gauges, grease fittings, and isolation valves from elevated catwalks ($+8.0\text{ m}$) down to shop-floor level ($+1.2\text{ m}$) using capillary tubing and chain-wheel actuators, completely eliminating work at height;
   • installing an automated pneumatic grain probe sampler at the truck weighbridge so laboratory technicians never climb onto open truck beds;
   • automating sack palletizing or robotic part removal from injection molding machines.
2. Tier 2. Substitution (Replacing the hazard with a safer material or energy level): When the process step can't be eliminated, substitute the hazardous agent with one of lower intrinsic toxicity or energy:
   • replacing xylene- and toluene-based solvent coatings with water-borne or powder coatings;
   • substituting $220\text{ V}$ AC portable power tools with $12\text{-}24\text{ V}$ Safety Extra-Low Voltage (SELV) or battery-powered tools for maintenance inside conductive metal tanks and boilers;
   • replacing crystalline silica sandblasting media with steel shot or dry-ice blasting to eliminate silicosis risk.
3. Tier 3. Engineering Controls and Isolation (Collective physical protection): Engineering controls isolate people from the hazard through physical barriers and fail-safe automation that function even if an operator is distracted or fatigued:
   • fixed perimeter fencing and movable guards fitted with solenoid-locking safety interlocks (ISO 14119) that keep guard doors locked until high-inertia rotors or spindles come to a complete standstill;
   • Type 4 safety light curtains, area laser scanners, and synchronous two-hand control consoles on stamping and bending presses;
   • Local Exhaust Ventilation (LEV): articulated extraction arms positioned directly over MIG/MAG welding arcs, lip-slot exhaust hoods on acid pickling tanks, and enclosed dust collection hoods at conveyor transfer points that capture contaminants at their point of generation before they reach the breathing zone;
   • rigid vertical fall-arrest rails and certified overhead lifeline systems on silo ladders and loading gantries;
   • acoustic enclosures around screw compressors and anti-vibration machine mounts.
4. Tier 4. Administrative Controls (Safe systems of work): After engineering barriers are maximized, administrative procedures govern how people interact with residual hazards:
   • Lockout / Tagout (LOTO) Energy Isolation: a mandatory physical procedure requiring maintenance personnel to disconnect all energy sources (electrical, pneumatic, hydraulic, thermal, and gravitational potential energy), bleed trapped residual pressure, apply a personal safety padlock and identification tag to the circuit breaker or valve hasp, and verify zero energy via a start attempt (Tryout) before entering a machine. Every technician inside the danger zone holds the sole key to their own padlock;
   • Permit-to-Work (PTW) System: formal written authorization with mandatory pre-work verification checklists (such as multi-gas detector testing for $\text{O}_2 \ge 20%$, $\text{LEL}$, $\text{CO}$, and $\text{H}_2\text{S}$ before confined space entry, standby rescue attendant assignment, and tripod winch setup);
   • work-rest rotation schedules to cap cumulative daily noise or heat exposure, floor traffic demarcation, ISO 7010 safety signage, and visual One-Point Lessons (OPL) mounted on machines.
5. Tier 5. Personal Protective Equipment (PPE - The last line of defense): PPE sits at the very bottom of Clause 8.1.2 because it never eliminates the hazard and never lowers the probability ($L$) of an accident occurring; it only attempts to reduce injury severity ($S$) for a single individual after an event has already started. A hard hat won't stop a poorly rigged steel beam from falling, and an FFP3 respirator loses its protection factor if worn over facial stubble or removed for ten minutes in a dusty gallery. Under ISO 45001, PPE must be treated as a supplementary barrier alongside higher-tier controls, backed by quantitative fit-testing, dielectric testing, and strict inspection logs.

Clause 6.1.2.2 of ISO 45001 requires the organization to maintain documented information on its identified hazards, assessed risks, and selected controls. In industrial practice, this takes the form of a living OH&S Hazard and Risk Register accompanied by workstation risk cards. For enterprises operating in Ukraine, a working register must bridge international ISO 45001 requirements and national statutory norms enforced by the State Labor Service of Ukraine (Derzhpratsi).

Integrating ISO 45001 Risk Assessment With Ukrainian OSH Legislation

Running two separate safety systems, one paper folder for state inspectors and a separate spreadsheet for ISO 45001 auditors, wastes engineering time and creates compliance contradictions. Ekontrol integrates national statutory norms directly into the ISO 45001 risk architecture:

1. Law of Ukraine No. 2694-XII "On Occupational Safety": Article 13 of Law of Ukraine No. 2694-XII obliges every employer to maintain a functioning occupational safety management system (SUOP), conduct workplace safety audits, and organize laboratory monitoring of working conditions. Furthermore, Article 5 requires employers to inform every worker under signature about workplace hazards and harmful factors upon hiring. Having operators sign off on their workstation's ISO 45001 Risk Assessment Card satisfies both Article 5 of Law No. 2694-XII and Clauses 5.4 and 7.3 of ISO 45001 simultaneously.
2. Workplace Hygienic Attestation (CMU Resolution No. 442): under Cabinet of Ministers Resolution No. 442, industrial enterprises conduct periodic hygienic attestation of workplaces at least once every 5 years. Instrumental measurements of breathing-zone chemical concentrations, fibrogenic dust, equivalent noise levels, vibration, microclimate, and illumination performed by laboratories accredited under ISO/IEC 17025 (see our laboratory accreditation consulting services) provide the hard physical data needed to score Likelihood ($L$) and Exposure ($E$). If your laboratory protocol shows manganese aerosol at 1.6 times the Maximum Permissible Concentration (MPC) or noise at $88\text{ dBA}$ (hygienic class 3.1 or 3.2), your ISO 45001 risk register cannot claim $L = 1$. Those same measurements also define which workers require mandatory periodic medical examinations.
3. High-Hazard Work Permits and Declarations (CMU Resolution No. 1107): all activities and machinery listed under Cabinet of Ministers Resolution No. 1107 that require a Derzhpratsi high-hazard permit or declaration (gas-hazardous work, hot work, work at height, pressure vessels, overhead cranes, high-voltage installations) must automatically appear in your ISO 45001 Risk Register with high initial risk scores ($R_0 \ge 12\text{-}16$) linked directly to Clause 8.1 operational controls, Permit-to-Work procedures, and statutory technical inspections. This structure also prepares Ukrainian employers for draft Law No. 10147, which transposes EU Framework Directive 89/391/EEC into national law.

Twelve Mandatory Columns of an Engineering OH&S Risk Register

To pass scrutiny from accredited certification bodies, Ekontrol designs risk registers around 12 linked engineering fields:

• Department / production line / job title and operating mode (routine, maintenance, startup/shutdown, emergency);
• Hazard category, specific Hazard Source, Hazardous Event mechanism, and potential medical consequence;
• Exposed groups (operators, maintenance technicians, contractors, truck drivers, visitors);
• Existing baseline controls (guards, interlocks, ventilation, SOPs);
• Initial Risk score: $L_0$, $S_0$, and $R_0 = L_0 \times S_0$ (or $P_0, E_0, C_0$ under Fine-Kinney);
• Planned additional controls ordered strictly by the Clause 8.1.2 hierarchy (Elimination / Substitution / Engineering / Administrative / PPE), responsible engineer, budget, and target completion date;
• Verified Residual Risk score after implementation: $L_{\text{res}}$, $S_{\text{res}}$, and $R_{\text{res}} = L_{\text{res}} \times S_{\text{res}}$, review date, and assessment team sign-off.

The table below illustrates an excerpt from an industrial OH&S Risk Register ($5 \times 5$ matrix) across five high-risk manufacturing and agro-industrial operations.

An OH&S risk register only delivers return on investment when it drives daily operational decisions across your entire management system. During an ISO 45001 certification audit, the lead auditor traces a direct thread from Clause 6.1.2 through Clauses 6.2, 7, 8, 9, and 10:

• OH&S Objectives and Planning (Clause 6.2): your highest initial risks ($R_0 \ge 12$) must feed directly into your annual OH&S objectives and capex budget (for example, "Reduce residual risk on 4 hydraulic press brakes from $R_0 = 16$ to $R_{\text{res}} = 4$ by Q4 2026 via laser guard installation").
• Competence and Worker Awareness (Clauses 7.2 and 7.3): during shop-floor interviews, auditors walk up to machine operators, welders, and forklift drivers and ask three practical questions: "What are the main hazards at your workstation? Which engineering interlocks and LOTO rules protect you? What steps do you take if a guard fails or you see an imminent danger?". Workers don't need to recite ISO clause numbers, but they must know their workstation risk card and their statutory right to stop unsafe work (Clause 5.4 and Article 6 of Law No. 2694-XII).
• Management of Change (MOC, Clause 8.1.3): whenever your plant installs a new production line, modifies a chemical recipe, alters ventilation ductwork, or switches to 12-hour shifts, Clause 8.1.3 requires a formal MOC risk assessment before the change goes live so new hazards aren't accidentally introduced.
• Procurement and Contractors (Clause 8.1.4): purchasing specifications for new machinery must include acoustic, ergonomic, and CE/interlock safety criteria upfront, while contractor pre-qualification and on-site coordination must address cross-hazards between contractor crews and plant personnel.
• Incident Investigation and Corrective Action (Clause 10.2): every Near Miss, first-aid case, or Lost Time Injury triggers a structured Root Cause Analysis (using 5 Whys or Fishbone diagrams) that loops back into the Risk Register. If an injury occurred on a task previously scored as "Low Risk ($R = 3$)," the team must recalibrate the risk score and upgrade the physical barrier.

Unifying Risk Management Across ISO 45001, ISO 14001, and ISO 9001

Industrial manufacturers, agro-holdings, and energy companies rarely implement ISO 45001 in isolation. Embedding OH&S risk assessment into an Integrated Management System (IMS) for ISO 9001, ISO 14001, and ISO 45001 eliminates duplicate paperwork and unlocks engineering synergies:

• Pairing ISO 45001 with ISO 14001 (Safety + Environment): a hazardous chemical spill, an ammonia leak, solvent vapor emissions, or a transformer oil fire is simultaneously a critical OH&S hazard under ISO 45001 Clause 6.1.2 and a significant environmental aspect under ISO 14001 Clause 6.1.2. Installing high-efficiency Local Exhaust Ventilation with baghouse filtration protects the operator's lungs inside the shop while keeping stack emissions within environmental permit limits outside. Likewise, a single integrated Emergency Preparedness and Response Plan (Clause 8.2 in both standards) coordinates worker evacuation, first aid, and environmental spill containment.
• Pairing ISO 45001 with ISO 9001 (Safety + Quality): poor workstation illumination ($< 300\text{ lux}$), excessive hand-arm vibration, thermal heat stress ($+34,^\circ\text{C}$), and awkward ergonomic reach increase both operator injury rates and product defect rates. Upgrading workstation ergonomics and automating repetitive manual feeding simultaneously drives down your Lost Time Injury Frequency Rate (LTIFR) and your customer scrap rate.

Drawing on dozens of Stage 1, Stage 2, and surveillance audits, Ekontrol lead auditors consistently see six recurring risk assessment failures that result in Major or Minor Nonconformities under Clauses 5, 6, and 8 of ISO 45001 (for a broader look at audit findings across management standards, see our breakdown of the top 15 ISO audit nonconformities):

1. Copy-pasted generic registers downloaded from the internet. When an auditor walks through a metal fabrication plant containing plasma cutters, overhead cranes, and a paint booth, but the risk register only lists generic office hazards or irrelevant agricultural tasks, it triggers a Major Nonconformity under Clause 6.1.2.1. Every workstation and process vessel must be mapped from actual site conditions.
2. Ignoring non-routine maintenance, cleaning, and contractor operations. Many registers score normal machine operation in detail while completely omitting what happens when mechanics clear a jammed conveyor, clean inside a confined vessel, or bring in external roofing contractors. Clause 6.1.2.1 requires comprehensive coverage of non-routine and contractor activities.
3. Fictitious reduction of Residual Risk ($R_{\text{res}}$) without engineering barriers. A classic mathematical error on $5 \times 5$ matrices looks like this: an unguarded work-at-height task is scored at $L_0 = 4, S_0 = 5 \Rightarrow R_0 = 20$. The control column says "Conduct safety briefing and issue harness," and the residual score is miraculously written as $L_{\text{res}} = 1, S_{\text{res}} = 2 \Rightarrow R_{\text{res}} = 2$. First, falling 8 meters never becomes a "minor injury ($S = 2$)" because someone signed a briefing log. Second, administrative briefings alone cannot drop likelihood from 4 to 1 without certified anchor lines or guardrails.
4. Omitting psychosocial, ergonomic, and wartime emergency hazards. Auditors actively check whether your register evaluates night-shift fatigue, lone working, manual lifting loads, and emergency equipment shutdown and shelter evacuation procedures during air-raid alerts.
5. Zero documented evidence of non-managerial worker participation (Clause 5.4). If risk assessment protocols are signed exclusively by the Safety Officer and Chief Engineer, and operators interviewed on the shop floor have never seen their workstation risk cards, the auditor will issue a nonconformity under Clause 5.4.
6. Static registers with no review triggers. If the plant installed two new CNC machining centers, changed its warehouse layout, and recorded three Near Misses over the past year, yet the Risk Register still carries last year's revision date, the system is dead on paper. Risk assessments must be updated through Management of Change (Clause 8.1.3) and post-incident reviews (Clause 10.2).

Building an engineering-grade occupational health and safety risk assessment system that protects your workforce and passes accredited certification audits doesn't require halting production. The Ekontrol team executes ISO 45001 projects across five structured phases:

1. Phase 1. On-Site OH&S Diagnostic Gap Audit: our lead auditors inspect your production shops, warehouses, utilities, and contractor zones, cross-checking existing Derzhpratsi permits, CMU Resolution No. 442 workplace attestation protocols, and current safety practices against ISO 45001:2018 requirements.
2. Phase 2. Risk Assessment Methodology Design and Team Training: we tailor the $5 \times 5$ risk matrix, Fine-Kinney ($R = P \times E \times C$), JSA, or HAZOP methodology to your specific industry, establish a multidisciplinary assessment team including shop supervisors, process engineers, maintenance leads, and non-managerial workers (Clause 5.4), and train them directly on a pilot production line.
3. Phase 3. Shop-Floor Hazard Mapping and Risk Register Engineering: we walk every routine, maintenance, and emergency operation with your team, quantify Initial Risks ($R_0$), design pragmatic engineering and administrative controls following the Clause 8.1.2 hierarchy (including machine guarding, LEV ventilation, LOTO energy isolation, and Permit-to-Work systems), and verify Residual Risks ($R_{\text{res}}$).
4. Phase 4. Turnkey ISO 45001 System Implementation and Internal Audit: we integrate workstation risk cards into standard operating procedures, roll out shop-floor visual safety management, conduct practical emergency response drills (Clause 8.2), train internal auditors under ISO 19011, and facilitate the Management Review (Clause 9.3).
5. Phase 5. Accredited Certification Audit Support and Annual System Maintenance: we stand beside your team during Stage 1 (documentation review) and Stage 2 (on-site shop-floor verification) until your ISO 45001 certificate is issued, and provide ongoing annual support to keep your risk register updated for surveillance audits.

Ready to replace static folders with an engineering risk assessment system or calculate the timeline and cost of ISO 45001 certification for your facility? Reach out via the Ekontrol contact page to schedule a free initial consultation with our lead OH&S auditor.