deGRANDSON Global Blog

ISO 45001 Risk Assessment & Risk Treatment Tools

Written by Dr John FitzGerald | Apr 16, 2026

You'll need OH&S Risk Management Methods & Tools

Unlike ISO 9001, the Occupational Health and Safety Management System (OHSMS) Standard requires the application of OH&S Risk Management Methods in Clause 6.1. So, risk-based thinking alone does not meet requirements. Formal and documented Risk Assessment followed by Risk Treatment is required for compliance.

What is ISO 45001:2018 About?

ISO 45001:2018 can be best summed up by the titles of the different ISO 45001 clauses, namely:

  • Actions to address risks and opportunities - general (ISO 45001:2018 Clause 6.1.1)
  •  
  • Hazard identification (in the workplace) (ISO 45001:2018 Clause 6.1.2.1)
  •  
  • Assessment of OH&S risks and other risks to the OH&S management system (ISO 45001:2018 Clause 6.1.2.2)
  •  
  • Assessment of OH&S opportunities and other opportunities to the OH&S management system (ISO 45001:2018 Clause 6.1.2.3)
  •  
  • Legal requirements and other requirements, e.g., industry codes of practice (ISO 45001:2018 Clause 6.1.3)
  •  
  • Planning Action  to mitigate (reduce or control) risk (ISO 45001:2018 Clause 6.1.4)

The question is, then, what tools and methods can effectively assess workplace hazards and guide us to effective actions to control them? Below are some answers.

 

Analysis of OH&S Risk Assessment Tools & Methodologies

A useful review of risk assessment tools and methods was included in OHSAS 18001. We've updated it. 

A word of warning: There is a tendency not to review and update these tools regularly.  This is a serious mistake, as initial use is frequently based largely on expert opinion, whereas reviews and updates are based on outcomes and measurements—in short, facts.

Assessment Tools Comparison: Strengths and Weaknesses

Assessment Tool

Strengths

Weaknesses

Checklists/ Questionnaires

Easy to use

Use can prevent "missing something" in initial evaluations

Often limited to yes/no answers

Only as good as the checklist used - it may not consider unique situations

Risk Matrices

Relatively easy to use

Provides a visual representation

Doesn't require the use of numbers

Only 2-dimensional - can't consider multiple factors impacting risk

A pre-determined answer may not be appropriate to the situation

Ranking / Voting Tables

Relatively easy to use

Suitable for capturing expert opinion

Allows for consideration of multiple risk factors (e.g., severity, probability, detectability, data uncertainty)

Requires use of numbers

If the quality of the data is not good, the results will be poor

This can result in a comparison of incomparable risks

Failure mode and effects analysis (FMEA);

Hazard and operability studies (HAZOP)

Good for detailed analysis of processes

Allows input of technical data

Needs expertise to use it

Needs numerical data to input into the analysis

Takes resources (time & money)

Better for the risks associated with equipment than those related to human factors

Exposure Assessment Strategy

Good for the analysis of data associated with hazardous materials and environments

A fundamental activity if consistency of approach and realistic evaluation of risk is to be achieved.

Needs the expertise to use

Needs numerical data to input

Often requires the use of workplace monitoring and measuring equipment

Computer Modelling

If you have the data, computer modeling can give good answers

Best for larger workplaces where enough data is more likely to be available

Generally, uses numerical inputs and is less subjective

Significant time and money are needed to develop and validate

Potential for over-reliance on the results without questioning their validity

 

Examples of Applications of Risk Assessment Tools

A combination of these tools is needed for an effective site-wide OH&S risk assessment. For example, checklists are often best for assessing human workplace activities. At the same time, FMEAs are frequently used to assess workplace processes (where the assessment is conducted step-by-step on the activities that make up the process).

 

 

Where to Get Risk Management Tools

Our  ISO 45001 training courses, ISO 45001 Lead Implementer and ISO 45001 Transition Training, both include Risk Management Tools in their ISO 45001 Documentation Toolkit.   

Related Courses

View ISO 45001 Internal Auditor Course
Est duration: 14 hrs
Price: USD 620
View ISO 45001 Lead Auditor Course
Est duration: 30 hrs
Price: USD 1,325
View ISO 45001 Lead Implementer Course
Est duration: 24 hrs
Price: USD 1,060
View ISO 45001 Consultant and Lead Auditor Course
Est duration: 36 hrs
Price: USD 1,590
View ISO 45001 Internal Auditor Extension Course
Est duration: 8 hrs
Price: USD 355