3.4 Assessing risk

Written by Imran Qureshi (NEBOSH)

NEBOSH IGC · Health and safety management · 15 questions

Name: ____________________ Date: ____________

Step one of the five step approach to risk assessment is to:
- A Control the risks
- B Record findings
- C Identify the hazards and who is at risk
- D Review the controls
The first and most effective item in the ISO 45001 hierarchy of control is to:
- A Provide PPE
- B Eliminate the hazard
- C Use warning signs
- D Train workers
A risk assessment that is 'suitable and sufficient' means it:
- A Is completed once and never changed
- B Deals with the significant risks in proportion to the level of risk
- C Covers every possible hazard in great detail
- D Is done by an outside consultant only
Risk is:
- A The result of a control measure
- B The same as a hazard
- C Anything with the potential to cause harm
- D The likelihood of harm and its severity
A hazard is:
- A Anything with the potential to cause harm
- B A control measure
- C The chance that harm will occur
- D An injury that has happened
Risk profiling is:
- A A list of injuries
- B An audit of the policy
- C A high-level ranking of activities and areas by risk
- D A detailed study of one machine
A risk assessment that is not suitable and sufficient is one that:
- A Deals with the significant risks
- B Is reviewed
- C Considers who is at risk
- D Misses significant hazards or is excessively detailed
Which people should be identified in step one of the five step approach?
- A Workers, contractors, visitors and the public who are at risk
- B Only the person doing the assessment
- C Only permanent staff
- D Only the managers
Step four of the five step approach is to:
- A Identify the hazards
- B Carry out the audit
- C Record the findings
- D Assess the risk
Step five of the five step approach is to:
- A Review the controls
- B Control the risks
- C Identify the hazards
- D Record the findings
In a risk assessment, existing controls should be:
- A Removed
- B Taken into account before deciding if more is needed
- C Recorded only after the incident
- D Ignored
The second item in the ISO 45001 hierarchy of control is:
- A Use PPE
- B Substitute with something less hazardous
- C Provide training
- D Eliminate the hazard
In the hierarchy of control, personal protective equipment is:
- A The last item
- B The second item
- C The first item
- D Not part of it
Training is placed in the hierarchy under:
- A Elimination
- B Engineering controls
- C Substitution
- D Administrative controls
Residual risk is:
- A The risk before any control
- B The risk that remains after controls are in place
- C The risk to visitors only
- D The cost of the control

Answer key

1. C, 2. B, 3. B, 4. D, 5. A, 6. C, 7. D, 8. A, 9. C, 10. A, 11. B, 12. B, 13. A, 14. D, 15. B

The first step is hazard and people identification.
Elimination is at the top, PPE at the bottom.
The standard is proportionate and focused on significant risks.
Risk combines likelihood and severity; the hazard is the potential for harm.
Risk is the likelihood and severity of the harm.
A risk assessment is the more detailed study.
It should be proportionate to the level of risk.
Anyone who could be harmed should be considered.
The five steps are identify, assess, control, record, review.
Reviews check the controls still work and update the assessment.
The study tip is to state existing controls first.
The order is eliminate, substitute, engineering and reorganisation, administrative, PPE.
PPE depends on the user and is the last resort.
Administrative controls include training and procedures.
It is compared with what is acceptable.