Construction Risk Assessment: A Complete Guide

Construction is one of the most dangerous industries in Australia. Safe Work Australia data consistently puts it in the top three for workplace fatalities, with falls from height, vehicle incidents, and being struck by objects accounting for the majority of deaths. Between 2018 and 2022, construction recorded 147 worker fatalities nationally.

Behind every one of those numbers is a risk assessment that either didn’t exist, wasn’t thorough enough, or wasn’t followed. Construction risk assessment isn’t a paperwork exercise. It’s the process that determines whether your workers go home at the end of the day.

This guide covers construction risk assessment from the ground up. What it is, what the law requires, how to do it properly, the common hazards you need to address, and how to move from static documents to a system that keeps pace with the reality of a construction site.

What Is a Construction Risk Assessment?

A construction risk assessment is a systematic process of identifying hazards on a construction project, evaluating the risks they present, and determining the controls needed to eliminate or minimise those risks. It applies the standard risk management cycle (identify, assess, control, monitor, review) to the specific context of construction work.

Under Australian WHS legislation, a risk assessment isn’t always legally required for every task. But it is required when specifically called for by regulations (such as for high-risk construction work), and it’s considered best practice for any work where there’s a reasonable possibility of harm.

In practical terms, every construction project should have risk assessments at multiple levels:

• Project-level risk assessments covering the major risks across the entire build
• Phase-level assessments for demolition, excavation, structural work, fit-out, and commissioning
• Task-level assessments (Safe Work Method Statements or SWMS) for specific high-risk activities
• Daily pre-start assessments capturing conditions that change day to day

The goal isn’t to produce documents. The goal is to think systematically about what can go wrong and make sure the right controls are in place before work starts.

Legal Requirements in Australia

The WHS Framework

Construction risk assessment in Australia sits within the harmonised Work Health and Safety (WHS) framework. The key pieces of legislation are:

• Work Health and Safety Act 2011 (model Act, adopted by most states and territories)
• Work Health and Safety Regulations 2011 (model Regulations)
• Codes of Practice, particularly the Code of Practice: Construction Work

Under the WHS Act, a Person Conducting a Business or Undertaking (PCBU) has a primary duty of care to ensure, so far as is reasonably practicable, the health and safety of workers and others affected by the work. For construction, this means identifying hazards, assessing risks, and implementing controls.

High-Risk Construction Work

The WHS Regulations define 19 categories of high-risk construction work (HRCW). These include:

• Work where there is a risk of a person falling more than 2 metres
• Work on or near pressurised gas, energised electrical installations, or artificial extremes of temperature
• Work in or near a trench or shaft deeper than 1.5 metres
• Work on or near telecommunications towers
• Demolition of load-bearing structures
• Work involving diving, explosives, or structural alterations to prevent collapse
• Work in or near confined spaces, contaminated or flammable atmospheres
• Work on or adjacent to roads or railways in use

For any high-risk construction work, a Safe Work Method Statement (SWMS) is legally required. A SWMS must identify the high-risk work, specify the hazards and risks, describe the control measures, and be prepared before work commences. Workers must be consulted in its development.

Principal Contractor Obligations

On construction projects valued at $250,000 or more, a principal contractor must be appointed. The principal contractor has specific duties including:

• Preparing and maintaining a WHS management plan
• Displaying safety signage
• Controlling access to the workplace
• Managing the coordination of WHS activities across all contractors

This means risk assessment isn’t just your responsibility. It’s a shared obligation across the entire project chain, from the client and principal contractor down to every subcontractor on site.

The Construction Risk Assessment Process

Step 1: Identify Hazards

Hazard identification in construction requires multiple approaches because construction environments change constantly. A hazard that didn’t exist yesterday (an open excavation, a partially erected scaffold, a live service) may be present today.

Effective hazard identification methods include:

• Site inspections and walkthroughs at every stage of the project
• Review of design documents to identify risks designed into the structure
• Consultation with workers who know the practical realities of the work
• Review of incident data from similar projects or sites
• Task analysis breaking down each activity into steps and identifying what can go wrong at each step
• Structured methods such as HAZOP, FMEA, SWIFT analysis, or Workplace Risk Assessment and Control (WRAC)

Don’t limit hazard identification to the obvious physical hazards. Construction sites also present psychosocial hazards (long hours, high pressure, isolation on remote projects), environmental hazards (heat, dust, noise, UV exposure), and interface hazards where different trades work in the same space.

Step 2: Assess the Risks

Once hazards are identified, assess the risk each one presents. Risk is the combination of likelihood (how probable is it that harm will occur?) and consequence (how severe will the harm be?).

For construction risk assessments, consider:

• Who is exposed? Workers, subcontractors, visitors, members of the public?
• How often are they exposed? Once during the project, daily, continuously?
• What could go wrong? What’s the realistic worst-case outcome?
• What controls already exist? Are they adequate?

Many organisations use a risk matrix to rate risks, combining likelihood and consequence scores to produce a risk rating. While risk matrices have limitations (they oversimplify, they’re subjective, they can create a false sense of precision), they’re a useful tool for prioritising action and communicating relative risk levels.

For more complex or higher-consequence risks, consider using bowtie analysis to map the causes, preventive controls, consequences, and mitigating controls around a specific unwanted event. Bowties are particularly valuable for construction because they make the relationship between hazards, controls, and outcomes visible to everyone on the project.

The output of the assessment should be a prioritised list of risks with clear ratings. This drives the next step: deciding what controls to put in place.

Step 3: Implement Controls

Controls must follow the hierarchy of controls:

1. Elimination — remove the hazard entirely. Can the work at height be done at ground level instead? Can the confined space entry be avoided by using remote inspection?
2. Substitution — replace the hazard with something less dangerous. Use pre-fabricated components instead of in-situ construction. Use water-based products instead of solvent-based ones.
3. Isolation — separate people from the hazard. Barriers around excavations, exclusion zones during crane lifts, barricading around live services.
4. Engineering controls — physical measures that reduce risk. Edge protection, scaffolding, temporary shoring, ventilation systems, machine guarding.
5. Administrative controls — procedures, training, permits, signage, supervision. SWMS, permits to work, traffic management plans, toolbox talks.
6. Personal Protective Equipment (PPE) — the last line of defence. Hard hats, safety harnesses, high-visibility clothing, hearing protection, respiratory protection.

The hierarchy exists because controls at the top are more reliable than controls at the bottom. A guardrail doesn’t depend on someone remembering to clip on a harness. An eliminated hazard can’t hurt anyone regardless of human behaviour.

In construction, you’ll almost always need a combination of controls from multiple levels of the hierarchy. The key is to push as high up the hierarchy as reasonably practicable before relying on administrative controls and PPE.

For critical controls (those controls where failure could lead to a fatality), establish clear ownership, verification schedules, and performance standards. Know exactly who is responsible for each critical control, how it will be verified, and what the trigger is for escalation if it’s found to be ineffective.

Step 4: Record and Communicate

A risk assessment that lives in a filing cabinet is worthless. The assessment needs to be:

• Accessible to everyone who needs it, on site, not just in the project office
• Written in plain language that workers understand
• Discussed in pre-start meetings, toolbox talks, and inductions
• Linked to specific SWMS for high-risk tasks

For the assessment to drive behaviour on site, workers need to understand not just what the controls are, but why they exist. A worker who understands that the exclusion zone exists because a trench wall can collapse without warning is more likely to respect it than one who just knows “stay behind the tape.”

Step 5: Monitor, Review, and Update

Construction sites change constantly. A risk assessment done at the start of the project won’t cover hazards that emerge during excavation, structural work, or commissioning. Risk assessments must be living documents that are reviewed and updated:

• When conditions change (weather, ground conditions, adjacent work)
• When the scope of work changes (design changes, variations)
• After incidents or near misses that reveal new hazards or control failures
• At phase transitions (moving from excavation to structural work, from structure to fit-out)
• On a regular schedule (weekly for high-risk projects, at minimum before each new phase)

If you’re still managing this through spreadsheets and static documents, you’re fighting the problem with the wrong tools. Construction risk assessment needs a system that can track changes, link controls to specific risks, alert you when reviews are overdue, and give you visibility across the entire project.

Common Construction Hazards

Every construction project is different, but certain hazards appear on virtually every site. Here’s what your risk assessments need to cover.

Falls from Height

Falls remain the number one killer in construction. They account for roughly a third of all construction fatalities in Australia. The hazard exists whenever anyone works above ground level: on scaffolding, roofs, ladders, elevated platforms, near open edges, or in partially completed structures.

Key controls:

• Edge protection (guardrails, toe boards, mesh barriers)
• Scaffolding designed, erected, and inspected by competent persons
• Elevated work platforms (EWPs) for temporary access
• Fall arrest systems where edge protection isn’t practicable
• Administrative controls: permits to work at height, competency requirements
• Exclusion zones below overhead work

Excavation and Trenching

Trench collapse can bury a worker in seconds. Soil weighs roughly 1.5 tonnes per cubic metre. A collapse doesn’t need to be deep to be fatal. Even partial burial can cause crush asphyxiation.

Key controls:

• Shoring, battering, or benching for excavations over 1.5 metres
• Geotechnical assessment before excavation
• Barricading and signage around open excavations
• Service location (dial before you dig) to identify underground utilities
• Means of entry and exit (ladder within 9 metres of any worker in a trench)
• Daily inspection by a competent person, and after rain or other ground disturbance

Mobile Plant and Vehicle Interactions

Construction sites have a dangerous mix of heavy plant (excavators, cranes, trucks, rollers) and pedestrians. Limited visibility, reversing vehicles, and congested work areas create constant risk.

Key controls:

• Traffic management plans separating pedestrians from mobile plant
• Spotters for reversing and blind-spot operations
• Exclusion zones around operating plant
• Proximity detection and warning systems
• Speed limits and designated travel paths
• Operator competency verification (high-risk work licences)

Electrical Hazards

Contact with overhead power lines and underground cables, as well as contact with live electrical installations during construction and fit-out, kills multiple workers each year.

Key controls:

• Identification and marking of all electrical services before work begins
• Safe approach distances to overhead lines (as per AS/NZS 4576)
• Isolation and lock-out/tag-out procedures for electrical work
• Use of residual current devices (RCDs)
• Competency requirements (licensed electricians only for electrical work)

Structural Collapse

Partially completed structures, temporary works, formwork, and falsework all present collapse risks. The risk is highest during construction and demolition when the structure isn’t in its final, designed state.

Key controls:

• Temporary works design by a competent structural engineer
• Inspection and sign-off before loading temporary structures
• Demolition plans prepared by competent persons
• Exclusion zones during critical lifts and structural work
• Monitoring for movement, deflection, or distress in temporary structures

Hazardous Materials

Construction workers encounter asbestos (in demolition and refurbishment), silica dust (cutting concrete, stone, or masonry), lead paint, solvents, and other hazardous substances regularly.

Key controls:

• Hazardous materials surveys before demolition or refurbishment
• Licensed asbestos removal for friable asbestos
• Dust suppression (wet cutting, extraction) for silica-generating activities
• Safety Data Sheets (SDS) available on site for all chemicals
• Health monitoring for workers exposed to hazardous substances
• Risk assessment methods specific to chemical and material hazards

Manual Handling

Musculoskeletal injuries from manual handling are the most common injury type in construction by volume. Lifting heavy materials, repetitive tasks, awkward postures, and working in confined spaces all contribute.

Key controls:

• Mechanical aids (cranes, hoists, trolleys) to reduce manual lifting
• Task rotation to limit repetitive strain
• Training in manual handling techniques
• Design-stage consideration of material weights and handling requirements

Weather and Environmental Conditions

Australian construction sites face extreme heat, UV exposure, storms, high winds, and flooding. These conditions affect both the safety of the work and the stability of temporary structures.

Key controls:

• Heat stress management plans (hydration, rest breaks, shade)
• Wind speed limits for crane operations, scaffold work, and material handling
• Lightning and storm response procedures
• Sun protection (scheduling outdoor work outside peak UV hours where possible)

SWMS: Getting Them Right

Safe Work Method Statements are the most common risk assessment document on Australian construction sites. They’re legally required for high-risk construction work, and in practice, most principal contractors require them for all significant tasks.

A good SWMS should:

1. Identify the high-risk construction work being performed
2. List the hazards and risks for each step of the work
3. Specify control measures for each risk, referencing the hierarchy of controls
4. Be developed in consultation with workers who will perform the work
5. Be reviewed and signed off by workers before work begins
6. Be site-specific, not a generic template copied from project to project

The biggest problem with SWMS in construction is that they’ve become a compliance exercise. Sites accumulate hundreds of generic SWMS that nobody reads. They’re copied from previous projects with minimal changes. Workers sign them without understanding them.

A SWMS that workers haven’t contributed to and don’t understand is a document, not a control. It provides legal coverage but not safety. The fix is simple but requires discipline: involve the workers who do the work in writing the SWMS, keep them short and specific, and discuss them in pre-start meetings rather than just getting signatures.

Risk Assessment for Different Project Types

Residential Construction

Residential construction presents concentrated hazards in a smaller footprint. Falls from height (especially during roofing and work on upper storeys), excavation for foundations, and electrical work during fit-out are the primary risks. Residential builders often have less safety infrastructure than commercial operators, making thorough risk assessment even more important.

Commercial Construction

Commercial projects are typically larger, longer, and involve more contractors working simultaneously. The complexity of coordinating multiple trades creates interface risks: one contractor’s work affecting another’s safety. Principal contractor coordination, permit-to-work systems, and clear communication between trades are essential.

Civil and Infrastructure

Road construction, bridge building, pipeline installation, and other civil works add traffic management, work near live services, and environmental risks to the standard construction hazard profile. Working adjacent to live roads or railways introduces risks that are largely outside the constructor’s control, requiring robust traffic management and separation.

Demolition

Demolition reverses the construction process but with additional unknowns. Hidden asbestos, structural elements in unexpected locations, unknown services, and the progressive weakening of the structure as demolition proceeds all require specific risk assessment. Demolition is one of the highest-risk construction activities and demands specialist expertise.

Moving Beyond Paper-Based Risk Assessment

Most construction companies still manage risk assessments through Word documents, Excel spreadsheets, and paper forms on clipboards. This approach has served the industry for decades, but it has serious limitations:

• Version control is a nightmare. Which SWMS is current? Is the one on site the same as the one in the project office?
• Reviews fall through the cracks. Without automated reminders, risk assessments go stale as conditions change.
• No visibility across the project. Project managers can’t see the risk profile across all activities without manually collating documents.
• Control effectiveness is invisible. You know what controls you specified. You don’t know whether they’re working.
• Audit trail is weak. Proving that risk assessments were done, reviewed, and communicated requires hunting through files and sign-off sheets.

Modern risk management software solves these problems by providing a central platform for risk registers, control tracking, and review management. The right tool links your risk assessments to specific controls, tracks whether those controls are being verified, alerts you when reviews are due, and gives you a real-time view of your risk profile across the entire project.

RiskSight is purpose-built for industries like construction where the consequences of getting risk management wrong are measured in lives. It brings bowtie analysis, ISO 31000-aligned risk registers, critical control management, and incident investigation into a single platform. No more scattered spreadsheets. No more stale assessments. No more hoping your controls are working.

What Makes Construction Risk Assessment Work in Practice

1. Construction risk assessment is a legal requirement for high-risk work and a practical necessity for all construction activities.
2. Use multiple levels of assessment: project-wide, phase-level, task-specific SWMS, and daily pre-starts.
3. Follow the hierarchy of controls. Eliminate and engineer before relying on procedures and PPE.
4. Involve workers in the process. They know the hazards. A risk assessment they contributed to is one they’ll actually follow.
5. Keep assessments alive. Review and update them as conditions change, not just when an auditor asks.
6. Track your critical controls. Know which controls prevent fatalities and verify they’re working.
7. Move beyond spreadsheets. Use a system that keeps pace with the reality of a construction site.

Ready to Upgrade Your Construction Risk Management?

RiskSight gives construction teams a single platform for risk assessment, control tracking, and compliance. Map hazards with bowtie analysis, maintain ISO 31000-aligned risk registers, track critical controls, and investigate incidents, all in one place.

Stop managing construction safety in spreadsheets and start managing it in a system built for high-risk industries.

Start your free 30-day trial — no credit card required, demo data included so you can see how it works from day one.