OHS Compliance & Risk Management15 min readPublished 4 July 2026

How to Conduct a Comprehensive Workplace Baseline Risk Assessment

A complete technical guide to conducting baseline Hazard Identification and Risk Assessments (HIRA) in South Africa, using standard 5x5 risk matrices, hierarchy of controls, and statutory review triggers.

Safety officer carrying out hazard identification and risk assessmentWorkplace baseline risk assessments establishing core hazard profiles.

1. What is a Baseline Risk Assessment and Why Do You Need It?

Think of a Baseline Risk Assessment as the comprehensive medical checkup for your entire organization. It is the foundational diagnostic tool that maps every potential danger across your operations, from heavy machinery in the manufacturing plant to repetitive strain risks in the finance office.

Under Section 8(2)(c) of the OHS Act and General Administrative Regulation 9, employers cannot rely on intuition or subjective opinions to manage safety. You are legally required to establish a documented, systematic Hazard Identification and Risk Assessment (HIRA) that identifies what could cause harm, who is exposed, and what physical controls are in place.

A legally compliant baseline assessment serves as the master blueprint for your entire safety management system. It directly dictates the structure of your Safe Work Procedures, determines which workers require medical surveillance under an Occupational Medical Practitioner, and shapes your Corporate Training Roadmap.

2. The 3 Types of Risk Assessments in South Africa

In South African health and safety governance, risk management is not a static, one-time exercise. It operates as an integrated three-tier framework that adapts as workplace conditions evolve over time.

Comparison of the 3 Risk Assessment Tiers

TierScope & PurposeFrequency & TriggersPractical Workplace Example
1. Baseline HIRABroad organizational risk profile covering all physical zones and operational departments.Initial setup, then reviewed annually or after major restructuring.Complete plant audit covering fire, noise, chemical storage, moving machinery, and ergonomics.
2. Issue-Based HIRADeep-dive technical assessment focused on a specific high-risk task, new machine, or process change.Before commissioning new plant, following an incident, or modifying workflows.Installing a 500kVA backup diesel generator or introducing robotic welding bays.
3. Continuous / DSTIDaily pre-task hazard checks conducted directly by frontline supervisors and operators.Daily before every shift or when physical environmental conditions change.Daily Safe Task Instruction (DSTI) walkaround before erecting scaffolding or entering a confined space.
Understanding when each type of risk assessment must be performed under South African law.

3. How the 5x5 Risk Matrix Works in Practice

To eliminate guesswork and subjective bias, certified risk assessors evaluate hazards using a standardized 5x5 Quantitative Risk Matrix. The formula calculates: `Risk Score = Severity Rating (1 to 5) x Probability Rating (1 to 5)`.

Severity evaluates the worst credible consequence (1 = Minor scratch requiring first aid, up to 5 = Single or multiple fatalities or catastrophic environmental release). Probability measures the likelihood of occurrence (1 = Rare or once in 10 years, up to 5 = Frequent or daily occurrence).

A score of 1 to 5 represents Low Residual Risk (acceptable with standard supervision). A score of 6 to 12 is Moderate Risk (formal action plan and documented Safe Work Procedures required within 30 days). A score of 15 to 25 is High or Critical Risk (work is strictly prohibited until engineering controls reduce the rating into an acceptable green band).

Typical Industrial Hazard Distribution by Severity Rating

Mechanical & Nip Points (Unguarded Machinery)85% High Risk
Electrical & Distribution Boards (Arc Flash/Overload)70% High Risk
Hazardous Chemical Substances (Decanting/Inhalation)65% Moderate Risk
Ergonomic Strains (Manual Material Handling)55% Moderate Risk
Slips, Trips & Floor Housekeeping30% Low Risk
Average breakdown of high-risk operational hazards identified during baseline site audits in Gauteng industrial facilities.

4. The Hierarchy of Controls: Fixing Hazards Properly

A major compliance error made by inexperienced managers is immediately issuing Personal Protective Equipment (PPE) like earplugs or gloves instead of addressing the underlying physical source of danger.

South African OHS law strictly enforces the international Hierarchy of Controls. Employers must systematically exhaust higher-level engineering controls before relying on personal protective gear as a secondary safeguard.

Statutory Hierarchy of Controls (Ranked from Most to Least Effective)

  1. 1
    Elimination: Physically remove the danger completely (e.g. eliminating manual chemical decanting by installing automated closed-loop piping).
  2. 2
    Substitution: Replace the hazardous substance or tool with a safer alternative (e.g. swapping toxic solvent-based degreasers for non-flammable water-based biodegradable cleaners).
  3. 3
    Engineering Controls: Isolate workers from the hazard through physical barriers (e.g. interlocked machine safety cages, local exhaust ventilation hoods, soundproof acoustic enclosures).
  4. 4
    Administrative Controls: Change operational procedures and work patterns (e.g. rotating shifts to limit continuous noise exposure, implementing strict Lockout/Tagout procedures).
  5. 5
    Personal Protective Equipment (PPE): Protect the worker as the absolute last line of defense (e.g. safety boots, respirators, face shields, fall arrest harnesses).

5. How to Conduct a Workplace HIRA in 5 Clear Steps

01
Zone and Map Your Entire Workplace

Divide your facility into logical physical zones (receiving docks, fabrication shop, spray painting booths, administrative offices, parking lots) and catalog every routine and non-routine activity performed in each zone.

02
Systematically Identify Hazards Across All 6 Core Categories

Audit for Physical (noise, vibrations), Chemical (solvents, acids), Biological (bacteria, mould), Ergonomic (heavy lifting, awkward postures), Mechanical (rotating shafts, pinch points), and Psychosocial hazards.

03
Calculate Inherent Risk Scores (Unmitigated State)

Score the severity and likelihood assuming existing safety barriers fail or are ignored, establishing the true baseline danger of each task.

04
Apply the Hierarchy of Controls to Achieve Acceptable Residual Risk

Design engineering controls, written Safe Work Procedures, and training requirements until the residual risk score drops into the green zone (1 to 5).

05
Table Findings with Health & Safety Reps and Lock Executive Sign-Off

Review the draft assessment during your quarterly Section 19 Health and Safety Committee meeting and obtain formal signature from the Section 16(2) appointee.

Frequently Asked Questions

How often must a Baseline Risk Assessment be reviewed under South African law?

A baseline risk assessment must be formally reviewed at least once every 12 months. Immediate reviews are legally mandatory following any workplace accident, near-miss, introduction of new machinery, or modification to physical work premises.

Who is legally qualified to conduct a Baseline HIRA in South Africa?

While internal safety committees participate in hazard identification, a formal Baseline Risk Assessment should be facilitated by a qualified OHS professional registered with professional bodies such as Saiosh (South African Institute of Occupational Safety and Health) or SACPCMP.

What is the legal penalty for failing to maintain a site-specific risk assessment?

Inspectors from the Department of Employment and Labour can issue an immediate Section 30 Prohibition Notice shutting down the affected operation, and directors face statutory fines up to R5,000,000 under the OHS Amendment Bill.

How does a Baseline HIRA link to medical surveillance for workers?

The baseline assessment identifies health stressors (such as noise above 85 dBA, lead exposure, or ergonomic lifting). An Occupational Medical Practitioner uses this data to establish targeted medical surveillance protocols, including annual audiograms and lung function tests.

Can Diba BES assist our organization in compiling a certified risk assessment?

Yes. Diba BES deploys certified risk assessors across South Africa to conduct comprehensive physical walkthroughs, build quantitative 5x5 risk matrices, and integrate actionable controls directly into your site safety file. Book an [OHS Baseline Risk Assessment](/services/occupational-health-safety-consulting) today.

DO
Written by Diba OHS Advisory TeamVerified by Orlinda Pieterson
Senior Occupational Health & Safety ConsultantsPr.CHSA (SACPCMP), Saiosh Tech Member

Diba BES is a 100% Black Women-Owned, Level 1 B-BBEE provider delivering occupational health & safety consulting, accredited workplace training, and commercial workplace services across South Africa since 2003.