How to Conduct a Risk Assessment in Singapore: A Step-by-Step Guide (2026)

Overview

Every workplace accident that happens in Singapore is, in some way, a failure of risk assessment. Either the hazard was never identified, the risk was underestimated, the control measures were inadequate, or the findings were never communicated to the workers who needed them most.

Under the Workplace Safety and Health Act, all employers in Singapore must conduct risk assessments for all work activities carried out in their workplaces. This applies to every industry and business size, from small offices to large construction sites. The risk assessment must be conducted by a competent person, and records must be kept for at least 3 years.

For companies pursuing bizSAFE Level 3, a properly conducted and documented risk assessment is the core deliverable that your RM Implementation Audit will assess. For all other Singapore employers, it is a legal obligation under the WSH (Risk Management) Regulation, one that carries significant penalties if neglected.

This guide by AnjouHealth walks you through the complete risk assessment process step by step, what it involves, who should conduct it, how to assess each hazard, what controls to implement, and what to document for compliance and audit readiness.

What Is a Workplace Risk Assessment?

A risk assessment is a systematic process of identifying workplace hazards, evaluating the likelihood and severity of harm, and determining appropriate control measures.

It is not a paperwork exercise, it is the structured process through which employers fulfil their legal duty to identify foreseeable risks to anyone affected by their work activities, and take reasonably practicable steps to eliminate or control those risks before someone gets hurt.

The key legislation governing risk assessment in Singapore includes the Workplace Safety and Health Act (WSHA), Section 12 requires every employer to take reasonably practicable measures to ensure safety and health, which includes conducting risk assessments and the WSH (Risk Management) Regulations, which specifies the requirement for risk assessment, the methodology to be used, review requirements, and communication obligations.

Who Must Conduct the Risk Assessment?

Under the WSH (Risk Management) Regulations, every employer and self-employed person must conduct a risk assessment of any work that may pose a risk to the safety and health of persons at the workplace. The RA must be conducted by a competent person, someone who has attended an approved RM course. 

For bizSAFE companies, this is typically the Risk Management Champion appointed at Level 2, the person who attended the WSQ Develop a Risk Management Implementation Plan course. Their training equips them with the knowledge and skills to lead the risk assessment process competently.

A risk assessment should not be done alone or purely from a desk. Assemble a team that includes a trained Risk Assessment leader, someone who has completed the approved RA course and workers who perform the activities, as they know the actual hazards better than anyone. Worker participation is essential for a credible and practical risk assessment.

Step 1: Assemble Your Risk Assessment Team

A risk assessment conducted by one person sitting at a desk is one of the most common and most dangerous, mistakes Singapore employers make. Your RA team should include:

• The Risk Management Champion
  Who leads the process, applies the risk matrix, and ensures documentation meets MOM requirements

• Supervisors and team leaders
  Who understand how work is actually done, including shortcuts, workarounds, and non-routine activities that often carry the highest risk

• Frontline workers
  Who face the hazards every day and can identify risks that are invisible from a management perspective

• Maintenance staff
  For hazards related to equipment, machinery, and infrastructure

• WSH Officer or Coordinator
  Where applicable, to provide technical guidance and ensure regulatory compliance

Before the team starts work, walk the actual workplace together. Observe work being done in real time, not staged for inspection, but as it actually happens on a normal working day.

Step 2: Identify All Workplace Hazards

Hazard identification is the foundation of the entire risk assessment. Walk through your workplace and identify anything that could potentially cause harm. Common hazard categories include physical hazards ( noise, vibration, extreme temperatures, radiation and chemical hazards, toxic substances, flammable materials, dust, fumes.)

A comprehensive hazard identification covers all six hazard categories:

• **Physical hazards
  **Noise, vibration, extreme temperatures, radiation, lighting, working at height, slips and falls, moving machinery, manual handling loads, electrical hazards, and fire risks.

• **Chemical hazards
  **Toxic substances, flammable or combustible materials, corrosives, dust and fumes, solvents, and any hazardous chemicals used, stored, or generated during work activities.

• **Biological hazards
  **Exposure to bacteria, viruses, fungi, or other biological agents, relevant for healthcare, food handling, waste management, and laboratory environments.

• **Ergonomic hazards
  **Repetitive movements, awkward postures, sustained force, prolonged standing or sitting, poor workstation design, and manual handling tasks that risk musculoskeletal injury.

• **Psychosocial hazards
  **Workplace stress, excessive workload, harassment, shift work, fatigue, and other factors that affect mental health and well-being.

• **Safety hazards
  **Housekeeping issues, blocked emergency exits, inadequate signage, unsecured equipment, vehicle and pedestrian interactions, and permit-to-work gaps.

Important: Do not limit hazard identification to routine work activities. Non-routine activities such as maintenance, cleaning, and emergency situations often pose higher risks than routine work and must be included in your risk assessment.

Step 3: Evaluate the Risk Level of Each Hazard

Once hazards are identified, each one must be evaluated using Singapore's risk matrix framework. This involves assessing two dimensions:

Likelihood: how probable is it that the hazard will cause harm?

Rating

Likelihood

Description

1

Rare

Has not happened before and is unlikely to occur

2

Unlikely

Has happened before but infrequently

3

Possible

Could happen at some point

4

Likely

Has happened several times

5

Almost certain

Happens regularly or is expected to occur

Severity: how serious would the consequences be if harm occurred?

Rating

Severity

Description

1

Negligible

Minor injury requiring first aid only

2

Minor

Injury requiring medical treatment

3

Moderate

Injury causing temporary disability or hospitalisation

4

Major

Permanent disability or serious injury

5

Catastrophic

Fatality or multiple serious injuries

Risk Level = Likelihood × Severity

Score

Risk Level

Action Required

1 – 4

Low

Monitor and maintain existing controls

5 – 9

Medium

Implement additional controls as soon as practicable

10 – 14

High

Implement controls urgently,  work should not proceed without controls

15 – 25

Extreme

Stop work immediately, do not proceed until risk is reduced

The risk level determines the urgency and nature of control measures required and the priority order in which they should be addressed.

Step 4: Implement Control Measures

For every hazard assessed as medium risk or above, appropriate control measures must be identified and implemented. Singapore's WSH framework requires employers to follow the hierarchy of controls, starting from the most effective and working down:

• Elimination

  • Remove the hazard entirely. The most effective control measure. Example: stop using a hazardous chemical by switching to a safer process that does not require it.

• Substitution

  • Replace the hazard with something less dangerous. Example: replace a solvent-based cleaning product with a water-based alternative.

• Engineering Controls

  • Physical measures that isolate workers from the hazard. Example: install machine guarding, exhaust ventilation, noise enclosures, or anti-slip flooring.

• Administrative Controls

  • Changes to how work is done to reduce exposure. Example: job rotation to limit exposure time, permit-to-work systems, safe work procedures, toolbox meetings, and training requirements.

• Personal Protective Equipment (PPE)

  • The last line of defence, used when other controls cannot adequately reduce the risk. Example: safety helmets, gloves, ear protection, respirators, safety harnesses.

Important: PPE should never be the only control measure for a significant hazard. It is the least effective control because it relies entirely on individual behaviour and can fail. Always combine PPE with higher-level controls where possible.

For each control measure identified, document:

• What the control is
• Who is responsible for implementing it
• The target implementation date
• The residual risk level after controls are in place

Step 5: Document Your Findings

Records must be kept for at least 3 years. Your risk assessment documentation must include:

• Work activity
  A clear description of the task or process being assessed

• Hazard
  what could cause harm

• Who might be harmed
  Employees, contractors, visitors, members of the public

• Likelihood rating
  With justification

• Severity rating
  With justification

• Risk level
  The product of likelihood and severity

• Existing controls
  What is already in place

• Additional controls required
  What needs to be done, by whom, and by when

• Residual risk level
  The risk level after all controls are implemented

• Safe Work Procedures
  For medium and high risk activities

• Date of assessment
  And the names of team members involved

• Review date
  When the assessment will next be reviewed

Your documentation does not need to follow a specific template, but it must be specific to your actual workplace and work activities not a generic document copied from another company or downloaded from the internet.

Step 6: Communicate Findings to All Workers

A risk assessment that is filed in a folder and never shared with the people doing the work has failed its most important purpose. Critically, communicate the findings to all affected workers. The WSH (Risk Management) Regulations require that workers are informed of the hazards, risks, and control measures relevant to their work. Display RA summaries in the workplace and incorporate them into safety briefings and induction programmes. 

Practical ways to communicate risk assessment findings include:

• Toolbox meetings
  Brief workers on the specific hazards and controls relevant to the day's tasks

• Safety inductions
  Ensure new workers are briefed on relevant risk assessments before starting work

• Posted RA summaries
  Display key hazards and controls at the relevant workstation or work area

• Safe Work Procedures
  Provide written step-by-step guidance for medium and high risk tasks

• Ongoing training
  Ensure workers understand not just what the controls are, but why they matter

For multilingual workforces, ensure briefings are conducted in languages workers understand, or supplement verbal communication with visual aids and diagrams.

Step 7: Review and Update Regularly

The regulations mandate a review of the RA under specific circumstances: periodically at a minimum, every risk assessment must be reviewed and, if necessary, revised at least once every 3 years. After an Incident: a review is mandatory following any accident, dangerous occurrence, or near-miss that results in bodily injury. When Changes Occur: a review must be conducted whenever there is a significant change in work practices, procedures, machinery, or the work environment. 

In practice, best-practice companies review their risk assessments more frequently than the minimum 3-year requirement, particularly in industries where work activities, equipment, and personnel change regularly. A risk assessment that was accurate two years ago may no longer reflect current workplace conditions.

Build review triggers into your safety management calendar:

• Annual review of all high-risk activity assessments
• Immediate review after any incident, near miss, or dangerous occurrence
• Review whenever new equipment, chemicals, or work processes are introduced
• Review when new workers or contractors join the team for high-risk activities

Common Mistakes That Fail MOM Inspections and bizSAFE Audits

Generic risk assessments copied from another company or template without customisation to your specific workplace and activities are one of the most common failures. Desk-based assessments, completed without visiting the workplace or consulting workers and ignoring non-routine activities (maintenance, cleaning, and emergency situations) are also frequently flagged.

Other common mistakes include:

• Underestimating likelihood or severity
  Being overly optimistic about risk levels to avoid the burden of implementing controls. Auditors look for realistic assessments that reflect actual workplace conditions.

• No worker involvement
  Risk assessments completed entirely by management or consultants without input from frontline workers miss the hazards that only those doing the work can identify.

• No safe work procedures for high-risk activities
  Documenting a hazard as high risk but failing to develop a safe work procedure to go with it is a direct audit failure point.

• **Conducting but not communicating the risk assessment to workers
  **This breaks the compliance chain even if the document exists.

• Not updating after changes
  A risk assessment that does not reflect the current state of your workplace is not compliant, regardless of when it was last formally reviewed.

• Treating it as a one-time exercise
  Risk assessment is a continuous process, not a document you produce once and file.

Risk Assessment and Your bizSAFE Journey

For companies pursuing bizSAFE certification, the risk assessment is not just a compliance document, it is the central deliverable of the entire programme:

• Level 2
  Your RM Champion learns how to conduct a risk assessment through the WSQ course and develops the initial Risk Management Implementation Plan

• Level 3
  Your completed risk assessment is independently audited by a MOM-approved Auditing Organisation. The auditor will verify that hazards are correctly identified, risk levels are realistic, controls are appropriate, and the plan is actually being implemented

• Level 4
  Your risk assessment feeds into the broader WSHMS, which integrates risk management with objectives, legal compliance, and continual improvement

• Star
  Your WSHMS, including the risk assessment framework, is audited against ISO 45001

A risk assessment that is thorough, specific, well-documented, and actively communicated to workers will pass your bizSAFE Level 3 audit and provide a strong foundation for every level above it.

Looking to Strengthen Your Workplace Safety Culture?

A risk assessment identifies the hazards,  AnjouHealth helps you manage them. At AnjouHealth, we are a trusted workplace health and safety partner in Singapore, with over 1,200 professionals trained and a client satisfaction rate exceeding 95%. We help businesses build lasting WSH cultures through evidence-based programmes that go beyond documentation.

• Workplace Safety Campaigns
  Interactive, hands-on campaigns that bring your risk assessment findings to life for every worker on the ground

• Workplace Ergonomics Risk Assessment (WERA)
  A structured assessment of ergonomic hazards that feeds directly into your Risk Management Plan

• Occupational Health Programmes
  Onsite health screenings, hearing tests, and wellness initiatives that address health hazards identified during risk assessment

• Customised WSH Solutions
  Tailored programmes built around your industry, workforce size, and specific risk profile