Templates and records · ISO 45001 · Clause 6.1.2
ISO 45001 risk assessment template by job role
The document the whole prevention system rests on: which hazards each role faces, how much risk they carry and what is being done to eliminate or reduce them.
In one sentence
The risk assessment by job role identifies the hazards of each position —including organisational and psychosocial ones and those arising from non-routine situations—, rates the risk with a defined method and sets measures following the hierarchy of controls, because ISO 45001 requires it in clause 6.1.2 and asks for it to be maintained as documented information (6.1.1), and Spanish Law 31/1995 requires it in writing (arts. 16 and 23).
- Where the standard requires it
- ISO 45001 · Clause 6.1.2 Clauses are cited using the numbering of ISO 45001:2018, the current edition, which includes the 2024 amendment on climate change.
- Type of information
- Mandatory document Documented information to be maintained (6.1.1), as well as a legal duty (art. 23.1.a of Law 31/1995)
- Who fills it in
- Health and safety practitioner In-house or from the external prevention service, with input from the workers in the role and their representatives
- When
- When the role is created and when things change New equipment, substances or processes, harm to health and periodic checks that reveal inadequate measures
- How long it is kept
- Current, with its versions It is a living document; keeping earlier versions lets you show the Labour Inspectorate how the risk in the role has evolved
What the standard requires
What ISO 45001 demands and what it leaves to your judgement
The standard calls for an ongoing, proactive process for identifying hazards that takes into account how work is organised, social factors, routine and non-routine activities, emergencies, the people who have access to the workplace and changes. Risks must then be assessed using a methodology defined in terms of scope, nature and timing, so that it is proactive rather than merely reactive.
Spanish law reaches the same place by another road: the employer must assess the risks that could not be avoided, role by role and with a reliable method, review the assessment when conditions change or harm occurs, and document it with the findings and the measures (art. 16 of Law 31/1995 and arts. 3 to 7 of RD 39/1997).
What the standard does not impose is the method: probability and severity scoring, a checklist or specific methods for ergonomics or occupational hygiene are all valid, provided they are defined and applied consistently across every role.
Structure
Fields the template should include
- Site, role and the tasks it covers, with the number of workers
- Particularly vulnerable workers: pregnancy, minors, limitations
- Hazards identified, including organisational and psychosocial ones
- Assessment method and rating criteria
- Likelihood, severity and risk level of each hazard
- Existing and proposed measures according to the hierarchy of controls
- Personal protective equipment required
- Role-specific training and information
- Owner and deadline for each measure (prevention planning)
- Date, author, worker participation and next review
Example
Example: cutting operator role in a metalworking shop
Company, people and figures are fictitious: the example only shows what a properly completed record looks like.
| Field | Content |
|---|---|
| Role | Band saw cutting operator · Talleres Arbizu (fictitious company) · 6 workers |
| Hazard 1 | Contact with the blade while feeding short pieces by hand |
| Rating | Medium likelihood · extremely harmful severity · substantial risk |
| Measure 1 | Mandatory push stick and adjustable guard (engineering control) · maintenance · 15 March 2026 |
| Hazard 2 | Noise of 87 dB(A) measured at the workstation |
| Measure 2 | Partial enclosure around the saw; until then, hearing protection is mandatory |
| Hazard 3 | Manual handling of bars weighing up to 22 kg |
| Measure 3 | Roller table for feeding · production · 30 April |
| Participation | Reviewed with the workers’ safety representative on 2 February 2026 |
| Next review | When the enclosure is installed or, at the latest, in February 2027 |
At the audit
Mistakes auditors commonly flag
- A generic assessment for the whole company, with no distinction between roles or tasks.
- The assessment is not reviewed after an accident in that very role.
- Almost every measure is PPE or training: no attempt has been made to eliminate or isolate the hazard.
- Psychosocial risks, or those of non-routine tasks such as cleaning or maintenance, are missing.
- Measures with no owner and no deadline, which turn the plan into a wish list.
In Kimobox
How this record is kept in Kimobox
- 1The risk assessment for each role is recorded with its method and periodic review, and linked to every worker who holds that role.
- 2Preventive measures are assigned with an owner and a date, and the system warns you if they slip.
- 3The hierarchy of controls for each risk is documented in the process map.
- 4When an accident in a role is investigated, the assessment that needs reviewing is right there in view.
Frequently asked questions
What people ask us before getting started
Is the prevention service’s risk assessment good enough for ISO 45001?
It is the starting point. The standard adds that hazard identification must be an ongoing process, that it must consider improvement opportunities and changes, and that workers must take part. If the assessment is only updated when the prevention service makes its annual visit, the auditor will flag it.
What is the hierarchy of controls?
The order of preference for measures set out in clause 8.1.2: eliminate the hazard, substitute it with something less hazardous, apply engineering controls and reorganise the work, use administrative controls and training, and only as a last resort turn to personal protective equipment.
How often should it be reviewed?
Neither the standard nor the law sets a single interval. It must be reviewed when equipment, substances or the organisation change, when harm occurs and when periodic checks show that the measures fall short. Many companies add an annual review as a matter of course.
Keep your ISO 45001 records without loose templates
We'll show you the module running with data similar to yours.
Keep exploring
Related pages
Occupational safety: PPE, medical fitness and PRL, per employee
Risk assessment by job, PPE with controlled replacement, medical fitness, safety training and accident…
Planning
Planning in ISO 45001 means identifying the hazards of each job, assessing the risk and deciding what to do…
ISO 45001 accident and incident investigation template
What an accident or incident investigation report should cover under ISO 45001 (10.2): facts, causes, worker…
ISO 45001 accident rate indicators record
How to measure health and safety performance under ISO 45001 (9.1.1): frequency and severity rates, leading…
Sources
Where each figure comes from
References to the official text in force. If a standard is revised, this page is updated and the review date says so.
- ISO 45001:2018 — Occupational health and safety management systems — Requirements with guidance for use ISO · 2018 ed., with Amd 1:2024
- Ley 31/1995 of 8 November on the prevention of occupational risks BOE-A-1995-24292 · Consolidated text
- Royal Decree 39/1997 of 17 January approving the Prevention Services Regulation BOE-A-1997-1853 · Consolidated text