A formal hazard assessment is the foundation of every credible safety program. Here is the nine-step method COR and SECOR auditors want to see, and the common mistakes that trigger non-conformance.
A formal hazard assessment is the foundation of every credible safety program. It does not just check a box. It shapes training plans, inspection checklists, and the way teams talk about risk. Yet many companies approach it too casually, skipping steps or copying outdated tasks into their forms. The result is confusing documents, inconsistent terminology, and gaps an auditor can spot instantly.
In Canada, every employer is required under provincial or federal occupational health and safety law to assess their worksite for hazards. But a good formal hazard assessment is not just a list of risks. It identifies specific tasks, clearly names the hazards including health-related and psychological ones, applies a consistent risk rating system, and lists real, operational controls. It is not unusual to see assessments that lack engineering controls entirely, or that mix several jobs into one worksheet - both common errors that can trigger non-conformance during a COR audit.
The nine-step method
The method below is drawn from COR and SECOR-approved approaches and reflects what auditors want to see in Alberta, BC, Saskatchewan, Ontario, and federally. Use it to build a real, working hazard assessment, not a form for the shelf.
1. Start with a job inventory
Before identifying hazards, you need to know what jobs actually exist in your organization. List every distinct position and role on a job inventory sheet. Avoid vague entries like field worker or shop staff. Split out roles such as field technician, delivery driver, and equipment operator separately, because their tasks, hazards, and controls all differ. This makes sure you do not miss key work functions during the assessment.
2. Break each role down into tasks
Every job is made up of multiple tasks, and you must list them clearly. Watch the work being performed, or walk through it with the workers who do it. Ask what they do first when a shift starts, what they lift, use, drive, carry, or install, and where they travel or work most.
Do not write performs duties or completes work. Be specific: lifts and stacks 80 lb concrete forms, climbs to access a rooftop unit, or mixes solvent-based coating.
3. Identify the hazards for each task
For every task you have listed, name all of the potential hazards. They may be health, safety, physical, chemical, biological, or psychological hazards.
Use plain terms. Instead of manual material handling, write lifting 80 lb buckets from the ground to a tailgate. That way frontline workers and auditors alike can understand and evaluate the hazard.
4. Assess and rank the risk
Use a consistent risk rating matrix - typically a grid combining severity (how bad the outcome would be) and likelihood (how likely it is to happen). Assign each hazard a numerical risk level based on that matrix. Do not guess. Use real context from the job site: how often is the task performed, and what is the history of near misses or incidents?
Justify the rating. Auditors often ask why a task was marked low when previous reports or inspections suggest otherwise.
5. Assign engineering, administrative, and PPE controls
Controls must follow the hierarchy. Engineering controls come first - machine guards, ventilation systems. Administrative controls come next - safe work procedures, training. PPE is last - gloves, respirators, face shields.
For each hazard, list at least one control, and be precise. Instead of PPE required, write use a CSA-rated face shield and nitrile gloves during mixing. That shows intention and clarity, both in the field and in an audit.
6. Implement the controls
Assign someone to implement each control - do not just list it. Attach the names, roles, or departments responsible for making the change, and set deadlines. For example: Operations Manager to install loading dock guardrails by November 15. Implementation is part of hazard control, not an afterthought.
7. Communicate the hazards
Your hazard assessment is useless if workers have not seen it. Use toolbox talks, orientation sessions, or tailgate reviews to explain the identified hazards and how each one is controlled. Have employees sign off that they received the information. That becomes part of your audit trail.
8. Monitor the controls
Once controls are in place, verify they are working. Spot-check whether workers are wearing the correct PPE, review whether an engineering fix is actually preventing the hazard, and ask crews during inspections whether the control is understood and used. Make monitoring part of your monthly inspection process.
9. Review and revise
Hazard assessments are living documents. Review them at least annually, when a task changes, after an incident or near miss, and when new equipment or chemicals are introduced. Record the review date, the name of the reviewer, and what changed. That small detail matters in an audit - it shows active management of risk rather than a static paper trail.
Who owns what
- Workers must understand the controls for their tasks and know how to access the current hazard assessments. A frequent issue is that they have never seen them.
- Supervisors help develop the assessments and train staff on the identified hazards. A common failure is forms completed with no field input.
- Safety professionals lead the process, maintain consistency, and make sure every task is captured.
- Management makes sure assessments are resourced and regularly reviewed. The leadership red flag is relying on static hazard lists that do not reflect worksite changes.
Recent provincial updates
- Alberta: as of March 2025, formal hazard assessments must document psychological hazards such as harassment and fatigue where they apply.
- British Columbia: hazard assessments must be documented and task-specific for each worksite.
- Saskatchewan: no material change in the last year - continue to review annually per legislation.
- Ontario: updated guidance emphasizes documenting worker participation in hazard identification.
A quick roadmap
- This week: review your job inventory and update any outdated hazard forms.
- This month: walk through one full role with your team and re-rate the tasks.
- This quarter: train supervisors on hazard assessment and update your audit binder.
On-Track Safety builds formal hazard assessments to the COR and SECOR standard, and our hazard assessment training helps your team write their own. Use code ONTRACK10 for 10 percent off training.

