Risk Management, Data Gathering, Recordkeeping, and Document Control

Risk Management, Data Gathering, Recordkeeping, and Document Control

Basic Risk Management

Risk management is the disciplined process of identifying hazards, estimating risk, selecting controls, and confirming risk is reduced to an acceptable level. Construction risk is judged by severity, likelihood, exposure frequency, number of people affected, uncertainty, and available controls. A risk matrix (for example, plotting severity 1-5 against likelihood 1-5) helps prioritize, but it never replaces judgment: a low-frequency event such as a trench cave-in (which can bury a worker in seconds, where a cubic yard of soil weighs roughly 2,700-3,000 lb) or a crane collapse still demands immediate strong controls because the severity is catastrophic.

The hierarchy of controls is central. From most to least effective: elimination, substitution, engineering controls, administrative controls, and PPE. Prefabricating at ground level can eliminate elevated work; guardrails (a passive engineering control) are more reliable than personal fall arrest that depends on the worker; wet cutting and on-tool dust capture beat respirators alone for silica. Always evaluate residual risk after controls are applied.

Gathering Useful Data

Data gathering answers practical questions: What hazards exist? Who is exposed? Are controls implemented and effective? Where do problems recur?

Good data is specific and timely. Housekeeping poor is less useful than debris blocking east stair landing, Sub X, corrected 1400, verified by foreman. Photos, measurements, dates, locations, crew names, equipment IDs, and weather all add value.

Recordkeeping

Recordkeeping requirements vary by standard. The cornerstone is 29 CFR 1904: covered employers keep the OSHA 300 Log of recordable injuries and illnesses, a 301 incident report within 7 calendar days, and post the 300A annual summary from February 1 to April 30; records are retained 5 years. A case is recordable if it is work-related and results in death, days away, restricted work or transfer, medical treatment beyond first aid, loss of consciousness, or a significant diagnosis. Severe-injury reporting under 1904.39 is separate: report a fatality within 8 hours and an in-patient hospitalization, amputation, or loss of an eye within 24 hours. Other records include competent-person inspections, crane annual inspections, scaffold tags, respirator fit tests, exposure assessments, and medical surveillance (retained with restricted access). A completed form is not proof a hazard was corrected unless the field supports it; the CHST checks consistency between records and observations.

Document Control

Document control ensures current information is available and obsolete information is removed or clearly marked. Site plans, procedures, emergency contacts, SDSs (safety data sheets), lift plans, traffic-control plans, fall-protection plans, and permits change during a project. A worker using an old drawing, old rescue plan, or superseded SDS may make an unsafe decision. The process should identify the document owner, version, effective date, approval, distribution method, and revision history. Field copies are updated after changes and affected workers are briefed; digital systems must still function where crews lack connectivity or where language access is limited.

Using Information

The CHST turns data into action. If inspection data shows repeated missing rebar caps, the response may include procuring approved caps, subcontractor accountability, layout changes, and daily verification. If incident data shows hand injuries during material handling, the response may include engineered lifting aids, cut-resistant gloves, task redesign, and supervisor observation. Data without a control change is wasted effort.

First Aid vs Medical Treatment

A frequent recordkeeping error is misclassifying first aid as medical treatment. OSHA 1904.7 lists first aid as a closed set: non-prescription medication at non-prescription strength, tetanus immunizations, cleaning/flushing wounds on the surface, wound coverings such as bandages, hot/cold therapy, non-rigid supports, temporary immobilization for transport, drilling a nail to relieve pressure, eye patches, removing splinters by simple means, finger guards, massage, and fluids for heat stress. Anything beyond this list is medical treatment and the case becomes recordable if work-related. Getting this distinction right keeps the 300 Log and TRIR accurate.

Quantifying Risk

A semi-quantitative method multiplies a severity rating by a likelihood rating (and sometimes a frequency/exposure factor) to produce a risk score that drives prioritization.

Scores guide where to invest controls but never override the judgment that a catastrophic outcome (cave-in, fall, electrocution) warrants strong controls even when it is rare.

Retention and Access Rules

Retention periods differ by record type and trip up the unprepared. OSHA 300/301/300A are kept 5 years. Employee exposure records and medical records under 1910.1020 are generally kept for the duration of employment plus 30 years, with access protected for confidentiality. Training records, equipment inspections, and permits follow program or contract requirements. The CHST should know that personal medical information is restricted, that exposure data must be available to affected employees, and that document control prevents a superseded SDS or rescue plan from guiding field decisions. Consistency between the record and the field is the test of whether documentation reflects real control.