3.1 Hazard, Hazardous Event & Risk

3.1 Hazard, Hazardous Event & Risk

Quick Answer: In Managing Safely, a hazard is anything with the potential to cause harm. A hazardous event is the event in which that potential becomes actual harm (or could). Risk is not a thing you can point to — it is the combination of likelihood and consequence (severity) of harm occurring. Master these three terms before you touch the 5×5 matrix.

IOSH does not publish module-by-module percentage weightings for the written assessment, but Assessing Risks earns marks twice: on the written paper and again through the workplace risk assessment project, which is built entirely on it. Almost every calculation, control decision, and review trigger later in the course rests on a clean separation of hazard, hazardous event, and risk. Confusing them is one of the most common exam and project mistakes.

Why definitions matter for managers

Managers do not need to be full-time safety professionals, but they do need a shared language with workers, contractors, and the organisation's competent persons. If one person says "the risk is the forklift" and another says "the risk is a score of 12," conversation collapses into muddle. Clear definitions let you:

• Spot what could go wrong before someone is hurt
• Describe scenarios in a way others can verify
• Score and prioritise work consistently
• Explain residual risk after controls are applied
• Defend decisions if something goes wrong and records are reviewed

UK health and safety law expects employers to manage risks so far as is reasonably practicable. You cannot manage what you cannot name. The HSE's risk guidance and the Managing Safely syllabus therefore start with the same building blocks.

Hazard — potential to cause harm

A hazard is anything with the potential to cause harm. "Anything" is deliberate: hazards can be physical objects, substances, energy sources, work activities, or environmental and organisational conditions.

Key teaching points:

1. A hazard is a source of potential, not an accident that has already happened. The wet floor is the hazard even if nobody has slipped yet.
2. Hazards can be obvious or hidden. A rotating blade is obvious; chronic exposure to a low-level solvent vapour may not be.
3. Harm is broader than cuts and broken bones. Harm includes ill health (dermatitis, hearing loss, stress-related illness), damage to property that endangers people, and sometimes environmental harm that feeds back into safety.

Exam trap — treating the hazard as the risk score

Learners sometimes write "the risk is electricity" on project forms. Electricity is a hazard. The risk is how likely electricity is to harm someone in this task and how severe that harm could be, after considering (or before applying) controls.

Hazardous event — when the potential becomes harm

A hazardous event is the event that causes the harm — the critical moment when the hazard interacts with a person (or process) so that injury, ill health, or other harm can occur.

Using the classic course example:

Other hazardous-event examples:

• Electricity (hazard) → worker contacts live conductor (hazardous event) → electric shock / burns (harm)
• Unsecured load on a pallet (hazard) → load falls during lift (hazardous event) → crush injury (harm)
• Solvent vapour (hazard) → worker inhales vapour over a shift without LEV (hazardous event / exposure pathway) → dizziness or longer-term ill health (harm)
• Working at height on a fragile roof (hazard) → person falls through the roof (hazardous event) → fatal or major injury (harm)

Why separate hazard from hazardous event?

• Controls often attack different parts of the chain. Cleaning up the oil removes the hazard. Non-slip flooring and good footwear reduce the chance of the hazardous event. First-aid arrangements reduce the consequence if harm still occurs.
• Investigation language becomes clearer: "What was the hazardous event?" forces you to name the failure mode, not only the object involved.
• Risk scoring always attaches to a scenario (hazard + how harm happens + who is exposed), not to a naked object.

Risk — likelihood combined with consequence

Risk is the combination of the likelihood that harm will occur and the severity (consequence) of that harm. Managing Safely treats risk as a measure used to prioritise action — not as a physical item in the workplace.

Two elements:

1. Likelihood — how probable is it that the hazardous event will happen (given current conditions and controls)?
2. Consequence (severity) — if it does happen, how bad is the harm likely to be (first-aid injury, days off work, major injury, fatality)?

Risk rises when either likelihood or consequence rises. A rare event with catastrophic outcome can outrank a frequent trivial annoyance. That is why later you multiply the two scores on a 5×5 matrix rather than ranking hazards by gut feel alone.

What risk is not

Worked chain (memorise this pattern)

1. Hazard: drum of cleaning solvent stored in a cramped store with no secondary containment.
2. Hazardous event: drum is knocked, spills, and a cleaner inhales vapour / slips in liquid.
3. Harm: respiratory irritation, chemical burn, or fracture from a fall.
4. Risk (before controls): fairly high likelihood in a busy store × moderate-to-major consequence → prioritised for action.
5. Controls: bunded storage, correct containers, spill kit, training, ventilation, restrict access.
6. Residual risk: lower likelihood after controls; consequence may still be moderate if a spill still occurs — judge whether residual is acceptable.

Risk assessment as a process

A risk assessment is a careful examination of what in your work could cause harm to people, so you can weigh whether you have taken enough precautions or need to do more. In plain terms it answers:

• What can harm people here?
• Who can be harmed and how?
• How bad and how likely is it?
• What are we already doing?
• What else should we do, who will do it, and by when?
• How will we know the assessment is still valid?

You will expand this into the five steps of risk assessment in the next section. Definitions first prevent you from filling forms with the wrong labels.

People who may be harmed (preview)

Even at definition stage, remember that harm is not limited to permanent employees. The same hazard may create different risk for:

• Young or inexperienced workers
• New and expectant mothers
• People with disabilities or health conditions
• Contractors and agency staff unfamiliar with site rules
• Visitors and members of the public
• Maintenance staff doing non-routine work

Different groups may experience different hazardous events or worse consequences from the same hazard — that is why "who might be harmed and how" is a full assessment step, not a footnote.

Manager checklist — use the right word

When you write or review a risk assessment, ask:

1. Have I named the hazard as a source of potential harm (thing/situation/activity)?
2. Have I described the hazardous event (how harm would actually happen)?
3. Have I stated who could be affected?
4. Have I expressed risk as likelihood and consequence (qualitatively now; numerically with the matrix next)?
5. Have I avoided calling the hazard "the risk"?

If you can answer yes to all five, you are ready for the five-step method and the 5×5 matrix without building on sand.

Linking definitions to later modules

• Controlling risks (ERICPD): controls act on hazards (eliminate/reduce), on exposure pathways (isolate/control), or on people (PPE/discipline) — all of which change likelihood or consequence and therefore risk.
• Incident investigation: investigators reconstruct the hazardous event and the conditions that made the hazard harmful.
• Measuring performance: active monitoring checks whether hazards are still controlled; reactive measures count failures of risk control.

Get the vocabulary right and every later topic becomes easier to learn and to apply on the project form.