4.1 The Three Tiers of Construction Risk Assessment: Baseline, Issue-Based, and Continuous (CR 9)

Key Takeaways

  • Hazard Identification and Risk Assessment (HIRA) in South African construction is legally anchored in OHS Act Section 8(2)(b) and operationalized through Construction Regulation 9.
  • Construction Regulation 9(1) mandates that every contractor appoint a competent person in writing to perform a documented risk assessment prior to commencing any construction work.
  • The three distinct tiers of construction risk assessment are Baseline Risk Assessment (strategic/project profile), Issue-Based Risk Assessment (task/activity/change-specific), and Continuous Risk Assessment (daily front-line task execution, such as DSTIs).
  • Under Construction Regulation 5(1)(a)-(b), the Client must prepare a project-specific Baseline Risk Assessment and provide it to designers and principal contractors as the foundation for the Client Health and Safety Specification.
  • Construction Regulation 9(4) mandates immediate review of risk assessments when incidents occur, when work methods or designs change, or upon receipt of a directive from a Department of Employment and Labour inspector.
Last updated: September 2026

4.1 The Three Tiers of Construction Risk Assessment: Baseline, Issue-Based, and Continuous (CR 9)

[!NOTE] Core Statutory Mandate: Hazard Identification and Risk Assessment (HIRA) is the operational backbone of South African occupational health and safety law. Under Section 8(2)(b) of the Occupational Health and Safety Act 85 of 1993 (OHS Act), every employer has an affirmative statutory duty to establish what hazards are attached to any work, article, substance, plant, or machinery, and to determine the precautionary measures required. In the construction sector, this general duty is codified and expanded into mandatory administrative and operational procedures under Construction Regulation 9 (Risk Assessment) of the Construction Regulations 2014.


Statutory Framework of Construction Regulation 9

Construction Regulation 9 governs risk assessments across all phases of a construction project. Rather than treating risk assessment as a static, one-time paperwork exercise completed at tender submission, the regulation enforces a dynamic, ongoing process that spans inception, mobilization, active work, and close-out.

Mandatory Elements of Construction Regulation 9(1)

Construction Regulation 9(1) establishes that a contractor must, prior to the commencement of any construction work and during such construction work, cause risk assessments to be performed by a competent person appointed in writing. The risk assessment must form an integral part of the site Health and Safety Plan (CR 7(1)(a)) and must contain at least five mandatory statutory components:

+--------------------------------------------------------------------------------+
|                 Statutory Components of CR 9(1) Risk Assessment                |
+--------------------------------------------------------------------------------+
| 1. Hazard Identification [CR 9(1)(a)]                                          |
|    Comprehensive identification of all risks and hazards to which persons may  |
|    be exposed during the construction process.                                 |
+--------------------------------------------------------------------------------+
| 2. Analysis and Evaluation [CR 9(1)(b)]                                        |
|    Documented analysis and evaluation of identified risks based on an accepted |
|    methodology (qualitative or semi-quantitative scoring).                     |
+--------------------------------------------------------------------------------+
| 3. Mitigation and Safe Work Procedures [CR 9(1)(c)]                            |
|    Documented mitigation plan and applicable Safe Work Procedures (SWPs) to    |
|    mitigate, reduce, or control the risks and hazards identified.              |
+--------------------------------------------------------------------------------+
| 4. Monitoring Plan [CR 9(1)(d)]                                                |
|    Systematic monitoring protocol to verify that control measures are actively |
|    implemented, maintained, and functional on site.                            |
+--------------------------------------------------------------------------------+
| 5. Review Plan [CR 9(1)(e)]                                                    |
|    Documented schedule and trigger-based protocol for reviewing and updating   |
|    risk assessments throughout the project lifecycle.                          |
+--------------------------------------------------------------------------------+

Downstream Statutory Duties (CR 9(2) through 9(7))

The remaining sub-regulations establish an unbroken chain of accountability across all site participants:

  • CR 9(2) — Health and Safety Plan Integration: The risk assessment must inform the contractor's Health and Safety Plan submitted to the Client or Principal Contractor for approval under CR 5(1)(l) or CR 7(1)(a).
  • CR 9(3) — Worker Information, Instruction, and Training: Every contractor must ensure that all employees are thoroughly informed, instructed, and trained by a competent person regarding any hazard and the related work procedures before commencing work, and whenever changes are made.
  • CR 9(4) — Mandatory Review Triggers: A contractor must review the relevant risk assessment whenever:
    • An incident or accident occurs on site;
    • There is any change in design, specification, or construction methodology;
    • An inspection, audit, or directive from a Department of Employment and Labour (DEL) inspector or CHSO identifies deficiencies;
    • Periodic scheduled review intervals elapse.
  • CR 9(5) — Subcontractor Provision: A principal contractor must provide relevant risk assessments to appointed subcontractors, and subcontractors must reciprocally submit their risk assessments to the principal contractor prior to commencing work.
  • CR 9(6) — Prohibition of Unassessed Work: No contractor may permit any employee or subcontractor to perform work where hazards have not been identified, evaluated, and controlled under an approved risk assessment.
  • CR 9(7) — Ergonomic and Hygiene Factors: Risk assessments must incorporate occupational hygiene stress factors (noise, dust, vibration, thermal stress) and ergonomic considerations under the Ergonomics Regulations.

The Three Distinct Tiers of Construction Risk Assessment

In South African construction practice, risk assessments are categorized into three distinct operational tiers. Each tier operates at a different administrative altitude, serves a different purpose, involves different competencies, and occurs at a specific point in time:

==================================================================================
                       THE THREE-TIER HIRA ARCHITECTURE
==================================================================================
  TIER 1: BASELINE RISK ASSESSMENT (BRA)
  • Strategic, project-wide, pre-commencement
  • Client establishes site hazard profile (CR 5(1)(a))
  • Contractor establishes broad undertaking profile (CR 9(1))
  • Focus: Macro-environment, geology, infrastructure, seasonal climate
        │
        ▼
  TIER 2: ISSUE-BASED RISK ASSESSMENT (IBRA)
  • Tactical, activity-specific, system-specific deep dive
  • Triggered by: new plant, deep excavations, demolition, lifting, changes
  • Develops: Safe Work Procedures (SWPs) & Safe Work Method Statements (SWMS)
        │
        ▼
  TIER 3: CONTINUOUS RISK ASSESSMENT (DYNAMIC HIRA)
  • Operational, daily, workface task execution
  • Conducted by: Front-line supervisors (CR 8(7)), team leaders, artisans
  • Primary Tool: Daily Safe Task Instructions (DSTI), pre-start checklists
==================================================================================

Tier 1: Baseline Risk Assessment (BRA)

The Baseline Risk Assessment (BRA) provides an initial, comprehensive, high-level profile of the entire construction undertaking. It acts as the benchmark against which all subsequent site-specific safety planning is measured.

The Client's Baseline Risk Assessment (CR 5(1)(a))

The risk assessment cycle begins with the Client, not the contractor. Under Construction Regulation 5(1)(a), the Client must prepare a project-specific Baseline Risk Assessment for the intended construction project. This document identifies the inherent and contextual hazards associated with the site and scope of work.

Under CR 5(1)(b), the Client uses this baseline assessment to compile the Client Health and Safety Specification, which is included in the tender documentation provided to all prospective designers and principal contractors. Examples of macro-hazards identified in the Client Baseline include:

  • Geotechnical and Geological Conditions: Dolomitic land with sinkhole collapse potential, high groundwater table requiring extensive dewatering, expansive clays, or unstable rock formations.
  • Adjacent Infrastructure and Servitudes: Overhead high-voltage transmission lines crossing the site, buried high-pressure petrochemical or gas pipelines, underground municipal trunk sewers, fiber optic conduits, or adjacent railway corridors.
  • Environmental and Climatic Conditions: High lightning strike density zones, gale-force coastal wind corridors, seasonal flash-flooding, or desert-like ambient heat.
  • Biological Hazards: Endemic venomous snakes, swarming Africanized bees, indigenous tick-borne pathogens, or hazardous vegetation.
  • Surrounding Community Interfaces: Heavy pedestrian transit corridors, adjacent schools, informal settlements, public vehicular traffic congestion, or community protest risks.

The Contractor's Baseline Risk Assessment

Upon contract award and before establishing the site, the Principal Contractor compiles its own organizational Baseline Risk Assessment. This document merges the Client's baseline findings with the contractor's specific organizational systems, machinery fleets, and construction methods. The contractor's baseline sets strategic priorities, establishes baseline risk profiles, and identifies which future operational activities will require dedicated Issue-Based Risk Assessments.


Tier 2: Issue-Based Risk Assessment (IBRA)

The Issue-Based Risk Assessment (IBRA) is a detailed, task-specific, activity-specific, or system-specific risk assessment. While a baseline assessment establishes what broad categories of hazards exist across the project, an IBRA conducts a granular, step-by-step technical analysis of how a specific high-risk task will be safely executed.

Statutory and Operational Triggers for an IBRA

An IBRA is not compiled once and forgotten. It must be triggered whenever significant operational changes occur or high-risk activities are mobilized:

  1. Mobilization of New Plant and Machinery: Arrival of specialized equipment, such as tower cranes, mobile batch plants, horizontal directional drilling rigs, piling rigs, or concrete boom pumps.
  2. High-Risk Construction Operations: Execution of high-risk activities, including deep trenching (>1.5m), structural demolition (CR 14), temporary works and formwork erection/stripping (CR 12), suspended platforms (CR 17), confined space entry (GSR 5), or pre-stressed concrete tendon stressing.
  3. Methodology and Sequence Changes: Departures from the original construction plan, such as shifting from precast elements to in-situ concrete casting, or accelerating night shifts to meet schedule deadlines.
  4. Design Alterations: Structural engineering changes issued via site instructions that alter load distributions, access routes, or structural stability.
  5. Incident Findings and Near-Misses: Formal investigations under OHS Act Section 24 or General Administrative Regulation 9 revealing previously unrecognized hazards or failed control measures.
  6. Environmental and Seasonal Shifts: Torrential rains compromising slope stability, requiring a reassessment of excavation sidewall integrity.

Operational Output of an IBRA

The primary deliverable of an IBRA is the development of robust, task-specific Safe Work Procedures (SWPs) and Safe Work Method Statements (SWMS). Every high-risk step identified in the IBRA generates corresponding mandatory engineering and administrative controls that site supervision must enforce.


Tier 3: Continuous Risk Assessment (Dynamic / Daily HIRA)

The Continuous Risk Assessment (also known as dynamic risk assessment) is the final operational tier, executed at the coalface by front-line personnel. Even the most rigorous Baseline and Issue-Based assessments cannot anticipate micro-level variations: a sudden shift in wind direction, a cracked hydraulic hose, a missing scaffold toe-board, or worker fatigue.

Operational Mechanisms of Continuous HIRA

Continuous risk assessment is conducted every working day before work commences and throughout the operational shift. It relies on four primary mechanisms:

  1. Daily Safe Task Instruction (DSTI) / Pre-Task Risk Assessment (PTRA):
    • Conducted every morning at the immediate workface by the appointed Construction Supervisor (CR 8(7)), team leader, or chargehand.
    • Breaks the day's upcoming work into specific steps, highlights immediate environmental and mechanical hazards, reviews required control measures, and verifies PPE.
    • Workers actively participate in identifying localized hazards (e.g., wet mud on steel beams, overhead crane swings).
    • Every crew member signs the DSTI attendance register, confirming understanding and commitment to the safe work method.
  2. Pre-Use Equipment Checklists:
    • Mandatory physical inspections completed before operating plant or portable tools (e.g., daily mobile crane pre-start checks, portable electric tool inspections, scaffold tagging checks, excavation inspection registers).
  3. Housekeeping and Visual Observations:
    • Continuous visual scanning for tripping hazards, blocked emergency egress routes, damaged electrical cords, or inadequate trench shoring.
  4. Empowerment to Stop Unsafe Work:
    • Continuous risk assessment operationalizes Section 14 of the OHS Act. Every employee is legally mandated to report any unsafe condition to their supervisor and has the statutory right and ethical duty to refuse to work under conditions of imminent danger.

Comparison Matrix: Baseline vs. Issue-Based vs. Continuous HIRA

Assessment DimensionTier 1: Baseline Risk Assessment (BRA)Tier 2: Issue-Based Risk Assessment (IBRA)Tier 3: Continuous Risk Assessment (Dynamic)
Primary ScopeProject-wide, macro-environmental, strategicActivity, task, system, or machine-specificDaily, task-step, workface, dynamic environment
Operational TimingProject inception, tender stage, pre-establishmentPrior to mobilizing high-risk tasks or new plantEvery working day/shift; pre-task and continuous
Governing RegulationCR 5(1)(a) (Client) & CR 9(1) (Contractor)CR 9(1), CR 9(4), CR 12, 13, 14, 16, 17CR 8(7), CR 9(3), Section 14 OHS Act
Responsible AuthorClient Pr.CHSA / Contractor Pr.CHSM / CHSOCompetent Risk Assessor (CR 9(1)) + SpecialistsCR 8(7) Construction Supervisor, Team Leaders, Artisans
Key TriggersProject concept, land acquisition, site handoverHigh-risk work, new plant, incidents, design changesStart of daily shift, weather changes, task variation
Level of GranularityBroad hazard profiling across entire contractStep-by-step technical analysis of specific activitiesReal-time micro-hazards at the physical work location
Primary OutputClient H&S Spec, Contractor H&S Plan foundationSafe Work Procedures (SWPs), Method StatementsCompleted & signed DSTIs, pre-use inspection registers
Practical Site ExampleIdentifying high-voltage overhead cables across siteRigging study & crane lift plan for transformer placementMorning check on crane outrigger pads & wind anemometer

Legal Competency and Statutory Documentation

Defining Competency under Construction Regulation 1

Under CR 9(1), risk assessments must be performed by a competent person appointed in writing. Construction Regulation 1 defines a competent person as someone who has:

  1. The necessary knowledge, training, and experience specific to the work or task being performed; and
  2. Where applicable, the qualifications specific to the statutory discipline.

[!IMPORTANT] The Competency Distinction: CHSO vs. Risk Assessor: An appointed Construction Health and Safety Officer (CR 8(5)) facilitates, reviews, and audits the risk assessment process. However, for specialized technical operations (such as temporary works under CR 12, deep excavations under CR 13, or scaffolding under CR 16), the risk assessment team must include technical practitioners (e.g., temporary works designers, structural engineers, or rigging masters) possessing direct technical competency in the task.

The Monitoring Plan and Review Plan (CR 9(1)(d)-(e))

A risk assessment lacking an active monitoring and review plan is legally invalid.

  • The Monitoring Plan (CR 9(1)(d)): Must specify who inspects control measures, what checklist or register is used, and how frequently monitoring occurs (e.g., daily excavation inspections, weekly scaffold inspections, monthly electrical audits).
  • The Review Plan (CR 9(1)(e)): Must establish predetermined audit intervals (typically monthly or quarterly) and formal mechanisms to capture lessons learned from incident investigations under Section 24 and GAR 9.

Realistic Site Scenarios & Exam Traps

[!CAUTION] Exam Trap 1: Confusing the Client's Baseline with the Contractor's Risk Assessment Examination questions frequently ask: "Can a principal contractor adopt the Client's Baseline Risk Assessment as its site risk assessment under Construction Regulation 9(1)?" The answer is strictly NO. The Client's Baseline Risk Assessment (CR 5(1)(a)) is an initial scoping profile used solely to compile the Client Health and Safety Specification. The contractor must perform its own documented risk assessments (Baseline, IBRA, and Continuous) under CR 9(1) tailored to its specific plant, workforce, and execution methods.

[!CAUTION] Exam Trap 2: The "Baseline Sufficiency" Fallacy Candidates are often presented with a scenario where a contractor claims that because deep excavations were listed as a risk in the tender Baseline Risk Assessment, no further risk assessment is required prior to trenching. Under South African law, this constitutes a criminal offense. High-risk activities require a dedicated Issue-Based Risk Assessment (IBRA) to establish specific Safe Work Procedures and shoring designs before excavation commences.

[!CAUTION] Exam Trap 3: The DSTI as a Mere Signature Exercise Examiners often test whether a Daily Safe Task Instruction (DSTI) can be pre-signed in bulk by workers on Monday morning for the entire week. A DSTI is an instrument of Continuous Risk Assessment that must evaluate dynamic, real-time physical conditions at the start of each individual shift. Pre-signing or completing DSTIs remotely invalidates the legal compliance of both the supervisor (CR 8(7)) and the contractor.

Loading diagram...
The Three-Tier HIRA Hierarchy and Statutory Review Cycle under Construction Regulation 9
Test Your Knowledge

Under Construction Regulation 9(1) of the Construction Regulations 2014, what is the statutory duty imposed on a contractor prior to the commencement of any construction work on site?

A
B
C
D
Test Your Knowledge

A principal contractor is preparing to erect a 45-meter tower crane and mobilize a crawler piling rig on a newly established commercial construction site. In terms of South African construction safety practice, what tier of risk assessment must be initiated specifically for these activities, and what triggers its compilation?

A
B
C
D
Test Your Knowledge

During morning site preparations, a bricklaying team leader gathers the artisans and laborers to inspect scaffold platforms, identify immediate tripping hazards, review wind speed constraints, and record worker signatures before laying blocks on the fourth floor. Which tier of risk assessment is being executed, and what is its primary operational instrument?

A
B
C
D