What is risk, and how is it different from a hazard?
A hazard can cause harm. Risk is the possibility and severity of harm when people are exposed.
Technical review: Robert O'Neill, Work Safety Hub | Last reviewed: 17 November 2025
What is the difference between a hazard and a risk?
A hazard is a thing or situation that could harm a person. Risk is the possibility that harm might occur when someone is exposed to the hazard, together with how serious that harm could be.
In short: the hazard is the source of potential harm; the risk depends on exposure, possible consequences and the controls in place.
| Example | Hazard | Risk |
|---|---|---|
| Wet floor | A slippery walking surface | The possibility that someone slips and is injured, considering who may be exposed and what controls are in place |
| Hazardous chemical | A substance capable of causing harm | The possibility and severity of harm during storage, transfer, use or a loss of containment |
| Work at height | A fall hazard | The possibility and severity of a fall, considering access, work method, conditions and fall-prevention controls |
| High job demands | A psychosocial hazard | The possibility of psychological or physical harm, considering duration, frequency, support and work design |
What is a hazard?
Safe Work Australia describes hazards as things and situations that could harm a person. A hazard may arise from plant, substances, the physical environment, the way work is designed or performed, or workplace interactions and behaviours.
Common categories include:
- physical hazards, such as unguarded machinery, noise or a slippery surface;
- chemical hazards, such as solvents, fumes or hazardous dust;
- biological hazards, such as viruses, bacteria or mould;
- ergonomic hazards, such as forceful, repetitive or awkward work; and
- psychosocial hazards, such as poor support, bullying, low role clarity or sustained high job demands.
The important question is not only What is the hazard? It is also Who could be exposed, in what circumstances, and what could happen?
What is risk?
In Australian WHS guidance, risk is the possibility that harm might occur when a person is exposed to a hazard. Assessing risk involves considering the possible consequences, how likely they are in the circumstances and whether existing controls are effective.
ISO 31000 uses a broader enterprise-risk definition: the effect of uncertainty on objectives. That definition can support organisation-wide risk management. For a workplace hazard, however, the practical WHS task is to understand exposure, possible harm and the controls needed to eliminate or minimise the risk.
Risk is contextual. The same hazardous chemical may present different risks when it is sealed in suitable storage, transferred through a closed system or leaking where workers may be exposed. The hazard has not disappeared; the exposure conditions and control effectiveness have changed.
Hazard versus risk at a glance
| Question | Hazard | Risk |
|---|---|---|
| What does it describe? | A source or situation with the potential to cause harm | The possibility and seriousness of harm in the circumstances |
| What changes the answer? | The thing, activity, environment or work-design feature being considered | Exposure, task conditions, people affected, possible consequences and control effectiveness |
| What is the management focus? | Identify and, where reasonably practicable, eliminate the hazard | Eliminate or minimise the associated risk and verify that controls remain effective |
| Simple example | An exposed live electrical conductor | The possibility of electric shock, burns or death given access, isolation and other controls |
How are hazards and risks managed in practice?
A practical WHS risk-management process is iterative:
- Identify hazards. Consult workers and examine the work, environment, equipment, substances, records and foreseeable changes.
- Assess risks where an assessment will help. Consider who may be exposed, what harm could occur, how serious it could be, how it could happen and whether current controls are reliable.
- Control risks. Eliminate the risk so far as is reasonably practicable. If elimination is not reasonably practicable, minimise the risk using the hierarchy of control measures.
- Review controls. Check whether controls are implemented, used and effective, and review them when conditions change or evidence shows they may not be working.
Not every hazard needs a complex risk matrix. The depth of assessment should match the uncertainty, potential harm and decision required. For critical risks, leaders also need assurance that the controls relied upon are present and effective in real work, not only documented.
Read next:
- How do you conduct an effective risk assessment?
- What is the hierarchy of controls, and how should it be applied?
- What does so far as is reasonably practicable mean?
When a definition is not enough
If your risk register uses broad labels, treats every hazard as equally important or does not show whether critical controls work in practice, the next step is a focused review of the work and the decisions the register needs to support.
Work Safety Hub can help Australian organisations clarify credible risk scenarios, examine control effectiveness and prioritise practical improvements. The organisation retains its WHS duties and operational decisions; our role is to provide bounded, evidence-based consulting support.
Discuss your risk-management priority
Secondary link: Explore Work Safety Hub risk-management consulting
Sources and important context
- Safe Work Australia glossary
- Safe Work Australia — Identify, assess and control hazards
- Model Code of Practice: How to manage work health and safety risks
- Australian Institute of Health & Safety — OHS Body of Knowledge
- ISO 31000:2018 — Risk management guidelines
This page provides general information, not legal advice. Work health and safety laws and approved codes vary by jurisdiction. Check the requirements that apply to your organisation and work.
Frequently asked questions
Is a hazard the same as a risk?
No. A hazard is a thing or situation that could cause harm. Risk is the possibility and seriousness of harm when someone is exposed to that hazard in particular circumstances.
Can a high hazard have a lower risk?
Yes. Effective controls can reduce exposure or the likelihood and consequences of harm. The hazard may still exist, so the controls need to remain suitable, implemented and effective.
Do all hazards require a formal risk assessment?
No. A formal assessment is most useful when the risk or suitable controls are uncertain, the work is complex or changing, or several hazards interact. Obvious risks should be controlled promptly rather than delayed for unnecessary scoring.
What is the difference between a hazard register and a risk register?
A hazard register records sources or situations that could cause harm. A risk register should go further by describing relevant scenarios, affected people, possible consequences, existing controls, risk decisions, actions and review responsibilities. The format should support decisions and reflect how work is actually performed.