The employer must undertake risk management for all foreseeable hazards in their workplace that may arise from work activities and that have the potential to harm employees and any other person at that workplace.

In particular the employer must take reasonable care to identify hazards arising from (but not limited to):

• work premises
• work practices, systems and shift working arrangements (including hazardous processes, psychological and fatigue related hazards)
• plant (including the transport, installation, erection, commissioning, use, repair, maintenance, dismantling, storage or disposal of plant)
• hazardous substances (including the production, handling, use, storage, transport or disposal of hazardous substances)
• presence of asbestos
• manual handling (including potential for occupational overuse injuries)
• layout and condition of the workplace (eg lighting and workstation design)
• physical working environment (including the potential for any one or more of:
  • electrocution; drowning; fire or explosion; people slipping, tripping or falling; contact with moving objects; exposure to noise, heat, cold, vibration, radiation, static electricity or a contaminated atmosphere)
• potential for workplace violence and
• biological hazards.

(Clause 200 (2) of OHS Regulation 2001).

Others must also undertake risk management in relation to hazards and risks that arise out of their activities, for example, designers, manufacturers, suppliers, and controllers of premises all have obligations - see Chapters 4 and 5 of OHS Regulation 2001.