It is not enough to identify hazards. Action must be taken to do something to fix (ie eliminate or control) the hazard before it has the chance to cause injury and illness. This is risk control.
The first priority of the employer is to try to eliminate the risk altogether. (Clause 11(1) of the Regulation). If this is not reasonably practical, the employer must take action to control the risk. (Clause 11(2).
An employer must also make sure that all measures taken to eliminate or control risks to health and safety are properly used and maintained. (Clause 11(3).
The Regulation (Clause 5) provides a specific meaning for "control of risks" when it is not possible for the employer to eliminate them. (This is sometimes referred to as the hierarchy of control).
The Regulation ranks control strategies from the most effective to the least effective strategy. The employer must take the following measures (Clause 5(1) in the order specified to minimise the risk to the lowest possible level. (Remember that the employer should only be using this list if they have not been able to eliminate the hazard):
- substitute the hazard with a hazard that poses a lower risk of harm eg less hazardous chemical or different equipment
- isolate the hazard from the person put at risk eg. machine guards, remote handling
- minimise the risk by engineering means eg. ventilation
- use administrative means to minimise the risk eg. safe work methods, training, job rotation
- use personal protective equipment (PPE) eg hard hat, respirator, gloves.
If one of these measures is not enough to minimise the risk to the lowest possible level a combination is required. (Clause 104(2)).