Ask a room full of safety professionals what hazard identification means, and most will say something about HIRARC forms and safety inspections. Ask the same room how many of their workplace incidents were caused by hazards that were never identified — that no checklist ever captured — and the answers get uncomfortable.
Hazard identification is the foundation of every safety management system. Get it right, and everything downstream — risk assessment, controls, permits, procedures — is built on solid ground. Get it wrong, and your entire safety system is performing against a hazard profile that does not match reality.
This guide covers what meaningful hazard identification actually looks like, the key methodologies used in Malaysian industry, and the most common failure modes that leave hazards undetected.
What Is Hazard Identification — And Why Most Organisations Do It Badly
A hazard is any source, situation, or act with a potential for harm — in terms of human injury, ill health, or a combination of these. Hazard identification is the process of finding, listing, and characterising hazards before they cause harm.
The problem most organisations have is not that they skip hazard identification — it is that they do it in a way that confirms what they already know rather than uncovering what they do not. A safety officer walking around with a standard checklist will find the hazards the checklist was designed to find. Hazards that fall outside the checklist — unusual tasks, temporary conditions, interactions between different teams or activities — remain invisible.
Meaningful hazard identification requires structured methodology, diverse participation, and a deliberate effort to challenge assumptions.
Core Hazard Identification Methods
1. HIRARC (Hazard Identification, Risk Assessment and Risk Control)
HIRARC is the most commonly used framework in Malaysian workplaces and is now mandated under Section 18B of OSHA 1994 (as amended in 2022). It involves systematically identifying hazards associated with each activity, assessing the likelihood and severity of potential harm, and determining appropriate controls. HIRARC works best when it is conducted for specific tasks and activities — not as a once-yearly generic exercise for the whole site.
2. Job Safety Analysis (JSA) / Job Hazard Analysis (JHA)
JSA breaks a specific job or task down into individual steps and identifies the hazards present at each step, along with the controls required. It is particularly valuable for non-routine tasks, permit-to-work situations, and new activities where the hazard profile is less well understood. JSA is a supervisor-level tool — it should be done with the people who will actually perform the task, not for them.
3. HAZOP (Hazard and Operability Study)
HAZOP is a structured, systematic technique primarily used in the process industries — oil and gas, chemical plants, refineries — to identify hazards and operability problems in process systems. A multidisciplinary team systematically examines each node of a process using guide words (no, more, less, as well as, part of, reverse, other than) to identify deviations from design intent and their potential consequences. HAZOP is resource-intensive but produces a thorough hazard register for complex process systems.
4. What-If Analysis
A simpler, more flexible method where a team asks “what if…?” questions about a process, task, or system. What if the valve fails open? What if two workers arrive at the same time? What if the power cuts out mid-task? What-if analysis is useful for reviewing procedures, assessing changes, and in situations where HAZOP’s formality is not warranted.
5. Workplace Inspections and Walkthroughs
Physical inspections remain an important hazard identification tool — but only when conducted with a questioning mindset rather than a tick-box approach. Effective inspections involve talking to workers, observing tasks in progress, and looking for conditions that differ from the standard rather than just verifying that certain items are in place.
The People Problem: Who Must Be in the Room
Hazard identification is fundamentally a knowledge-gathering exercise. The quality of your hazard register is directly proportional to the diversity of knowledge and experience in the room when you build it.
This means involving the workers who actually do the tasks. Not just supervisors describing what workers are supposed to do — but the workers themselves, who know where the actual difficulties are, what shortcuts feel necessary, what near-misses happen that never get reported, and what changes in the environment affect how the task is actually performed.
It also means involving people with different functional perspectives: operations, maintenance, engineering, safety, and where relevant, contractors. Hazards that are invisible from one perspective are often obvious from another.
The hazards most likely to cause serious incidents are often the ones that are “obvious” to the workers and invisible to management — because they have never been asked.
Common Failure Modes in Hazard Identification
- Using generic checklists for site-specific tasks. A standard checklist might identify general chemical hazards, but it will not capture the specific combination of confined space, hot work, and simultaneous lifting that exists in your maintenance shutdown.
- Treating HIRARC as a document exercise rather than a thinking exercise. HIRARC completed at a desk, without site observation or worker input, is a paperwork product — not a safety tool.
- Only identifying hazards for routine operations. Non-routine tasks — maintenance, shutdowns, emergency responses, commissioning, decommissioning — carry disproportionately high incident rates because their hazards are rarely identified in advance.
- Not reviewing hazard registers when things change. A HIRARC completed three years ago does not reflect a process change, a new piece of equipment, a different workforce, or a new contractor on site. Change triggers the need for review — always.
- Failing to close the loop. Hazard identification that does not lead to documented controls, assigned responsibilities, and verified implementation has no safety value. The register must drive action.
Practical Steps for Better Hazard Identification
- Conduct task-specific HIRARC for every routine and non-routine activity, not just site-wide generic assessments.
- Always include frontline workers in the HIRARC process — their knowledge is your most valuable hazard identification input.
- Use JSA for every permit-to-work activity and for any task that deviates from the standard procedure.
- Schedule formal hazard identification reviews whenever you introduce a new process, piece of equipment, substance, or working arrangement.
- Build hazard identification into your Management of Change process so that no change goes live without a review of its hazard profile.
- Train supervisors and team leaders to conduct JSA with their teams — do not centralise all hazard identification in the safety department.
Cikgu Barrier’s Take
I have reviewed HIRARC documents from organisations across Malaysian industry — construction, manufacturing, oil and gas, government facilities — and the single most common finding is the same every time: the hazard register contains the hazards that are easy to see and none of the hazards that are hard to see.
Hard-to-see hazards are not exotic. They are the interaction between two simultaneous activities. The task that is done differently at 3am than it is at 9am. The shortcut that everyone knows about and nobody has documented. These are the hazards that kill people, and they only surface when hazard identification is done as a genuine inquiry rather than a compliance exercise.
If your organisation wants to improve the quality of its hazard identification process — whether through HIRARC training, JSA implementation, or HAZOP facilitation — visit cikgubarrier.com or explore our training programs.