HIRARC Review Malaysia — Why Annual Reviews Create Risk and What to Do Instead
Your HIRARC is reviewed once a year. The conditions it was written for change every day. In Malaysia’s HSE practice, this gap between documentation cycle and operational reality is one of the most consistent contributors to incidents that were preventable with information that was already available — if anyone had connected it to the risk assessment.
An annual HIRARC review is a compliance milestone. It is not a risk management strategy. Understanding the difference — and knowing the four change triggers that should drive a HIRARC review regardless of the calendar — is one of the most practical improvements a safety manager in Malaysia can make.
Why HIRARC Documents Become Outdated Between Annual Reviews
A HIRARC is a point-in-time document. It captures the hazards, risks, and controls associated with a specific activity or workplace based on the conditions, people, equipment, and procedures present when it was written and reviewed. The moment any of those elements change — and in a functioning workplace, they change constantly — the HIRARC’s accuracy begins to degrade.
The annual review cycle exists because conducting a full HIRARC review is time-consuming and resource-intensive. It is a practical concession to organisational reality. The problem is that it creates a structural blind spot: anything that changes between reviews is a gap that the HIRARC does not address, and that gap can persist for up to eleven months before the next scheduled review catches it.
For high-hazard operations, eleven months of unreviewed change is a significant risk exposure. For lower-hazard operations, it can still produce incidents — particularly when multiple small changes accumulate over time, each individually manageable, but collectively representing a substantially different risk picture from the one the HIRARC describes.
The 4 Change Triggers for HIRARC Review Malaysia
A change-triggered HIRARC review is not a full annual review repeated every time something changes. It is a targeted review of the specific hazard scenarios affected by the change — conducted before the change takes effect or as soon as a change is identified. The four categories of change that should trigger this review are:
Trigger 1: People Changes
Personnel changes are the most frequently overlooked HIRARC review trigger in Malaysia. When an experienced worker transfers, retires, or is reassigned, the competency profile for their role changes. If that role carries responsibility for a safety-critical task — isolation, operation of high-energy equipment, emergency response — the HIRARC’s assumption about the competency level of the person performing that task may no longer hold.
Similarly, when new contractors are engaged for tasks previously done by trained internal staff, when shift composition changes, or when a supervisor responsible for oversight of a specific hazard scenario is replaced, the human elements of the barrier system change. The HIRARC should reflect those changes — specifically, whether the controls that relied on competency, experience, or the specific individual’s knowledge are still valid.
Trigger 2: Equipment Changes
Equipment modifications, replacements, and additions all have the potential to change the hazard profile of a workplace. A pump replaced with a higher-flow model increases the energy levels associated with its operation. A new piece of machinery introduces a hazard source that was not present when the HIRARC was written. A modification to an existing system changes the access points, energy states, or isolation requirements associated with maintenance tasks.
For many of these changes, a Management of Change (MOC) process should already require a review of the relevant safety documentation. In practice, the connection between MOC and HIRARC review is not always made explicitly. The equipment change is approved and implemented; the HIRARC is not flagged for review until the next annual cycle, by which time the new equipment is already in operation under controls that were designed for its predecessor.
Trigger 3: Procedure Changes
When a work procedure is updated, revised, or replaced, any HIRARC that references that procedure as a control measure is potentially affected. If the procedure change modifies how a hazardous task is performed — the sequence of steps, the required equipment, the personnel involved — the HIRARC’s description of the controls and their effectiveness may no longer be accurate.
This is a common gap in Malaysian HSE practice. Procedure changes go through an approval process. HIRARC reviews are scheduled annually. The two systems do not automatically communicate. As a result, the HIRARC may reference a procedure version that no longer exists, or may describe controls based on a task sequence that has since changed. For more on how HIRARC and Bowtie analysis connect to document control, see our guide on the most common HIRARC hazard identification mistakes.
Trigger 4: Operating Condition Changes
Changes in operating conditions — production rates, shift patterns, environmental conditions, maintenance schedules, or the introduction of new processes adjacent to existing ones — can change the risk profile of a workplace even when no formal change has been made to equipment or procedures.
Increased production pressure changes the time available for safe task completion. Extended operating hours introduce fatigue factors not present during the standard working day. Contractor mobilisation introduces new workers and new interactions that the HIRARC did not account for. Seasonal variation in temperature, humidity, or daylight hours affects conditions relevant to outdoor and semi-enclosed workplaces.
These changes are often gradual and individually minor. Their cumulative effect can be substantial. A HIRARC written for standard operating conditions may significantly underestimate risk when those conditions have shifted — even without any single change that would obviously trigger a formal review.
How to Implement Change-Triggered HIRARC Reviews in Practice
The practical challenge of change-triggered HIRARC review is building the trigger into existing change management processes so that it happens reliably — not just in theory. This requires three things:
A defined list of change categories that trigger HIRARC review. Using the four categories above as a starting point, your organisation should define specifically what counts as a trigger in your operational context. Vague guidance (“review HIRARC when significant changes occur”) produces inconsistent results. Specific guidance (“any change to personnel in Roles A, B, and C requires a review of HIRARC documents associated with Tasks 1–5”) produces reliable ones.
A connection between the change approval process and the HIRARC review process. Whether through a Management of Change system, a procedure change approval form, or a personnel transfer checklist, the mechanism for triggering a HIRARC review should be built into the process that approves the change — not left to individual initiative.
A targeted review process that is faster than the annual full review. Change-triggered reviews cover only the hazard scenarios affected by the specific change. They should be designed to be completed within a practical timeframe — not a six-week process that becomes a barrier to change implementation. Speed requires a clear scope: which HIRARC, which hazard scenarios, which controls are affected by this specific change.
DOSH Malaysia expects risk assessments to reflect current conditions. An incident investigation that reveals an outdated HIRARC — one that did not capture a known change in equipment, procedure, or personnel — raises significant questions about the adequacy of the organisation’s risk management system, regardless of when the last annual review was completed.
Frequently Asked Questions
How often should a HIRARC be reviewed in Malaysia according to DOSH requirements?
DOSH Malaysia requires HIRARC documents to be reviewed periodically and whenever significant changes occur. The annual review cycle is a common practice standard but is not the only requirement — changes in hazards, processes, or personnel that affect the risk assessment should trigger a review regardless of the scheduled review date. The principle is that the HIRARC must reflect current conditions at all times, not just at the point of its last formal review.
What is the difference between an annual HIRARC review and a change-triggered HIRARC review?
An annual HIRARC review is a comprehensive reassessment of all hazard scenarios in the document on a fixed schedule. A change-triggered review is a targeted reassessment of the specific hazard scenarios affected by a defined operational change — personnel, equipment, procedure, or operating conditions. Change-triggered reviews are not a replacement for annual reviews; they are a supplement that closes the gap between annual review cycles and ensures the HIRARC reflects reality when it matters most.
Keep Your HIRARC Accurate — Not Just Compliant
A HIRARC that passes its annual review but does not reflect the current state of your workplace is a compliance document, not a risk management tool. The four change triggers above are the minimum conditions under which your risk assessment should be examined, updated, and verified — not because a date on a calendar demands it, but because the conditions that determine your actual risk have changed.
Cikgu Barrier’s Risk Assessment That Works program trains your team to build HIRARCs that are practical, accurate, and maintainable — with clear ownership, defined review triggers, and controls that reflect how work is actually done. Contact us to discuss how to upgrade your risk assessment practice.