Risk assessment is a legal requirement for all companies, aimed at identifying, analyzing, and reducing hazards.

The Risk module facilitates the workplace risk assessment process through a series of steps.

First, the organizational and operational structure for the assessment must be defined.

This process involves a careful analysis of the company's areas, departments, lines, and workstations, also taking into account the internal organization in terms of tasks and responsibilities assigned to the various company functions.

Then, the hazards must be identified. A hazard is any situation that can in any way generate or influence the level of identifiable risk within the company's activities.

Hazard identification is achieved by associating one or more hazards with each homogeneous group and work activity.

The module allows for two alternative methods, which must be configured in the preliminary phase:

1. Analysis of the activities performed by each homogeneous group, the characteristics of the workstations where they operate, and the nature of the hazards (chemical, physical, and biological agents used, work shifts, and interaction with other activities performed in the same area).
2. Analysis of the scenarios that the various roles may encounter in their daily activities and assessment of the hazards that may arise during the activity.

First, hazards must be identified. Hazards may be related to substances (chemical risk), high energies (temperature, pressure), or specific work conditions. Negative consequences may be caused by deviations from expected situations in the process (equipment failure), procedures (procedure failure), or human behavior (human error) or natural events (earthquake, flood, lightning, etc.).

For each source of hazard, it must be determined which Activity or Scenario could be potentially affected.

The next assessment phase involves determining:

1. frequency of the Task/Activity/Operation
2. duration of the Task/Activity/Operation
3. existing prevention measures:
4. organizational (signage, training)
5. procedural
6. technical
7. protective measures (collective and personal protective equipment)
8. health surveillance activities
9. environmental and/or dosimetric sampling.

Then, the risk assessment is carried out using the "Risk Matrix."

The necessary information is gathered by examining company procedures, registration documents, direct consultations with workers, the health surveillance protocol, measurement and sampling reports, etc. Specific assessment methods have been defined for risks such as exposure to chemical agents, noise, vibration, etc.

The severity of the consequences of a potential hazard must be estimated for each category. Each potential hazard can have more than one undesirable outcome, all of which should be addressed, with primary attention paid to the most severe consequences.

The frequency applied in the risk matrix is ​​the rate of occurrence of a hazard (times per year) relative to the severity of the consequence.

After defining the frequency and severity of the consequences, the risk level can be determined using the risk matrix.

The colored cell in the matrix at the intersection of the severity of the consequences and the frequency identifies the "risk level" for the individual cause-effect scenario being assessed.

Risk levels range from unacceptable risk (red region) or tolerable risk (yellow region) to acceptable risk (green region).

At the time of the analysis, protective and preventive measures are likely already in place that contribute to reducing the risk level. These measures can reduce the frequency of exposure to a given hazard or reduce the severity of the exposure.

This leads to a second set of "severity," "frequency," and risk level.

Even with the protection and prevention measures already in place, the risk may be unacceptable or tolerable, but can reasonably be improved toward acceptable levels. In this case, specific improvement actions can be identified with the goal of a specific risk level (e.g., lower frequency or lower severity).