General Contractor’s Guide to Construction Risk Assessment

A construction risk assessment helps a general contractor decide what can go wrong, who could be affected, how serious the outcome could be, and which controls must be in place before work proceeds. It should be revisited as crews, sequence, equipment, weather, access, or site conditions change.

Hazard and risk are not the same thing

A hazard is a source or condition with the potential to cause harm: an unprotected edge, energized circuit, unstable trench, suspended load, respirable silica, or moving equipment. Risk describes the exposure around that hazard, including how likely harm is and how severe the outcome could be. Read the fuller distinction in hazard vs. risk.

That distinction matters because the hazard may stay the same while risk changes. A floor opening behind a locked barrier presents a different exposure than the same opening beside an active material route. The assessment must reflect the work as it will actually be performed, not only the hazard category.

Why risk assessment matters on a multi-employer site

Construction risk crosses company lines. One trade may create an opening, another may work below it, and the general contractor may control sequence or access. OSHA’s multi-employer citation policy describes creating, exposing, correcting, and controlling employers; an employer can have more than one role, and responsibility depends on the facts and authority involved.

The lesson is coordination. Before work begins, identify how each scope can affect other crews, who can correct a hazard, who can stop work, and how changing conditions will be communicated. Prequalification and contract language help, but neither replaces field verification.

How to conduct a construction risk assessment

OSHA’s hazard identification and assessment guidance recommends reviewing existing information, inspecting the workplace, learning from incidents and near misses, considering emergencies and nonroutine work, and using severity and likelihood to prioritize action. A field-ready process looks like this:

1. Define the scope and trigger. Name the project area, activity, crew, equipment, materials, interfaces, and conditions being assessed. State what change or upcoming work prompted the review.
2. Gather existing information. Review drawings, specifications, SDS, equipment manuals, prior inspections, incident and near-miss records, exposure data, weather, and lessons from similar work.
3. Walk the work with the people doing it. Supervisors, workers, subcontractors, and competent or qualified people see different parts of the exposure. Ask what is difficult, variable, or easy to miss.
4. Break the task into steps. For task-level work, a job hazard analysis or job safety analysis connects each step to its hazards and controls. OSHA’s Job Hazard Analysis guide provides a useful framework.
5. Characterize and prioritize risk. Consider who is exposed, frequency and duration, credible severity, existing controls, uncertainty, and potential interaction with other trades. Use a consistent matrix if it helps triage, but record the reasoning behind the score.
6. Select stronger controls. Start at the top of the hierarchy of controls instead of jumping directly to training or PPE.
7. Assign and communicate. Give every required action an owner, due time, verification method, and status. Brief affected crews in language and formats they understand.
8. Verify in the field. Confirm that controls are installed, used, and effective. Reassess when the plan, environment, equipment, crew, or sequence changes—or when an incident or near miss shows the assumptions were wrong.

Use the hierarchy of controls

The NIOSH hierarchy of controls ranks control approaches from most to least effective: elimination, substitution, engineering controls, administrative controls, and personal protective equipment. Higher-order controls reduce reliance on a worker remembering the right action every time.

• Elimination. Remove the hazard—prefabricate at grade instead of assembling at height, for example.
• Substitution. Replace a material, tool, or process with a safer option after checking that the substitute does not introduce a different hazard.
• Engineering controls. Isolate people from the hazard with guardrails, machine guarding, ventilation, shoring, barriers, or other designed controls.
• Administrative controls. Change how work is planned or performed through sequence, access restrictions, spotters, permits, procedures, training, and supervision.
• PPE. Select, provide, inspect, and use suitable equipment for the remaining exposure. PPE is important, but it should not be the automatic first or only control when more effective options are feasible.

Controls often work in combination. Record any residual risk that remains after controls and identify who has authority to accept it or require more protection. If the required control is missing or ineffective, the assessment should make the stop-work decision clear.

What a useful risk assessment record contains

• Project, location, activity, date, version, and conditions assessed.
• Participants and the competent or qualified roles involved where required.
• Hazards, exposed groups, credible outcomes, and initial priority.
• Existing and additional controls, including temporary measures.
• Action owner, deadline, status, and verification evidence.
• Residual risk and authorization to proceed.
• Crew communication or acknowledgement and the trigger for reassessment.

Keep the record specific enough to guide work. “Use PPE” or “be careful” does not tell the crew which exposure exists, which equipment is required, or how anyone will verify the control. Photographs, marked-up plans, equipment identifiers, and linked inspections can make the assessment much more actionable.

Common risk assessment mistakes

• Copying last project’s form without walking this site. Familiar work can have different access, sequence, weather, adjacent trades, or emergency constraints.
• Scoring before understanding exposure. A color on a matrix is not evidence. Document who can be harmed, how, and under what conditions.
• Starting and ending with PPE. Training and PPE depend heavily on consistent human action. Test whether the hazard can be removed, replaced, isolated, or engineered down first.
• Leaving actions unowned. A recommendation without an owner, deadline, and verification method is not a control.
• Treating signatures as proof of effectiveness. A signed assessment proves acknowledgement, not that the barrier remained in place or the crew followed the sequence.
• Ignoring health and nonroutine hazards. Noise, heat, silica, ergonomics, chemicals, commissioning, maintenance, emergencies, and startup or shutdown work belong in the review.

Turn assessment into a closed risk-control loop

SALUS inspections capture changing conditions, while incident and near-miss reporting feeds new evidence into the assessment. Corrective actions assign the response through verification, and reporting helps safety teams see repeated hazards across sites and trades. The result is a living record—not a form that disappears after the morning briefing.