This register shows how strong or weak the assurance is. It is not a compliance check or a sign-off, and a score is not a probability of harm. A competent person must judge the result.
Risk matrix
Colours include the severity rules: severity 5 is never rated below High and severity 4 never below Medium, so a rare but deadly event cannot hide in the green. Residual view counts a control only if it was verified working in the last 12 months.
Needs attention first
Rating after verified controls
| Hazard | Area | Inherent | After verified controls | Assurance | Owner | Review due | Actions |
|---|
Click a column heading to sort. Entries save in this browser only, so use Save data file to keep a copy and to move work between devices. Anything on a public GitHub Pages site is visible to everyone, so keep names, photos and employer documents out of it.
Rating bands (Likelihood x Severity)
| Low | 1 to 4 | Monitor and review at the normal interval. |
| Medium | 5 to 9 | Tolerable only if controls are in place, verified and reviewed. |
| High | 10 to 16 | Action required. Add or strengthen controls and set a deadline. |
| Critical | 17 to 25 | Stop and escalate. Do not proceed until reduced. |
Severity floors: severity 5 is never rated below High and severity 4 never below Medium, whatever the likelihood. Severity 4 and 5 risks also need named senior sign-off.
Hierarchy of controls
| 1 | Eliminate | Remove the hazard completely. |
| 2 | Substitute | Replace with something less hazardous. |
| 3 | Engineering | Guarding, interlocks, ventilation, segregation. |
| 4 | Administrative | Procedures, training, signage, rotation. These depend on people getting it right every time. |
| 5 | PPE | Last line of defence. |
Rules this dashboard applies
Basis and evidence. Every risk needs a written basis for its likelihood and severity scores and at least one evidence item such as audit results, incident or near miss data, measurements or inspection records. A risk without these is shown as Not assured.
Verified controls only. A control reduces residual risk only if its status is Verified working and it was last checked less than 12 months ago. Otherwise the risk is treated at its inherent level, however low the claimed residual score is.
Weak assurance. A risk is flagged Weak for any of these: no controls recorded, a claimed reduction that is not demonstrated, verification or evidence over 12 months old, a severity 4 or 5 risk resting on procedures or PPE only, reliance on PPE alone, missing senior sign-off on a severity 4 or 5 risk, no owner or competent reviewer, no second reviewer on a High or Critical risk, or no review date or an overdue review.
Layer analysis. Each risk can be linked to a Swiss cheese analysis of its layers of defence. The register reads that analysis (it never changes it) and shows its best and cautious estimates beside your scores. It flags a linked analysis that is incomplete, stale, above its own tolerable level, based on weak evidence, uses a different severity, or suggests the event happens at least once a year while the likelihood is scored 1 or 2. It never changes a score for you. Both dashboards must sit in the same folder on the same site, and saved data stays in one browser, so use Save data file and Load data file to move both between devices.
Corrective actions. Each risk has an Add action button that opens the Corrective Action Tracker with that risk selected. The register reads the tracker (it never changes it), shows how many actions are open or overdue for each risk, and flags a risk when a linked action is overdue. Closing an action does not lower a risk. Verify the control and update the control status here.
Reviewers and change log. Each risk needs a named owner and a named competent reviewer. A risk rated High or Critical after controls should also name a second reviewer. Missing names make a risk Weak. The change log records why scores, evidence or controls changed. Entries can be added but not edited or removed in this tool.
Your risk criteria. The band cut-offs (1 to 4 Low, 5 to 9 Medium, 10 to 16 High, 17 to 25 Critical), the severity floors (severity 5 never below High, severity 4 never below Medium) and the 12 month limits on verification and evidence are this dashboard's defaults. They are not taken from HSE, ISO or any standard, and no study tests them. The floors exist because multiplying two 1 to 5 scores can give a rare fatal event the same rating as a frequent trivial one. Treat all of them as your organisation's own risk criteria: have a competent person adopt or change them, and record that decision in the change log.
Severity wording. Choose severity from the worst outcome that could credibly happen, not the usual one. 1 minor, 2 first aid, 3 lost time injury, 4 major injury, 5 fatality or multiple serious injuries. Likelihood: 1 rare, 2 unlikely, 3 possible, 4 likely, 5 almost certain.
The 12 month limit, the severity floors and the band boundaries are defaults chosen for this tool, not published standards. Align them with your own site procedure and risk criteria before use. This dashboard supports a risk assessment and does not replace a suitable and sufficient assessment by a competent person, or your site's own procedures and legal duties. Assurance means the paperwork supports the score, it does not mean the risk is safe.