Working at height: understanding risk assessment
A simple guide for assessing and managing work at height risks
A quick, practical overview of how to spot fall hazards, judge their risks and choose suitable controls. This resource supports confident decision‑making and helps keep work at height tasks safe and well managed.
Introduction to working at height
Working at height introduces several hazards that can cause serious injuries or fatalities if not properly controlled.
A risk assessment must consider situations where workers could:
- fall from height due to unprotected edges on roofs or scaffolding
- fall through openings such as skylights
- fall into hazards including tanks or excavations.
There may be other hazards in the area (for example: excessive noise). These should be included in the overall risk assessment, even if they are not shown in this example.
Risk assessment: step-by-step guide
Follow these steps to identify hazards, assess risks and put the right controls in place.
Step 1: identify hazards
Look for any hazard that could cause a worker to fall.
- working at height
- using a ladder
- using a mobile elevated work platform
- fragile surfaces
- edges without protection
- poor weather conditions
- debris or tools dropped from height
- falling into a space such as a storage tank
- equipment failure.
Involve workers and supervisors in identifying hazards.
Step 2: who might be harmed?
Include everyone who could be harmed, such as:
- workers (especially those with medical conditions)
- contractors and subcontractors
- visitors
- members of the public.
Step 3: evaluate the risks
Consider the likelihood of harm and how serious the consequences could be, using a risk matrix.
Risk scoring involves judgement. Different people may rate the same risk differently. Carrying out the assessment with someone else helps you agree on fair scores and identify anything you might miss on your own.
Risk ratings should be agreed by a competent person, such as an occupational safety and health (OSH) professional.
This risk matrix is illustrative only and can be used as a guide to help you think about how likely something is and how serious it could be. Organisations should adapt their own system. Use your knowledge and experience to make the best decision.
Risk rating examples
Likelihood of harm (L)
You are assessing how likely it is that harm will occur. The less likely it is, the lower the score.
-
Low risk (1–2)
Tasks with a low likelihood of harm, such as:
- little exposure to hazards
- a stable environment
- simple tasks with few steps
- existing controls such as fixed handrails or barriers.
-
Medium risk (3–12)
As the complexity of the task increases, so does the likelihood of harm. Medium scores apply when:
- existing controls need maintenance
- procedures are moderately complex
- equipment requires training to use safely
- safety measures depend on worker behaviour (for example: personal protective equipment (PPE))
- workers are under pressure to finish the task.
-
High risk (12–25)
These tasks involve hazards that are difficult to eliminate or control. Conditions may be unpredictable or change quickly, such as outdoor work in extreme weather or dynamic construction sites.
Characteristics include:
- complex work requiring detailed planning
- potential for life‑threatening injuries or long‑term health effects
- multiple layers of control needed (for example: permits, PPE, specialist equipment)
- variable or extreme weather conditions
- other workers or the public having access to the area.
Consequences of harm (C)
You are considering how serious the harm could be. Low scores apply to minor injuries, the highest scores apply to life‑changing harm.
-
Low risk (1–2)
Consequences are minor, such as:
- first aid injury (minor cut)
- a minor medical treatment case with no work restrictions.
-
Medium risk (3–12)
Consequences are more serious and may result in time off work but no long‑term disability.
Examples include:
- a fall causing a laceration needing sutures
- prolonged time off due to injury (for example: ligament damage)
- restricted duties (for example: concussion).
-
High risk (12–25)
Consequences cause long‑term health or lifestyle impacts.
Examples include:
- death
- amputations
- life‑limiting disability (such as paralysis).
Example of risk rating calculation
Risk rating = likelihood (L) x consequences (C)
If: L = 2 and C = 3
Then: L x C = 2 x 3 = 6
A score of 6 is a medium.
Step 4: control measures
Choose appropriate and practical controls based on the level of risk. Higher‑level controls are more effective than lower‑level controls such as signs or PPE.
These examples follow the hierarchy of control. They are not exhaustive and may not suit every situation.
-
Eliminate
Avoid working at height.
-
Substitution
Use scaffolds or mobile elevated work platforms instead of ladders.
Use temporary roofing systems or sheeting instead of open scaffolds during outdoor work.
-
Engineering controls
Install guard rails and edge protection on elevated areas, such as mezzanine floors.
Erect safety nets to catch falling objects.
Ensure access to welfare facilities (for example: provide drinking water in hot conditions).
-
Administrative controls
Develop fall protection and fall arrest procedures.
Provide training on safe work practices and PPE.
Communicate risks to workers.
Provide supervision, don’t allow lone working.
Ensure workers are medically fit to work at height.
-
Personal protective equipment
Non‑slip shoes and gloves.
Protective headgear with secure straps.
Fall arrest systems.
Step 5: record and review
Document the findings and action plan using a risk assessment template, such as this example risk assessment. Communicate the results and controls to the workers carrying out the task.
Risk assessments should be reviewed at least once a year, or sooner if conditions change.
Example risk assessment
Task: cleaning external gutters (height: 2.5–3.5 m)
Description: workers use an extension ladder to access gutters and remove debris.
-
Slips and falls from ladder
Who might be harmed Workers using the ladder and people below How they might be harmed Sprains or fractures from a fall; people below struck by a falling worker Existing processes and safety measures Training on ladder use, non‑slip footwear, gloves Risk rating Likelihood: 2
Consequence: 4
Risk rating (RR): 8Action required Secure the ladder at the top and bottom, avoid overstretching, use a stabiliser and maintain three points of contact. -
Falling debris or tools
Who might be harmed People walking or working under the ladder. How they might be harmed Injury caused by falling tools or materials. Existing processes and safety measures Restricted access, warning signs, tools secured in a tool bag. Risk rating Likelihood: 1
Consequence: 3
Risk rating (RR): 3Action required Create an exclusion zone, use tool lanyards and wear hard hats. -
Poor weather conditions (wind or rain)
Who might be harmed Workers using ladders How they might be harmed Loss of balance leading to a fall from the ladder Existing processes and safety measures Procedures require work to stop during poor weather Risk rating Likelihood: 1
Consequence: 4
Risk rating (RR): 4Action required Check weather forecasts, postpone work in adverse conditions and ensure suitable non‑slip footwear is worn -
Ladder dislodged
Who might be harmed Workers on the ladder and people below How they might be harmed Falls caused by overreaching, unsecured ladders, or using the wrong ladder Existing processes and safety measures Correct ladder selection, user training, ladders secured and regularly inspected Risk rating Likelihood: 2
Consequence: 4
Risk rating (RR): 8Action required Use ladder ties or stabilisers, inspect the ladder before use, and confirm it is the correct height and load rating
Summary
Working at height presents significant risks that require careful planning and robust control measures.
- Falls from height are a leading cause of workplace fatalities – risk assessment is essential.
- Use a structured approach: hazard identification, risk evaluation, control selection.
- Apply the hierarchy of controls: eliminate hazards before relying on PPE.
- Risk ratings help prioritise actions but require judgement and collaboration.
- Regular review and clear communication are essential for ongoing safety.
-
Checklist
Use this quick checklist to make sure your work at height risk assessment process is thorough and up to date.
- Have all fall hazards been identified?
- Are all affected people considered (workers, contractors, public)?
- Has a risk matrix been used to score likelihood and consequence?
- Are control measures selected according to the hierarchy (eliminate through to PPE)?
- Are ladders, scaffolds and equipment inspected and suitable?
- Have weather and environmental conditions been considered?
- Is adequate training and supervision in place?
- Have findings been documented and communicated?
- Is there a review schedule (annual or when conditions change)?
IOSH