Risk Matrix + SFAIRP — assessment aid

A 5×5 matrix to communicate and prioritise risk — paired with the test that actually matters in law: SFAIRP.
Read first — the matrix is not the duty. The legal test is to eliminate or minimise risk So Far As Is Reasonably Practicable (SFAIRP). A risk matrix is a communication and prioritisation aid, not the standard of control. A "Low" rating does not discharge the duty if a reasonably practicable control exists; a high-consequence risk demands controls regardless of how unlikely it seems. Don't let a green cell stop you applying the hierarchy of control.

1 · Rate the risk

Initial risk — with controls currently in place

Residual risk — after the additional controls you'll apply (optional)

The matrix

● initial   ▣ residual. Consequence-weighted: a Catastrophic outcome is never "Low".

2 · Apply the hierarchy of control (in order)

  1. Eliminate the hazard (remove the task, the energy, the interaction).
  2. Substitute with something less hazardous.
  3. Isolate people from the hazard (barriers, exclusion zones, guarding).
  4. Engineering controls (mechanical aids, interlocks, ventilation).
  5. Administrative controls (procedures, training, signage, rotation).
  6. PPE — last and lowest; never the sole control for a serious risk.
Higher-order controls (1–4) are more reliable and more likely "reasonably practicable". Document why a control isn't reasonably practicable if you stop short — that record is your SFAIRP evidence.

About

5×5 consequence-weighted lookup (not a naïve L×C product — a Catastrophic consequence is at least High even at Rare likelihood, reflecting good WHS practice). Consequence/likelihood descriptors are generic — your organisation's own matrix and descriptors govern; adapt as needed. Built 2026-06-26. Assessment aid, not legal advice; the duty holder owns the rating and the controls. The SFAIRP duty (WHS Act s 17/18) is the standard, not the matrix.