The obligation
The Code prescribes a four-step process: (1) identify hazards, (2) assess risks, (3) control risks using the hierarchy of controls, and (4) review controls.
Under the Code, PCBUs must follow a systematic risk management process. Step 1: Identify hazards (sources of potential harm). Step 2: Assess risks—when required, evaluate the likelihood and consequence of harm. Step 3: Control risks using the hierarchy of controls (eliminate, then substitute, isolate, engineer, administer, PPE). Step 4: Review and maintain controls. Records of risk assessments must be kept.
…
- What
- The Code prescribes a four-step process: (1) identify hazards, (2) assess risks, (3) control risks using the hierarchy of controls, and (4) review controls.
- Source
- safework.nsw.gov.au
description
Full analysis
lock
Free account
tips_and_updates
What this means for you
lock
Free account
lock_open
Read the full analysis, tailored to your industry
- star
Impact summary tailored to your industry
- check_circle
Full plain-English analysis of what changed
- check_circle
Email alerts & digests when this law changes
- check_circle
Compliance self-assessment tools
Labels
hazard identification
risk assessment
hierarchy of controls
risk register
record keeping
Official sources
Frequently asked questions
Which WHS law does this come from?
Four-Step Risk Management Process for PCBUs is a WHS requirement set out in How to manage work health and safety risks (NSW). It is made under Work Health and Safety Act 2011 (NSW). The relevant provision is How to manage work health and safety risks > Risk Management Process.
What does this WHS obligation require?
Four-Step Risk Management Process for PCBUs is a WHS obligation under How to manage work health and safety risks (NSW). In short, The Code prescribes a four-step process: (1) identify hazards, (2) assess risks, (3) control risks using the hierarchy of controls, and (4) review controls.
What changed recently?
Four-Step Risk Management Process for PCBUs was last updated on 6 October 2026.
