Hazard vs Risk: The Difference, Explained With Examples

The answer in 30 seconds

A hazard is anything with the potential to cause harm: a substance, a situation, a piece of equipment, a practice. The HSE definition is the one that sticks: any source of potential damage, harm or injury.

A risk is the possibility of something bad happening — the likelihood that the hazard causes harm, combined with the severity of that harm. Risk is the hazard put into numbers: usually likelihood times consequence, on a 5×5 matrix.

The cleanest way to remember it: the hazard is the thing, the risk is the bet. The wet floor is the hazard. The chance someone slips on it, and how badly, is the risk.

Hazard: the definition, and the six families

In health and safety the word hazard is broader than in everyday speech. Where a layman means a single dangerous object, the HSE means any source of potential damage, harm or injury — and that includes the design of a process, the culture of a shift, the layout of a site. The UK Management of Health and Safety at Work Regulations 1999 put hazard identification at the start of every assessment: you cannot assess the risk of a hazard you have not found.

Hazards fall into six families, and a working assessor walks the workplace asking for all six. Physical hazards: the noise, the vibration, the heat, the electricity, the moving machinery, the height. Chemical hazards: the solvents, the gases, the dusts, the fumes — the family the COSHH Regulations exist for. Biological hazards: the bacteria, the viruses, the mould, the animal waste. Ergonomic hazards: the manual handling, the repetitive task, the screen at the wrong height, the chair with no lumbar. Psychosocial hazards: the stress, the workload, the violence and aggression at work. Work organisation hazards: the long hours, the lone working, the shift pattern, the lack of supervision.

The list is not decoration. The assessor who only walks the site for the physical hazards finds the press and the mezzanine and misses the stress, the handling and the lone working — and the assessment fails the moment the incident comes from the family that was not looked for.

Risk: the definition, and the number behind it

Risk is the hazard put into a number, and the number has two halves. The first half is likelihood — how probable is it that the hazard causes harm, on a scale from rare to almost certain. The second half is consequence — if it does happen, how bad is it, from a minor first aid to a fatality.

Multiply the two and you get the risk rating: on the standard 5×5 matrix, 1 to 4 is low, 5 to 9 is medium, 10 to 15 is high, 16 to 25 is very high. The same hazard carries a different risk in different places: a 20-litre drum of solvent in a locked, ventilated store is a low risk; the same drum open on a bench in a busy workshop is a high one. The hazard did not change. The likelihood and the consequence did.

That is why risk is the word that drives the action. The hazard tells you what to look at; the risk tells you what to do first. The high and very high lines get the controls, the owner and the date — the low lines get the monitor and the review.

Hazard vs risk: the side-by-side

Set the two definitions next to each other and the difference stops being a memory trick and becomes a working rule.

Notice the last row. The hazard decides what goes into the assessment; the risk decides what the assessment does about it. An auditor who asks "where is the risk?" and gets "the wet floor" has caught the classic mix-up — the wet floor is the hazard, and the slip that could come from it is the risk.

Hazard identification vs risk assessment: the sequence

The confusion extends past the two words, into the two processes. Hazard identification is the first step of a risk assessment, not a different thing. Under the UK system it is step one of the five-step method: identify the hazards, decide who might be harmed, evaluate the risks, record the findings, review them.

Hazard identification is the walkover with the six families in mind, the interview with the crew, the read of the drawings and the history. Its output is a list: the wet floor, the crane, the solvent, the stress. Risk assessment is the whole job: take that list, put each line into likelihood and consequence, score it, decide the controls, record it, review it. The MHSWR require the assessment where the business has five or more people; the COSHH assessment is the chemical version of the same sequence, substance by substance.

So "hazard vs risk assessment" is not a either-or. The hazard identification is the eye; the risk assessment is the eye and the brain together. A site that does the walkover and stops there has identified hazards and assessed nothing. A site that scores lines it has not found has assessed a fiction.

Worked example: one workshop, both words

Take a working example the size of a small workshop, and watch the two words do their separate jobs.

Five hazards, five risks, five different answers to the question "what do we do first." The press is the hazard everyone sees; the 20 is the number that tells the manager the guard is not optional. The slip is a hazard too — and the 4 tells the manager it is the last one to spend money on. The two words, doing the two jobs.

And what is a danger, then?

The long tail of the question adds a third word: the danger. If the hazard is the source and the risk is the chance, the danger is the state of being exposed to harm — the position, not the thing. Standing in the crane radius is a danger; the crane is a hazard; the chance and the severity of the dropped load is the risk.

The three words are the chain: the hazard is the source, the risk is the likelihood and severity, the danger is the exposure that the worker is actually in. Remove the exposure — barrier the radius, de-energise the panel, ventilate the vapour — and you have removed the danger without touching the hazard at all. That is the logic of the control hierarchy in one sentence: where you cannot remove the hazard, remove the exposure.

How to remember it

Three anchors, and the interview answer writes itself. One: hazard is the thing, risk is the bet — the wet floor, and the slip that could come from it. Two: the hazard is found by the walkover across the six families; the risk is the likelihood times the consequence on the matrix. Three: the hazard decides what to assess, the risk decides what to control first.

Use that in the interview and it is the answer that separates the person who has done the work from the person who has read the definition. The auditor asks "is the crane a hazard or a risk?" and the person who has worked the site answers "the crane is the hazard; the dropped load over the walkway is the risk — and here is the score and the control." The difference, held apart, is the whole job.