WSH Risk Management Code of Practice
WSH Risk Management Code of Practice
As Workplace Safety and Health (WSH) Risk Management (“RM”) gains momentum in Singapore, more duty holders
are beginning to recognise the value and benefits of Risk Assessment (“RA”) in maintaining a safe and healthy
workplace. Duty holders and employees alike are seeking greater clarity on the implementation of RA. To address
this and provide useful guidance, the WSH Council formed an industry-led RM Work Group with members from
major industry sectors to develop the Code of Practice on WSH Risk Management (herein referred to as
“Risk Management Code of Practice” or “RMCP”).
The RMCP advises duty holders on their obligations under the Workplace Safety and Health Act (“WSH Act”) and
the WSH (Risk Management) Regulations. It also provides guidance on a systematic process for implementing RM,
from the identification of hazards, and the evaluation of associated risks, to the implementation of relevant
risk controls.
Much consideration has been given to make the RMCP applicable to large and small companies across industries,
as the risk profiles and needs of workplaces and their methods of RM deployment differ significantly.
Large companies tend to have a dedicated RM Team to oversee the consistent deployment of RM throughout the
organisation. At the same time, it is also usual for these companies to have multiple RA Teams to look at specific
risks or work processes. The RMCP offers clarity in the roles of the different teams and/or individuals.
Smaller companies, on the other hand, often need specific guidance in implementing RM. To assist this segment,
the RMCP defines stakeholders’ responsibilities and provides information on RM implementation. The RMCP also
recommends the 5x5 risk matrix for risk evaluation; however, it does not restrict companies to their choice of RA
methodologies and risk matrices.
In the second revision, the principles of RM were introduced so that companies can implement RM more effectively.
Human and cultural factors (referred to as “personal health risks and organisation factors” in the third revision)
influence RAs and should be considered when companies conduct RAs. The revised RMCP also recommends some
possible roles that a human resource manager could play to complement those other duty holders for a holistic RM.
In view of a heightened awareness of occupational health hazards in the industry, the risk evaluation of health
hazards is included to enhance the overall assessment of workplace hazards. Upstream risk controls in the hierarchy
of control, for example, from elimination and substitution to engineering controls, are emphasised for their relative
importance in managing workplace risks.
In the third revision, considerations of our workplaces’ preparedness for terrorism threats, disease outbreaks, and
mental well-being are introduced. The threat of terrorism is real and present. Included in this RMCP is the
Singapore WSH Community’s response to this threat that Singapore faces and is a requirement under WSHC’s
bizSAFE programme. Living with COVID-19 has also reinforced the need to mitigate infectious disease transmission
risk in the workplace. The growing risk to mental well-being, already present in pre-COVID times but now
exacerbated by the pandemic, also behoves companies to update their RM processes to account for mental health.
1|P a g e
Contents
1. Purpose ........................................................................................................................................... 4
3. Overview......................................................................................................................................... 6
5. Preparation ................................................................................................................................... 10
5.1 Formation of Risk Management or Risk Assessment Teams ...................................................................10
5.2 Extent of Risk Assessment: Determine What Is to Be Assessed ...........................................................11
5.3 Gather Relevant Information .....................................................................................................................12
7. Implementation ............................................................................................................................ 23
7.1 Risk Assessment Approval .....................................................................................................................23
7.2 Implementation Actions ........................................................................................................................23
8. Record-Keeping ............................................................................................................................. 24
8.1 Requirements and Guidance.....................................................................................................................24
9. Review .......................................................................................................................................... 25
9.1 Requirements and Guidance.....................................................................................................................25
2|P a g e
Appendix A: Inventory of Work Activities Form ......................................................................................... 28
Acknowledgements .................................................................................................................................. 47
3|P a g e
1. Purpose
The purpose of this Code of Practice on WSH Risk Management (RMCP) is to establish the minimum requirements
and duties for implementing workplace RM in Singapore, and to provide guidance on its implementation. This RMCP
applies to all workplaces in Singapore that are governed by the Workplace Safety and Health (WSH) Act.
Conducting risk assessment and implementing risk control measures are requirements under the
WSH (Risk Management) Regulations.
4|P a g e
2. Abbreviations and Terms
CP Code of Practice
MOH Ministry of Health
MOM Ministry of Manpower
PPE Personal Protective Equipment
RA Risk Assessment
RM Risk Management
RM Regulations WSH (Risk Management) Regulations
RMCP Risk Management Code of Practice
(Code of Practice on Workplace Safety and
Health (WSH) Risk Management)
RPN Risk Prioritisation Number
SGSecure SGSecure is Singapore’s national movement
to sensitise, train, and mobilise the
community to play a part to prevent and
deal with a terrorist attack. It is how the
whole of Singapore can come together in
response to the terrorism threat and
safeguard our way of life.
SSG SkillsFuture Singapore
SWP Safe Work Procedure
WSH Workplace Safety and Health
WSH Act Workplace Safety and Health Act
WSHC Workplace Safety and Health Council
WSQ Workforce Skills Qualification
5|P a g e
3. Overview
• Preparation;
• Risk Assessment (RA);
• Risk Control Implementation;
• Record-Keeping; and
• Review.
6|P a g e
4. General Requirements
4.1 General
4.1.1 RA shall be carried out and risk control measures shall be implemented before any new work
commences.
4.2 Employer
4.2.1 As defined in the WSH Act, an Employer is a person who, in the course of the person’s trade, business,
profession or undertaking, employs any person to do any work under a contract of service. The
self-employed person or Principal shall also fulfil the duties and functions of an Employer specified in
the RMCP.
4.2.2 An Employer shall:
[Link] Ensure that an RA is conducted on WSH risks, including to mental well-being, associated with any activity
or exposure in the workplace. This should include considerations for its preparedness for terrorism threats
at the workplaces, and disease outbreaks.
[Link] Take all reasonably practicable steps to eliminate any foreseeable risks to any person.
[Link] Take measures to control the risks by means of, and in the following order of consideration where risk
elimination is not reasonably practicable:
• Substitution;
• Engineering Controls;
• Administrative Controls; and
• Provision and Use of Suitable Personal Protective Equipment (PPE).
[Link] Support the implementation of risk control measures recommended by the RM or RA Teams.
[Link] Require the RM Leader to provide regular updates of the RA done and risk control measures implemented
to reduce or eliminate identified risks.
[Link] Require RA updates at each WSH Committee meeting, if such a committee is established, or at
the workplace’s regular meetings (e.g., new findings, progress of risk control actions).
[Link] Require the contractor or supplier where work has been assigned or awarded, to conduct an RA.
The contractor or supplier must take reasonably practicable measures to eliminate or reduce to
As Low As Reasonably Practicable (ALARP) the risk that may be posed by their work (e.g., when they work
with machines, equipment, or hazardous substances).
[Link] Ensure that a Risk Register is available and maintained at the workplace.
[Link] Ensure that the Risk Register is prepared in accordance with the RMCP.
[Link] Ensure that the Risk Register is readily available for review by designated persons at the workplace and by
regulatory agencies.
[Link] Ensure that RA records, including but not limited to RA forms and control measures records, are kept for
at least three years from the RA approval date.
7|P a g e
[Link] Review and, if necessary, revise the RA:
• at least once every three years from the RA approval date; or
• upon the occurrence of any bodily injury to any person as a result of exposure to a hazard in the
workplace; or
• where there is a significant change in work practices or procedures; or
• where there is a significant change in the workers’ personal health (including mental well-being) in
relation to safety critical work process or activity; or
• when new information on WSH emerging risks, threat of terrorism, disease outbreak, or mental
well-being is made known.
[Link] Monitor effectiveness of the risk control measures.
4.3 Manager
4.3.1 This may be the person who manages a physical area ("Area Manager", e.g., Warehouse Manager),
a function ("Functional Manager", e.g., Production Manager) or an activity (e.g., Machining Manager)
within the workplace. In some workplaces, this may be the Employer. The Employer is to determine
the appropriate level of engagement for this role.
4.3.2 The Manager who oversees the area, function, or activity where the WSH risks exist, shall:
[Link] Ensure that an RA is conducted, and risk control measures are implemented before any new work is
carried out in the Manager’s area.
[Link] Approve the RA conducted for the Manager’s area. The Manager should also ensure that the risk level is
not rated "High Risk" when approving work to be carried out.
[Link] Ensure that the risk control measures are implemented without delay.
[Link] Ensure that, where applicable, all operations have established Safe Work Procedures (SWPs).
[Link] Ensure that all persons exposed to the risks are informed of:
• the nature of risk involved; and
• any measure or SWP implemented.
[Link] Ensure that the effectiveness of the risk control measures is monitored.
[Link] Revise the RA if the risk control measures are inadequate and ineffective after the implementation, by
obtaining more information and/or modifying controls.
[Link] Maintain RA documentation of control measures and SWP that were implemented.
4.3.3 The Manager shall assist the Employer to implement the requirements in Clauses [Link] to [Link].
4.3.4 The Manager may authorise other persons to execute the duties mentioned above but remains
accountable for them.
4.3.5 The Manager should work together with a Human Resource Manager to specify WSH training
necessary for job positions and functions.
8|P a g e
4.4 Human Resource Manager
4.4.1 The Human Resource Manager should:
[Link] Ensure that a robust recruitment process is in place to select suitable job candidates who can meet the
position’s requirements and WSH obligations.
[Link] Specify safety and health responsibilities in the job descriptions of employees and ensure that these
responsibilities are effectively communicated to all employees.
[Link] Ensure that all new employees are given appropriate and sufficient orientation, and WSH training to equip
them with the relevant knowledge, skills, and abilities to succeed in their positions.
[Link] Support the Employer and Managers with identifying, evaluating, and controlling risks in relation to
personal health (including mental well-being), and organisational factors.
[Link] Support the Employer and Managers to ensure that RA, risk control measures and SWPs are effectively
communicated to all employees.
[Link] Ensure that WSH training and other related RA records are documented.
[Link] Work with Managers and RM or RA Leaders to consider safety and health outcomes in employees’
performance evaluation, remuneration and discipline, and to ensure consistent behaviour and practices
in line with organisational expectations, where applicable.
[Link] Implement programmes that support and maintain employees’ safety, health, and mental well-being.
[Link] Support the Employer to ensure that HR policies and initiatives are aligned to mitigate the risks identified.
4.4.2 In the absence of a Human Resource Manager in the organisation, the equivalent person undertaking
such a work profile of the Human Resource Manager should execute the duties mentioned above.
4.6 Employees
4.6.1 Employees are to adhere to the measures stated in the RAs.
4.6.2 Employees are to report to their immediate supervisors any incident, accident, near miss, occupational
disease, dangerous occurrence, or suspicious risks associated with the threat of terrorism so that
prompt action can be taken to address them.
9|P a g e
5. Preparation
10 | P a g e
5.1.4 Risk Assessment Teams
[Link] Where more teams are required to conduct RA in the Workplace, Risk Assessment Teams ("RA Teams")
can be formed (see Figure 1).
RA
Team 1
RA RA
Team 5 Team 2
RM
Team
RA RA
Team 4 Team 3
[Link] RA Teams are responsible for conducting RAs within the scope defined by the RM Team. If an
organisation requires only one team, the functions of the RM and RA teams may be combined within
the RM Team.
[Link] RA Teams should have representatives from management and non-management levels.
[Link] The RA team should include personnel who are involved with the work, including contractors and
suppliers. If available, it should also include persons who are familiar with the design and development
of the site, machine, or process.
[Link] If the inclusion is not feasible as detailed in [Link], designers, suppliers and other contributors may be
invited to share their comments and suggestions with the RA Team.
[Link] Where RA experience or expertise is lacking, a WSH Officer, WSH Auditor or Third-Party Consultant who
is trained and has experience in conducting RA should be engaged to assist the RM or RA leader in
conducting RA.
[Link] The RA Team Leader should be competent for the task. Basic competency can be attained by completing
a WSQ RM course approved by SSG and conducted by SSG WSQ Training Providers, or equivalent.
[Link] The RA Team Leader should be experienced with the type of work within his or her scope, and have direct
access to the RM Team Leader, or in the absence of one, to the Employer.
11 | P a g e
5.2.2 Inventory of Work Activities Form
[Link] For the identified departments, functional areas, and work activities to be assessed, the “Inventory of
Work Activities” form should be used (see Appendix A).
[Link] The RMCP accepts variations of this form but require the following information to be included:
• Department, activity, or trade assessed;
• Process/Activity location;
• The date when the RA was done or reviewed; and
• Work activity / Sub-activity.
[Link] For trade-based RA:
• State the trade being assessed in “Department, Activity, or Trade Assessed”;
• Where the location or process is not applicable, state “N/A” in these columns; and
• Complete Work Activity List.
12 | P a g e
6. Risk Assessment
13 | P a g e
6.2 Principles
6.2.1 RA is the cornerstone of the RM process. It is an integral part of all organisational work processes, from
strategic planning to project and change management. The key steps in the RM process are outlined
in Figure 2.
Form team
Preparation Gather relevant information
Identify tasks of each process
Hazard identification
Risk Assessment Risk evaluation
Risk control
Communicate
Obtain employer or management approval
Implement control measures
Implementation Communicate the hazards identified
and their controls
Audit or regular inspections
6.2.2 RA is customised and tailored to each organisation and its specific work environment.
6.2.3 RM contributes to the achievement of organisational objectives and improvement of performance
in business; operational efficiency; regulatory, safety and health compliance; and
environmental protection.
6.2.4 RM addresses uncertainty and helps businesses make informed decisions and prioritise actions.
6.2.5 RA provides a systematic approach to RM, and leads to consistent and reliable results.
14 | P a g e
6.2.6 RA inputs are based on various information sources such as the RA team members’ competency and
experience, observations, employee feedback and expert opinions. The limitations of these
information sources must be considered to ensure that the RA is based on the best available
information.
6.2.7 RA should take human factors into account. Human factors refer to environmental, organisational and
job factors, and human and individual characteristics, which influence behaviour at work in a way
which can affect health and safety. It recognises that the capabilities and health risk factors of
employees, including mental well-being, should be managed when conducting an RA.
6.2.8 RA also considers the workplace preparedness for terrorism threats, disease outbreaks, and
employee’s mental well-being.
6.2.9 RM should work alongside all other aspects of an organisation to facilitate continual improvement,
and be responsive to change when new risks emerge, or existing risks change.
6.3.2 Process
[Link] Select a “Work Activity” from the “Inventory of Work Activities Form” (see Appendix A) and place it in the
“Risk Assessment Form” (see Appendix B) for analysis. Variations of these forms can be used; however, all
information required in the form should be documented.
[Link] Break down work activity into its sub-activities to facilitate the identification of all foreseeable hazards
associated with the work. These sub-activities constitute the different steps that make up the
work activity.
[Link] For each sub-activity, identify the hazard(s) and record them in the “Hazard” column. List each hazard in
a separate row in the table.
[Link] The following categories of hazards should be considered:
• Physical (e.g., fire, noise, ergonomics, heat, radiation);
• Mechanical (e.g., moving parts, rotating parts);
• Electrical (e.g., voltage, current, static charge, magnetic fields);
• Chemical (e.g., flammables, toxics, corrosives, reactive materials);
• Biological (e.g., bacteria, fungi, blood-borne pathogens, virus, microbial toxins); and
• Psychosocial (e.g., employees’ poor mental well-being, stress, fatigue).
Risks associated with terrorism threats, disease outbreak (e.g., epidemics, pandemics), and mental
well-being should also be considered in the RA.
15 | P a g e
6.3.3 Individual and Organisational Factors
[Link] RA should consider individual and organisational factors that could compromise or influence employees’
work ability and safety (e.g., decreased mental alertness, fatigue, loss of concentration). Risk control
measures can be implemented to consider varying perceptions and behaviour.
[Link] Examples of organisational factors include excessive workload, prolonged working hours,
inadequate training, inadequate acclimatisation to hot environment, alienated sub-groups of workers that
could place them at risk of self-radicalisation.
[Link] Examples of factors (made known voluntarily to employers at individual level or through analysis of
aggregated data from periodic health screening) to be considered are:
• Individual characteristics and fitness (e.g., eyesight, hearing, lack of physical conditioning to carry
out heavy lifting or manual work);
• Personal health condition (e.g., anaemia made worse by exposure to lead, allergies to
chemicals, etc.);
• Conditions that, when not well managed, may affect safety critical work (e.g., high blood pressure,
high cholesterol, diabetes mellitus, chronic heart condition, emotional trauma, etc.);
• Pregnancy (e.g., teratogenic chemicals that can affect the embryo or foetus);
• Smoking (a risk factor for many diseases); and
• Use of certain medications or alcohol misuse (may affect cognitive abilities).
16 | P a g e
6.4 Risk Evaluation
6.4.1 Risk Matrices
[Link] The RMCP recognises the various risk evaluation methods and matrices practised and preferred by
workplaces. While the RMCP does not restrict workplaces to their choice of matrices, the numeric
5x5 Risk Matrix is recommended. Common matrices include, but are not limited to, the examples given in
Tables 1, 2 and 3.
Likelihood
Remote Occasional Frequent
Severity
Major Medium Risk High Risk High Risk
Moderate Low Risk Medium Risk High Risk
Minor Low Risk Low Risk Medium Risk
Table 1: Example of a common 3x3 Risk Matrix with descriptive ratings.
Table 2: Example of a common 5x5 Risk Matrix with a mix of numeric and descriptive ratings.
Major (4) 4 8 12 16 20
Moderate (3) 3 6 9 12 15
Minor (2) 2 4 6 8 10
Negligible (1) 1 2 3 4 5
Table 3: Recommended 5x5 Risk Matrix with numeric ratings or Risk Prioritisation Number.
[Link] The risk matrix used in the RA should be displayed at least once, and preferably at every page of the RA
form. This is particularly important when numeric ratings are used, as risk prioritisation number (RPN)
may represent different levels of risk with different sizes of the risk matrix.
17 | P a g e
6.4.2 Existing Controls
[Link] Existing controls are control measures that are already in place or required to be implemented to carry
out the work activity.
[Link] Assessment of severity and likelihood should be made on the assumption that existing (or required)
controls are in place.
[Link] Existing (or required) controls that do not influence severity should not be considered when
assessing severity.
[Link] Existing (or required) controls that do not influence likelihood should not be considered when
assessing likelihood.
[Link] Should RA Team members have difficulty developing a consensus to the severity level, the Team is
to gather more information and/or consult an industry expert.
[Link] When using other matrices, equivalent guidance for likelihood should be used and described in
adequate detail for adoption by users of those matrices.
[Link] Should RA Team members have difficulty developing a consensus to the likelihood level, the Team is to
gather more information and/or get advice from an industry expert.
Major (4) 4 8 12 16 20
Moderate (3) 3 6 9 12 15
Minor (2) 2 4 6 8 10
Negligible (1) 1 2 3 4 5
Table 6: 5x5 Risk Matrix with numeric ratings.
19 | P a g e
[Link] The RM or RA Team is to determine for the organisation, with the concurrence of the Employer, which are
the areas within the matrix to be classified as Low, Medium, and High risks. The categorisation of risk may
be based on, but is not limited to, industry practice, policies of the workplace and risk appetite of
the organisation.
Risk
Risk level Recommended Actions
Acceptability
• No additional risk control measures may be needed.
• Frequent review and monitoring of hazards are required to
Low Acceptable
ensure that the risk level assigned is accurate and does not
increase over time.
• A careful evaluation of the hazards should be carried out to
ensure that the risk level is reduced to As Low As Reasonably
Practicable (ALARP) within a defined period.
Medium Tolerable Interim risk control measures, such as administrative controls or
PPE, may be implemented while longer term measures are being
established.
• Management attention is required.
• High Risk level must be reduced to at least Medium Risk before
work starts.
• There should not be any interim risk control measures. Risk
Not
High control measures should not be overly dependent on PPE.
acceptable
• If practicable, the hazard should be eliminated before
work starts.
• Management review is required before work starts.
Table 7: Recommended action for risk levels.
20 | P a g e
6.5.6 It is also important to consider other factors which may influence likelihood such as:
• Potential cumulative exposures;
• Potential synergistic effects between certain health hazards (e.g., exposure to excessive noise and
trichloroethylene (TCE) will increase likelihood of hearing impairment); or
• Any limitation in health standards if they do not consider all exposure routes (e.g., potential dermal
or ingestion risks are generally not considered when setting PELs).
[Link] A control measure that is higher on the Hierarchy is often more effective as the risk is reduced at or close
to the source.
[Link] The control measures in the Hierarchy are not to be taken as isolated or single solutions. Generally, it is
more effective to use a combination of control measures. For example, engineering controls work better
with administrative controls like training and SWPs.
[Link] The control measures in the Hierarchy are explained in Appendix C.
21 | P a g e
[Link] When additional control(s) have been decided, re-rate the Severity, Likelihood and Risk levels (or RPN
values) and record them in the “S”, “L” and “RPN” columns in the “Risk Control” section of the RA form.
[Link] The re-evaluated RPN should not be higher than the initial RPN.
22 | P a g e
7. Implementation
23 | P a g e
8. Record-Keeping
24 | P a g e
9. Review
25 | P a g e
10. Communication
10.1 Communication:
A Constant Aspect Throughout the RM Process
10.1.1 Communication and consultation with external and internal stakeholders, including all functions and
levels within the organisation, should take place during all stages of the RM process.
10.1.2 All persons at the workplace should be informed of the risks they face and the control measures
available to manage those risks.
10.1.3 Communication can take various forms (such as meetings, staff dialogues, trainings, notice boards and
various electronic means) for different groups within the organisation.
10.1.4 Effective communication and consultation involve two-way dialogues between stakeholders.
26 | P a g e
11. References
27 | P a g e
Appendix A: Inventory of Work Activities Form
28 | P a g e
Appendix B: Risk Assessment
29 | P a g e
Appendix C: Hierarchy of Control
Elimination
Elimination of risk refers to the total removal of the worker’s exposure to the hazards, effectively making all
identified work-related accidents, incidents and ill-health related to the specific hazard impossible. This is a
permanent solution and should be attempted first as recommended in the hierarchy. Once the risk is eliminated,
the item does not appear in subsequent RA forms. For example, sharp edges can be eliminated in a store or work
area. For threat of terrorism, the hazard of vehicle ramming into employee pick-up point may be eliminated by
relocating the pick-up waiting area away from the main road. For the risk of infectious disease transmission in the
workplace, it can be eliminated by redesigning the infrastructure and processes to implement full WFH (Work from
Home).
Substitution
This involves substituting a process or product with a less hazardous process or product to mitigate the risk, for
example, using water-based paint instead of solvent-based paint. For threat of terrorism, the hazard of theft of
dangerous substances with the intention to cause human harm may be mitigated by substituting the dangerous
substances with less harmful substances. For instance, 30% hydrogen peroxide may be substituted with 20%
hydrogen peroxide. Preparations and solutions containing not more than 20%, weight in weight, of hydrogen
peroxide are not regulated as Explosive Precursors.
Engineering Controls
Engineering controls are physical means that reduce the likelihood of occurrence or severity of consequence of the
mishap. These include structural changes to the work environment or work processes, erecting a barrier to interrupt
the accident transmission path between worker and hazard (for example, machine guards, confined space
ventilation). For the threat of terrorism, the hazard of vehicle ramming attacks into crowds of people or critical
assets may be mitigated by fixed or active vehicle security barriers (VSBs) such as bollards, raised steps, concrete
walls or planters. For controlling of organisational factors, organisations could for example review the workload,
work hours, training regime, or organisational culture. To prevent or minimise threat of disease outbreak,
organisations could for example improve the ventilation systems within the workplace and redesign frontline
operations to reduce transmission risks.
Administrative Controls
These eliminate or reduce exposure to a hazard by adherence to procedures or instructions. Documentation should
emphasise all the steps to be taken and controls to be used to carry out the activity safely. For example, permit-to-
work systems, scheduling of incompatible works, SWPs (see Appendix E for additional notes on SWP). For the threat
of terrorism, the hazard of theft of dangerous substances with the intention to cause human harm may also be
mitigated by periodic stock-taking of the substances. For controlling of health-risk factors, organisations could for
example organise activities such as health screenings, physical exercises, and mental health talks; and conduct
periodic surveys of employees' mental well-being.
30 | P a g e
Appendix D: Risk Register and Cover Sheet
This Appendix provides examples of:
1. Risk Register; and
2. Risk Register Cover Sheet.
1. Risk Register
31 | P a g e
2. Risk Register Cover Sheet
A Risk Register Cover Sheet provides a convenient way to list all the RAs in the Risk Register.
32 | P a g e
Appendix E: Additional Notes
Safe Work Procedures
Arising from the RA, SWPs should be established and implemented for work which may pose safety and health risks.
The SWPs should include safety and health precautions to be taken in the course of work and during emergencies,
as well as responsibilities of persons involved and provision of PPE. The implementation of the SWPs should be
monitored regularly, and the SWPs reviewed periodically to ensure their currency.
Residual Risks
Residual risks are the remaining risks after implementation of risk controls. The RA team should ensure that residual
risks are acceptable and manageable; and highlight the residual risks of each of the controls.
For example, if the risk control involves the use of safety harnesses and lanyards (a type of PPE), one of the residual
risks is that the workers may not anchor the lanyards or check the fall clearance to protect themselves. In this case,
the RA Team may highlight pre-job safety briefing (administrative controls) as a further measure to ensure that
residual risks are further minimised.
Another example is, if the risk control involves redesign of work scope to reduce and manage employees’ work
stress, one of the residual risks is individual employees’ ability to adapt to the new or restructured job function. In
this case, the RA Team may highlight supervisor’s checking-in with employee as one way to minimise the residual
risks.
Once all the risk controls are selected and their residual risks highlighted, the RA Team needs to identify the action
officers and follow-up dates. In this way, the specific action officers to implement the controls can be clearly
identified, and the follow-up dates will help to ensure timeliness for implementation.
a. ADD Additional Control measures in the Existing Controls column if they are new controls. For example,
OR
REPLACE Existing Control measures with new measures as appropriate. For example,
33 | P a g e
Appendix F: Risk Factors of Health Hazards
The table below shows the risk factors which can contribute to the development of ill-health when exposed to
certain health hazards. Note: This table of health hazards is not exhaustive.
Heat • Temperature;
• Humidity;
• Amount of direct sun exposure or radiant heat;
• Intensity of physical work;
• Physical exhaustion;
• Type of clothing;
• Un-acclimatised person or duration of acclimatisation; and
• Susceptible individuals (with cardiovascular disease, impaired renal function,
obesity, alcohol and drug abuse, dehydration).
34 | P a g e
Appendix G: Examples Relating to Possible Terrorism Scenarios
Example 1
35 | P a g e
Appendix G: Examples Relating to Possible Terrorism Scenarios
Example 2
36 | P a g e
Appendix G: Examples Relating to Possible Terrorism Scenarios
Example 3
37 | P a g e
Appendix H: Examples Relating to Disease Outbreak Scenarios
Below are COVID-19 related examples. They may not be applicable to other disease outbreak scenarios.
38 | P a g e
39 | P a g e
Appendix H: Examples Relating to Disease Outbreak Scenarios
Below are COVID-19 related examples. They may not be applicable to other disease outbreak scenarios.
Other considerations for COVID-19 at the workplace may include the following:
• Worker in contact with a confirmed COVID-19 case in the last 14 days.
• Worker on medical leave (doctor-issued MC) for COVID-19 symptoms.
• Person(s) staying with the worker in the same residence are issued with Quarantine Order (QO),
Stay-Home Notice (SHN), or Leave of Absence (LOA).
Controls may include safe distancing, the wearing of face masks, personal hygiene discipline, and isolation by
Working from Home (WFH).
For COVID-19, do refer to the MOM and MOH websites for the latest updates.
MOM: [Link]
MOH: [Link]
40 | P a g e
Appendix I: Examples Relating to Personal Health-Risk Situation
41 | P a g e
Appendix J: Examples Relating to Mental Well-Being
42 | P a g e
43 | P a g e
Appendix J: Examples Relating to Mental Well-Being
44 | P a g e
Employee’s mental well-being can be affected by psychosocial hazards. Other considerations may include:
a) Uncertainty (e.g., about what is expected, how long arrangements can last, impact on pay or working hours).
b) Workload and work pace (e.g., tight deadlines, irregular work volume).
c) Working hours (e.g., unpredictable hours, reduced or extended hours, new shift patterns, unclear after-hours
work communication).
d) Role ambiguity (e.g., no clearly defined job scope, increasing roles within same job position).
e) Lack of control (e.g., rapid changes in risk levels, leading to sudden enforcement or easing of restrictions or
modified ways of working).
f) Lack of social support (e.g., loneliness, physical isolation, communication challenges).
g) Impacts of prolonged isolation and remote working (e.g., fatigue, unsuitable working conditions, lack of social
support, overexposure to screens).
h) Job insecurity (e.g., concern about possible job loss, domestic financial issues).
i) Difficulty in balancing work and home life (e.g., caregiving responsibilities, family emergencies, needing to
work outside of normal working hours).
j) Specific roles that have circumstantial pressures and require targeted support (e.g., front-line, public facing,
mobile working).
k) Worker’s specific circumstances (e.g., belonging to a vulnerable group, bereavement, or serious illness in
the family).
l) Workplace harassment (e.g., threatening, abusive, or insulting language, comments or other non-verbal
gestures; cyber bullying; sexual harassment; stalking).
45 | P a g e
Appendix J: Examples relating to Mental Well-being
NOTE:
For further guidance on managing psychological health, please refer to:
• Tripartite Advisory on Managing Workplace Harassment
• Tripartite Advisory on Mental Well-Being at Workplaces
• ISO 45003:2021 Occupational Health and Safety Management – Psychological Health and Safety at Work
– Guidelines for Managing Psychosocial Risks
• ISO 10075 Series – Ergonomic Principles With Regard to Mental Workload
46 | P a g e
Acknowledgements
The WSH Council would like to thank the Work Group members who have dedicated their time in their individual
capacity to make the inaugural RMCP possible: Mr Seet Choh San, Mr Ong See Hee, Mr Lim Poo Yam,
Dr Ting Seng Kiong and Dr Gregory Chan.
The Council also appreciates Mr Tan Kia Tang, Ms Jaime Lim, Ms Colleen Low and Ms Ng Xiao Qian from the Ministry
of Manpower, and Mr Han Kin Sew and Mr Edd Hong from the WSH Council for their involvement in the
second revision of the RMCP.
The third revision that included considerations of our workplaces’ preparedness for terrorism threats,
disease outbreaks, and mental well-being was helmed by Mr Eric Chua Swee Leong (MHA), Mr Edwin Tan (MHA),
LTC Eugene Phng (SCDF), Ms Delphine Fong (Sport Singapore), Mr Loy Chee Leng (Infinite Convergence Solutions,
Inc), Dr Kenneth Choy (MOM), Dr Lucy Leong (MOM), Ms Audrina Chua (MOM), Ms Evelyn Koh (MOM),
Ms Colleen Low (MOM), Ms Lilian Quah (MOM), Ms Joanne Lim (MOM), Ms Lim Chevi Way (MOM),
Mr Christopher Koh (WSHC), A/Prof Chia Sin Eng (WSHC/NUS), Ms Ong Peh Woon (WSHC), Mr Cheng Yue Pan
(WSHC) and Mr Seet Choh San (Temasek Polytechnic, CapitaLand Limited), with support from Ms Tan Zi Min,
Mr Han Kin Sew, Mr Edison Loh and Mr Lee Chee Wee from the WSHC. The Council appreciates their
valuable contribution.
47 | P a g e
Published in February 2011 by the Workplace
Safety and Health Council in collaboration with
the Ministry of Manpower.
The 5x5 Risk Matrix is used to evaluate and prioritize risks by assessing their severity and likelihood. The matrix helps in categorizing risks into different levels (low, medium, high) based on the calculated Risk Prioritisation Number (RPN), which is the product of severity and likelihood ratings. This categorization informs the necessary actions and control measures needed to mitigate risks .
The Risk Register is crucial as it documents identified risks, associated control measures, and their statuses. Its main functions include ensuring accountability, facilitating communication among stakeholders, and serving as a reference for regulatory bodies and internal review, making it key for systematic risk management and compliance .
Reviewing and revising RAs are vital for adapting to changes in workplace hazards and for improving safety measures. Reviews should happen at least every three years, after any workplace injury, changes in work practices, significant worker health changes, or when new information on emerging WSH risks arises. This ensures risks remain effectively controlled .
The Employer must ensure that an RA is conducted on Workplace Safety and Health (WSH) risks, including mental well-being, and risks from terrorism or disease outbreaks. They should take steps to eliminate foreseeable risks or control them using substitution, engineering controls, administrative controls, and suitable PPE. Employers must also support risk control measures, ensure regular updates and reviews of RA, and ensure RAs are completed by contractors or suppliers .
Effective communication involves informing all persons of the risks and control measures present in their activities. Strategies include maintaining open two-way dialogues, using meetings, trainings, and notices, and ensuring stakeholders at all levels are consulted during the RM process. This approach ensures comprehension and adherence to safety practices across the organization .
RA records, including RA forms and control measure records, must be kept for at least three years from the RA approval date. These records are crucial for compliance as they provide a documented history of risk assessments and controls implemented, allowing for continuity, traceability, and regulatory review to ensure ongoing workplace safety .
The primary components of the Risk Management (RM) process include Preparation, Risk Assessment (RA), Risk Control Implementation, Record-Keeping, and Review. Communication is integrated as a constant aspect throughout the RM process, facilitating interaction among stakeholders during all RM stages to ensure effective implementation and updating of risk management activities .
Psychosocial risks such as poor mental well-being and stress are increasingly recognized as pivotal in workplace safety. They are addressed by assessing individual and organizational factors impacting workers' mental states, implementing supportive control measures, and integrating mental health considerations into WSH protocols. This approach aims to mitigate risks associated with mental well-being .
A manager is responsible for overseeing that an RA is conducted and that risk control measures are implemented before new work starts. They must ensure work activities are not rated 'High Risk' and that SWPs are established. Managers monitor control measures' effectiveness, can revise RAs, and are authorized to delegate risk management duties to others, promoting efficient adherence to WSH protocols .
Individual factors such as health conditions (e.g., anaemia, allergies) and organisational factors like excessive workload and inadequate training must be considered as they could affect employees' work and safety. Management implications include the need for tailored safety measures, accommodating various worker characteristics, and ensuring workload and training are adequate to avoid compromising safety .









