Universal Mandate

HIRARC & Risk Management — Statutory Workplace Assessment

Every employer must assess workplace risk (s.18B). We run it with your team, or train your team to run it.

Also known in Malay as: penaksiran risiko (HIRARC)

WhatsApp for HIRARC Assessment Request Assessment Proposal
Safety inspector reviewing a risk assessment checklist on a clipboard

Every employer, self-employed person or principal shall conduct a risk assessment in relation to the safety and health risk posed to any person who may be affected by his undertaking at the place of work.

OSH Act 1994 [Act 514] s.18B(1) · English PDF ↗ · Bahasa Malaysia PDF ↗ · accessed 5 Oct 2026

…majikan hendaklah— (aa) dengan serta-merta memberitahu pejabat Jabatan Keselamatan dan Kesihatan Pekerjaan yang terdekat dengan cara yang paling cepat yang ada; dan (bb) dalam masa 7 hari menghantar laporan tentang kemalangan atau kejadian berbahaya itu dalam borang yang diluluskan.

Unofficial English summary: after a fatal or serious accident, or a dangerous occurrence, the employer must notify the nearest DOSH office immediately by the quickest means available, and send a written report in the approved form within 7 days.

NADOPOD Regulations 2004 reg 5(1) · Official PDF ↗ · accessed 5 Oct 2026

Do you need it?

Under the OSH Act 1994, every employer must conduct a systematic Hazard Identification, Risk Assessment and Risk Control (HIRARC) for their workplace. Yet many Malaysian SMEs have either never completed one, or their HIRARC is a generic template downloaded from the internet that does not reflect actual site hazards.

What happens if you don't

DOSH Audit Failure

Under s.18B of the OSH Act 1994, every employer must conduct a risk assessment. Under s.19, failure to comply is an offence punishable by a fine not exceeding RM500,000 or imprisonment up to two years, or both. The HIRARC register is the evidence that the duty was done.

Civil Litigation Evidence

In the event of an accident, an inadequate HIRARC can be used as evidence of negligence in civil litigation. A robust, site-specific register is your best defence.

Record-Keeping Requirement

The HIRARC Guidelines require records to be kept for at least three years, with management sign-off (s.6.1). A complete register with scored hazards, chosen controls, and assigned responsible persons is the proof of compliance.

Signs it's time

You have never conducted a formal HIRARC for your workplace
Your existing HIRARC is a generic template with hazards that do not match your site
You have introduced new machinery, chemicals, or processes since your last HIRARC review
DOSH has requested your HIRARC register during an inspection
You need HIRARC documentation for tender submission
A recent near-miss revealed a hazard not listed in your current register

How we run it

Step 01

Site Walkthrough & Hazard ID

We walk every zone of your facility with your operations team to identify physical, chemical, ergonomic, and biological hazards specific to your processes.

Step 02

Risk Quantification

Each hazard is scored using a standardised risk matrix (Likelihood x Severity). This produces a ranked priority list for control implementation.

Step 03

Control Selection

We apply the hierarchy of controls — elimination, substitution, engineering, administration, PPE — to each ranked hazard.

Step 04

Documentation & Register

A complete HIRARC register formatted for DOSH inspection, including hazard descriptions, risk scores, control measures, responsible persons, and review dates.

Step 05

Implementation Advisory

We can return to review your register when your processes change.

Who it's for

Manufacturing and assembly plants
Construction and civil engineering sites
Warehouses and logistics hubs
Chemical processing and laboratories
Food and beverage production
Healthcare and pharmaceutical facilities

Where we deliver

On-site HIRARC assessment and risk management advisory across Malaysia.

Johor Bahru
Pasir Gudang
Senai
Pengerang
Iskandar Puteri
Skudai
Kulai
Ulu Tiram

Frequently Asked Questions

What is the difference between HIRARC and CHRA?
HIRARC is a broad hazard assessment covering all workplace risks. CHRA is specific to chemical health risks under USECHH 2000. Most industrial workplaces need both.
How often must HIRARC be updated?
DOSH's HIRARC Guidelines call for a review every three years, or whenever processes or activities change (s.6.2). We can return to review your register when your processes change.
How long does a HIRARC assessment take?
A typical SME facility requires 1–2 days on site for walkthrough and data collection, plus 5–7 working days for report preparation. Large industrial complexes may require 3–5 days.
Do you train our staff to maintain the HIRARC?
Yes. We conduct HIRARC methodology workshops for your safety committee so they can update the register as conditions change between our formal reviews.
Is HIRARC required for small offices?
Yes. Section 18B of the OSH Act 1994 has no minimum headcount; a small office's HIRARC is simply shorter.

Get Your HIRARC Right Before DOSH Asks for It

Site-specific hazard identification, quantified risk scoring, and implementation support that keeps your register current and your facility protected.

Chat on WhatsApp
Chat on WhatsApp