Universal Mandate

HIRARC & Risk Management — Statutory Workplace Assessment

Hazard Identification, Risk Assessment and Risk Control. Required for every Malaysian workplace with 5 or more workers under the OSH Act 1994.

Do You Need a HIRARC?

Under the OSH Act 1994, every employer must conduct a systematic Hazard Identification, Risk Assessment and Risk Control (HIRARC) for their workplace. Yet many Malaysian SMEs have either never completed one, or their HIRARC is a generic template downloaded from the internet that does not reflect actual site hazards.

The Stakes

DOSH Audit Failure

DOSH inspectors specifically request the HIRARC register during compliance audits. An outdated or generic HIRARC is treated as non-compliance. Employers face fines and stop-work orders.

Civil Litigation Evidence

In the event of an accident, an inadequate HIRARC can be used as evidence of negligence in civil litigation. A robust, site-specific register is your best defence.

Insurance Premium Impact

Insurance underwriters increasingly review HIRARC documentation when setting premiums. A current, well-maintained register signals proactive risk management and can reduce rates.

Hazard Profile

Generic Template HIRARC

Downloaded templates with hazards that do not exist on your site and missing hazards that do. Useless in court or inspection.

No Risk Quantification

HIRARC entries that describe hazards but do not calculate risk levels or assign control priorities.

Missing Control Verification

Controls listed in the HIRARC that were never implemented or tested for effectiveness.

Outdated Registers

HIRARC documents from 3+ years ago that do not reflect new machinery, processes, or chemicals introduced since.

Warning Signs

You employ 5 or more workers and have never conducted a formal HIRARC
Your existing HIRARC is a generic template with hazards that do not match your site
You have introduced new machinery, chemicals, or processes since your last HIRARC review
DOSH has requested your HIRARC register during an inspection
You need HIRARC documentation for tender submission or insurance renewal
A recent near-miss revealed a hazard not listed in your current register

Our Process

Step 01

Site Walkthrough & Hazard ID

We walk every zone of your facility with your operations team to identify physical, chemical, ergonomic, and biological hazards specific to your processes.

Step 02

Risk Quantification

Each hazard is scored using a standardised risk matrix (Likelihood x Severity). This produces a ranked priority list for control implementation.

Step 03

Control Selection

We apply the hierarchy of controls — elimination, substitution, engineering, administration, PPE — to each ranked hazard.

Step 04

Documentation & Register

A complete HIRARC register formatted for DOSH inspection, including hazard descriptions, risk scores, control measures, responsible persons, and review dates.

Step 05

Implementation Advisory

90-day follow-up to verify controls are implemented, effective, and documented. We update the register as hazards change.

Why Other Approaches Fail

Generic consultants hand over a PDF and disappear. Without implementation support, the controls in your HIRARC remain theoretical. Workers are not trained on new procedures. Engineering controls are never installed. Six months later, the register is already obsolete and your site is exposed again.

Risk-Based Scheduling

Low-Moderate Risk

Low-risk offices and retail — bi-ennial review sufficient if no operational changes.

Property Types We Serve

Manufacturing and assembly plants
Construction and civil engineering sites
Warehouses and logistics hubs
Chemical processing and laboratories
Food and beverage production
Healthcare and pharmaceutical facilities

Coverage Areas

On-site HIRARC assessment and risk management advisory across Malaysia.

Johor Bahru
Pasir Gudang
Senai
Pengerang
Iskandar Puteri
Skudai
Kulai
Ulu Tiram

Frequently Asked Questions

What is the difference between HIRARC and CHRA?
HIRARC is a broad hazard assessment covering all workplace risks. CHRA is specific to chemical health risks under USECHH 2000. Most industrial workplaces need both.
How often must HIRARC be updated?
DOSH recommends reviewing your HIRARC at least annually, and immediately after any significant change in processes, machinery, or chemicals. We schedule automatic annual reviews for our clients.
Can we use software to manage HIRARC?
Yes. We provide digital HIRARC registers with automatic reminder triggers, photo evidence uploads, and real-time risk score updates. Compatible with most EHS management platforms.
How long does a HIRARC assessment take?
A typical SME facility requires 1–2 days on site for walkthrough and data collection, plus 5–7 working days for report preparation. Large industrial complexes may require 3–5 days.
Do you train our staff to maintain the HIRARC?
Yes. We conduct HIRARC methodology workshops for your safety committee so they can update the register as conditions change between our formal reviews.
Is HIRARC required for small offices?
If you employ fewer than 5 workers, a full HIRARC is not legally required. However, we recommend a simplified hazard checklist for your own protection.

Get Your HIRARC Right Before DOSH Asks for It

Site-specific hazard identification, quantified risk scoring, and implementation support that keeps your register current and your facility protected.

Chat on WhatsApp
Chat on WhatsApp