The method below is deliberately narrow: one task at a time, six steps, with a written output that a supervisor can follow and an auditor can read.
Assessment First, Product Second
The assessment defines the requirement, and the product is chosen afterwards to meet it.
The regulation is clear on the sequence. Under OSHA 1910.132, the employer assesses the workplace for hazards that make protective equipment necessary and selects equipment that protects against those hazards; the general obligations sit within 29 CFR 1910 Subpart I. Guidance from HSE in the UK, CCOHS in Canada and NIOSH points in the same direction: identify the hazard, control it as far upstream as practicable, and treat equipment as the last measure. A management system such as ISO 45001 expects the same logic to be documented so that it can be reviewed and repeated.
The practical consequence is that the assessment produces a level, not a product name. A task exposed to impact energy, a cut risk from a specific material, a chemical with defined properties or an arc of calculated energy each generate a requirement that any compliant product can meet. Writing the requirement down first is what makes competitive tendering possible; writing the product name first turns the assessment into a justification for a decision already taken.
Step 1: Break the Task Into Steps
Hazards belong to steps, not to job titles, because the exposure changes several times inside a single task.
Take the task as it is actually performed and list the steps in order: preparation, isolation, the work itself, verification, reinstatement and clean-up. Include the steps that only happen occasionally, because fault-finding, sampling and cleaning are where unusual exposures appear. Where a task is performed in more than one way — day shift and night shift, wet and dry conditions, with and without the plant running — treat those as separate assessments rather than averaging them. Two habits make this step faster: interview the person who does the work rather than the person who supervises it, and observe the task once before writing anything down. The list of steps is usually shorter than expected and more revealing than a job description, and it is worth keeping the working notes with the final record so that the next reviewer can see how the steps were identified.
Step 2: Identify Hazards per Step
Hazard identification is a search against categories rather than a recall exercise, and using a fixed list prevents the obvious ones from crowding out the rest.
Work through the categories for each step: mechanical, thermal, electrical, chemical, biological, ergonomic, noise, radiation, and the hazards created by the environment such as traffic, moving plant, falls, confined spaces and poor visibility. For each hazard, record the source and the exposure route rather than a general description, because the difference between contact and airborne exposure changes the protection needed. Note the exposure characteristics too: which part of the body, for how long, how often, and under what conditions. Two failure points recur. Chemical hazards are recorded from the label rather than the safety data sheet, which omits the exposure and handling information. And hazards that exist between steps — moving between areas, opening a housing, breaking a connection — are missed because attention stays on the main activity.
Step 3: Apply the Hierarchy Before Selecting PPE
The hierarchy is applied before any equipment decision, and its purpose is to reduce the reliance on the last measure rather than to delay the decision.
For each hazard, ask whether it can be eliminated by changing the method, whether the material or the process can be substituted for something less hazardous, whether an engineering control can contain or remove the exposure, and whether an administrative control such as a permit, a procedure or a rotation can reduce it. Only the residual exposure is then managed by protective equipment. Two things make this step defensible in a review. The first is a written note of what was rejected and why, in a sentence each, since a decision that leaves no trace looks like a decision that was never made. The second is honesty about the residual: where equipment is the only control, that fact should be visible to whoever reviews the task, because it changes the inspection and replacement regime that follows.
Step 4: Derive the Required Level
The required level comes from the exposure and the applicable standard, and it is written as a requirement rather than as a product description.
| Hazard type | Where the required level comes from | What to record |
|---|---|---|
| Thermal — arc exposure | The incident energy calculated for the task or shown on the equipment label | Required arc rating and the source document |
| Thermal — heat and flame | The exposure profile the standard addresses, assessed for the task | Standard applied and the performance the task requires |
| Mechanical — cut and puncture | The material handled and the way it is handled | Cut level required, from the task analysis |
| Chemical | The properties and exposure identified from the safety data sheet | Material compatibility requirement and the basis for it |
| Visibility | Traffic speed, sight lines, lighting and work location | Class required, by the assessment |
| Electrical | The system and the task, including whether it can be de-energised | Protection required and the reason energised work was chosen |
Two rules keep this section honest. The standard is named with its scope, so that the requirement can be verified rather than trusted, and the level is expressed as a requirement that several products could satisfy. Where the answer depends on a calculation or a specialist judgement — incident energy, exposure monitoring, structural or chemical engineering — the assessment records who provided it rather than reproducing the number.
Step 5: Record the Decision and Its Basis
The written output of an assessment is short, and it is written for three readers who will not be present at the task.
A supervisor needs to know what to issue and when to refuse; a procurement team needs to know what to buy and against which standard; an auditor or investigator needs to know why. Five fields serve all three: the task and its steps, the hazards with their exposure, the controls applied upstream of equipment, the required protection with the standard and level, and the source of that level. Add the date, the author and the version, because the record is only useful if it can be superseded cleanly. Where a task assessment is used across several sites or lines, the record should note which ones it covers, since an assessment written for one configuration is not evidence for another even when the task looks identical. Association material such as that published by ASSP is useful for training assessors in how to write the reasoning rather than only the conclusion.
Step 6: Re-assess When the Task Changes
An assessment is current or it is a historical document, and the difference is the trigger list rather than the calendar.
Six events should send a task back through the method: a change in the process, plant or tooling; a change in the material or chemical used; an incident or near miss involving the task; a change in how the work is organised, including shift patterns or who performs it; a change in a standard the assessment cites; and a repeated failure of the equipment in service, such as a pattern of damage or of items being removed. Each re-assessment is a revision of the existing record rather than a new document, with the changed field and the reason noted. Where the review finds the task unchanged, the record should say so and carry the date, because a review that leaves no trace is indistinguishable from no review at all — and that distinction is exactly what is tested when something goes wrong. Keeping these revisions in one place, rather than in a folder of forms, is the subject of the article on building a PPE selection matrix, and the wider documentation set is set out in the compliance checklist for manufacturers and importers.
Worked Example: A Single Maintenance Task
The method is easier to judge from one example than from a full register, so the sequence below follows a pump seal replacement on a chemical transfer line.
Steps: isolate and lock out; drain and purge the line; open the housing; remove and replace the seal; reassemble; test; reinstate and clean up. Hazards by step: residual chemical in the line and housing; vapour during opening; mechanical pinch points on the coupling; hot surfaces on the adjacent line; slip risk from spillage; and traffic from the forklift route beside the pump. Controls applied upstream: isolation with lock-out, a documented drain and purge procedure, local exhaust during opening, and a temporary barrier that diverts the forklift route for the duration. Required protection, derived from the exposure: chemical protection for the hands and forearms with material compatibility taken from the safety data sheet and the manufacturer’s performance data; eye and face protection for the opening and drainage steps; a chemical-resistant apron; and footwear suited to a wet, contaminated surface. The assessment then records the standard and level for each item, the person who supplied the exposure information, and the review triggers — a change of chemical, a change of pump or seal design, or any incident during the task. Nothing in that record names a brand, which is the point: the requirement is portable, and the product decision follows on price, availability and evidence.
The documentation framework that holds assessments, specifications and supplier evidence together is set out on the PPE sourcing and compliance page.
FAQ: Questions About Assessment Method
What is a PPE hazard assessment?
It is the structured examination of a task to determine the hazards present, the controls already applied and the protective equipment therefore required, including the level of protection and the standard it must meet. Its output is a written record of that reasoning, with the source of any calculated level, so that equipment can be selected, supplied and reviewed against the task rather than against a catalogue.
How do I carry out a PPE risk assessment?
Work one task at a time: break it into steps, identify the hazards and exposure at each step, apply the hierarchy of controls before considering equipment, derive the required level from the exposure and the applicable standard, record the decision with its basis, and set the triggers that will send it back for review. The order matters more than the format, because reversing it produces a justification rather than an assessment.
What is the difference between hazard assessment and risk assessment?
A hazard assessment identifies what could cause harm and how a person could be exposed to it; a risk assessment adds the judgement about how likely and how serious that harm would be, and therefore what control is proportionate. For protective equipment the practical difference is the required level: hazard identification tells you which hazard is present, and risk assessment tells you how much protection the task demands.
Does PPE remove the hazard?
No. Protective equipment is the last measure in the hierarchy of controls and it reduces the likelihood or severity of harm when exposure occurs; the hazard itself is removed by elimination, substitution or engineering controls. That is why an assessment applies the hierarchy before selecting equipment, and why the residual exposure is recorded: it tells the reviewer how much reliance the task places on the final control.
If you are rebuilding task-level assessments and want the required level recorded per task in a form your buyers can work from, send your current register or a sample of tasks to [email protected], or use the contact page to ask for a specification review.