Construction accounts for nearly one in five workplace fatalities in the United States each year. A structured, repeatable assessment is the main tool for keeping that number down on any given site.

Five steps make risk management in construction work more reliable, whether you're tracking hazards on a clipboard or a connected app.

Quick Navigation: Ready to get started on the risk assessment process?

Jump straight to Step 1: Identify Hazards or keep reading for how we define a few key terms first.

What Is a Construction Site Risk Mitigation Plan?

A construction site risk mitigation plan is the playbook project managers use to spot potential safety, financial, and operational hazards on a job site before they turn into real problems. It sets out the controls, owners, responsibilities, and follow-up needed to eliminate, reduce, transfer, or otherwise manage each identified risk before and during construction.

What Is a Construction Site Risk Assessment?

A construction site risk assessment is the hands-on process of walking a job site, identifying hazards in the field, and rating each one by likelihood and severity. Where a mitigation plan sets the overall strategy, the assessment is the day-to-day practice that puts that plan into action and keeps it current as site conditions change.

How To Conduct a Construction Site Risk Assessment, Step-by-Step

To build a safer job site and protect your workforce, execute these five critical operational phases:

Step 1: Identify live site hazards

Step 2: Determine exact risk exposure

Step 3: Apply the hierarchy of controls

Step 4: Record findings in an active risk register

Step 5: Review and adapt dynamically

Each phase builds on the last, moving from spotting a hazard in the field to closing the loop once conditions change. Here's how each one plays out on an actual job site.

Step 1: Identify Live Site Hazards

Begin every assessment by walking around the site with a structured checklist. Relying on memory alone makes it easy to overlook hazards, especially on active sites where conditions can change throughout the day.

Focus first on the hazard types that cause the most serious incidents in construction: falls, struck-by hazards, caught-in or caught-between hazards, and electrical hazards. OSHA calls these the Focus Four, and they cause almost two-thirds of all construction fatalities, according to The Center for Construction Research and Training. A checklist that does not cover these explicitly needs to start there before anything else gets added.

Hazards and risks are not the same thing. A hazard is something concrete on site right now, like an exposed rebar, an unguarded opening, or a live wire. A risk is the chance that something goes wrong because of that hazard, a distinction Autodesk also draws out clearly. Treating a schedule delay and a live wire as the same kind of problem is part of why hazard identification gets sloppy on some sites.

This step usually falls to the site supervisor or safety lead, but a large site benefits from more than one set of eyes. A single generalist walkthrough won't catch everything a trade foreman would spot in their own scope, so it helps to have each foreman flag hazards specific to their work: electrical, plumbing, structural. Weather deserves its own check too, since a site that was safe yesterday can look different after overnight rain or high wind.

Step 2: Determine Exact Risk Exposure

Once you've found the hazards, decide which ones need attention first. Use a likelihood-and-severity matrix where you rate how likely each issue is to happen and how serious the outcome could be. That gives your team a consistent way to focus on the risks that matter most right now.

For a basic three-by-three matrix, plot each hazard on a likelihood scale, from rare to frequent, against a severity scale, from minor to catastrophic, and let that placement tell you what to tackle first. This basic grid already beats working from whichever hazard feels most urgent that day. And it doesn't matter if you're running this on a commercial high-rise or a small residential job — the same grid works either way. The scale changes. The process doesn't.

For example, trench collapse is rare but severe. A minor tripping hazard is common but usually not serious. Ranking hazards by actual impact, rather than by how often they show up, is what separates a useful assessment from a checklist that just gets filled out.

Assign a named owner to every risk. Each risk should belong to a specific person, not a department. For example, exposed rebar in each area may be assigned to that area's site supervisor, while an electrical hazard belongs to the foreman managing that trade. A trench or excavation should be assigned to the person responsible for the shoring plan, as required by OSHA. If a risk register simply lists the "safety team" as the owner, accountability becomes unclear, and the entry can quickly become outdated. For a closer look at how to staff and assign that ownership across a crew, see our guide to resource management on construction projects.

Step 3: Apply the Hierarchy of Controls

The hierarchy of controls ranks five ways to address a hazard in order of reliability. These are the core mitigation strategy for construction risk once a hazard has been identified and rated:

1. Elimination: Remove the hazard completely, if possible
2. Substitution: Replace it with something safer
3. Engineering controls: Guardrails, ventilation, and physical barriers
4. Administrative controls: Signage, training, scheduling changes
5. Personal protective equipment (PPE): Use PPE as the last line of defense

Most sites reach PPE first because it's the easiest to hand out. PPE sits at the bottom of this list because it's the least reliable control, despite being the most convenient. Mitigating risk in construction, and getting a real hazard rather than the appearance of one, means working down the hierarchy in order. To see how those controls fit into a broader safety program, explore our construction safety management guide.

Step 4: Record Findings in an Active Risk Register

Every assessment should be documented in a risk register. At a minimum, it should record the hazard, its likelihood and severity, the control measures in place, who is responsible, and its status.

Paper and spreadsheets tend to fall apart at this step. Quickbase's research found that 91% of construction firms still rely on paper-based processes somewhere in their workflow, and a hazard logged from memory once someone is back at a desk is already out of date by the time it gets written down.

Capture hazards while your crew is still in the field, ideally with a photo, timestamp, and location. Tools like FastField's AI Photo Insights can analyze field photos against your team's criteria and return structured findings in seconds, including severity and confidence information. That helps crews flag safety issues sooner and gives the risk owner clearer context for follow-up. Keep the register active by reviewing open findings on a set cadence rather than waiting for an incident to force a review.

Step 5: Review and Adapt Dynamically

Reviewing the assessment means updating it as site conditions change, not filing it away once it's done. A risk assessment from the first week of a foundation pour won't hold once framing starts, and one written before a new subcontractor arrives won't cover equipment or materials that weren't there yet.

A daily toolbox talk plus a weekly formal review works for most sites. The exact cadence matters less than making sure the field and the office are looking at the same updates in real time. Revisit the assessment whenever a new phase, crew, material, weather event, or schedule change introduces different exposure. This guide to construction scheduling covers the planning side of those shifting project conditions.

Digitize Your Risk Assessment Process

A construction site risk assessment captures one moment in time; the real value comes from turning each finding into an owned action and keeping that information current as the project changes. Digital tools can help crews capture hazards in the field, maintain a live risk register, route issues to the right person, and keep field and office teams working from the same information. To connect risk assessments with a broader safety workflow, explore our construction safety management solutions.

Frequently Asked Questions

What is risk management in construction?

Risk management in construction is the ongoing process of identifying, assessing, and controlling the risks that can affect a project, from safety hazards to cost overruns and schedule delays. Most companies document the approach in a construction risk management plan, while a site risk assessment is the hands-on piece that puts the plan into practice.

What are the main types of construction risks?

Common construction risks include safety, financial, schedule, contractual, environmental, design, and quality risks. The mix varies by project, but teams should look beyond immediate job site hazards to risks that can affect cost, delivery, compliance, and performance.

What are the 5 steps of a construction site risk assessment?

Identify hazards, determine risk exposure, apply the hierarchy of controls, record findings in a risk register, and review the assessment regularly as site conditions change.

Who is responsible for conducting a site risk assessment?

The site supervisor or safety lead typically runs the process, but each individual hazard should have its own named owner rather than a general department.

How often should a site risk assessment be updated?

Review it on a regular cadence and whenever conditions materially change. Daily toolbox talks can surface new issues, while a more formal weekly review can keep the register current. New phases of work, subcontractors, equipment, materials, or major weather changes should also trigger an update.