Free Risk Assessment Matrix — Score Hazards Online (PDF + Word)

Short answer: A risk assessment matrix ranks hazards by likelihood × severity so you can prioritize controls. Score your hazards right here — rate each hazard in the tool at the top to get an instant rating, turn it into a report, or use the free 5×5 matrix as PDF and editable Word (no email). It is a site tool for construction and workplace safety teams, not a substitute for a competent person’s full risk assessment under local law.

Search results for this query are dominated by Excel packs and multi-format template hubs. If you need a printable matrix you can fill on site or attach to a report pack, start with the interactive scorer at the top of this page, or use the free PDF and Word files below. If your workflow is Excel-only, use those hubs and keep this page for the safety-specific scoring method.

What is a risk assessment matrix?

A risk assessment matrix (risk matrix, probability-impact grid) is a table that plots how likely a hazard is against how severe the consequence would be. The cell where those scores meet becomes a priority band, usually color-coded green, amber, or red.

Most construction and industrial programs use a 5×5 grid (25 cells). Smaller 3×3 or 4×4 grids are faster for simple tasks but group more hazards into the same band. The matrix does not invent risk: a competent person still identifies hazards, sets scoring definitions, chooses controls, and owns residual risk.

Which matrix size should you use: 3×3, 4×4, or 5×5?

Short answer: Use 5×5 when you need enough resolution to separate routine issues from stop-work risks. Use 3×3 for short toolbox talks or low-complexity tasks where speed matters more than fine ranking.

• 3×3 (9 cells): Fast, coarse. Good for brief field assessments.
• 4×4 (16 cells): Middle ground when 5 levels feel like overkill.
• 5×5 (25 cells): Standard for many construction and heavy-industry programs because it separates “monitor” from “act now.”

This download is built as a 5×5 matrix (the only size file we ship). Use the same likelihood/severity definitions if you collapse to 3×3 or 4×4 on a whiteboard. The scoring steps below map directly onto the 5×5 grid.

How do you build and use a 5×5 risk matrix?

Short answer: Define likelihood and severity in plain language, score each hazard, multiply or look up the band, assign controls, then re-score residual risk.

1. Set the likelihood scale (1–5). Example: 1 rare (once in 5+ years) → 5 almost certain (weekly or more). Write site examples next to each number so raters agree.
2. Set the severity scale (1–5). Example: 1 first-aid / negligible loss → 5 multiple serious injuries or major loss. Keep safety severity primary; add cost only if your program requires it.
3. Build the grid. Likelihood × severity produces scores 1–25. Typical bands: 1–4 low, 5–9 medium, 10–14 high, 15–25 extreme. Adjust band edges only with management agreement.
4. List hazards from a real walkdown. Photos, worker input, incident history, and non-routine tasks all count.
5. Score inherent risk, then residual risk. Rate without wishful controls first. After planned controls, score again. If residual risk stays high or extreme, add controls or stop the task.
6. Assign owner and review date. A matrix without owners becomes wallpaper.

What should go in a free risk matrix template?

Short answer: Clear scales, a 5×5 grid, hazard rows with owner/action fields, and space to record residual risk after controls.

• Project / area / date / assessor
• Written definitions for likelihood and severity
• 5×5 color grid (or printable black-and-white with score bands)
• Hazard log: description, who might be harmed, L score, S score, band, controls, residual band, owner, due date
• Sign-off that a competent person reviewed the assessment

Our free files match that structure in PDF and Word. They are not Excel. If you need formulas and conditional formatting in a spreadsheet, use an Excel template from a spreadsheet vendor and keep the same scoring definitions.

Do OSHA or HSE require a risk matrix?

Short answer: Neither mandates one specific matrix form. Both expect you to identify hazards, judge severity and likelihood, prioritize action, and keep suitable records where the law requires it.

In the United States, OSHA’s Recommended Practices for Safety and Health Programs call for determining severity and likelihood of incidents and using that information to prioritize corrective actions. That is the job a matrix supports. It is guidance for program design, not a standalone citation that “OSHA requires a 5×5 grid.”

In Great Britain, the HSE risk assessment guidance follows the familiar steps: identify hazards, who might be harmed, evaluate and decide precautions, record significant findings, and review. Employers with five or more employees must record significant findings. HSE also publishes free assessment templates; a matrix is one accepted way to show evaluation and priority, not the only lawful format.

ISO 31000 describes a risk management process (identify, analyze, evaluate, treat). A matrix is a common analysis/evaluation aid inside that process. It does not replace organization-specific criteria or legal duties.

Common risk matrix mistakes on site

• Undefined scales. If “likely” means different things to the supervisor and the safety lead, scores are noise.
• Scoring residual risk as if controls already exist. Assess inherent risk, plan controls, then residual risk.
• Confusing exposure with likelihood. Long exposure can raise chance of harm, but good controls can still lower likelihood.
• One-and-done paperwork. Update after method changes, new subcontractors, incidents, or site moves. Quarterly review is a practical minimum for active sites.
• No link to inspections. High-band risks should drive targeted inspections and close-out evidence, not sit in a folder.

Risk matrix vs risk assessment vs risk register

Short answer: The matrix is the scoring lens. The assessment is the full reasoning and controls. The register is the living log of risks and actions over time.

• Matrix: ranks individual hazards quickly.
• Risk assessment: narrative/context, people at risk, legal context, chosen controls, residual risk, competent-person ownership.
• Risk register: portfolio view across a project or company with status tracking. See also our risk register template and risk assessment template.

How InspectionReport fits after you score the risk

InspectionReport is an AI-assisted inspection reporting tool. You upload site photos, add project details and notes, review the drafted findings, then export a client-ready PDF or Word report when you need it. AI drafts; you review and sign off.

It is not a live multi-user risk platform, checklist builder, offline field app, or Excel exporter. Use this free matrix template for scoring on paper or in Word. When the walkdown produces photo-backed findings you need to issue as a report, build the report in InspectionReport: free to draft and preview, €9.95 per exported report (taxes included worldwide), or €29/mo Unlimited for regular export volume.

FAQ

Where can I download a free risk assessment matrix template?

On this page: free PDF and Word, no email. HSE also publishes general risk assessment templates on its website if you need a UK-oriented form pack.

Is Excel required?

No. Many top results are Excel because project managers like formulas. For site packs and client reports, PDF and Word are often enough. We do not ship an Excel file here, so we do not claim one.

Is a risk matrix legally required?

Usually the duty is a suitable risk assessment and prioritization of controls, not a specific grid. Check your jurisdiction, client specs, and insurer requirements.

How often should I update the matrix?

When the work changes, after incidents or near misses, when new contractors or equipment arrive, and on a planned review cycle (often quarterly on active construction sites).