In a basic risk assessment, which activity determines who might be harmed?

• A. Identify hazards
• B. Evaluate risks
• C. Determine who might be harmed
• D. Implement controls

Answer: (C)

Identifying who might be harmed focuses on the people at risk and how they could be affected. In a basic risk assessment, this step is essential because it links the identified hazards to the actual groups that could be affected—staff, contractors, visitors, or others in the area—and helps tailor protective measures to those specific groups. By clarifying who is at risk, you ensure the controls you put in place address the real exposure scenarios and protect everyone who could be harmed, including anyone with increased vulnerability.

While identifying hazards, evaluating risks, and implementing controls are all important parts of the process, they don’t specifically answer who is at risk. This step directly determines the people who might be harmed, which then informs the appropriate protective actions.