Osha Requires Employers To Perform Assessments Regularly

Most safety managers learn about OSHA assessments the hard way. And an injury happens. A citation shows up. Someone asks "when did we last check this?" and the answer is awkward silence.

Here's the thing: OSHA requires employers to perform assessments regularly — not once, not when you remember, but on a schedule that actually matches your workplace risks. And most companies either overdo it (wasting time on paperwork nobody reads) or underdo it (missing the hazards that actually hurt people).

Let's fix that.

What OSHA Actually Means by "Assessments"

People hear "assessment" and picture a clipboard checklist. Sometimes that's right. Often it's not.

OSHA doesn't use one single definition. The common thread? The word shows up across dozens of standards — each with its own trigger, frequency, and documentation requirement. You're systematically looking for hazards before they cause harm.

The big ones you can't ignore

Hazard assessments (29 CFR 1910.132) — This is the PPE standard. You have to evaluate the workplace to determine if hazards are present that require personal protective equipment. Written certification required. Must be updated when conditions change.

Job hazard analyses — Not explicitly named in every standard, but effectively required by the General Duty Clause (Section 5(a)(1)) and referenced in things like lockout/tagout, confined space, and process safety management. You break a job into steps, identify hazards at each step, and document controls.

Ergonomic assessments — No specific OSHA ergonomics standard exists (Congress killed it in 2001). But citations still happen under the General Duty Clause. If your workers have repetitive motion injuries and you never looked at the workstation design, you're exposed.

Noise assessments (29 CFR 1910.95) — Required when exposures may equal or exceed 85 dBA TWA. Must be repeated when production, process, or controls change.

Air monitoring — Required for specific substances (lead, asbestos, silica, benzene, etc.) at action levels or PELs. Frequency depends on the substance and initial results.

Confined space assessments (29 CFR 1910.146) — You have to identify all permit-required confined spaces. Re-evaluate when the space changes or new hazards are introduced.

Process hazard analyses (29 CFR 1910.119) — For covered chemical processes. Must be updated at least every five years.

That's not even a complete list. But notice the pattern: change triggers reassessment. New equipment, new chemicals, new layout, new process, incident, near-miss — the clock resets.

Why This Matters More Than You Think

Citations are the obvious cost. Serious violations run $16,131 each (2024 rates). $161,323. Willful or repeat? But the real costs don't show up on the citation.

The hidden ledger

Workers' comp premiums. In real terms, an ergonomic assessment that prevents one back injury saves $40,000–$80,000 in direct and indirect costs. Multiply that across a workforce.

Downtime. Practically speaking, a confined space incident shuts down a line for days. A proper assessment takes hours.

Turnover. Because of that, people leave workplaces where they don't feel safe. Even so, replacing a skilled technician costs 1. 5–2x their salary.

Reputation. One fatality hits the local news. Day to day, customers ask questions. Contracts don't renew.

And here's what most safety pros won't say out loud: assessments are the only way to prove you gave a damn before something went wrong. In litigation, "we looked and didn't see it" beats "we never looked" every single time. That's the part that actually makes a difference.

How to Build an Assessment Program That Actually Works

Don't start with templates. Start with a map.

Step 1: Inventory every assessment requirement that applies to you

Sit down with your applicable standards. Highlight every "shall assess," "shall evaluate," "shall monitor," "shall review." Put them in a spreadsheet:

You get the idea. Which means this spreadsheet becomes your master schedule. It lives in your safety management system, not a binder on a shelf.

Step 2: Assign ownership — real ownership

"Safety department does everything" is a recipe for failure. Practically speaking, the maintenance supervisor owns the lockout/tagout periodic inspections. The production manager owns the JHAs for their lines. The industrial hygienist (or consultant) owns air monitoring.

For more on this topic, read our article on definition of near miss in safety or check out what happens when you file an osha complaint.

Write it into job descriptions. This leads to put it in performance reviews. If nobody's evaluated on it, nobody does it.

Step 3: Build a calendar with teeth

Quarterly: PPE hazard assessment walkthroughs (even if not strictly required quarterly — it's a good cadence) Semi-annually: Noise spot-checks in high-noise areas Annually: Full JHA review for high-risk tasks Every 5 years: Process hazard analysis revalidation Event-driven: Any change, incident, near-miss, new hire in a high-hazard role

Put recurring events on the calendar now. Not "when we have time." The calendar sends the invite. The owner accepts or delegates. Done.

Step 4: Standardize the output — but not the thinking

Templates are fine for consistency. But if your JHA template has a column for "hazard" and people write "falling" instead of "worker falls 12 ft from unguarded mezzanine edge while reaching for parts," the template failed.

Train people to write hazards like a plaintiff's attorney would read them. Measurable. Plus, specific. Actionable.

Bad: "Chemical exposure" Good: "Skin contact with undiluted sodium hydroxide (50%) during manual drum pumping — splash risk to face/arms"

Bad: "Ergonomic risk" Good: "Repetitive wrist deviation > 30° and forceful grip > 15 lbs at 12 cycles/minute on Line 3 packaging station"

The second version tells you exactly what to fix. The first tells you nothing.

Step 5: Close the loop — every single time

Assessment → Hazard found → Control selected → Control implemented → Verification → Documentation → Communication to affected workers.

Most programs die at step 3 or 4. Someone writes "install guard" and six months later the guard still isn't there. Plus, or it's there but nobody verified it works. Or it works but the operator wasn't trained on the new guard.

Track open items. Age them. Escalate them. Report on them in leadership meetings.

Common Mistakes That Get People Cited

"We did it once in 2019"

OSHA doesn't care about 2019. They care about today. If the process changed, the chemicals

Common Mistakes That Get People Cited

"We did it once in 2019"

OSHA doesn’t care about 2019. They care about today. If the process changed, the chemicals you handled yesterday might now pose a new risk. If you stored sodium hydroxide in a broken container last month, but didn’t update your labeling or training, that’s a violation. Compliance isn’t a checkbox from a past audit—it’s a living, breathing requirement.

"We trained everyone, but no one remembers"

Training is only effective if it’s relevant, repeatable, and reinforced. A one-time JHA walkthrough with no follow-up or refresher sessions is like handing someone a map and telling them to find their way without checking the directions. Workers forget. Processes evolve. Without regular engagement—like quarterly refreshers or role-specific drills—your controls become obsolete.

"We documented everything, but no one sees it"

A JHA or hazard assessment is useless if it’s buried in a shared drive or printed and left in a drawer. Workers need to know what to do, why it matters, and who to ask if something changes. Make safety information accessible: post critical JHAs near high-risk equipment, share digital copies via a centralized portal, and ensure new hires review them during onboarding.

"We fixed the hazard, but didn’t verify it worked"

Saying “we installed a guardrail” isn’t enough. Did you test it? Did workers confirm it prevents falls? If a machine guard was replaced but no one verified its alignment or functionality, you’re still liable if an accident occurs. Verification isn’t optional—it’s proof that your controls are real, not just paperwork.

Conclusion

Safety management isn’t a static document or a one-time effort. It’s a dynamic system that demands ownership, accountability, and relentless attention to detail. By turning spreadsheets into actionable tools, assigning responsibility at every level, and closing the loop on every hazard, you transform compliance from a chore into a culture. OSHA citations often stem from neglect—ignoring changes, skipping verification, or failing to adapt. But when safety becomes everyone’s responsibility, not just the safety department’s, risks diminish, and real protection takes root. Start today. Update your calendar. Assign ownership. Write hazards like they matter. Because in safety, the only thing worse than a citation is a preventable injury.