Australia Model Code of Practice Managing the Risks of Biological Hazards at Work 3: Apply the four-step risk management process to biological hazards in a planned, systematic, regularly reviewed way covering all foreseeable hazards, scaled to the size and nature of the business, revisited on change and emerging disease situations, with workers and HSRs consulted at every step, controls reviewed and the process repeated when they fail, and the process and outcomes recorded

What does 3 require?

The risk management process for biological hazards has four steps: identify hazards, assess risks (the nature, seriousness and likelihood of harm), control risks (eliminate where reasonably practicable, otherwise implement the most effective reasonably practicable controls), and maintain and review controls so they stay effective, are used correctly and work as planned. Risk management should be planned, systematic, regularly reviewed and cover all foreseeable hazards and risks, implemented in a way that suits the size and nature of the business; larger businesses and sectors with heavier exposure (hospitals, pathology laboratories, veterinary clinics) need more comprehensive processes than a sole trader electrician, hairdresser or gardener. It is proactive and ongoing, needing attention when the workplace changes or new hazards appear, and in an emerging infectious disease situation (Japanese or Murray Valley encephalitis, avian influenza) the risk assessment may need frequent review with rapid, communicated changes to controls. At each step the PCBU must consult the workers likely to be affected and include their HSR, seeking feedback on exposures and gaps. Signs that controls are failing, such as a potential exposure from wrong PPE or a worker falling ill from Legionnaires' disease, call for a review of the controls and a repeat of the process. The process, its outcomes and the consultation should be recorded.