How to conduct a job hazard analysis without a safety consultant

Last updated 2026-07-09

What is a job hazard analysis, and does OSHA require it?

A job hazard analysis (also called a job safety analysis, or JSA) is a written document that maps every step of a task, names the hazards at each step, and records what you're doing to control those hazards. JHA and JSA mean the same thing. OSHA uses "job hazard analysis" in its official guidance, so that's the term we'll stick with.

OSHA has no single standard that says every employer must complete a JHA for every task. What it has is the General Duty Clause (Section 5(a)(1) of the OSH Act), which requires employers to provide a workplace free from recognized hazards likely to cause death or serious physical harm ^[1]. When a citation comes down under the General Duty Clause, documented hazard analysis is one of the first things OSHA looks for to decide whether you took reasonable steps.

Beyond the General Duty Clause, specific standards do require formal hazard assessment. Personal protective equipment under 29 CFR 1910.132(d) requires a written certification of a hazard assessment before you decide what PPE workers need ^[2]. Lockout/tagout under 29 CFR 1910.147 requires documenting the hazardous energy sources for each piece of covered equipment ^[3]. Process safety management under 29 CFR 1910.119 requires process hazard analysis for covered facilities ^[8]. So while "JHA" as a named document isn't mandated across the board, the underlying work is baked into standards you're probably already subject to.

OSHA's JHA guide (OSHA 3071) puts it plainly: "The analysis focuses on the relationship between the worker, the task, the tools, and the work environment." ^[4] Keep that definition. A JHA isn't a compliance checkbox. It's a structured way to see a job the way an injured worker would describe it after the fact.

Which jobs should you analyze first?

Prioritize by risk. You can't do a JHA on every task in week one, and you shouldn't try. OSHA's JHA guide points you toward jobs with the highest injury or illness rates, jobs that could cause severe or disabling injuries even if no one has been hurt yet, and new or changed jobs where the hazards aren't well understood ^[4].

Here's a triage method that works. Pull your OSHA 300 logs from the past three years. Learn how to properly complete an incident report before you start, because the data is only useful if it's accurate. Look at which tasks appear over and over, which produced the most days away from work, and which involved near-misses that got reported informally. Those are your first JHAs.

No injury history yet? Lucky you, or you're new. Use BLS data as a proxy. The Bureau of Labor Statistics reports injury and illness rates by industry and occupation every year ^[5]. A small manufacturer in NAICS 332 (fabricated metal products) can look up that sector's injury rate and see which occupations drive the numbers. That tells you where to start even without your own history.

The "fatal four" in construction give another cut: falls, struck-by, caught-in/between, and electrical ^[9]. If your tasks involve working at height, moving equipment, machinery with pinch points, or energized equipment, those go to the front of the line no matter what your injury log says.

Who should be in the room when you do a JHA?

The people who do the job every day have to be part of the analysis. A supervisor writing a JHA alone at a desk is the most common mistake there is. You get a document that describes how the job is supposed to work, not how it actually works. The employee knows about the weird angle on step 4, the hose that drips, and the time pressure that makes shortcuts tempting.

For most small businesses, the right group is small: the employee who does the task most often, their direct supervisor, and someone who can watch with fresh eyes (a lead from another department works fine). If the task involves hazard communication or chemical exposure, whoever manages your SDS binder should be there too. If it involves powered industrial trucks, bring in whoever handles forklift certification for that operator.

Worker involvement isn't just good practice. OSHA's JHA publication states directly that "employees should be involved in all phases of the JHA, from development to training" ^[4]. When workers help write the analysis, they're more likely to follow the controls. That's not a soft benefit. It's the difference between a JHA that lives in a binder and one that changes behavior.

Keep the group to five people or fewer. More than that and you spend the session managing personalities instead of analyzing hazards.

How do you break a job into steps correctly?

This is where most first-time JHAs go wrong. People either make steps too broad ("operate the press") or too granular ("reach for the handle with right hand, grip handle, rotate 90 degrees"). Neither one helps.

Aim for task-based, not motion-based. Each step should describe a distinct action with a beginning and an end. A rule of thumb: if you can finish a JHA in fewer than four steps, you're too vague. If it takes more than fifteen, you're too detailed. Most tasks land between six and ten steps.

Have the employee actually perform the task while you watch, ideally at normal production pace. Film it on your phone if the employee agrees and it's safe to do so. Write down each distinct action in sequence, using active present-tense verbs: "Lift drum to loading platform," "Connect air line to fitting," "Open valve to start flow." Don't write why or how yet. Just capture what happens, in order.

Then review the step list with the employee and ask one question: "Did we miss anything?" People routinely do things automatically that never make it onto the first list. The step where they tap the guard to confirm it seated before hitting the power button. The check they do because a coworker got hurt that way two years ago. Those unofficial checks often reveal that the formal procedure is missing something real.

Watch for steps that happen only sometimes: start-up, shut-down, cleaning, or clearing a jam. Incident data keeps showing that these infrequent tasks produce a disproportionate share of injuries. They belong in a separate JHA, or at minimum in their own section.

How do you identify the hazards at each step?

For each step you've written down, ask a plain question: what could go wrong here that would hurt someone? Push past the obvious. Use a hazard category checklist so you don't skip anything.

OSHA organizes hazards into broad types: struck-by, struck-against, contact-with, caught-in, caught-between, caught-on, fall-from, fall-to, overexertion, and exposure (to noise, chemicals, heat, radiation, or biological agents) ^[4]. Run each category against each step. Most steps produce zero hazards in most categories, and that's fine. You're just proving you looked.

For each hazard you find, write a specific description. "Employee could be struck by falling drum if grip fails during lift" is useful. "Hazard: falling" is not. Specificity matters because the control you pick has to match the specific hazard, and vague hazards breed vague controls.

Some hazards never show up during the observation. Chemical hazards often hide. If a step involves a product with a safety data sheet, pull the SDS and check sections 2, 8, and 11 for hazard information and exposure limits. Ergonomic hazards show up only after you measure force, repetition, or posture against published thresholds like the NIOSH Lifting Equation ^[11]. Noise hazards need a sound level meter, not your ears.

An honest note: there's no perfect hazard identification process. Even trained industrial hygienists miss things on first pass. The goal is systematic, documented effort, not perfection. A JHA you revisit and improve beats a flawless first draft that never gets updated.

What controls should you put in place, and in what order?

Once you have a hazard, you need a control, and the order matters. OSHA and NIOSH both use the hierarchy of controls to decide which control to reach for ^[6]. It runs from most effective to least effective:

Control Type	Description	Example
Elimination	Remove the hazard entirely	Discontinue use of a toxic solvent
Substitution	Replace with something less hazardous	Switch to a water-based cleaner
Engineering controls	Isolate people from the hazard	Add a machine guard or local exhaust ventilation
Administrative controls	Change how work is done	Rotate workers to limit exposure time
PPE	Protect the worker from the hazard	Require gloves and safety glasses

The mistake most small employers make is jumping straight to PPE. Gloves are cheap and fast to buy. Redesigning a workstation is harder and costs more. But PPE is also the control most likely to fail, because it depends on human behavior: the worker has to wear it correctly every single time. Engineering controls keep working even when people are tired, distracted, or rushing.

In your JHA, list controls in hierarchy order and note which ones you're actually putting in place. If you're relying on administrative controls or PPE because engineering isn't feasible right now, say so, and document when you'll revisit. That documentation matters if OSHA ever asks why you didn't do more.

For tasks that need lockout/tagout, the energy control procedure is itself a control that belongs in the JHA. Reference the specific LOTO procedure by name so the two documents are linked. Under 29 CFR 1910.147(c)(4)(i), energy control procedures must be documented for each machine or piece of equipment ^[3].

What does a completed JHA form look like?

The format matters less than the content, but keep a consistent template so every JHA in your program looks and works the same. At minimum, a JHA form needs a job title, date, the person(s) who did the analysis, the employee(s) involved, and a three-column table with Job Step, Hazards, and Controls.

Here's what a single row looks like for a warehouse task:

Job Step	Hazards	Controls
Lift 50-lb bag from floor pallet to conveyor at shoulder height	Overexertion/strain to lower back from awkward posture; repetitive lifting beyond NIOSH recommended weight limit for that height	Lower pallet stands to reduce lift height; rotate workers every 30 min; require two-person lift for any bag above 40 lbs; supervisor to review NIOSH Lifting Equation limits quarterly

Add fields for date of last revision, who reviewed it, and signature lines for the employee and supervisor. The signature isn't just bureaucratic. It shows the employee was trained on the hazards and controls before performing the task, which matters for the PPE training documentation under 29 CFR 1910.132(f) ^[2].

OSHA's free JHA template (OSHA 3071) is a fine starting point ^[4]. If you want something that ties directly into your broader written safety program, SafetyFolio's program generator can produce a JHA template formatted to match your other OSHA-required documents, which saves some of the formatting work.

Keep completed JHAs where workers can find them. If someone is about to do the task for the first time, they should locate the JHA without asking three people. A shared drive folder organized by task name works fine.

How do you train workers using the JHA?

A JHA you write and file away does nothing. Training is where it actually prevents injuries.

For each new JHA, gather the employees who do that task and walk through it before they start the job. Go step by step. At each hazard, ask them what they'd do if the control wasn't in place, or if it failed. You're testing comprehension, not compliance. If they can tell you why the control exists, they're more likely to use it when you're not watching.

Don't skip the review for veterans. Experienced workers often have the deepest knowledge of what actually goes wrong, but they also develop habits that bypass controls. The JHA review is a non-punitive way to surface those habits and talk about them.

Document the training. Write down the date, the JHA reviewed, and who attended. If you ever face an OSHA inspection after an incident, training records are one of the first things the compliance officer requests. OSHA training documentation requirements vary by standard, but for PPE-related tasks, 29 CFR 1910.132(f)(4) requires you to certify training in writing ^[2].

If your workers would benefit from a broader safety foundation, an OSHA 30 course covers hazard recognition in more depth. It isn't required for conducting JHAs, but workers who've had formal hazard training tend to give better input during the analysis itself.

When should you update or redo a JHA?

JHAs go stale. A task that hasn't changed in five years probably still has the same hazards, but you should verify that periodically. A task where the equipment, materials, or procedure has changed needs an updated JHA before the change goes live, not after.

Some events demand an immediate review: any injury or near-miss involving the task, any change in equipment, any change in the chemical products used, any change in production pace or staffing that affects how the task is done, and any new OSHA standard that applies.

The periodic cadence most safety professionals use is annual for high-hazard tasks and every two to three years for routine lower-hazard tasks. OSHA doesn't require that schedule, but it's a defensible practice if a citation ever challenges whether your program was active.

When you revise a JHA, keep the old version. Date and version-label both. The revision history shows your program evolves based on real experience, which is exactly what OSHA and plaintiff attorneys look for when they judge whether an employer was genuinely trying.

What are the most common JHA mistakes, and how do you avoid them?

The supervisor-only draft is the biggest one, and we covered it earlier. Here are the rest.

Writing steps from memory instead of observation. People describe how the job should go, not how it does go. Watch the task live, every time.

Listing hazards without controls, or listing controls that don't match the hazards. "Provide training" is not a control for a machine guarding hazard. If you can't name a specific, implementable control, the analysis isn't finished.

Using JHA language the worker can't read. Write at a level your least-experienced employee understands. If your workforce includes people whose first language isn't English, translate the JHA. OSHA has cited employers for providing safety documents in English only when English proficiency was limited.

Filling out forms for jobs nobody does anymore. Audit your JHA library once a year and archive outdated documents. An obsolete JHA that contradicts current practice is a liability, not a protection.

Leaving the JHA disconnected from your other written programs. Your hazard communication program should cross-reference the JHAs for chemical tasks. Your PPE program should reference the hazard assessments. When every document points to the others, you have a program. When they sit separate and never reference each other, you have paperwork.

One more: don't let perfect be the enemy of done. A four-step JHA on a single task, written this week, reviewed with the worker, and signed, beats a plan to write twenty JHAs next quarter.

How long does a JHA take, and what does it cost?

For a single task, count on 30 to 90 minutes from observation through final written draft. The first few take longer because you're building the process. By your fifth or sixth, an experienced supervisor can move through a routine task in under an hour.

The cost is almost entirely labor time. Spend two hours of supervisor time and one hour of employee time on a JHA, and at a loaded labor cost of $40/hour combined, you're looking at roughly $120 per JHA. A small operation with 20 tasks to analyze might invest $2,000 to $3,000 in labor over a few months. That's the realistic number, and it doesn't include any engineering controls the process uncovers.

Compare that to the downside. OSHA penalties for willful or repeated violations run up to $16,550 per violation as of the 2024 federal penalty adjustments ^[7]. A single serious injury carries workers' compensation costs that BLS data puts in the tens of thousands of dollars depending on injury type ^[5]. The math on prevention isn't close.

Consultants who specialize in JHA development typically charge $150 to $300 per hour, and a full program for a small facility might run $3,000 to $8,000 or more. If you have genuinely complex processes (confined space, high-voltage, process chemicals), a one-time consult to review your methodology is money well spent. For most small businesses with standard general industry tasks, you can do this yourself with the right process and template.

SafetyFolio's safety program generator won't write your JHAs for you (no tool can observe your actual tasks), but it can produce the written safety program framework and templates your JHAs feed into, which cuts the administrative setup time.

Where can you find free JHA resources and templates?

OSHA's JHA publication (OSHA 3071, revised 2002) is the primary reference and free to download from OSHA.gov ^[4]. It includes sample JHA forms, a filled-in example, and the full methodology. It's older but still accurate on the process.

The National Safety Council and NIOSH both publish hazard identification resources. NIOSH's hierarchy of controls page is the one to read for the controls column of your JHA ^[6]. State Plan states often have their own guidance with state-specific examples. CalOSHA, for one, has supplementary materials that go deeper than the federal guide.

For the hazard identification step, OSHA's industry-specific eTool library (at osha.gov/etools) covers construction, maritime, healthcare, and several other sectors with task-level hazard breakdowns you can borrow as a reference ^[10]. They aren't a substitute for observing your actual tasks, but they're a good sanity check that you didn't miss a common hazard category.

If your operation touches chemicals, Section 2 (hazard identification) and Section 8 (exposure controls and PPE) of every safety data sheet are free, required information that feeds the hazard and controls columns directly. Learn to read them, and make SDS review a standard part of your JHA process for any task involving chemicals.

Frequently asked questions

Is a job hazard analysis the same as a risk assessment?

They're related but not identical. A JHA is a specific method: break the job into steps, identify hazards at each step, assign controls. A risk assessment is broader and sometimes more formal, often scoring probability and severity to prioritize which hazards need attention first. OSHA uses JHA terminology in most of its guidance. Some industries and international standards (ISO 45001, for example) use risk assessment language. For most small businesses, JHA is the right tool and the right vocabulary.

Do I need a JHA for every task in my workplace?

No, and trying to do that upfront will stall your program. Start with tasks that have caused injuries or near-misses, tasks with serious injury potential even if nothing has happened yet, and tasks that are new or recently changed. Build from there. OSHA doesn't require a JHA for every task, but a high-hazard task with no documented hazard analysis is exactly the one that creates General Duty Clause exposure.

Can I use a JHA template I found online?

Yes, as a starting point. Most JHA templates share the same structure: job steps, hazards, controls, plus header information. The content has to come from observing your actual tasks. A template you download and fill with generic language isn't a JHA. It's a form. The value comes from the analysis your team does while completing it. Check any template against OSHA 3071 to make sure it covers the fields OSHA expects.

Does OSHA require me to keep completed JHAs on file?

No general OSHA standard requires JHA retention, but specific standards require related documentation. The PPE hazard assessment certification under 29 CFR 1910.132(d) must be kept, and energy control procedures under 29 CFR 1910.147 must be documented and retained. As a practical matter, keep all completed JHAs indefinitely. They demonstrate your good-faith hazard identification effort, and you'll want them if an incident happens or OSHA visits.

What's the difference between a JHA and a standard operating procedure (SOP)?

An SOP tells workers how to do the job correctly. A JHA tells workers what can hurt them at each step and what controls are in place. They complement each other. Best practice is to write the JHA first, to identify hazards and controls, then fold the safety controls into the SOP so workers see them in context. Some organizations combine the two into a single document called a Safe Work Procedure.

How do I handle hazards I can't eliminate or engineer out?

Document why the higher-order control isn't feasible, which administrative controls you're using to cut exposure or probability, and what PPE you require as the last layer. Then set a date to revisit whether the engineering solution has become affordable or available. OSHA doesn't expect perfection, but it does expect documented, good-faith effort. "We couldn't afford a guard" isn't enough. "We've budgeted for a guard in Q3 and are using two-person procedures until then" is a much stronger position.

Can an OSHA compliance officer demand to see my JHAs during an inspection?

Yes. During a broad inspection or one triggered by an incident, a compliance officer can request your written safety programs, hazard assessments, and training records. If a JHA exists for the task involved in an incident, the officer will review it to see whether you identified the hazard, put a control in place, and trained workers on it. If you have no JHA for a high-hazard task that caused an injury, that gap can support a General Duty Clause citation.

How is a JHA different from a process hazard analysis (PHA)?

A PHA is required by OSHA's Process Safety Management standard (29 CFR 1910.119) for facilities that handle highly hazardous chemicals above threshold quantities. It's far more involved than a JHA, usually needs a multi-disciplinary team and formal methods like HAZOP or What-If, and applies to the overall process rather than individual tasks. Most small businesses never touch PSM requirements. A JHA is the right tool for task-level hazard analysis at any workplace.

What industries benefit most from doing JHAs?

BLS data consistently shows the highest injury rates in construction, agriculture, manufacturing, warehousing, and healthcare. JHAs pay off most in those sectors. But any business where workers use machinery, handle chemicals, work at height, or lift and move materials benefits from them. Even office-based businesses have tasks worth analyzing, though the priority is naturally lower than in physical-hazard-heavy operations.

Do I need to redo a JHA every time a temporary worker does the job?

You don't need a new JHA, but you do need to train every worker on the existing one before they perform the task, including temporary and contract workers. OSHA's multi-employer worksite policy holds the controlling employer responsible for ensuring temporary workers get hazard information ^[12]. Get written confirmation that the staffing agency reviewed your JHA hazard information with the worker before placement, and train them again yourself on site-specific controls.

How detailed should the hazard description be in a JHA?

Specific enough that a first-time reader understands exactly what can go wrong and why. "Contact with moving parts" is too vague. "Hand contact with unguarded blade during cardboard removal from conveyor, resulting in laceration" is usable. The test is whether the description tells you which control to pick. Vague hazards lead to generic controls like "be careful," which aren't controls at all.

Can I conduct a JHA virtually or remotely?

The observation step is hard to do remotely, and it's the most important part. If you can't be there in person, live video (phone or camera) with the worker walking through the task is the next best option. The analysis and control discussion can happen over video call. For remote sites or traveling crews, train a site lead to run the observation and feed notes to a central analyst. The written output should still pass through a qualified set of eyes before it's final.

What if my workers are resistant to participating in a JHA?

Resistance usually comes from one of two places: workers think it's an evaluation of their performance, or they think nothing will change anyway. Address both directly. Frame the JHA as an analysis of the task, not the person. And when workers flag hazards during the analysis, actually fix them. Even one small improvement after the first session changes how people see the process. Workers who've watched it lead to real change become your best contributors.

Sources

1. OSHA, OSH Act of 1970, Section 5(a)(1) General Duty Clause: Employers must provide a workplace free from recognized hazards that are causing or likely to cause death or serious physical harm.
2. OSHA, 29 CFR 1910.132, Personal Protective Equipment - General Requirements: 29 CFR 1910.132(d) requires a written certification of a hazard assessment before determining PPE; 1910.132(f) requires documented PPE training.
3. OSHA, 29 CFR 1910.147, Control of Hazardous Energy (Lockout/Tagout): 29 CFR 1910.147(c)(4)(i) requires documented energy control procedures for each machine or piece of equipment covered by the standard.
4. OSHA, Job Hazard Analysis (OSHA 3071, revised 2002): OSHA defines the JHA as focusing on the relationship between the worker, the task, the tools, and the work environment; the guide states employees should be involved in all phases from development to training.
5. Bureau of Labor Statistics, Survey of Occupational Injuries and Illnesses: BLS reports annual injury and illness rates by industry (NAICS) and occupation, which can be used to prioritize JHA tasks when no internal injury history exists.
6. NIOSH, Hierarchy of Controls: NIOSH recognizes the hierarchy of controls (elimination, substitution, engineering controls, administrative controls, PPE) as the standard framework for controlling workplace hazards.
7. OSHA, Penalties: OSHA maximum penalty for willful or repeated violations is $16,550 per violation as of 2024 federal penalty adjustments.
8. OSHA, 29 CFR 1910.119, Process Safety Management of Highly Hazardous Chemicals: 29 CFR 1910.119 requires a formal process hazard analysis for facilities handling highly hazardous chemicals above threshold quantities.
9. BLS, Census of Fatal Occupational Injuries Summary: BLS CFOI data identifies falls, struck-by, caught-in/between, and electrical contact as consistently leading causes of fatal occupational injuries.
10. OSHA, General Industry eTool Library: OSHA's eTool library provides task-level hazard breakdowns by industry sector that can supplement JHA hazard identification.
11. NIOSH, Ergonomics and Musculoskeletal Disorders: NIOSH publishes the Revised Lifting Equation for evaluating manual lifting tasks and setting recommended weight limits by posture and frequency.
12. OSHA, Multi-Employer Worksite Policy (OSHA Directive CPL 02-00-124): OSHA's multi-employer policy holds controlling employers responsible for ensuring temporary and contract workers receive hazard information for the tasks they perform.