Last updated 2026-07-11

TL;DR
JSA (Job Safety Analysis) and JHA (Job Hazard Analysis) are the same tool with two names. OSHA uses "JHA" officially, but both describe a written, step-by-step breakdown of a task that names the hazard and control at each step. OSHA 3071, titled "Job Hazard Analysis," is the authoritative reference. Use one before any new, changed, or high-risk task.
Are JSA and JHA actually different things?
No. A JSA and a JHA are the same document. The only difference is the name on the header.
OSHA's official term is "Job Hazard Analysis." Its 2002 guidance booklet, OSHA 3071, carries exactly that title and defines the process as "a technique that focuses on job tasks as a way to identify hazards before they occur" [1]. Construction and manufacturing have called the identical document a Job Safety Analysis for decades. You'll also run into "Job Safety and Environmental Analysis" (JSEA) in oil and gas, and "Task Hazard Analysis" (THA) among military and government contractors. None of these are legally distinct from each other under federal OSHA rules.
The confusion is real, which is why the question gets searched so often. Hand your general contractor a JHA when they asked for a JSA and nobody should flinch. They're looking at the same deliverable. What matters is whether the document does the work: it lists each step of the task, names the hazard at each step, and gives a specific control.
Language does matter in one narrow spot. Some contracts, insurance carriers, or client site rules name "JSA" or "JHA" specifically. Use whatever term the requiring party wants on the form, and make sure the content clears OSHA 3071's bar no matter what you call it.
What does OSHA actually say about JHAs and JSAs?
OSHA has no single standard that says "complete a JHA for every task." The obligation lives in the General Duty Clause of the Occupational Safety and Health Act, Section 5(a)(1), which requires a workplace "free from recognized hazards that are causing or are likely to cause death or serious physical harm" [2]. A JHA is OSHA's recommended way to meet that duty at the task level.
Several specific standards do demand written hazard analysis. Process Safety Management at 29 CFR 1910.119 requires it for covered processes [8]. Permit-Required Confined Spaces at 29 CFR 1910.146 requires hazard identification before entry [9]. Lockout/tagout at 29 CFR 1910.147 requires a documented energy control procedure for each machine [3]. In construction, 29 CFR 1926 Subpart P requires a competent person to classify soil and identify hazards before anyone enters a trench. The standards don't call these documents "JHAs," but a well-written JHA satisfies the requirement.
OSHA's Field Operations Manual also treats a missing hazard analysis as a factor that can push a citation into a higher severity classification. After a serious injury, inspectors routinely ask for any JSA or JHA tied to the task. If none exists, that gap can support a willful or repeat citation on its own.
Here's the short version. OSHA won't cite you for calling it a JSA instead of a JHA. OSHA will cite you for not analyzing the hazards at all.
What are the steps in a JHA (or JSA)?
OSHA 3071 lays out four steps, and they're simple enough that a crew lead can run them without hiring a consultant [1].
Step 1 is picking the job to analyze. Start with tasks that have already caused injuries or near misses, new tasks where workers have no experience, tasks that changed recently, and tasks with high-consequence exposures like falls, struck-by, electrical, and chemical. Falls, transportation incidents, and contact with objects together account for well over half of all fatal work injuries, per the Bureau of Labor Statistics [4], so those tasks belong at the front of your queue.
Step 2 is breaking the job into steps. List them in the order a worker actually does them. Don't lump everything into "do the electrical work," and don't grind a 10-minute job into 30 tiny steps. Five to fifteen steps fits most field tasks.
Step 3 is naming the hazard at each step. Ask what could go wrong at this exact moment. Think through energy sources (gravity, electrical, hydraulic, chemical, thermal), the environment (slick surfaces, confined spaces, overhead traffic), and the human factors (fatigue, time pressure, unfamiliar equipment). Be specific. "Worker could be struck by falling material" is a hazard. "Danger" is not.
Step 4 is choosing controls. Work down the hierarchy: elimination first, then substitution, engineering controls, administrative controls, and PPE last. A JHA that lists "wear gloves" as the only control for a task you could engineer out is a weak document. OSHA inspectors and plaintiff attorneys both notice when controls stop at PPE.
At the end, the supervisor signs and the worker signs before the task starts. That signature isn't paperwork for its own sake. It's the moment the hazards get communicated, which is itself a training obligation under the Hazard Communication standard [5] and the General Duty Clause.
When should you use a JHA vs a JSA, practically speaking?
Use whichever term your industry uses and whatever the requiring party expects on the form. "JHA" runs more common in general industry and health care. "JSA" dominates construction, energy, and petrochemical work. No existing convention at your company? Go with "JHA," because that's the language in OSHA's own materials and the term an inspector will reference.
Terminology aside, here's when you actually produce one.
Before any non-routine task. If a worker doesn't do this job every day, the hazards are harder to spot and more likely to surprise them. A written analysis earns its keep there.
Before any task that changed. New equipment, new process, new chemicals, new location. Change is where assumptions quietly break.
After any near miss or injury. Writing or revising a JHA after an incident is one of the corrective actions OSHA most often folds into settlement agreements.
For contractor and subcontractor coordination. When workers from several employers share a site, a shared JHA documents who owns which hazard control. That ties straight to OSHA's multi-employer worksite policy [10].
For lockout tagout work specifically, the JHA is the upstream document that tells you which energy sources need controlling before you write the LOTO procedure itself. Skip it and you get LOTO procedures that miss energy sources, because nobody walked the task through in order first.
How does a JHA differ from a risk assessment?
A JHA and a risk assessment overlap, but they aren't the same thing. The JHA is task-specific and sequential: it walks a single job step by step. A risk assessment is broader, sizing up a work area, a process, or a whole program to estimate the probability and severity of harm across many scenarios.
Some industries, chemical manufacturing and nuclear among them, run quantitative risk assessments that assign numbers to failure events. A JSA doesn't do that. It's qualitative and locked to one task.
ISO 45001, the international occupational health and safety management standard, treats risk assessment as a program-level tool. The JHA sits inside that as a task-level operational control. If you're working toward ISO 45001 certification, your JHAs are the evidence of "operational planning and control" under Section 8.1.
For a small business, the practical split is this. You need a JHA before specific tasks. You need a risk assessment when you step back and ask "which of all my tasks should I even be writing JHAs for?" Do the broader assessment first. Otherwise you'll burn hours writing JHAs for low-risk chores while the dangerous tasks sit untouched.
What should a JSA or JHA form actually include?
There's no federally mandated JSA format, but OSHA 3071 and common inspection practice point to the same core fields [1].
Every JHA form should carry:
- Job or task name
- Date completed (and date of last revision)
- Location where the task happens
- PPE required (that's the minimum; controls above PPE in the hierarchy get documented too)
- Tools and equipment used
- A three-column table: job step / hazard / control measure
- Names of everyone who took part in the analysis (the worker doing the job is a required participant, per OSHA 3071)
- Supervisor signature and worker signature
- Review date (most programs set annual review or review after any incident)
The three-column table is the actual document. Everything else is metadata. A vague table makes the whole form useless. "Lifting heavy materials" as a step is too loose. "Lifting pump assembly (approx. 80 lbs) from floor onto workbench" is specific enough that someone can name the real hazard (lower-back overexertion, dropped load) and a real control (mechanical lift, two-person lift, anti-fatigue mat at the destination).
For hazard communication purposes, any JHA step involving chemical exposure should point to the relevant Safety Data Sheet and note the exposure limits where they exist. That cross-reference earns its keep during an inspection.
What's the difference between a JHA and a JSA in construction specifically?
In construction, "JSA" is the term of art and has been for decades, in large part because the Associated General Contractors and major specialty contractor groups built their safety programs around it. The content is identical to a JHA.
Construction has pressures that bend the format in practice. Job sites change every day, so construction JSAs often get written at the start of the shift, sometimes called "daily JSAs" or "pre-task plans." A manufacturing JHA can stay valid for a year because the task never moves. A construction JSA might need a rewrite every morning because the site conditions, the crew, and the sequence of work all shifted overnight.
OSHA's construction standards at 29 CFR 1926 never use the word JSA, but several provisions create functional demand for one. Subpart M requires a fall protection plan for certain tasks. Subpart P requires soil classification and hazard identification before digging. Subpart Q requires a written plan for lift-slab operations. Each of those is, in function, a task-level JHA.
For work under forklift certification rules (29 CFR 1910.178 in general industry, 29 CFR 1926.602 in construction), the JHA for powered industrial trucks should name pedestrian traffic patterns, floor load ratings, and travel routes by hand. Those are the hazards that show up over and over in OSHA citations and BLS fatality data.
Do OSHA inspectors actually look at JHAs and JSAs during inspections?
Yes, and more often than most employers expect.
When OSHA opens an inspection after a serious injury or fatality, inspectors ask for all written safety programs, training records, and any task-specific documents completed before the incident. The JHA or JSA for the task in question is exactly what they want. Per the OSHA Field Operations Manual, inspectors weigh whether the employer recognized and addressed the hazard before it caused harm [6].
Hold a current, signed JHA that named the hazard and specified a control, and if the worker then deviated from that control, you're in a very different legal spot than an employer with no JHA at all. That's no guarantee against a citation. It's real protection. Employers who can produce documented hazard analysis land "other than serious" citations far more often than "serious" or "willful" ones.
No JHAs at all, and the absence becomes evidence. OSHA can cite the General Duty Clause and argue you failed to recognize a hazard your industry already recognizes. In construction, energy, and manufacturing, task-level hazard analysis is a recognized industry practice, so the missing JHA can support a citation even where no specific standard names one.
For incidents you have to report, our guide on writing an incident report covers how to make post-incident documentation hold up.
How long does it take to write a JHA, and who should write it?
A solid JHA for a standard task takes 20 to 45 minutes the first time. If it's taking two hours, you're writing at the wrong level of detail, or you're trying to cram a job that should be several JHAs into one.
OSHA 3071 is direct about who belongs in the room: "The employee who performs the job is a valuable resource" for spotting hazards [1]. That's not a nicety. A supervisor writing a JHA alone at a desk, without talking to the people who do the task, will miss hazards. Workers see the workarounds, the equipment quirks, and the conditions no supervisor watches from an office.
Good JHA authorship is a conversation, not a solo write-up. The supervisor drives the structure. The worker says what actually happens at each step and what worries them. A safety person, in-house or outside, helps apply the hierarchy of controls. Miss any of those three voices and the document gets weaker.
For a library of routine tasks, the first JHA for each task is the hard part. After that, review beats rewriting from scratch, and it's much faster. Set a schedule: review each JHA annually, after any incident involving the task, and after any change to the equipment, process, or people doing the work.
If you're building a written safety program without a dedicated safety person, SafetyFolio's safety program generator walks through your tasks and produces compliant written documentation in about 15 minutes. That gives you a starting draft your team can review and sign off on.
What are the most common JHA and JSA mistakes that get employers in trouble?
The mistakes that cause real trouble, in incidents or inspections, cluster around a handful of patterns.
Generic hazard descriptions. "Slip and fall hazard" is not hazard identification. "Worker moves from dry concrete onto wet tile while carrying a load, creating slip risk" is. Generic language tells everyone nobody actually thought about the task.
Controls that stop at PPE. PPE is the last line of defense, not the first. A JHA listing "wear hard hat and safety glasses" as the only control for a task with an obvious engineering fix is a liability, not a protection.
Missing worker signatures. No signature before the task means you can't prove hazard communication happened. In an inspection, unsigned JHAs get treated as if they don't exist for training and communication purposes.
Outdated forms. A JHA written in 2019 for equipment replaced in 2022, with no revision date, is worse than no JHA. It shows the system stopped working.
No JHAs for high-risk tasks. Some companies have JHAs for routine chores but skip the rare, high-hazard jobs on the logic that "we don't do this often enough to need a form." That's backwards. The less often a task runs, the more a written analysis matters.
Skipping the hierarchy of controls. The hierarchy is the framework OSHA uses to judge whether hazard control is adequate. It appears explicitly in the NIOSH hierarchy and runs throughout OSHA standards [7]. A JHA that never documents whether elimination or substitution was considered is weaker, even when PPE happens to be the right answer.
How do you build a JHA program, more than one-off forms?
A single JHA is a document. A JHA program is a system. The gap between the two shows up in inspections and in actual injury rates.
Start by inventorying your tasks. List every job task performed at your location, rough it in by frequency and consequence. That takes a few hours and builds the foundation. Then prioritize on three factors: injury history (what has actually hurt people), regulatory exposure (which tasks touch OSHA standards with specific requirements), and novelty (tasks workers are new to).
Set a production schedule. Forty tasks to analyze and one supervisor who can give it an hour a week means your library is done in about a year. That's a fine pace. Don't let perfect block done. A mediocre JHA for a high-risk task beats a perfect one still sitting in a planning doc.
Write review triggers into your safety calendar. Annual review, post-incident review, and change-triggered review belong in your written safety program, not in someone's memory.
Train supervisors to lead the JHA conversation, more than fill out the form. The talk before a task is where the safety value happens. The form is proof it happened.
For OSHA training purposes, the JHA doubles as a living training document. Onboard a new worker to a task by walking them through the JHA, and you've created a documented, task-specific training record. That satisfies elements of OSHA's general training requirements under several standards and backs your defense after an incident.
If you're putting supervisors through an OSHA 30 course, hazard identification and JHA methodology sit inside the 30-hour curriculum. Workers who finish the course already know the terminology and the process, which makes rolling out a JHA program much smoother.
JSA vs JHA: quick reference summary
Here's the practical comparison side by side.
| Feature | JSA (Job Safety Analysis) | JHA (Job Hazard Analysis) |
|---|---|---|
| OSHA's official term? | No | Yes (OSHA 3071) |
| Legally distinct from the other? | No | No |
| Common industries | Construction, energy, petrochemical | General industry, health care, government |
| Required by specific OSHA standard? | No (content required under specific standards) | No (content required under specific standards) |
| Format | Step / Hazard / Control | Step / Hazard / Control |
| Worker signature required? | Not by rule, but best practice | Not by rule, but best practice |
| How often reviewed? | Daily in construction, annually in general industry | Annually or after incident/change |
Nothing in the left column differs from the right in substance. The term is a style choice. The content requirements are identical, driven by OSHA 3071, industry practice, and whatever specific standards apply to your task [1].
If you work across industries or for multiple clients, set your template headers up so you can swap "JSA" for "JHA" (or the reverse) without redesigning the form. The three-column table underneath never changes.
Frequently asked questions
Is a JSA required by OSHA?
OSHA has no single standard that mandates a JSA by name. The General Duty Clause requires employers to address recognized hazards, and several specific standards (29 CFR 1910.119, 1910.146, 1910.147) require written hazard analysis as part of compliance. In practice, having no task-level hazard analysis is a real liability during inspections, especially after an injury.
Can I use the terms JSA and JHA interchangeably on OSHA paperwork?
Yes. OSHA doesn't penalize you for using "JSA" instead of "JHA" or the reverse. Its official guidance uses "JHA," but inspectors, compliance officers, and settlement agreements reference both terms without distinction. What matters is whether the document meets the content criteria: task steps, an identified hazard at each step, and specific controls.
How is a JHA different from a safety data sheet?
A Safety Data Sheet (SDS) covers a specific chemical: its hazards, exposure limits, and handling requirements. A JHA covers a specific task and may reference an SDS for steps involving chemical exposure. The two are complementary, not interchangeable. If a task involves hazardous chemicals, the JHA should note which SDS applies to that step and what the exposure controls are.
What is the hierarchy of controls and how does it apply to a JHA?
The hierarchy of controls ranks hazard control methods from most to least effective: elimination, substitution, engineering controls, administrative controls, and PPE. A good JHA documents that you considered controls in that order. OSHA and NIOSH both reference it. A JHA that jumps straight to PPE without weighing engineering controls is considered inadequate and can be used as evidence of an insufficient hazard control program.
Who is legally responsible for completing a JHA on a multi-employer construction site?
Under OSHA's multi-employer worksite policy, the controlling employer (usually the general contractor) is responsible for overall site safety and hazard correction. Creating employers (subcontractors who create a hazard) are responsible for analyzing their own tasks. Both GC and subs typically complete JHAs for their respective scopes. Contracts often spell out which party produces and approves JSAs for shared work areas.
How often should a JHA be updated?
Review your JHAs at least annually for routine tasks. Trigger an immediate review after any incident or near miss involving the task, after any change to the equipment or process, when new workers are assigned, or when the task moves to a new location or environment. In construction, many companies write a fresh JSA at the start of every shift because site conditions change daily.
Does a JHA count as employee safety training?
A signed JHA walk-through counts as task-specific hazard communication and can be documented as training. It satisfies the communication requirement under the Hazard Communication standard (29 CFR 1910.1200) for chemical steps in the task, and it supports a General Duty Clause defense for other hazards. It does not replace formal training required under specific standards, such as the initial training for confined space entrants under 29 CFR 1910.146.
What is a pre-task plan and is it the same as a JSA?
A pre-task plan is a shortened, daily version of a JSA used mostly in construction. It covers the tasks planned for that day, that crew, that location. A full JSA goes deeper and is often written once per task type, then reviewed before each use. A pre-task plan is often a one-page fill-in-the-blank that references the standing JSA. Some companies use the terms interchangeably; others treat the pre-task plan as a daily supplement to the standing JSA.
Can a small business use a template JHA, or does every form need to be custom?
Template JHAs are a reasonable starting point, especially for common tasks like forklift operation, ladder use, or chemical mixing. OSHA 3071 even provides sample forms. The risk is using a template without tailoring it to your equipment, environment, and process. An uncustomized template misses site-specific hazards. Start with a template, then modify it with input from the workers doing the task before anyone signs.
What happens if a worker is injured and there was no JHA for the task?
The absence of a JHA doesn't automatically create an OSHA violation, but it weakens your position. Inspectors ask for hazard analysis documents as part of any serious injury investigation. No JHA can be cited as evidence that the employer failed to identify a recognized hazard, supporting a General Duty Clause citation. In civil litigation, it's also evidence that the employer failed to exercise reasonable care.
Is a JHA the same as a process hazard analysis (PHA)?
No. A Process Hazard Analysis (PHA) is a formal, structured engineering review of a chemical process, required under 29 CFR 1910.119 (Process Safety Management) for facilities with highly hazardous chemicals above threshold quantities. PHA methods include HAZOP, Fault Tree Analysis, and What-If analysis. A JHA is a simpler, task-level document written by supervisors and workers. PHAs are typically done by multidisciplinary engineering teams and can take weeks.
Does OSHA 30 training cover how to write a JHA?
Yes. The OSHA 30-hour curriculum includes a section on hazard identification and control that covers JHA methodology. Supervisors who finish the course understand how to break tasks into steps, identify hazards, and apply the hierarchy of controls. It doesn't certify them as safety professionals, but it gives them working knowledge of JHA construction. OSHA 30 is not a substitute for hands-on practice writing actual JHAs for your specific tasks.
Are electronic JHA forms acceptable to OSHA?
Yes. OSHA has no requirement that safety documents be paper-based. Electronic JHA forms, digital signatures, and cloud-stored records are all acceptable as long as they're accessible, legible, and can be produced during an inspection. The same retention practices apply: keep completed JHAs for as long as the task is regularly performed and for at least as long as any applicable OSHA standard's recordkeeping requirement.
Sources
- OSHA, 'Job Hazard Analysis' (OSHA 3071, 2002 revised): OSHA's official definition of JHA, the four-step process (select job, break into steps, identify hazards, identify controls), and the requirement that workers participate in the analysis
- Occupational Safety and Health Act of 1970, Section 5(a)(1), General Duty Clause: Employers must provide a workplace free from recognized hazards likely to cause death or serious physical harm
- OSHA, 29 CFR 1910.147 - The Control of Hazardous Energy (Lockout/Tagout): Requires a documented energy control procedure for each piece of equipment
- Bureau of Labor Statistics, 'National Census of Fatal Occupational Injuries in 2022': Falls, transportation incidents, and contact with objects account for more than half of all fatal occupational injuries
- OSHA, 29 CFR 1910.1200 - Hazard Communication: Requires employers to communicate chemical hazards to workers, which a JHA step referencing an SDS satisfies
- OSHA Field Operations Manual (FOM), CPL 02-00-160, Chapter 3: OSHA inspectors evaluate whether the employer recognized and addressed the hazard before it caused harm
- NIOSH, 'Hierarchy of Controls': NIOSH hierarchy of controls framework ranks elimination, substitution, engineering controls, administrative controls, and PPE from most to least effective
- OSHA, 29 CFR 1910.119 - Process Safety Management of Highly Hazardous Chemicals: Requires hazard analysis for covered chemical processes above threshold quantities
- OSHA, 29 CFR 1910.146 - Permit-Required Confined Spaces: Requires identification of hazards before workers enter a permit-required confined space
- OSHA, 'Multi-Employer Citation Policy' (CPL 02-00-124): Controlling and creating employers have distinct responsibilities for hazard analysis on multi-employer worksites
- Bureau of Labor Statistics, 'Occupational Injuries and Illnesses: Industry Data (2022)': BLS industry-level injury and illness data used to identify high-frequency and high-severity task categories