QUALITY INTL CERTIFICATIONSHIRA Risk Assessment UAE — Hazard Identification Guide
HIRA stands for Hazard Identification and Risk Assessment — the umbrella term used across UAE energy and construction sites, in ADNOC-style systems, for breaking work into steps, identifying hazards, scoring risk on a 5x5 likelihood-by-severity matrix, applying the hierarchy of controls, then getting the residual risk approved before work begins.
HIRA for UAE sites: the process, 5x5 matrix, hierarchy of controls, worked example.
What HIRA Means on UAE Sites
HIRA is the umbrella ADNOC-style term covering JSA-type tools. On an Abu Dhabi energy facility, the word HIRA appears in procedures, permits and pre-qualification documents; contractors from Dubai to Ruwais meet it when they submit safety documentation for approval. The point of the umbrella is consistency: whatever the task-level document is called on a particular project, the underlying process — find the hazards, evaluate the risk, control it — is the same.
HIRA is done before work starts, not after. It feeds permits to work, method statements and toolbox briefings, and it lives as a document that a supervisor, HSE officer or client approver can read, challenge and sign. A HIRA done in the office and never taken to site is a formality; the ones that matter are the ones the crew actually discussed at the workfront.
The term also travels. A rigger who learned JSA on a Dubai tower project, an electrician who learned TRA on a Sharjah industrial job and an operator who learned HIRA on an Abu Dhabi oil facility are all describing the same discipline. When a client asks for HIRA and you have been writing JSAs, you translate rather than start again — the steps, matrix and controls carry over.
The Six Steps of a HIRA
Step one is activity breakdown. Split the job into its natural steps — isolate, prepare, execute, reinstate — because hazards attach to steps, not to job titles. "Repair the pump" hides six different hazards; "isolate, drain, open, work, close, reinstate" exposes each one to be assessed. Step two is hazard identification: for each step, list what could harm people, drawing on the hazard categories below and on the memory of the people who actually do the work. Step three is risk evaluation: score each hazard for likelihood and severity on the 5x5 matrix and multiply them.
Step four applies the hierarchy of controls to bring the risk down. Step five re-scores the residual risk with those controls in place — the number that decides whether work can proceed. Step six is approval: a competent person signs the HIRA, and it is communicated to the crew before work starts. On UAE sites that sign-off is typically tied to the permit process.
| Severity \ Likelihood | 1 Rare | 2 Unlikely | 3 Possible | 4 Likely | 5 Almost certain |
|---|---|---|---|---|---|
| 1 Negligible | 1 | 2 | 3 | 4 | 5 |
| 2 Minor | 2 | 4 | 6 | 8 | 10 |
| 3 Moderate | 3 | 6 | 9 | 12 | 15 |
| 4 Major | 4 | 8 | 12 | 16 | 20 |
| 5 Catastrophic | 5 | 10 | 15 | 20 | 25 |
Scores run from 1 to 25. Your site's own procedure defines which bands trigger extra controls or stop the job — use those bands, not invented ones, and record the score both before and after controls.
Hazard Categories and the Hierarchy of Controls
A structured HIRA checks every step against eight hazard categories: mechanical (moving parts, rotating equipment), electrical (energy sources, cabling), falls (work at height, openings), manual handling (lifting, posture, repetition), chemical (cleaning products, fuels, process chemicals), biological (waste, contaminated surfaces), psychological (fatigue, lone work, pressure) and environmental (heat, dust, noise, weather). The discipline of running the full list is what stops a HIRA from only finding yesterday's hazards.
Controls follow a fixed hierarchy: eliminate the hazard, substitute something less dangerous, engineer it out, apply administrative controls, and only then rely on PPE. Elimination removes the risk for everyone forever; PPE protects one person, one shift, if they wear it correctly. A HIRA whose controls are all PPE has not really been thought through — reviewers read that pattern instantly.
The order is not decoration. Removing a fragile roof panel by working from a platform below eliminates the fall entirely; a harness merely reduces its consequence. Every rung you drop down the hierarchy moves protection from the workplace to the individual, and each step in that direction weakens the control. A strong HIRA explains why the higher rungs were impractical before settling for lower ones.
Worked Example: Tank Cleaning Entry
Consider a tank cleaning entry on an Abu Dhabi industrial site. Activity breakdown: isolate and blank the tank, ventilate, test the atmosphere, enter and clean, exit and reinstate. Hazard identification flags a hazardous atmosphere inside the tank, chemical residue on the walls, heat, and manual handling of equipment through the manway.
Risk evaluation: an uncontrolled atmosphere in a confined space could be catastrophic (severity 5) and, without controls, exposure is possible (likelihood 3) — a score of 15. Controls follow the hierarchy: forced ventilation, gas testing before and during entry, a standby attendant at the manway, a permit to work, and PPE as the final layer. Residual risk re-scores with those controls in place, and the approved HIRA is briefed to the crew before entry. If any control is missing on the day, the score is no longer valid — that is the logic of stop-work authority.
Notice the sequence discipline. The gas test belongs to the "test the atmosphere" step, the attendant to the "enter and clean" step, so each control lands where the hazard lives. That traceability is what an approver checks line by line: a control that cannot be tied to a step and a hazard is decoration, and decoration does not survive an audit.
HIRA vs JSA, FRA and TRA
| Term | What it is | Where you meet it |
|---|---|---|
| HIRA | The umbrella hazard identification and risk assessment process | ADNOC-style systems, UAE procedures and approvals |
| JSA | Job-level tool that breaks one job into steps and controls each | Daily tasks, permit attachments |
| FRA | Field risk assessment, the on-the-day check of conditions | Before work starts at the workfront |
| TRA | Task risk assessment, task-specific scoring and controls | Contractor submissions, method statement packs |
The documents are variations of the same thinking. What a reviewer looks for in any of them is documentation discipline: steps that match the real job, hazards from all eight categories, scores that change when controls are applied, and a signature from someone competent to challenge both. HSE training providers such as QIC (Quality International Certifications), a UAE training and inspection company since 1998, teach HIRA alongside the JSA-family tools, so the vocabulary gap is easy to close.
Checklist
Run this list over your next HIRA before you submit it:
- Break the activity into steps before hunting for hazards.
- Check all eight hazard categories against every step.
- Score likelihood and severity on the 5x5 matrix and record the product.
- Apply controls in hierarchy order — elimination first, PPE last.
- Re-score the residual risk with controls in place.
- Confirm who approves the HIRA and route it for signature.
- Brief the approved HIRA to the crew before work starts.
- Re-check the assessment whenever conditions, crew or scope change.
Focusing on fire as your hazard category? The fire risk assessment training UAE guide breaks down course levels, fees and provider selection for fire-specific HIRA work.
Expect interview panels to test HIRA fundamentals — the safety officer interview question bank for the UAE includes scenario-based risk assessment answers.
HIRA methodology feeds directly into the ISO 45001 workplace safety framework for UAE firms — hazard registers become the operational controls auditors verify.
Frequently Asked Questions
What is HIRA in safety?
Hazard Identification and Risk Assessment — the umbrella term, used in ADNOC-style systems across the UAE, for the process of breaking work into steps, identifying hazards, evaluating risk, applying controls and getting approval before work begins. JSA-type tools sit underneath it as task-level expressions of the same process.
What are the steps of a HIRA risk assessment?
Break the activity into steps, identify hazards against each step, evaluate risk as likelihood multiplied by severity on a 5x5 matrix, apply controls following the hierarchy, re-score the residual risk, and obtain approval from a competent signatory before work starts. Then brief the crew and re-check when conditions change.
Is HIRA the same as JSA?
They overlap but are not identical. HIRA is the umbrella process — hazard identification and risk assessment as a system — while a JSA is one task-level tool under that umbrella, breaking a specific job into steps and controlling each. On UAE sites you may be asked for both: the HIRA as the framework, the JSA at the workfront.
What is a 5x5 risk matrix?
A grid that scores risk as likelihood (1–5) multiplied by severity (1–5), giving scores from 1 to 25. Higher scores demand stronger controls or stop the work. Each site's procedure defines its own action bands, so a 12 on one project may mean a different response than a 12 on another — always follow the bands in your own procedure.
Who approves a HIRA on UAE sites?
A competent person named by the site's own procedure — typically the area authority, permit issuer or responsible engineer, depending on the project. The approver must be senior enough to challenge the scores and controls, and on ADNOC-style sites the approval usually ties into the permit-to-work signature chain.