Risk & Hazard Register
Centralised register of identified hazards and their associated risk assessments.
1 What's on this page
The Risk & Hazard Register is your organisation's master record of all identified hazards and their associated risks. It consolidates hazards from multiple sources including audits, safety reports, security incidents, and management of change reviews. Each register item documents the hazard, its potential consequence, the initial risk level, control measures put in place, and the residual risk after controls are applied.
What you see here
- Search and filter: Quickly find specific hazards using keyword search and filter by hazard type, base, entity, source audit, source report, or management of change
- Risk register table: Comprehensive table showing all register items with hazard details, risk assessments, controls, and responsible persons
- Expandable source rows: Each register item can expand to show all linked source documents (findings, reports, MoC items) that identified this hazard
- Risk assessment columns: Initial risk assessment (before controls) and residual risk assessment (after controls) with colour-coded risk indices
- Add unlinked hazard button: Create register items for hazards identified outside the normal audit or reporting process
- Insights and reporting: Export register data and generate analytics reports
Key concepts
- Hazard: A condition, event, or circumstance that could lead to or contribute to an unplanned or undesirable event
- Risk source: The originating document that identified this hazard (audit finding, safety report, security report, or MoC item)
- Initial risk assessment: The risk evaluation before any controls or mitigations are applied (inherent risk)
- Residual risk assessment: The risk evaluation after controls and mitigations are applied (controlled risk)
- Risk index: A combination of probability and severity that determines the overall risk level and tolerability classification
- Risk controls & mitigation: Actions, procedures, or barriers implemented to reduce the probability or severity of the risk
Integrated with safety management: This register automatically receives hazards from audit findings, safety reports, security reports, dangerous goods reports, and management of change items. When those source documents identify a hazard and perform a risk assessment, the hazard appears here for central tracking and management.
Draft vs published items: Register items marked as "Draft" are still being developed or reviewed. Only published items contribute to risk analytics and insights reporting. Draft items appear with a yellow warning button instead of the standard blue edit button.
2 Search and filter the register
The register provides powerful search and filtering capabilities to help you locate specific hazards or analyse risk by category.
Keyword search
Use the search box at the top left to find register items by:
- Register item code (e.g., RH2025.001)
- Hazard name or description
- Associated risk description
- Area or impacted factor names
- Responsible person names
- Risk control descriptions
- Root cause factor names
Search results update as you type, with a short delay to improve performance. Click the information icon next to the search box to see a full list of searchable fields.
Filter options
Use the filter panel below the search box to narrow results by:
Hazard filter
Select one or more hazard types to show only register items for those hazards. Useful when reviewing all instances of a specific hazard across the organisation.
Base/Location filter
Filter to hazards identified at specific bases or locations. This helps base managers focus on risks within their area of responsibility.
Entity filter
Filter to hazards associated with specific entities within your organisation. Useful for multi-entity operators managing risk separately.
Audit filter
Show only hazards identified during specific audits. This filters based on linked audit findings that are sources for register items.
Report filter
Show only hazards identified in specific safety, security, or dangerous goods reports. This filters based on linked reports that are sources for register items.
MoC filter
Show only hazards identified during specific management of change processes. This filters based on linked MoC items that are sources for register items.
3 Understanding the register table
The Risk & Hazard Register table presents comprehensive information about each hazard in a structured format. The table uses a two-row header design: the top row groups related columns, and the bottom row provides specific column labels.
Main register item columns
| Column | Meaning | Sortable? | Notes |
|---|---|---|---|
| Expand/collapse linked sources | No | Shows count of linked sources. When filters are active, displays "filtered count / total count" | |
| Edit | Opens the register item window for editing | No | Blue button for published items, yellow "Draft" button for unpublished items |
| Code | Unique register item code (e.g., RH2025.001) | Yes | Automatically generated when item is created |
| Hazard | Name of the hazard from the hazard library | Yes | Standardised hazard definitions ensure consistency |
| Last Modified | Date and user who last updated this item | Yes | Helps track recent changes and who is managing the item |
| Associated Risk | Description of the consequence if this hazard occurs | Yes | Long text is truncated with popover to show full content |
| Area | Operational area affected by this hazard | Yes | From the insights area hierarchy (e.g., "Flight Operations", "Ground Handling") |
| Impacted Factors | What could be impacted if this hazard occurs | No | Multiple factors can be listed (e.g., People, Aircraft, Environment, Reputation) |
| Responsible Person(s) | Users assigned to manage and monitor this risk | No | Multiple responsible persons can be assigned. They receive notifications when changes occur |
| Risk Controls & Mitigation | Actions or procedures implemented to reduce the risk | No | Multiple controls can be listed. These are the barriers between the hazard and the consequence |
| Root Cause | Underlying causal factors that contribute to this hazard | No | From the causal factor library. Helps with trend analysis across multiple hazards |
Initial risk assessment columns
The initial risk assessment evaluates the risk before any controls are applied (inherent risk). This assessment is grouped under a spanning header with five columns:
| Column | Meaning | Sortable? | Notes |
|---|---|---|---|
| Probability | Likelihood that the hazard will occur | No | Label depends on your risk matrix configuration (e.g., "Likelihood" or "Probability") |
| Severity | Impact if the hazard occurs | No | Label depends on your risk matrix configuration (e.g., "Severity" or "Consequence") |
| Risk Index | Combined risk level with tolerability classification | Yes (by tolerability) | Colour-coded badge showing tolerability and risk code (e.g., "Acceptable (2B)") |
| Last Updated | Date when this assessment was last performed | No | Initial assessments are typically performed once when the hazard is first identified |
| Updated By | User who performed or last updated this assessment | No | Provides accountability for risk assessment decisions |
Residual risk assessment columns
The residual risk assessment evaluates the risk after controls and mitigations are applied (controlled risk). This assessment uses the same column structure as the initial assessment:
| Column | Meaning | Notes |
|---|---|---|
| Probability | Likelihood after controls are applied | Should be lower than or equal to initial probability |
| Severity | Impact if the hazard occurs despite controls | May be the same as initial severity if controls only reduce probability |
| Risk Index | Combined risk level after controls | Sortable by tolerability. Should show improvement compared to initial risk |
| Last Updated | Date when residual assessment was last performed | Should be updated whenever controls are changed or reviewed |
| Updated By | User who performed the residual assessment | May be different from the initial assessment user |
Risk assessment requirements: Both initial and residual risk assessments must be performed for each register item. If residual risk remains "Intolerable" after controls are applied, additional mitigations must be identified, or the operation/activity associated with the hazard must be prohibited or significantly modified.
4 Expand to view linked sources
Each register item can have multiple linked sources—the original documents where the hazard was identified. These sources appear as expandable rows beneath the main register item.
Expanding source rows
Click the expand icon () in the first column to reveal all linked sources for that register item. The icon shows:
- Number badge: Count of linked sources. If filters are active, shows "filtered count / total count" (e.g., 2/5 means 2 matching your filters out of 5 total)
- Expand state: Changes to a collapse icon when sources are visible
Source row information
Expanded source rows display in a light blue highlight and show:
- Code: Clickable link to open the source document in read-only view (finding, report, or MoC item)
- Hazard: The hazard name as recorded in the source (should match the register item hazard)
- Area: The area recorded in the source document
- Impacted factors: Factors identified in the source document
- Responsible persons: Persons assigned in the source document
- Initial and residual risk assessments: The assessments performed in the source document (if applicable)
- Root cause: Causal factors identified in the source document
- Unlink button: Administrators can remove the link between the source and the register item if needed
Unlinking sources
If a source was incorrectly linked to a register item, authorised users can unlink it:
- Expand the register item to show linked sources
- Click the red "Unlink" button next to the source you want to remove
- Confirm the unlink action in the confirmation window
- The source is removed from the register item but remains in its original location (finding register, report, or MoC)
Automatic linking: When a finding, report, or MoC item performs a risk assessment and identifies a hazard, the system can automatically link it to the corresponding register item. This ensures the register stays up to date without manual intervention. Administrators manage these links through the "Manage Risk Sources" page.
5 Create a new unlinked hazard
Most hazards enter the register automatically through audits, reports, or management of change processes. However, you can manually create register items for hazards identified through other means (e.g., operational observations, external recommendations, proactive risk analysis).
When to create an unlinked hazard
Create an unlinked hazard when:
- You identify a hazard during operational activities that doesn't warrant a formal safety report
- External regulators or auditors recommend tracking a specific hazard
- You're conducting proactive risk analysis and want to document potential hazards before they occur
- Industry guidance or best practice suggests monitoring a hazard not yet captured through your normal processes
Steps to create an unlinked hazard
- Click the "Add Un-linked Hazard" button at the top right of the register table
- The register item window opens with the title "Create new risk & hazard register item"
- Complete all required fields in the register item window (see "Edit a register item" section for detailed field descriptions)
- Select the hazard from the hazard library
- Perform both initial and residual risk assessments
- Define risk controls and mitigations
- Assign responsible persons
- Click Save to create the register item
The new item appears in the register table with a unique code. Because it's unlinked, the expand icon shows zero sources. You can later link sources to this item through the normal audit, report, or MoC processes.
6 Edit a register item
Click the edit button (blue for published items, yellow "Draft" for unpublished items) on any register item row to open the register item window. This window provides a comprehensive form for managing all aspects of the register item.
Register item window structure
The register item window displays a table format with the same column structure as the main register table. The top section shows editable fields for the register item, and the bottom section (if present) shows linked sources in read-only format.
Editable fields
Code
Type: Auto-generated (read-only)
Purpose: Unique identifier for this register item. Automatically assigned when the item is first saved.
Hazard
Type: Dropdown selection
Required: Yes
Purpose: Select the hazard from your organisation's hazard library. For new unlinked items, this dropdown is enabled. For items created from sources, the hazard is pre-selected and locked.
Associated Risk
Type: Text area
Purpose: Describe the consequence or impact if this hazard occurs and control measures fail. Be specific about what could happen, who or what would be affected, and how severe the outcome could be.
Area
Type: Dropdown selection
Purpose: Select the operational area most relevant to this hazard from the insights area hierarchy. This helps with area-specific risk analysis and reporting.
Impacted Factors
Type: Multi-select list
Purpose: Select one or more factors that could be impacted if this hazard occurs (e.g., People, Aircraft, Property, Environment, Reputation, Financial, Regulatory Compliance).
Responsible Person(s)
Type: Multi-select list
Purpose: Assign one or more users who are responsible for monitoring and managing this risk. They receive notifications when the register item is updated.
Risk Controls & Mitigation
Type: List with add/remove capability
Purpose: Document the control measures, procedures, or barriers implemented to reduce the risk. Each control should clearly describe how it reduces probability, severity, or both. You can add multiple controls, edit existing controls, or remove controls that are no longer relevant.
Root Cause
Type: Multi-select list from causal factor library
Purpose: Select the underlying causal factors that contribute to this hazard. This helps identify systemic issues and common causes across multiple hazards.
Performing risk assessments
Both initial and residual risk assessments must be completed. Each assessment requires:
- Select probability: Choose from your risk matrix probability levels (e.g., Extremely Improbable, Remote, Occasional, Probable, Frequent)
- Select severity: Choose from your risk matrix severity levels (e.g., No Safety Effect, Minor, Major, Hazardous, Catastrophic)
- View risk index: The system automatically calculates the risk index based on your probability and severity selections, and displays the tolerability classification with a colour-coded badge
- Record date and user: The system automatically records who performed the assessment and when
The initial risk assessment should be performed first, representing the risk before any controls are applied. Then document your risk controls and mitigations. Finally, perform the residual risk assessment to evaluate the risk after controls are in place.
Managing linked sources within the window
If the register item has linked sources, they appear in the lower section of the window in expandable table rows. For each source you can:
- View source details: Click the source code to open the source document in read-only view (opens in a new window layer)
- Review source risk assessments: See the risk assessments performed in the original source document
- Unlink sources: Remove the link if the source was incorrectly associated with this hazard
Saving and publishing
At the bottom of the window:
- Save button: Saves all changes and closes the window. If this is a new item, it's created with a unique code
- Cancel button: Closes the window without saving changes
- Draft status: New items are saved as drafts by default. Change the status to "Published" when you've completed the risk assessment and validated all information
Validation requirements: The system enforces mandatory fields and data validation. You must select a hazard, and both initial and residual risk assessments must be complete before saving. If validation fails, error messages appear next to the relevant fields.
7 Understanding risk indices and tolerability
Risk indices combine probability and severity into a single risk level classification. Your organisation's risk matrix defines how probability and severity combinations map to risk indices and tolerability levels.
How risk indices work
When you select a probability level and a severity level during risk assessment, the system:
- Looks up the intersection in your organisation's risk matrix
- Determines the risk index code (e.g., 1A, 2B, 3C, 4D, 5E)
- Determines the tolerability classification (e.g., Acceptable, Tolerable, Intolerable)
- Displays a colour-coded badge showing both the tolerability name and risk index code
Tolerability classifications
Common tolerability levels and their meanings:
Acceptable (Green)
Risk is low enough that no additional controls are required. Standard operational procedures are sufficient. Regular monitoring recommended.
Tolerable (Yellow)
Risk is acceptable with adequate controls in place. Controls must be monitored and maintained. Further risk reduction should be pursued where reasonably practicable.
Intolerable (Red)
Risk is unacceptable and operations should not proceed. Additional controls must be implemented immediately, or the activity must be modified or prohibited.
Initial vs residual risk comparison
The register table displays both initial and residual risk indices side by side. Effective risk controls should result in:
- Lower probability: Controls reduce the likelihood of the hazard occurring
- Lower severity: Controls reduce the impact if the hazard does occur
- Improved tolerability: Residual risk moves from Intolerable → Tolerable → Acceptable
- Changed risk index: The risk index code improves (e.g., from 4C to 2B)
Risk matrix configuration: Your organisation's risk matrix is configured in the Risk Management Settings. Changes to the matrix affect how risk indices are calculated for all risk assessments across the system. Contact your safety manager or system administrator if you have questions about your risk matrix.
8 Sorting and pagination
The register table supports sorting and pagination to help you navigate large numbers of register items efficiently.
Sorting columns
Click on any column header marked with to sort by that column. Sortable columns include:
- Code: Sort alphabetically by register item code
- Hazard: Sort alphabetically by hazard name
- Last Modified: Sort by date, showing most recently modified first or last
- Associated Risk: Sort alphabetically by risk description
- Area: Sort alphabetically by area name
- Initial Risk Assessment: Sort by tolerability level, showing highest risk first
- Residual Risk Assessment: Sort by tolerability level, showing highest risk first
Click the same column header again to reverse the sort order. The column header shows an arrow indicating the current sort direction.
Pagination controls
When the register contains more than 15 items (or your configured page size), pagination controls appear below the table:
- Items per page: Change how many register items display per page (15, 30, or 45)
- Page numbers: Click page numbers to navigate through results
- Previous/Next: Navigate to the previous or next page
- First/Last: Jump to the first or last page of results
- Page indicator: Shows current page and total pages (e.g., "Page 2 of 8")
9 Insights and reporting
The Risk & Hazard Register integrates with Musket's insights and reporting system to provide analytics and export capabilities.
Opening insights reports
Click the insights button () at the top right of the register table (next to the title) to open the insights window. This window provides:
- Risk & Hazard Register report: Comprehensive report showing all register items with filtering options
- Risk assessment tolerability charts: Visual comparison of initial vs residual risk levels
- Hazard by area breakdown: Analysis of which operational areas have the most identified hazards
- Trend analysis: How risk levels change over time as controls are implemented and assessed
- Export options: Download reports in PDF or Excel format for external distribution or compliance documentation
Using filters with insights
The insights window respects your currently active filters. If you've filtered the register by hazard, base, or source, the insights reports reflect only the filtered items. This allows you to generate focused reports for specific hazards, locations, or source types.
PDF export for compliance
The Risk & Hazard Register can be exported to PDF format for audit trails, regulatory submissions, or management reviews. The PDF export includes:
- All register items matching your current filters
- Complete risk assessment details (initial and residual)
- Risk control and mitigation descriptions
- Responsible persons and areas
- Export date and user who generated the report
Draft items in reports: By default, insights reports include only published register items. Draft items are excluded from analytics and exports to ensure reported data represents validated and approved risk information. You can change this setting in the insights window if you need to include draft items in your report.
10 Permissions and access control
Access to the Risk & Hazard Register is controlled by role-based permissions. Your access level determines which actions you can perform.
View access
Users with view-only permissions can:
- View the register table and all register items
- Search and filter the register
- Expand register items to view linked sources
- View register item details in read-only mode
- Generate insights reports and exports
View-only users see disabled edit buttons with "Not Authorised" messages. They cannot create new items, modify existing items, or unlink sources.
Edit access
Users with edit permissions can perform all view actions plus:
- Create new unlinked hazard register items
- Edit existing register items (all fields)
- Perform or update risk assessments
- Add, edit, or remove risk controls and mitigations
- Assign or change responsible persons
- Change draft status to published
- Unlink sources from register items
Role assignment
Common role assignments for register access:
- Safety managers: Full edit access to manage the entire register
- Quality assurance staff: Full edit access for audit-related hazards
- Security managers: Full edit access for security-related hazards
- Operations managers: View access to monitor hazards in their areas
- Maintenance managers: View access to monitor maintenance-related hazards
- General staff: Typically no access unless assigned as a responsible person for specific hazards
11 Troubleshooting and FAQs
Why can't I see the "Add Un-linked Hazard" button?
This button only appears if you have edit permissions for the register. If you see a greyed-out "Not Authorised" message instead, your role doesn't include register editing permissions. Contact your safety manager or system administrator if you need edit access.
Why can't I edit a register item even though I have edit permissions?
Some register items may be locked if they're part of an active audit or review process. Additionally, items created from certain source types may have restrictions on which fields can be edited. Check with your safety manager if you need to modify a locked item.
Why does my residual risk assessment show the same or worse risk than my initial assessment?
Residual risk should generally be lower than initial risk after controls are applied. If residual risk is the same or worse:
- Review whether you've documented all control measures in the "Risk Controls & Mitigation" section
- Consider whether your initial risk assessment was too optimistic and should be revised
- Verify you selected the correct probability and severity levels for the residual assessment
- If controls genuinely aren't reducing the risk, additional or different controls may be needed
What happens when I unlink a source from a register item?
Unlinking removes the association between the source document and the register item. The source document (finding, report, or MoC item) remains in its original location unchanged. The register item also remains unchanged—only the link between them is removed. If you unlinked a source by mistake, you can re-link it through the "Manage Risk Sources" page.
Why do some linked sources not show risk assessment information?
Not all source types perform risk assessments. Audit findings may not include formal risk assessments if the audit focused on compliance rather than risk. Similarly, some reports may identify hazards without performing full risk assessments. Only sources that completed risk assessments will display assessment details in the source rows.
How do I change my organisation's risk matrix?
Risk matrix configuration is managed in the Risk Management Settings page. Only administrators with appropriate permissions can modify the matrix. Changing the matrix affects how all risk assessments are calculated, so it should only be done with proper planning and communication. Contact your safety manager or system administrator.
Why do I see different hazards in the register than what appears in my safety reports?
The register displays all hazards across all source types (audits, reports, MoC). If you're viewing a specific report, you'll only see hazards from that report. The register is the consolidated view. Use the filter options to narrow the register to specific sources if needed.
Can I delete a register item?
Register items typically cannot be deleted because they form part of your safety management system audit trail. If a hazard is no longer relevant, best practice is to mark it as "Closed" or "Archived" rather than deleting it. Speak to your safety manager about your organisation's policy for handling obsolete register items.