4 Step First Aid Risk Assessment for Australian Workplaces
A first aid risk assessment is the workplace-specific process that decides what first aid equipment, facilities and trained people your business actually needs, based on your hazards, workforce and location. The outcome is a documented first aid plan, not a generic checklist bought off the shelf. If you haven’t done one recently, the next step is simple: get it on the calendar and talk to your workers before you touch a single kit or roster.
TL;DR:
Conducting an up-to-date first aid risk assessment ensures kit contents, facilities, and training match specific hazards, workplace size, and remote conditions.
Hazards like chemical exposure or remote locations require specialized equipment and trained responders, not generic first aid provisions.
Regularly reviewing and updating the plan after incidents, changes in work practices, or emerging hazards prevents gaps in preparedness.
Certified first aiders should be rostered across all shifts and locations, with training tailored to identified risks and refresher drills to maintain competency.
Proper documentation of assessments, reviews, and drills is essential for legal compliance and demonstrating ongoing workplace safety responsibilities.
Table of Contents
What Australian WHS law and the Codes of Practice actually require
How to run a workplace first aid risk assessment step by step
First aid kits, equipment and facilities for common Australian workplace scenarios
Training and first aiders: getting the right units and coverage
How Primetraining turns an assessment into working provision
Why the risk-management approach matters
Most workplaces get first aid backwards. They buy a kit first, then wonder whether it’s adequate. The Safe Work Australia model Code of Practice flips that order, and it’s the framework every state regulator builds its guidance around.
The Code sets out a four-step risk-management approach: identify, assess, provide, review. It’s the same logic used across workplace health and safety more broadly, adapted specifically for first aid decisions. Skip a step, and you end up with a first aid room nobody needs or, worse, a remote crew with a suburban-grade kit and no one trained to use it.
Identify. This step means walking the site and naming every hazard that could plausibly cause injury or illness, not just the obvious ones. A warehouse might flag forklift traffic and racking collapse; a laboratory might flag chemical splash and needle-stick injuries; a mine site might flag heat stress, crush injuries and vehicle rollovers. The point is specificity. “General workplace hazards” tells you nothing useful when you’re deciding what goes in a kit.
Assess. Once hazards are named, you weigh up how likely an injury is and how severe it would be if it happened. A low-likelihood, high-severity hazard (a confined-space collapse, say) demands a different response capability than a high-likelihood, low-severity one (minor cuts on a production line). This is where a lot of businesses either overspend on kit they’ll never use or underspend on training for the one incident that actually matters.
Provide. This is the visible output: kits, signage, a first aid room if the numbers justify it, and people trained to the right level. The Model Code of Practice: First aid in the workplace sets out how these decisions flow directly from the identify and assess steps, rather than being picked off a generic list.
Review. Workplaces change. New machinery, new contractors, a near-miss, a fresh hazard nobody flagged last time. The Code treats review as an ongoing obligation, not a one-off box tick.
In practice, each step produces a concrete decision:
Identify a chemical splash hazard → provide an eyewash station and burns dressings, not just standard bandages
Assess a remote site with delayed emergency response → provide an HLTAID013-trained responder and a mobile trauma kit
Assess a 150-person low-risk office → provide multiple first aiders across floors rather than one central point
Review after an incident → update the kit contents and retrain rather than waiting for the next scheduled audit
That’s the whole model. Everything else in this article is detail sitting underneath those four words.
What Australian WHS law and the Codes of Practice actually require
Here’s the legal reality most employers only discover after an incident: first aid isn’t optional, and “we had a kit in the tea room” doesn’t satisfy the duty.
Under the Work Health and Safety Regulations, a person conducting a business or undertaking (PCBU) has a specific duty to provide first aid. WHS Regulation 42(3) lists exactly what you must have regard to when deciding what’s adequate:
The nature of the work being carried out at the workplace
The nature of the hazards at the workplace
The size and location of the workplace
The number and composition of workers and other people at the workplace
That last point trips people up. “Composition” isn’t just headcount. It covers whether you’ve got apprentices, older workers, people with known medical conditions, or a high proportion of visitors and contractors who won’t know where the kit is kept.
Codes of Practice sit just below the Regulations in legal weight, but they carry real teeth. Courts treat a Code as admissible evidence of what a reasonable PCBU should have known and done, which means following it (or having a documented, defensible reason for departing from it) is your strongest evidence of “reasonably practicable” compliance if something goes wrong. The Model Code of Practice is the national baseline, but each state publishes its own version, and the detail varies. WorkSafe Queensland’s Code of Practice, updated in 2021, and WorkSafe WA’s first aid guidance both mirror the model approach but include jurisdiction-specific thresholds and examples worth checking against your own state.
For a compliance file that holds up under audit or after an incident, keep records of:
The date of the assessment and who was consulted (worker consultation isn’t a nice-to-have; it’s baked into the duty)
The hazards identified and the reasoning behind likelihood/severity ratings
What was provided in response (kit contents, first aider numbers, facilities)
The date of the last review and what triggered it
If you can’t produce that paper trail, a regulator or insurer will assume the assessment never happened.
Matching hazards, size and location to your first aid needs
No two workplaces need the same first aid setup, and treating a first aid risk assessment as a one-size checklist is the single most common mistake employers make.
Hazard type drives kit contents and training level. A construction site with crush and laceration risks needs trauma dressings, tourniquets and staff trained beyond basic first aid. A workplace with chemical exposure needs eyewash stations, specific burns treatment and safety data sheets on hand for anyone providing care. An office with mostly ergonomic and slip hazards needs a standard kit and a handful of HLTAID011-trained staff, nothing more elaborate. Matching provisions to actual injury likelihood and severity, rather than assuming every workplace needs the same gear, is exactly the logic behind structured injury prevention planning.
Size, layout and remoteness change how many first aiders you need and where. A single-floor office of 20 people might get by with two trained first aiders. A multi-building industrial site with the same headcount, split across separate work areas, needs first aiders positioned so nobody’s more than a few minutes from help. Remoteness compounds this. If your nearest ambulance is 90 minutes away, as it often is on Pilbara sites, your assessment needs to plan for a longer window of care, which usually means a higher-level qualification like HLTAID013 or HLTAID014 rather than basic first aid alone.
The Code of Practice ties the need for a dedicated first aid room to scale: it’s recommended for low-risk workplaces with 200 or more workers, or high-risk workplaces with 100 or more, or anywhere administering first aid would otherwise be genuinely difficult, such as a site with poor access for emergency vehicles.
Special contexts need their own thinking, not a bolt-on. A few worth checking specifically:
Contractors and visitors. They won’t know your site layout or where kits are kept. Your induction process needs to cover this explicitly, and a solid induction checklist should flag first aid locations, emergency contacts and site-specific hazards on day one.
Shiftwork. A first aider rostered only on day shift leaves night shift exposed. Assess coverage across every shift pattern, not just standard hours.
Education and care settings. These carry their own regulatory expectations and often require HLTAID012 rather than the standard workplace unit, given the age and vulnerability of those in care.
Events and temporary work. A one-off event or short-term site still triggers the same duty. The assessment just needs to be scaled to the shorter timeframe and often higher public exposure.
Get this mapping wrong in either direction and you’re either over-resourced in the wrong areas or genuinely exposed in the one scenario that actually happens.
How to run a workplace first aid risk assessment step by step
A first aid risk assessment doesn’t need to be a drawn-out project. Done properly, most small-to-medium workplaces can complete one in a day or two, with the bulk of the time going into consultation and documentation rather than the walk-through itself.
Gather your baseline data before you set foot on site. Pull incident and near-miss records from the last two to three years, current workforce numbers by shift, site plans, and any existing first aid inventory. If you’ve had prior WHS audits, review the findings.
Consult your workers. This isn’t optional under WHS law, and it’s also where you’ll learn things a walk-through alone won’t show you, like which piece of equipment nobody’s actually been trained to use.
Walk the site and identify hazards by area. Go zone by zone rather than trying to hold the whole site in your head at once. Note what could realistically injure someone in each area and how.
Estimate likelihood and severity for each hazard. You don’t need a complex matrix. A simple high/medium/low rating against both dimensions is enough to drive decisions, as long as it’s documented and defensible.
Match provisions to the assessed risk. Decide kit contents, kit placement, first aider numbers, and whether a first aid room is warranted based on what steps three and four actually showed you, not on habit or what a neighbouring business does.
Decide training levels and rosters. Cross-check coverage against every shift and every work area, not just the main office block.
Document the findings and assign ownership. Someone specific needs to own the first aid plan, not “management” in the abstract.
Set the next review date and trigger conditions. Put a date in the diary, and separately note the events that would force an earlier review.
A simple decision framework, adapted to your own hazard list, looks like this:
Assessed risk factor | Likely provision | Typical trigger |
High-severity, low-frequency hazard (confined space, working at heights) | Advanced first aid training, specialised rescue equipment | Site includes confined spaces or elevated work |
High-frequency, low-severity hazard (minor cuts, sprains) | Standard kit, HLTAID011-trained staff | Manual handling or light industrial tasks |
Remote or isolated location | HLTAID013-trained responder, mobile/vehicle-based kit | Response time to emergency services exceeds standard urban benchmarks |
Large or high-risk workforce | Dedicated first aid room | 200+ workers (low risk) or 100+ workers (high risk) |
Shiftwork or multi-site operation | First aiders rostered across every shift and location | Any gap in coverage identified during consultation |
Pro Tip: Don’t build your first aid plan around your busiest day. Build it around your worst plausible day, the one where three things go wrong at once and half your usual first aiders happen to be on leave.
Once the plan is documented, the job isn’t finished. Assign a named person, usually your WHS manager or site supervisor, to own ongoing compliance, and lock in the review date before you move on to something else.
First aid kits, equipment and facilities for common Australian workplace scenarios
The Code of Practice gives a baseline kit contents list, but the real skill is knowing when to add to it.
A standard workplace kit covers wound dressings, bandages, antiseptic, burns dressings and basic resuscitation equipment. That’s a reasonable starting point for low-hazard office and retail environments. Once your hazard profile shifts, so should the kit:
Eye hazards (grinding, chemical handling, dust) need an eyewash station or portable eyewash bottles positioned within seconds of the risk area, not locked in a cabinet down the hall.
Burns risk (kitchens, welding, hot processes) needs burns-specific dressings and, in higher-risk settings, burns gel in larger quantities than a standard kit provides.
Bleeding and trauma risk (construction, manufacturing with moving machinery) needs trauma dressings and, depending on severity, tourniquets alongside staff trained to use them correctly.
Chemical exposure needs the relevant safety data sheet accessible alongside the kit, plus decontamination supplies matched to the specific chemicals on site.
Communications and access matter as much as contents. A kit is useless if nobody can raise the alarm quickly. Check that emergency contact numbers are posted at the kit location, that mobile coverage or a landline is actually available (a real issue on remote sites), and that an automated external defibrillator is considered where cardiac risk is elevated or workforce numbers are high. Signage should mark kit locations clearly enough that a visitor, not just a regular staff member, could find one under pressure.
On the first aid room question, the trigger isn’t just headcount. The Code recommends a room for low-risk workplaces with 200 or more workers or high-risk workplaces with 100 or more, and separately for any site where administering first aid would otherwise be genuinely difficult. A recommended room includes a bed, hand-washing facilities, a lockable storage cabinet for supplies, and clear unobstructed access for a stretcher or ambulance officers.
Training and first aiders: getting the right units and coverage
Kit and facilities only work if someone on site knows how to use them, and this is where a lot of assessments fall down. It’s easy to buy equipment; it’s harder to guarantee someone competent is actually there when it’s needed.
Australian workplaces mostly draw on a handful of nationally recognised units, matched to assessed risk rather than picked at random:
HLTAID011 – Provide First Aid covers general workplace first aid and suits most low-to-moderate risk environments: offices, retail, light industrial sites.
HLTAID009 – Provide Cardiopulmonary Resuscitation is the standalone CPR unit, often used as a refresher between full first aid recertification cycles.
HLTAID013 – Provide First Aid in Remote or Isolated Site is built for sites where emergency services response is delayed, which describes a large share of the Pilbara and regional Western Australia.
HLTAID014 – Provide Advanced First Aid suits higher-risk environments needing a broader clinical response, including workplaces where a first aid room or advanced casualty management is warranted.
Rostering is where good intentions often unravel. A business with three trained first aiders looks compliant on paper, but if all three work day shift on the same floor, night shift and other work areas are effectively uncovered. Map your first aiders against every shift pattern and every physical zone, and treat any gap as a finding from your assessment, not an acceptable oversight.
Competence doesn’t end at the certificate. HLTAID qualifications carry standard renewal cycles, but a genuinely prepared workplace goes further: periodic drills, informal skills checks, and induction content that tells every new starter exactly where kits are and who the current first aiders are, in line with standard induction checklist practice. Keep training records current and accessible. A certificate that expired eight months ago is the kind of gap that only surfaces during an audit or, worse, an actual emergency.
Keeping your first aid arrangements current
A first aid risk assessment isn’t a document you file and forget. Treat it as current only until something changes, because something usually does.
Set a baseline review schedule, annually is a sensible default for most workplaces, but build in trigger-based reviews on top of that:
After any incident or near-miss involving first aid response, review whether the provision actually worked as intended.
When work practices, equipment or the workforce change, reassess whether kit, facilities or training levels still match the new hazard profile.
When new hazard information emerges, such as a safety alert for equipment you use or a regulatory update, fold it into the next review rather than waiting.
Testing your plan matters as much as writing it. A mock emergency, a simulated injury scenario run without warning, tells you far more about real readiness than checking a kit’s use-by dates. It exposes the gaps a document review never will: the first aider who’s forgotten the location of the eyewash station, the emergency number that’s been disconnected, the exit route blocked by stored pallets.
Pro Tip: Run your first mock emergency on a day nobody’s expecting it. A scheduled drill tests procedure. An unscheduled one tests whether the procedure actually survives contact with a normal, busy workday.
Document every review, every drill outcome and every incident follow-up in the same file as your original assessment. That running record becomes your strongest evidence of ongoing compliance, and it’s usually the first thing a regulator or insurer asks to see.
How Primetraining turns an assessment into working provision
An assessment tells you what you need. Getting trained people and the right units in place is the part that actually protects your workforce.
Some training providers work with businesses to match assessed needs to a combination of onsite, mobile and online delivery, so training can fit business operations rather than requiring a single classroom day. For remote or mine site operations, this might involve a mobile trainer running sessions scheduled around shift patterns, instead of requiring crews off site for extended periods.
Customisation goes beyond scheduling. Course content may be adjusted to reflect hazards identified in assessments, such as heat stress and vehicle risk on a construction site or confined space and chemical exposure in industrial settings. Trainers with industry experience often deliver these courses, and certificates can be issued promptly on completion to support compliance documentation.
For businesses juggling shiftwork rosters or multiple remote locations, that flexibility is often the difference between a first aid plan that looks good on paper and one that actually holds up when someone’s rostered off at the wrong time.
A practitioner’s take on getting this right
The four-step approach isn’t bureaucratic box-ticking. It’s the difference between a workplace that guesses at what it needs and one that can defend every decision it’s made. Most of the first aid failures I’ve seen traced back through incident reports weren’t caused by bad luck. They came from an assessment that was done once, filed, and never looked at again while the workplace around it kept changing.
Consultation is the step businesses skip most often, and it’s the one that catches the problems a walk-through misses. Your workers know where the near-misses actually happen. Build your review cycle around real triggers, not just a date in the calendar, and treat every incident as a prompt to check whether your provision still matches your risk. That habit, more than any single piece of equipment, is what separates a compliant workplace from a genuinely prepared one.
— Vapour
Ready to put your assessment into action?
Once your first aid risk assessment tells you what your workplace needs, the next job is getting the right people trained without pulling your whole team off the tools for a week. Training providers run onsite, mobile and online courses that may include remote mine and construction sites, with flexible scheduling intended to fit around shiftwork.
If your assessment points to general workplace competence, HLTAID011 – Provide First Aid is the standard starting unit for most low-to-moderate risk sites. For remote or isolated locations, HLTAID013 – Provide First Aid in Remote or Isolated Site is built for exactly the delayed-response scenarios common across regional Western Australia. Courses are delivered by trainers with industry-relevant experience, and certificates are issued promptly to help keep compliance records current.
Ready to move from assessment to action? Book your course online and get a session scheduled around your site’s roster, not the other way around.
Sources
FAQ
What is the Australian standard for a first aid risk assessment?
There’s no single numbered standard. Australian workplaces follow the Safe Work Australia model Code of Practice, which sets out the four-step identify, assess, provide, review approach, alongside state-based Codes like WorkSafe Queensland’s that add jurisdictional detail.
What is the difference between HLTAID014 and HLTAID011?
HLTAID011 covers general workplace first aid and suits most standard-risk environments. HLTAID014 is the advanced unit, built for higher-risk workplaces needing a broader clinical response, and is often the right choice when an assessment identifies a need for a dedicated first aid room or more complex casualty management.
What does a risk assessment for first aid include?
It includes identifying workplace hazards, assessing how likely and severe related injuries could be, and matching that assessment to specific kit, facilities and trained personnel. The output is a documented first aid plan covering equipment, first aider numbers and rostering, and a scheduled review date.
What are the regulations regarding first aid in Australia?
The core duty sits in the Work Health and Safety Regulations, which require PCBUs to provide adequate first aid equipment, facilities and training. WHS Regulation 42(3) specifies that this must have regard to the nature of the work, hazards, workplace size and location, and the number and composition of people.
How much does first aid training cost for a workplace?
Pricing depends on the unit and delivery format. HLTAID011 – Provide First Aid is $240 per person, and HLTAID013 – Provide First Aid in Remote or Isolated Site is $400 per person, with mobile and onsite delivery options available for group bookings.
Comments