Free kit
HIRA Register and Incident Investigation Form
A hazard identification and risk assessment register with an example 5 × 5 risk matrix, and an incident investigation form with 5 Whys and a corrective action tracker.
Two documents that belong together. The HIRA register is where you decide, before the work, what could hurt people and what you will do about it. The incident investigation form is where you find out, after something has gone wrong, why those decisions were not enough — and feed the answer back into the register. Both follow ISO 45001:2018: hazard identification and assessment of risks (6.1.2), the hierarchy of controls (8.1.2), and incident, nonconformity and corrective action (10.2).
What is inside
Hazard and Risk Assessment (HIRA) Register — guidance on the method in six steps and on the hierarchy of controls, then six grids: assessment details, an example likelihood scale, an example severity scale, a 5 × 5 risk score lookup, risk rating bands, and a HIRA register with two worked example rows (working at height and manual handling) and blank rows.
Incident Investigation Form — five grids: incident report, facts and evidence, timeline, cause analysis with 5 Whys, and a corrective action tracker; a worked 5 Whys example; and a 12-point investigation quality check.
Both documents as a designed, print-ready PDF and as an editable Word file.
Who it is for
HSE managers and officers, supervisors, risk assessors, incident investigators and anyone building or maintaining an occupational health and safety management system.
How to use it
Adapt the scales and bands first — they are an example scheme, and the words must mean something in your organisation. Assess each activity with the people who do the work, score the risk as it stands, work down the hierarchy of controls, and record the residual risk with an owner and a date. When an incident or near miss happens, use the investigation form to gather facts before opinions, ask why until you reach something the organisation can change, and then update the register.
A risk score is a way of setting priorities, not a measurement. Legal requirements for risk assessment and for reporting incidents to the authorities differ between countries, emirates and free zones — check the ones that apply to you.
What is in the kit
- Hazard and Risk Assessment (HIRA) Register (PDF)The HIRA method in six steps, the hierarchy of controls, an example 5 × 5 likelihood and severity scheme, rating bands and a register with two worked rows.719 KB
- Incident Investigation Form (PDF)Incident report, facts and evidence, timeline, cause analysis with 5 Whys and a corrective action tracker, plus a 12-point investigation quality check.747 KB
- Hazard and Risk Assessment (HIRA) Register (editable Word)The same document in Word, so you can adapt it and fill it in on screen.31 KB
- Incident Investigation Form (editable Word)The same document in Word, so you can adapt it and fill it in on screen.31 KB
A look inside
The first pages of Hazard and Risk Assessment (HIRA) Register (PDF). The full document downloads from the list above.
Next step
Learn to use it properly — with a certificate
The documents tell you what to check. These courses teach you how to audit and implement it, online and at your own pace.
Questions people ask
Is the HIRA Register and Incident Investigation Form really free?
Yes. There is no payment and no trial. Tell us your name, work email and company once, and every document in the Free Zone is yours to download.
What format are the documents in?
This kit has 4 documents in PDF and DOCX format. The Word, Excel or PowerPoint files are fully editable, so you can adapt them to your organisation.
Can I use it inside my company?
Yes. The licence covers one organisation with unlimited internal use — print it, share it with colleagues and adapt it. Please do not resell it or republish it as your own.
Does this make us compliant with ISO 45001?
No document can do that on its own. It is a practical working tool to help you prepare, check and improve. Conformity with ISO 45001 is decided by an audit of your actual system, and the standard itself remains the authoritative text.
Do you offer training on this topic?
Yes. Skedmia runs online courses with certificates on the standards and topics these kits cover — the matching courses are listed on this page.
More from the Free Zone
FreeNewEditableCyber Security Risk Mitigation Checklist
80 controls in 10 risk areas, each with the reason it matters — plus a 5 × 5 cyber risk register template.
FreeNewEditableAWS Security Checklist
90 checks to review an AWS account — root user, IAM, network, S3 and databases, encryption, logging, detection and recovery.
FreeNewEditableIT Security Audit Checklist
120 audit checks across 12 control areas, plus an audit plan and findings log — ready for your next internal IT audit.


