New Zealand Business Guide

How to Conduct a Business Risk Assessment

A practical guide to identifying, analyzing, and managing the risks your New Zealand business faces. Protect your operations with a structured approach to risk management.

What is Risk Assessment?

Risk assessment is the systematic process of identifying, analyzing, and evaluating potential threats that could harm your business. It involves understanding what could go wrong, how likely it is to happen, and what impact it would have on your operations.

For New Zealand businesses, risk assessment is particularly important due to our unique geographical and regulatory environment. From earthquake-prone buildings to seasonal weather patterns, understanding your risks helps you make informed decisions about insurance and risk mitigation.

Why It Matters for NZ Businesses

Under New Zealand's Health and Safety at Work Act 2015, businesses have a legal duty to identify and manage risks to workers and others. Regular risk assessments help you meet these obligations and protect your people, assets, and reputation.

Key Components of Risk Assessment

  • Hazard identification - spotting potential sources of harm
  • Risk analysis - understanding likelihood and potential impact
  • Risk evaluation - prioritizing which risks need attention first
  • Control measures - implementing strategies to reduce risks
  • Documentation and review - keeping records and updating regularly

Steps to Assess Your Risks

Follow this five-step process to conduct a thorough risk assessment for your business.

1

Identify Hazards

Walk through your workplace and list everything that could cause harm.

2

Determine Who Could Be Harmed

Identify employees, contractors, visitors, and others who might be affected.

3

Evaluate Risks

Assess how likely each hazard is and how severe the impact could be.

4

Implement Controls

Take action to eliminate, reduce, or manage each significant risk.

5

Review & Document

Keep records and regularly review your assessment for accuracy.

Step 1: Identify Hazards

Look at your physical workplace, equipment, processes, and tasks. Consider:

  • - Slip, trip, and fall hazards
  • - Moving machinery or equipment
  • - Electrical risks
  • - Chemical exposure
  • - Fire hazards
  • - Ergonomic issues
  • - Psychological hazards (stress, fatigue)

Step 2: Who Could Be Harmed

Consider all people who might be exposed to each hazard:

  • - Full-time and part-time employees
  • - Contractors and subcontractors
  • - Temporary workers
  • - Visitors and customers
  • - Delivery personnel
  • - Members of the public
  • - Young or inexperienced workers

Step 3: Evaluate Risks

For each hazard, assess likelihood and severity:

  • - How often is the hazard present?
  • - Has an incident occurred before?
  • - What could happen if something goes wrong?
  • - How many people could be affected?
  • - Are there existing controls in place?

Steps 4 & 5: Controls & Review

Implement controls in this order of priority:

  • - Eliminate the hazard completely
  • - Substitute with a safer alternative
  • - Use engineering controls
  • - Change work practices or procedures
  • - Use PPE (last resort)

Common Business Risks in NZ

New Zealand businesses face unique risks based on our geography, climate, and regulatory environment.

Natural Disasters

New Zealand is prone to earthquakes, floods, storms, and volcanic activity. Business interruption from natural events can last weeks or months. Consider earthquake-prone building compliance and business continuity planning.

Weather & Climate

Seasonal weather patterns affect different industries. Flooding is common in certain regions, while droughts impact agriculture. Consider climate risks specific to your location in NZ.

Employment Risks

Employment disputes, wrongful dismissal claims, and health and safety violations can result in significant costs. The Employment Relations Act and Health and Safety at Work Act set strict obligations for NZ employers.

Cyber Security

Cyber attacks are increasing in NZ. Data breaches, ransomware, and phishing can disrupt operations and damage reputation. The Privacy Act 2020 requires notification of serious data breaches.

Public Liability

Injuries to members of the public or property damage can result in costly legal claims. Public liability insurance is essential for businesses that interact with customers or have visitors to premises.

Financial Risks

Cash flow problems, bad debt, and economic downturns can threaten business viability. Trade credit insurance and proper financial management help mitigate these risks.

Industry-Specific Risk Considerations

Construction & Trades

Site safety, working at heights, machinery operation, and contractual risks. Consider Contract Works insurance and tools coverage.

Retail & Hospitality

Public liability, food safety, stock damage, and business interruption. Consider glass insurance and loss of licence cover.

Professional Services

Professional negligence, advice errors, and client disputes. Professional Indemnity insurance is typically essential.

Agriculture & Horticulture

Livestock, crop loss, weather events, and machinery breakdown. Consider crop insurance and farm asset coverage.

Understanding the Risk Matrix

A risk matrix helps you prioritize which risks need immediate attention based on likelihood and impact.

How to Use the Risk Matrix

Likelihood How likely is it that this risk will occur? Consider historical data and current controls.
Impact How severe would the consequences be if the risk occurred? Consider injury, financial loss, and reputational damage.
Priority High likelihood + high impact = priority action needed. Low risks can be monitored regularly.

Risk Matrix

Likelihood Consequence / Impact
Low Medium High
Low Low Medium High
Medium Medium High Critical
High High Critical Critical
Monitor - review annually
Action within 6 months
Action within 3 months
Immediate action required

Creating a Risk Management Plan

A risk management plan documents your approach to identifying and controlling business risks.

What to Include in Your Plan

1

Risk Register

A documented list of all identified risks, their likelihood, impact, and current controls. Update this regularly as conditions change.

2

Control Measures

Specific actions you'll take to eliminate, reduce, or manage each significant risk. Include who is responsible and when controls will be implemented.

3

Insurance Coverage

Document what insurance policies you have in place and what risks they cover. Review coverage annually to ensure it matches your risk profile.

4

Emergency Procedures

Clear procedures for responding to incidents, including evacuation plans, first aid arrangements, and crisis communication.

5

Review Schedule

Regular intervals for reviewing and updating your risk assessment. At minimum, review annually or when significant changes occur.

Example Risk Register Entry

Risk: Fire at Premises

Likelihood Low-Medium
Impact High

Control Measures:

  • - Fire extinguishers checked annually
  • - Fire alarms tested monthly
  • - Emergency exits clearly marked
  • - Evacuation drill every 6 months
  • - Electrical equipment inspected regularly
  • - No smoking policy enforced

Insurance:

  • - Material Damage insurance
  • - Business Interruption insurance
  • - Natural Disaster insurance

Actions:

  • - Install smoke detectors (due: Mar 2024)
  • - Update evacuation plan (due: Apr 2024)
  • - Review insurance with broker (due: annual)

Need Help with Your Risk Assessment?

Our experienced insurance brokers can help you understand your risks and find the right insurance coverage. We work with leading NZ insurers to get you comprehensive protection.

  • Free risk assessment review
  • Tailored insurance solutions
  • Claims support when you need it
Get a Free Quote

No obligation. Expert advice.

Ready to Protect Your Business?

Get expert advice on the right insurance coverage for your business risks. Our friendly brokers are here to help.

No obligation. No pressure. Just expert advice.