Which of the following is NOT a correct step in the five-step risk assessment process?

• A. Identify the risks
• B. Identify who can be harmed and how
• C. Create an action plan
• D. Record findings

Answer: (C)

The five-step risk assessment process focuses on identifying hazards, deciding who might be harmed and how, evaluating the risks and deciding on precautions, recording findings, and reviewing the assessment. The step that describes creating an action plan isn’t listed as one of these five steps; instead, the action plans for controlling risk are generated as part of deciding on precautions in the evaluation step, and then implemented and reviewed. So, describing a separate action plan is not a distinct step in the framework, which is why this option is the best choice.

To connect the others: identifying hazards matches the first step; identifying who could be harmed and how matches the second; recording findings is the fourth step.