vaayaa Inclusive Education
Technical risk assessment

Environmental and Sustainability Engineering Risk Assessment: Controls for Emissions, Maintenance and Monitoring

A worked example of how an engineering team identifies, scores and controls the risks that threaten environmental compliance, plant reliability, monitoring accuracy and worker safety in a treatment and energy facility.

Updated November 2026 8 hazards assessed Review every 6 months Highest risk: Critical to Medium
See the Environmental and Sustainability Engineering course

Executive summary

This assessment shows how an engineering team can find, rate and control the risks that matter most to environmental compliance, plant reliability, monitoring accuracy and worker safety. Eight risks were chosen because they are plausible in everyday treatment, energy and sustainability work. Chemical exposure and isolation errors carry the most severe harm, while treatment failure and permit breaches are more likely. Each risk is scored before controls and again after existing and added controls. Most risks fall to Medium or Low once added controls are in place, but chemical exposure remains Medium because its impact stays serious. The first actions are a sensor calibration routine, ventilation testing at sampling points, a verified design basis and a compliance calendar with backup owners. The facility is a teaching example, so every score illustrates method, not a real operation.

Focus area
Environmental and sustainability engineering
Setting
Operations and engineering function of a small to mid-sized treatment and energy facility with outsourced monitoring
Method
Five by five likelihood and impact risk register

Scope

This assessment covers a teaching example of a facility that treats process water, runs boilers and pumps, samples emissions and effluent, and reports sustainability performance. It covers design, maintenance, monitoring, supplier dependencies, permit duties and worker safety. It does not cover a real site, a licensed design or any specific regulator. Jurisdiction, plant size, equipment types and permit terms are assumptions made for teaching only.

Context

The facility has a process engineer, a maintenance lead, electrical and mechanical technicians, an environmental officer and a contracted laboratory that analyzes samples. Pumps, blowers and a boiler run on a planned maintenance schedule recorded in a computerized system. Monitoring data is logged in spreadsheets and sent to management and, where required, to the permitting authority. Each risk is scored before controls to show its natural level, then again after existing controls and the additional controls that should be added.

Objectives, assets and stakeholders

The objective is to keep treated discharges and emissions within permit limits, protect people from chemical and energy hazards, keep plant reliable, and produce sustainability data that can be trusted. The assets in scope are the treatment unit, pumps, blowers, the boiler, electrical systems, chemical stores, monitoring equipment, laboratory records and the reporting database. Stakeholders include site operators and technicians, contractors, the process, maintenance and environmental leads, the facility owner, neighboring communities and the permitting authority. Clear roles matter: every risk has one owner role, and the environmental officer keeps the register current and reports to the facility owner each quarter.

Risk matrix: before and after controls

Each cell shows hazard numbers placed by likelihood and impact. Compare the two grids to see how controls move each hazard.

Before controls

Inherent risk

Risk before controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely Likelihood 4, impact 3, score 12, high: H04 H07 Likelihood 4, impact 4, score 16, high: H01 Likelihood 4, impact 5, score 20, critical: H02
3 Possible Likelihood 3, impact 3, score 9, medium: H05 Likelihood 3, impact 4, score 12, high: H03 H06
2 Unlikely Likelihood 2, impact 5, score 10, high: H08
1 Rare

After controls

Residual risk

Risk after controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely
3 Possible
2 Unlikely Likelihood 2, impact 2, score 4, low: H04 H05 Likelihood 2, impact 3, score 6, medium: H01 H03 H06 H07 Likelihood 2, impact 4, score 8, medium: H02
1 Rare Likelihood 1, impact 4, score 4, low: H08
  • Low 1 to 4
  • Medium 5 to 9
  • High 10 to 16
  • Critical 17 to 25

Hazard register

A summary first, then the detail for each hazard.

Summary of hazards with scores before and after controls
No.HazardBeforeAfterOwner
H01 Effluent or emission limit exceedance from treatment failure 16 High 6 Medium Process engineering lead
H02 Chemical exposure during sampling, dosing and handling 20 Critical 8 Medium Site health and safety lead
H03 Design or specification mismatch in treatment and energy systems 12 High 6 Medium Design engineering manager
H04 Maintenance backlog and equipment reliability failure 12 High 4 Low Maintenance lead
H05 Dependence on contracted laboratory and spare part suppliers 9 Medium 4 Low Procurement and supplier manager
H06 Missed permit reporting and legal compliance duties 12 High 6 Medium Environmental officer
H07 Data integrity in environmental and sustainability reporting 12 High 6 Medium Data and reporting lead
H08 Electrical and mechanical isolation error during maintenance 10 High 4 Low Electrical maintenance supervisor
H01

Effluent or emission limit exceedance from treatment failure

Environmental Before 16 After 6

A treatment stage such as clarification, filtration or dosing performs below design, so discharge or emission readings rise above permitted limits and affect nearby water or air quality.

Who or what is affected: Neighboring communities, aquatic habitats and site operators

Causes

Dosing pump faults, sudden load changes, sensor drift and operators working outside the procedure.

Consequences

Permit breach, environmental damage, enforcement action and loss of community trust.

Existing controls

  • Online sensors log outlet flow and key parameters every hour.
  • Operators follow a written start up and shutdown procedure for the treatment unit.

Control gaps

Sensor calibration is checked only when a fault is reported, so drift can go unnoticed for weeks.

Additional controls

  • Prevent: Set alarm bands below permit limits and tie them to automatic dosing shutdown and bypass isolation.
  • Detect: Review trend charts each shift and compare lab results with sensor readings each week.
  • Respond: Hold a tested response plan to divert or stop flow when a limit is at risk.
Likelihood 4 x impact 4 before; 2 x 3 after Owner: Process engineering lead Target: Within 30 days Early warning: Two consecutive hourly readings within 10 percent of a permit limit.
H02

Chemical exposure during sampling, dosing and handling

Safety Before 20 After 8

Workers handle treatment chemicals, sludge and sample containers without adequate ventilation, guarding or protective equipment, so they can be burned, poisoned or exposed to gases released from process water.

Who or what is affected: Operators, technicians and contractors on site

Causes

Manual sample collection, damaged containers, mixing of incompatible chemicals and gaps in training.

Consequences

Injury, hospital treatment, loss of working time and a formal investigation.

Existing controls

  • Chemical storage areas are bunded and labeled.
  • Staff wear gloves and eye protection for routine sampling.

Control gaps

Exhaust fans at two sampling points have not been tested since installation, and contractors are not always briefed.

Additional controls

  • Prevent: Replace open dosing with closed transfer systems and fix local exhaust ventilation at sampling points.
  • Detect: Run gas detection in confined and low lying areas and log any alarm for review.
  • Respond: Keep eyewash, drench showers and a tested first aid and spill response plan at each chemical area.
Likelihood 4 x impact 5 before; 2 x 4 after Owner: Site health and safety lead Target: Within 14 days Early warning: Any gas detector alarm or near miss reported at a sampling or dosing point.
H03

Design or specification mismatch in treatment and energy systems

Operational Before 12 After 6

Equipment is sized or specified against assumed flows, loads or chemistry that differ from actual operating conditions, so the system cannot reliably meet its performance targets.

Who or what is affected: Process engineers, maintenance staff and the facility owner

Causes

Out of date design data, incomplete commissioning tests and changes in feed quality over time.

Consequences

Poor treatment performance, higher energy use, rework costs and delayed sustainability targets.

Existing controls

  • Design changes are recorded in a change log with a signed approval.
  • Commissioning includes a performance test against the design brief.

Control gaps

The design basis document has not been updated since the last process change and is not linked to the change log.

Additional controls

  • Prevent: Check design basis against measured flows and chemistry before any equipment change is approved.
  • Detect: Compare measured performance with design curves each month and record deviations.
  • Recover: Schedule a design review and a documented modification whenever a deviation persists for two cycles.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Design engineering manager Target: Within 60 days Early warning: Measured flow or energy use outside the design band for three consecutive weeks.
H04

Maintenance backlog and equipment reliability failure

Operational Before 12 After 4

Pumps, blowers, valves and the boiler are not serviced to schedule, and deferred work or repeat faults lead to unplanned shutdowns, leaks or loss of treatment capacity.

Who or what is affected: Operations team, maintenance crews and downstream users of treated water or heat

Causes

Limited staff hours, deferrals for production needs and spare parts that are not in stock.

Consequences

Unplanned shutdown, leaks, higher repair cost and a permit excursion while plant is down.

Existing controls

  • A computerized maintenance schedule lists planned tasks for each asset.
  • Critical spares are held for the main pumps.

Control gaps

Deferred tasks are rarely reviewed for their combined effect on reliability.

Additional controls

  • Prevent: Rank assets by consequence of failure and set reliability targets for the top ten.
  • Detect: Review overdue tasks and repeat faults in a weekly meeting and record the reasons for any deferral.
  • Recover: Keep a tested switchover plan to a standby pump or bypass route.
Likelihood 4 x impact 3 before; 2 x 2 after Owner: Maintenance lead Target: Within 45 days Early warning: More than five overdue maintenance tasks on critical assets at any one time.
H05

Dependence on contracted laboratory and spare part suppliers

Supplier Before 9 After 4

The outsourced laboratory or a key parts supplier is late, makes an error or fails, so monitoring results or repairs are delayed and decisions are based on missing or incorrect information.

Who or what is affected: Environmental officer, maintenance team and regulators receiving reports

Causes

Single source supply, lab backlogs and weak contract terms for results quality.

Consequences

Late reports, missed sampling windows, unplanned repairs and damage to supplier relationships.

Existing controls

  • The laboratory contract sets turnaround times and sample handling rules.
  • Two suppliers are listed for common spare parts.

Control gaps

Blind duplicate samples have not been used and the backup laboratory is not under contract.

Additional controls

  • Prevent: Audit the laboratory's quality records and require proficiency results before each renewal.
  • Detect: Submit blind duplicate samples each quarter and compare results with the primary lab.
  • Respond: Name a backup laboratory and confirm its capacity in writing.
Likelihood 3 x impact 3 before; 2 x 2 after Owner: Procurement and supplier manager Target: Within 60 days Early warning: Laboratory results delivered later than the contracted turnaround on two occasions in a quarter.
H06

Missed permit reporting and legal compliance duties

Legal and compliance Before 12 After 6

Permit conditions, monitoring frequencies or reporting deadlines are missed, misread or applied from an out of date permit, so the facility is in breach even when its performance is acceptable.

Who or what is affected: Facility owner, environmental officer and the permitting authority

Causes

Permit changes that are not captured, staff turnover and reports prepared at the last minute.

Consequences

Enforcement action, fines, forced shutdown and loss of permit standing.

Existing controls

  • A compliance register lists the main permit conditions.
  • Monthly reports are reviewed by the environmental officer before submission.

Control gaps

The register is not checked against the latest permit version and no backup owner is named.

Additional controls

  • Prevent: Keep a compliance calendar with an owner and a backup owner for each duty.
  • Detect: Check the register against the current permit each quarter and record any change.
  • Respond: Set a procedure to notify the regulator promptly when a breach is found.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Environmental officer Target: Within 30 days Early warning: A reporting deadline within 10 days with no named preparer or reviewer.
H07

Data integrity in environmental and sustainability reporting

Technology and data Before 12 After 6

Monitoring results, energy and water figures are copied between spreadsheets, altered or lost, so reports contain errors or claims about performance that cannot be supported by evidence.

Who or what is affected: Management, investors, customers and regulators

Causes

Manual copying, unprotected files and reports built from several versions of the same data.

Consequences

Incorrect public claims, correction notices, loss of credibility and possible legal exposure.

Existing controls

  • Lab certificates are filed with each monthly report.
  • Spreadsheet templates are locked except for input cells.

Control gaps

Spreadsheet edits are not logged and meter readings are not reconciled to reported totals.

Additional controls

  • Prevent: Move key monitoring data into a controlled database with user access and change logs.
  • Detect: Reconcile reported totals with meter readings and lab certificates each month.
  • Recover: Keep a dated archive of each report version and restore from it when an error is found.
Likelihood 4 x impact 3 before; 2 x 3 after Owner: Data and reporting lead Target: Within 60 days Early warning: A reported total that does not match the meter or lab source figure for the same period.
H08

Electrical and mechanical isolation error during maintenance

Safety Before 10 After 4

A pump, motor or boiler control is energized or started while a worker is inside or touching it, because isolation steps were skipped, labels were unclear or the permit was not checked.

Who or what is affected: Electrical and mechanical technicians and nearby operators

Causes

Rushed jobs, unclear isolation labels and contractors unfamiliar with the site.

Consequences

Electric shock, crushing injury, fatality and a formal investigation.

Existing controls

  • A lockout and tagout procedure is posted at each motor control center.
  • Permits to work are required for work on rotating or energized equipment.

Control gaps

Isolation audits are not carried out on night shifts and contractor sign off is incomplete.

Additional controls

  • Prevent: Require personal locks and a try start test before any work starts on energized or rotating plant.
  • Detect: Audit permits and isolation records each month and sample a set of jobs on site.
  • Respond: Practice rescue and first aid for entrapment and electric shock every six months.
Likelihood 2 x impact 5 before; 1 x 4 after Owner: Electrical maintenance supervisor Target: Within 14 days Early warning: A permit closed without a documented isolation check or a contractor job without site induction.

Rating method and evaluation

Each risk is rated on two five-point scales. Likelihood runs from Rare to Almost certain, and impact runs from Insignificant to Catastrophic. Multiplying the two gives a score from 1 to 25, which falls into one of four bands: Low from 1 to 4, Medium from 5 to 9, High from 10 to 16 and Critical from 17 to 25. The score is a guide for ordering work, not a measurement. Inherent risk is the score before any controls. Residual risk is the score after the existing and added controls, and it must never be higher than the inherent score. Impact is judged on harm to people, damage to habitats, permit breach, cost of repair and effect on reported results. A risk is never rated down only because it has not yet happened. Anything still Critical or High needs senior attention and a dated plan. Anything Medium needs routine controls with a named owner, and anything Low is accepted and watched. Operators and technicians who do the work should challenge the ratings, and each rating is reviewed whenever an indicator reaches its threshold or a related incident occurs.

Likelihood, impact and rating bands

Likelihood

  • 5 Almost certain: Expected to happen in most circumstances.
  • 4 Likely: Will probably happen in many circumstances.
  • 3 Possible: Could happen at some time.
  • 2 Unlikely: Not expected, but it could happen.
  • 1 Rare: Only in exceptional circumstances.

Impact

  • 1 Insignificant: No lasting effect. Handled within routine work.
  • 2 Minor: Small effect that is quickly corrected.
  • 3 Moderate: Noticeable effect that needs managed effort to correct.
  • 4 Major: Serious effect on people, delivery or reputation.
  • 5 Catastrophic: Severe or lasting effect that threatens the whole activity.

Bands (likelihood x impact)

  • Low (1 to 4): Accept and monitor.
  • Medium (5 to 9): Manage with routine controls.
  • High (10 to 16): Senior attention and a treatment plan.
  • Critical (17 to 25): Act first. Do not proceed until reduced.

Monitoring, escalation and review

Review this assessment every 6 months, and sooner when an indicator below reaches its threshold.

Early-warning indicators and escalation thresholds
Indicator to watchEscalate when
Two consecutive hourly readings within 10 percent of a permit limit.Escalate to the process engineering lead at once, and to the environmental officer if the reading is not back in band within one hour.
Any gas detector alarm or near miss at a sampling or dosing point.Escalate to the site health and safety lead on the same shift, and stop the task until the cause is found.
More than five overdue maintenance tasks on critical assets at once.Escalate to the operations manager when the count is exceeded, and to the facility owner if it stays high for two weeks.
A reported total that does not match the meter or lab source figure.Escalate to the data and reporting lead before submission, and to the environmental officer if the report has already been sent.
A permit closed without a documented isolation check or a contractor job without site induction.Escalate to the electrical maintenance supervisor at once, and stop the job until the check is complete.

Contingency arrangements

If a serious event occurs, such as a permit breach, a chemical release or an electrical injury, the process engineering lead stops the affected process or circuit and makes the area safe. The environmental officer informs the facility owner and the permitting authority as the permit requires. The maintenance lead arranges a standby pump or bypass route and records the time and cause. Injured people receive first aid and medical care first, and the site health and safety lead preserves evidence for review.

Prioritized action plan

  1. Calibrate online sensors and test dosing shutdown and bypass, owner process engineering lead, within 30 days.
  2. Test exhaust ventilation at sampling points and confirm eyewash and drench showers, owner site health and safety lead, within 14 days.
  3. Confirm isolation audits cover night shifts and contractor sign off, owner electrical maintenance supervisor, within 14 days.
  4. Update the design basis against measured flows and link it to the change log, owner design engineering manager, within 60 days.
  5. Set a compliance calendar with backup owners and move monitoring data into a controlled database, owner environmental officer, within 60 days.

Conclusion

Reliable environmental performance depends on steady habits: calibrated sensors, tested ventilation, isolation discipline, a verified design basis, controlled data and a calendar for every permit duty. The highest scores sit with chemical exposure, treatment failure and isolation error, and each has actions that bring the residual score down. Treat the register as a living record, review it on the stated cycle, and seek qualified engineering, legal and environmental advice for any real site decision.

Assumptions and limitations

Assumptions

  • Jurisdiction, permit limits and the regulator are not specified, so legal duties are described in general terms only.
  • The example facility is small to mid-sized and includes a water treatment unit, a boiler, electrical plant and an outsourced laboratory.
  • Staff are trained engineers and technicians who work under documented procedures and a permit to work system.

Limitations

  • The scores are teaching examples and do not describe any real site, plant, permit or regulator.
  • Environmental law, discharge limits and engineering standards differ by location and change over time, so specialist review is needed.
  • This is educational content and does not replace a formal site-specific assessment or licensed engineering advice.

Related frameworks to study

  • Hierarchy of controls
  • Bow tie risk analysis linking causes, barriers and consequences
  • Hazard and operability study method for process systems
  • Lifecycle assessment method for sustainability impacts
  • Plan, do, check, act cycle for continual improvement

Technical Risk Assessment

China, India, United States, Indonesia, Pakistan, Nigeria, Brazil, Bangladesh, Russia, Japan, Mexico, Philippines, Vietnam, Egypt, Turkey, Germany, United Kingdom, France, Italy, Canada, South Korea, Australia, Spain.

For Learning Reference Only: This assessment demonstrates how risk assessment principles are applied in a practical setting, providing a useful reference for learning and understanding. Actual assessments may be adapted to suit specific site conditions and circumstances.

Keep learning

Study the subject behind this assessment.

Environmental and Sustainability Engineering course Read the best practices for this course

More Technical risk assessments

Hourly Active: 35,661 Learners