vaayaa Inclusive Education
Industrial risk assessment

Water and Waste Management Engineering Risk Assessment: Process, Electrical, Chemical and Discharge Controls

A worked example showing how an engineering team identifies, scores and controls the risks in a teaching water treatment and wastewater facility, from chemical dosing and electrical exposure to pump reliability, discharge limits and supplier dependence.

Updated November 2026 8 hazards assessed Review every 6 months Highest risk: High to Medium
See the Water and Waste Management Engineering course

Executive summary

This assessment shows how an engineering team can find, score and control the risks in a water treatment and wastewater facility. Eight risks were chosen because they are plausible in daily operation, maintenance and design work. Chemical dosing errors, treatment train failures and confined space entry carry the highest natural scores, while effluent quality and electrical contact remain significant after controls. Each risk is scored before controls and again after existing and added controls. Most fall to Medium or Low once the added controls are in place, but electrical work and confined space entry keep a serious impact. The first actions are interlocked dosing limits, a tested standby pump routine, a written energy isolation procedure and a gas monitor calibration schedule. The facility is a teaching example, so every score illustrates method, not a real operation.

Focus area
Water and waste management engineering
Setting
Municipal style water treatment and wastewater facility with pumping stations, chemical dosing and sludge handling
Method
Five by five likelihood and severity risk register with inherent and residual scoring

Scope

This assessment covers the operation, maintenance and design interfaces of a teaching water treatment and wastewater facility, including intake, treatment processes, pumping, chemical storage and dosing, sludge handling and discharge monitoring. It does not cover a real plant, a specific permit or the design calculations of any structure. Assumptions are labelled where the brief is silent, including the jurisdiction, the treatment technology and the size of the site.

Context

The facility has an intake screen, a primary and secondary treatment train, disinfection by chemical dosing, several submersible and centrifugal pumps, a wet well, a sludge thickening and dewatering area, and a supervisory control and data acquisition system that records flows and water quality. Chemicals are delivered by road tanker and stored on site. Maintenance is split between an in-house team and contractors. Each risk is scored before controls to show its natural level, then again after existing controls and the additional controls proposed here.

Objectives, assets and stakeholders

The objective is to deliver treated water and discharge effluent that meet the required quality, keep people safe during operation and maintenance, protect the receiving watercourse, and maintain a reliable service for the community. The assets in scope are the intake, treatment tanks, pumps, blowers, dosing systems, chemical stores, sludge handling equipment, electrical switchboards, the control system and the monitoring data. Stakeholders include operators and maintenance staff, contractors, the plant manager, the environmental regulator, downstream water users, neighbouring residents and the supply chain. Clear roles matter: every risk has one owner role, and the plant manager reviews the register each quarter and reports to the operating board.

Risk matrix: before and after controls

Each cell shows hazard numbers placed by likelihood and impact. Compare the two grids to see how controls move each hazard.

Before controls

Inherent risk

Risk before controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely Likelihood 4, impact 3, score 12, high: H06 Likelihood 4, impact 4, score 16, high: H01 H02
3 Possible Likelihood 3, impact 3, score 9, medium: H08 Likelihood 3, impact 4, score 12, high: H07 Likelihood 3, impact 5, score 15, high: H03 H05
2 Unlikely Likelihood 2, impact 5, score 10, high: H04
1 Rare

After controls

Residual risk

Risk after controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely
3 Possible
2 Unlikely Likelihood 2, impact 2, score 4, low: H08 Likelihood 2, impact 3, score 6, medium: H01 H02 H05 H06 H07 Likelihood 2, impact 4, score 8, medium: H03
1 Rare Likelihood 1, impact 5, score 5, medium: H04
  • Low 1 to 4
  • Medium 5 to 9
  • High 10 to 16
  • Critical 17 to 25

Hazard register

A summary first, then the detail for each hazard.

Summary of hazards with scores before and after controls
No.HazardBeforeAfterOwner
H01 Chemical dosing error or overdose 16 High 6 Medium Process engineer
H02 Treatment train failure from pump or blower breakdown 16 High 6 Medium Maintenance lead
H03 Electrical contact and arc flash at pump stations 15 High 8 Medium Electrical engineer
H04 Confined space entry into wet wells and tanks 10 High 5 Medium Health and safety manager
H05 Discharge consent exceedance from effluent quality failure 15 High 6 Medium Environmental compliance officer
H06 Sludge spill, odour and leachate release 12 High 6 Medium Site supervisor
H07 Supplier failure for chemicals and spare parts 12 High 6 Medium Procurement lead
H08 Design specification mismatch and monitoring data errors 9 Medium 4 Low Instrumentation and controls engineer
H01

Chemical dosing error or overdose

Safety Before 16 After 6

Dosing pumps are set, calibrated or fed incorrectly, so disinfectant or coagulant is overdosed or underdosed, creating a toxic exposure hazard or a failure to treat the water to the required quality.

Who or what is affected: Operators, maintenance staff, nearby residents and downstream users

Causes

Manual setpoint entry, worn pump tubing and unclear calibration steps.

Consequences

Chemical exposure, failed water quality targets and an enforcement notice.

Existing controls

  • Dosing rates are checked against a written calibration sheet each shift.
  • Chemical residual is measured at the outlet and alarms on set limits.

Control gaps

Calibration is checked by sight, and no one reviews the alarm history.

Additional controls

  • Prevent: Use interlocked dosing limits and a second person check on every setpoint change.
  • Detect: Compare calculated and measured dose each hour and alarm on deviation.
Likelihood 4 x impact 4 before; 2 x 3 after Owner: Process engineer Target: Within 30 days Early warning: Measured residual that moves more than 10 percent from the calculated dose over one hour.
H02

Treatment train failure from pump or blower breakdown

Operational Before 16 After 6

A duty pump, blower or aeration unit fails without a ready standby, so flow backs up, treatment stops, and untreated water may bypass the process if the emergency route is opened.

Who or what is affected: Plant operators, downstream users and the receiving watercourse

Causes

Wear on bearings and impellers, blocked screens and delayed spares orders.

Consequences

Loss of treatment, unplanned discharge and an environmental incident.

Existing controls

  • Duty and standby pumps are installed on the main lines.
  • Vibration and temperature are logged each shift by the operator.

Control gaps

Standby pumps are tested only twice a year, and spares lists are out of date.

Additional controls

  • Prevent: Apply a planned preventive maintenance schedule with spares held for critical items.
  • Respond: Keep a written bypass procedure that requires supervisor approval and a log entry.
Likelihood 4 x impact 4 before; 2 x 3 after Owner: Maintenance lead Target: Within 60 days Early warning: A duty pump that runs above its normal current or temperature for more than 15 minutes.
H03

Electrical contact and arc flash at pump stations

Safety Before 15 After 8

Live parts are exposed during maintenance, panels are opened under load, or fault energy is released in a switchboard, causing electric shock, burns or a fatal injury to workers.

Who or what is affected: Electricians, maintenance technicians and contractors

Causes

Pressure to restore flow quickly, out of date drawings and work on live equipment.

Consequences

Serious injury, death, equipment damage and a formal investigation.

Existing controls

  • Isolation and lockout is required before any panel work.
  • Electrical staff hold current competence records.

Control gaps

Single line drawings are not updated after changes, and contractors are not checked against the isolation procedure.

Additional controls

  • Prevent: Apply a written energy isolation procedure with a test before touch step for every task.
  • Detect: Schedule thermal imaging of switchboards and record hotspots for repair.
Likelihood 3 x impact 5 before; 2 x 4 after Owner: Electrical engineer Target: Within 30 days Early warning: A permit to work issued for live panel work or a missing isolation record.
H04

Confined space entry into wet wells and tanks

Safety Before 10 After 5

Staff enter wet wells, digesters or storage tanks where oxygen is low, hydrogen sulphide or methane is present, or engulfment can occur, and rescue is delayed or not possible.

Who or what is affected: Maintenance staff, contractors and rescue team members

Causes

Gas build up from sludge, rushed entry and reliance on a single gas meter.

Consequences

Asphyxiation, fatal injury to the entrant and to the rescuer.

Existing controls

  • Entry requires a written permit and a gas test before entry.
  • A standby person is named for each confined space entry.

Control gaps

Gas monitors are not calibrated on a fixed schedule, and the rescue equipment is not checked before each shift.

Additional controls

  • Prevent: Use a non entry method for cleaning and inspection wherever a camera or pump out can do the job.
  • Respond: Rehearse a rescue plan with a tripod and winch each year and record the outcome.
Likelihood 2 x impact 5 before; 1 x 5 after Owner: Health and safety manager Target: Within 30 days Early warning: A gas reading outside the permitted range or a permit issued without a completed gas test record.
H05

Discharge consent exceedance from effluent quality failure

Environmental Before 15 After 6

Effluent leaving the works contains suspended solids, nutrients, ammonia or pathogens above the limits set for the receiving water, because treatment performance has fallen or sampling is late.

Who or what is affected: Receiving watercourse users, fish and wildlife, and downstream communities

Causes

Shock loads from storm flows, failed aeration and sampling delays.

Consequences

Pollution of the watercourse, enforcement action and loss of the discharge permit.

Existing controls

  • Effluent is sampled daily and results are recorded in the log.
  • Flow is metered at the outfall.

Control gaps

Action limits are not set, and monitors are not tested against lab samples.

Additional controls

  • Prevent: Set internal action limits below the consent limits and act on them before a breach occurs.
  • Detect: Run online monitors for ammonia and suspended solids with alarms to the control room.
Likelihood 3 x impact 5 before; 2 x 3 after Owner: Environmental compliance officer Target: Within 60 days Early warning: Effluent ammonia or suspended solids above the internal action limit for two consecutive samples.
H06

Sludge spill, odour and leachate release

Environmental Before 12 After 6

Sludge, cake or leachate escapes from tanks, lorries or storage bays, causing odour, runoff to drains and contamination of soil or surface water.

Who or what is affected: Neighbouring residents, site staff and the drainage network

Causes

Overfilling, hose failure during tanker loading and blocked drains.

Consequences

Odour complaints, contamination of drains and a clean up cost.

Existing controls

  • Sludge tanks have high level alarms and bunded storage.
  • Drivers sign a spill checklist before leaving the site.

Control gaps

Bund drains are not checked after heavy rain, and odour complaints are not logged.

Additional controls

  • Prevent: Inspect tank seals and bund integrity each month and repair defects within a set time.
  • Respond: Keep spill kits and absorbent material at each loading bay with a named responder.
Likelihood 4 x impact 3 before; 2 x 3 after Owner: Site supervisor Target: Within 45 days Early warning: A high level alarm on a sludge tank or a visible leak at a loading bay.
H07

Supplier failure for chemicals and spare parts

Supplier Before 12 After 6

The chemical supplier, a parts vendor or a maintenance contractor fails to deliver, supplies off specification product or loses its certification, leaving the works short of treatment chemicals or critical spares.

Who or what is affected: Plant operations, downstream users and procurement staff

Causes

Single source supply, long lead times and weak contract terms.

Consequences

Loss of dosing, reduced treatment and emergency purchases at high cost.

Existing controls

  • Approved supplier list is kept and reviewed each year.
  • Certificates of analysis are requested with each chemical delivery.

Control gaps

Certificates are filed but not checked against the order, and stock cover is not reported.

Additional controls

  • Prevent: Hold at least two qualified suppliers for each critical chemical and parts family.
  • Recover: Keep a minimum stock of treatment chemicals and a written emergency sourcing plan.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Procurement lead Target: Within 60 days Early warning: Chemical stock cover below the agreed minimum days or a delivery that is late twice in a month.
H08

Design specification mismatch and monitoring data errors

Technology and data Before 9 After 4

Equipment is installed to a specification that does not match the process need, or the control system records flows and quality with faulty scaling, wrong tags or stale data, so decisions are based on wrong information.

Who or what is affected: Process engineers, operators, regulators and the public

Causes

Changes made without updating drawings, copied configurations and unclear design basis.

Consequences

Wrong dosing or flow decisions, failed compliance reporting and rework.

Existing controls

  • Design changes are reviewed by a second engineer before approval.
  • Analyser readings are compared with grab samples each week.

Control gaps

Design basis documents are not version controlled, and historic data is not audited.

Additional controls

  • Prevent: Apply a formal management of change step for every hardware or software change.
  • Detect: Run a monthly check of tag scaling and data time stamps against the design basis.
Likelihood 3 x impact 3 before; 2 x 2 after Owner: Instrumentation and controls engineer Target: Within 90 days Early warning: A data gap longer than 30 minutes on a flow or quality signal or a mismatch between two analysers.

Rating method and evaluation

Each risk is rated on two five-point scales. Likelihood runs from Rare to Almost certain, and severity runs from Minor to Catastrophic. Multiplying the two gives a score from 1 to 25, which falls into one of four bands: Low from 1 to 4, Medium from 5 to 9, High from 10 to 16 and Critical from 17 to 25. The score is a guide for ordering work, not a measurement. Inherent risk is the score before any controls. Residual risk is the score after the existing and added controls, and it must never be higher than the inherent score. Severity is judged on harm to people first, then environmental damage, service loss, legal exposure and cost, and a risk is never rated down only because it has not yet happened. Any risk still at High or Critical needs senior attention and a dated plan, any Medium risk needs routine controls with a named owner, and any Low risk is accepted and watched. Operators and engineers who do the work should challenge the ratings, and each risk is reviewed when an indicator reaches its threshold or after a near miss.

Likelihood, impact and rating bands

Likelihood

  • 5 Almost certain: Expected to happen in most circumstances.
  • 4 Likely: Will probably happen in many circumstances.
  • 3 Possible: Could happen at some time.
  • 2 Unlikely: Not expected, but it could happen.
  • 1 Rare: Only in exceptional circumstances.

Impact

  • 1 Insignificant: No lasting effect. Handled within routine work.
  • 2 Minor: Small effect that is quickly corrected.
  • 3 Moderate: Noticeable effect that needs managed effort to correct.
  • 4 Major: Serious effect on people, delivery or reputation.
  • 5 Catastrophic: Severe or lasting effect that threatens the whole activity.

Bands (likelihood x impact)

  • Low (1 to 4): Accept and monitor.
  • Medium (5 to 9): Manage with routine controls.
  • High (10 to 16): Senior attention and a treatment plan.
  • Critical (17 to 25): Act first. Do not proceed until reduced.

Monitoring, escalation and review

Review this assessment every 6 months, and sooner when an indicator below reaches its threshold.

Early-warning indicators and escalation thresholds
Indicator to watchEscalate when
Measured chemical residual that differs from the calculated dose by more than 10 percent over one hour.Escalate to the process engineer at once, and to the plant manager if the deviation continues for more than 30 minutes.
Duty pump running above normal current or temperature for more than 15 minutes.Escalate to the maintenance lead at once, and start the standby pump under the operating procedure.
Permit to work issued without a completed isolation or gas test record.Stop the work at once, and escalate to the health and safety manager before work restarts.
Effluent ammonia or suspended solids above the internal action limit for two consecutive samples.Escalate to the environmental compliance officer the same day, and to the plant manager if the consent limit is at risk.
Chemical stock cover below the agreed minimum days or a supplier delivery late twice in a month.Escalate to the procurement lead within one day, and to the plant manager if cover falls below half of the minimum.

Contingency arrangements

If a serious event occurs, such as a dosing overdose, a loss of treatment or a confined space incident, the plant manager stops the affected process, makes the area safe and informs the duty engineer. The electrical engineer isolates affected equipment under the permit system. The environmental compliance officer contacts the regulator as the relevant rules require. Standby pumps and a bypass plan are used only under written approval. Local emergency services are called where needed, and the public is informed early and plainly.

Prioritized action plan

  1. Install interlocked dosing limits and a second person check on setpoint changes, owner process engineer, within 30 days.
  2. Apply a written energy isolation procedure with test before touch for every electrical task, owner electrical engineer, within 30 days.
  3. Calibrate gas monitors and rehearse the confined space rescue plan, owner health and safety manager, within 30 days.
  4. Test standby pumps on a fixed routine and hold critical spares, owner maintenance lead, within 60 days.
  5. Set internal effluent action limits below consent and link online monitors to alarms, owner environmental compliance officer, within 60 days.

Conclusion

Safe and reliable water and waste treatment depends on steady habits: interlocked dosing, tested standby equipment, strict isolation and gas testing, action limits below consent limits, and verified chemical supply. The highest scores sit with chemical dosing, treatment failure and confined space entry, and each has actions that lower the residual score. Treat the register as a living record, review it on the stated cycle, and seek qualified engineering and regulatory advice for any real design, permit or operational decision.

Assumptions and limitations

Assumptions

  • The jurisdiction is not specified, so discharge and drinking water duties are described in general terms only.
  • The facility uses one primary disinfection method and standard pumping and sludge equipment.
  • Operators are trained, but staffing levels and shift patterns are assumed for teaching purposes.

Limitations

  • The scores are examples for learning and do not describe any real plant or regulator decision.
  • Water and wastewater rules differ by location and change over time, so specialist review is needed.
  • This is educational content and does not replace a formal site-specific assessment or licensed engineering advice.

Related frameworks to study

  • Hierarchy of controls
  • Failure mode and effects analysis
  • Hazard and operability study
  • Bow tie analysis
  • Lockout tagout procedure design
  • Management of change process

Industrial Risk Assessment

China, India, United States, Indonesia, Pakistan, Nigeria, Brazil, Bangladesh, Russia, Japan, Mexico, Philippines, Vietnam, Egypt, Turkey, Germany, United Kingdom, France, Italy, Canada, South Korea, Australia, Spain.

For Learning Reference Only: This assessment demonstrates how risk assessment principles are applied in a practical setting, providing a useful reference for learning and understanding. Actual assessments may be adapted to suit specific site conditions and circumstances.

Keep learning

Study the subject behind this assessment.

Water and Waste Management Engineering course Read the best practices for this course

More Industrial risk assessments

Hourly Active: 39,499 Learners