Construction Project Risk Assessment: 8 Steps to Run One
A construction project risk assessment lists what could go wrong on a job and scores each threat. Every serious risk then gets one named owner. Start before mobilization and rerun the review at each phase change.
Shrinking margins leave little room for rework, so the register needs specific events such as a damaged line or a missed delivery. Occupied buildings add a second exposure because the operation next door keeps running while your crew demolishes.
STARC Systems builds reusable temporary walls for occupied hospitals and airports. The advice below comes from our own jobs, where the building stays open.
What You Need Before Starting
Gather the current documents and the right people before the first workshop. A half day covers a mid-size renovation.
Collect these items:
Latest drawings, specifications, and phasing plans
Baseline CPM schedule and procurement log
Existing-condition and hazardous-material surveys
Contract documents with owner requirements
Site logistics plan and safety plan
Barrier layout with linear footage for each phase
Lessons learned from similar projects
Bring the people who run the work and the people who run the building: the superintendent, project manager, scheduler, safety lead, and key subcontractors, plus a facility representative on occupied projects.
A hospital infection preventionist or an airport operations lead knows which corridors must stay open and which shutdowns trigger real consequences. Those answers shape every containment decision that follows.
Then build the risk register with one row per risk. Each row carries these fields:
Risk event
Cause
Consequence
Likelihood score
Impact score
Priority
Early warning sign
Prevention control
Contingency action
Owner
Review date
How to Run a Construction Project Risk Assessment
Do the eight steps below in order. Each step adds a layer to the same register.
Step 1: Set the Scope and Phases
Write down exactly what the assessment covers. A label like "renovation risks" is too broad to act on. A line like "selective demolition and MEP rough-in on Level 2 beside an open patient unit" points to a location and a hazard.
Mark the line where the work zone ends and the occupied space begins. For most renovations, a temporary wall runs along that line, so its position determines how far dust and noise travel.
Split the job into phases, because each one carries a different risk profile. Demolition releases dust and exposes hidden conditions, while phased turnover parks unfinished work beside an operating space.
Set the review cadence now: rerun the assessment before each phase starts, at every schedule update, and after any scope change or failed inspection.
Step 2: Walk the Site With the People Who Know It
Drawings miss things a field walk catches. Walk the work area with the superintendent and the facility contact. Follow the material routes and check the egress paths. Then look above the ceilings.
Pace off the proposed wall line and count every door on it. Each opening is a place where dust can escape.
Ask direct questions:
Where will crews enter and stage material?
Where does debris leave the building?
Which doors and elevators serve building occupants?
What runs behind the existing walls?
Where can dust or water escape?
Which operations must keep running?
What happens if the work zone grows by 20 feet?
Photograph everything and mark up the plans. A risk tied to a spot on the floor plan is easier to control than a general worry.
Step 3: Identify Risks by Category
Sort risks into categories so the conversation reaches beyond safety. OSHA's 1926 standards cover fire protection and demolition, among other topics, which makes them a handy prompt for hazard reviews.
Use these categories:
Safety (falls, struck-by events, silica, hot work)
Schedule (long-lead items, trade stacking, inspection delays)
Cost (escalation, rework, owner changes)
Design (missing details, clashes, late RFIs)
Contract (unclear scope, notice deadlines, sub default)
Operations (access, noise, dust, security, service interruptions)
Site (weather, hidden utilities, contaminated materials)
Closeout (failed testing, commissioning delays, punch-list growth)
Labor shortfalls and loose subcontract scopes create workforce and contract risk that often surfaces months later as lost production. Log those early.
Write every entry as an event with a cause and a consequence. Unverified above-ceiling routing raises the odds that demolition strikes a live line. If it does, service drops and the job stops. An entry like this tells the team what to verify.
Step 4: Score Likelihood and Impact
Use a five-point matrix that everyone reads the same way:
Score | Likelihood | Impact |
1 | Rare | Minor |
2 | Unlikely | Limited |
3 | Possible | Moderate |
4 | Likely | Major |
5 | Expected | Severe |
Multiply the two numbers. A risk rated 4 for likelihood and 5 for impact scores 20 and leads the agenda.
The score guides the discussion, but judgment still overrides it. A dust-control failure beside an oncology unit deserves more planning than its probability suggests, because the consequence is severe.
Timing shifts the order too. A risk scoring 12 that could hit next week and needs a long-lead control can outrank a 16 that sits months away.
Step 5: Pick Controls and Contingencies
Give every high-priority risk two responses. The prevention control acts before the event. The contingency action tells the team what to do if the event happens anyway.
Good controls name an owner and a trigger. "Monitor sub performance" names no owner and no trigger.
A better version reads, "The project manager reviews the manpower report every Tuesday, and the superintendent escalates any 15% shortfall within 24 hours."
Choose one of four responses for each risk:
Avoid it by changing the plan
Mitigate it with a control
Transfer it through insurance or contract terms
Accept it and reserve time or money
In occupied areas, the barrier is the control. When dust or fire exposure sits next to people, specify temporary wall systems designed for safety, and confirm the rating your project needs against the current spec before you write it into the register.
Step 6: Assign One Owner per Risk
A risk with three owners belongs to whoever speaks up last. Name one person to track the warning signs and escalate when a trigger hits.
Match owners to expertise:
Scheduler for sequencing risks
Project manager for scope and change
Safety manager for task planning
Superintendent for barrier condition and containment inspections
Facility representative for shutdown approvals and occupant communication
Set escalation triggers in advance, such as a missed procurement date, a failed containment inspection, a breach in the work-zone barrier, or a critical activity that burns its float.
Step 7: Bring the Register Into Weekly Meetings
A register that sits in a shared folder only records history. It drives decisions once the team reviews it. Review the top risks in the weekly OAC meeting and the superintendent huddle, and focus on what changed.
Containment timing shapes the early schedule. A faster temporary wall setup gives demolition crews an enclosure before work starts.
Track the leading indicators that show a risk is climbing, like float burn, late submittals, missed interim milestones, and a rising count of containment inspection findings.
Ask the owner of every rising risk to bring a plan.
Step 8: Update the Register When the Job Changes
Revise the register the day the job changes: revised drawings, a new subcontractor, a resequenced activity, or a new phase.
Say crews uncover unexpected piping during demolition. Log it that day, then assign someone to size the cost and schedule impact.
When the work zone shifts, update the wall line in the register. Reusable panels can move to the new line, so the control follows the risk.
Close a risk once its cause disappears, and record what happened. Those notes give the next job's team a head start.
How Occupied Renovations Change the Assessment
Occupied projects run two operations at once. One is the construction, and the other is the building around it. The register needs rows for both.
Healthcare facility teams already follow the CDC guidelines on environmental infection control, so use the same reference when you set air-quality rows.
Add rows for these checks:
Containment rows define where dust can travel and how inspectors verify the boundary.
Air rows start with a talk with the facility team before any work near patients.
Noise rows set work windows and flag vibration-sensitive tasks.
Egress rows keep exits and emergency access clear.
Security rows control entry points and hide the work zone from public view.
Healthcare projects start with an infection control risk assessment (ICRA), and the results belong in the register. Each ICRA row records:
Work type
Patient risk group
Containment class
Cleaning protocol
Monitoring owner
Track infection prevention controls beside those rows so one owner sees both.
Two hospital projects show how this works on occupied jobs. At Tucson Medical Center, DPR Construction renovated 75% of an active emergency department while patients were receiving critical care, with RealWall™ handling sound attenuation and dust control.
At Hendricks Regional Health, the team converted existing spaces into 43 isolation rooms in weeks and used STARC walls to build negative air rooms.
Common Mistakes to Avoid
Four mistakes weaken an otherwise solid register:
Copying controls from the last job backfires. A plan that worked in an empty office can fail beside a live hospital unit, so rebuild each control around the current operation.
Bloating the register buries the top risks. Keep the working list short enough to review in one meeting, and move low scores to a watch list.
Assuming facility approval creates surprises. Have the facility representative confirm shutdown windows and noise hours in writing before crews mobilize.
Delaying containment decisions lets the sequence set itself by accident. Fix wall lines and door locations in the site logistics plan, since they decide how crews and material move.
How STARC Supports a Construction Project Risk Assessment
Once a construction project risk assessment ranks containment among the top exposures, the temporary wall becomes the main control. STARC panels can be reused 50+ times, so one wall set can serve several phases and projects.
Match the system to the risk:
RealWall™ fits long-term, high-visibility work where sound attenuation and appearance carry weight.
LiteBarrier™ handles fast, frequently relocated containment.
FireblockWall™ covers projects with fire and life-safety requirements.
StackBarrier™ serves tall or oversized spaces.
If your register puts containment near the top, request a quote and STARC will match the system to the job.
Frequently Asked Questions
What is a construction project risk assessment?
A construction project risk assessment is a structured review that scores each threat to a job on a five-point scale for likelihood and impact. Every serious risk then gets one named owner and a control.
When should you run a construction project risk assessment?
You should run a construction project risk assessment before mobilization and rerun it at each phase change. Scope changes and new site conditions also trigger a fresh review.
What does a construction risk register include?
A construction risk register includes 11 fields for each risk, from the event and cause to the owner and review date.
Who should join the assessment?
The core project team and key subcontractors should join the assessment. Occupied projects add a facility representative, and healthcare projects add an infection preventionist.
How often should you update the assessment?
You should update the assessment at every schedule review and on the day scope or site conditions change.
