Job Safety Analysis: A Complete Step-by-Step Guide 2026

Most workplace injuries do not happen during strange, unpredictable events. They happen during routine tasks that somebody has done a hundred times before, on a day when one small step went differently. A job safety analysis is the tool that catches those steps before a worker does.

The idea is simple. You take one task, break it into the actual steps a person performs, and ask what could hurt someone at each step. Then you fix it on paper before anyone picks up a tool.

This guide walks through the full process: how to choose which job to analyze, how to break it down, how to spot hazards, how to pick controls that actually hold, and what a finished JSA looks like when it is filled in properly. You will also get straight answers on the questions most guides skip, like who signs the form and who owns it when three contractors share a site.

What Is a Job Safety Analysis (JSA)?

A job safety analysis is a written breakdown of a single task into its sequential steps, with the hazards and controls identified for each step. The output is a form. The value is the conversation that produces it.

Notice the scope. A JSA looks at one task, not a whole workplace. "Replace the drive belt on conveyor 4" is a JSA. "Warehouse safety" is not. That distinction is where most weak JSAs fall apart before they start.

The reason this matters is captured in the numbers. According to the Bureau of Labor Statistics, 5,070 workers died from work injuries in 2024, down 4.0 percent from 5,283 the year before. The fatal injury rate eased to 3.3 per 100,000 full-time equivalent workers, from 3.5. Progress is real, but those deaths overwhelmingly occurred inside tasks somebody had already planned to do.

A JSA earns its value in the conversation that produces it, not in the filing cabinet afterward.

JSA vs JHA: Is There Actually a Difference?

Functionally, no.

You will see job safety analysis (JSA), job hazard analysis (JHA), activity hazard analysis (AHA), and job safety and environmental analysis (JSEA). Different industries and different clients prefer different labels. The process is the same: break the job down, find the hazards, pick the controls.

Some safety professionals argue a fine distinction, that a JSA leans toward how to do the job safely while a JHA leans toward what could go wrong and how badly. In practice, the forms are interchangeable, and OSHA itself uses "job hazard analysis" throughout its guidance. If a client asks for a JHA and you hand them a JSA, you have met the request. Use whichever term your contract specifies and move on.

JSA vs Risk Assessment vs Risk Matrix

This three-way confusion causes real problems, so here is the clean separation:

• JSA asks: what are the hazards in this specific task, step by step? It is the input.
• Risk assessment asks: across this activity or site, what hazards exist and how do we prioritize them? It is broader in scope.
• Risk matrix asks: how bad is this one hazard? It is the scoring layer you apply inside JSA steps 3 and 4.

They are not competitors. A good JSA usually contains a matrix. When you rate a hazard's likelihood against its severity, you are running a risk assessment matrix inside your JSA form. The JSA finds the hazard; the matrix tells you how loudly to worry about it.

Is a Job Safety Analysis Required by OSHA?

Here is the honest answer, because a lot of sites fudge this one.

But that answer alone is misleading, because three things make JSAs functionally near-mandatory in US workplaces.

What 29 CFR 1910.132 Actually Says

The personal protective equipment standard, 29 CFR 1910.132(d), requires employers to assess the workplace to determine whether hazards are present that necessitate PPE. That assessment must be certified in writing, identifying the workplace evaluated, the person certifying, and the date.

That is a hazard assessment requirement with a written certification attached. A properly completed JSA satisfies it cleanly, which is why so many employers use JSAs as their PPE assessment record. The JSA is not required by name. The underlying analysis is.

How a Missing JSA Shows Up in a Citation

The second pressure point is the General Duty Clause, Section 5(a)(1) of the OSH Act, which requires employers to keep the workplace free of recognized hazards likely to cause death or serious harm.

The operative word is recognized. When an incident happens and OSHA asks whether you knew the hazard existed, a JSA on file showing you identified it and controlled it is strong evidence of a functioning program. No analysis at all leaves you arguing that a hazard obvious to everyone else was somehow invisible to you. That argument rarely lands.

The third pressure is contractual. General contractors, energy operators, and most large industrial clients require task-level JSAs before crews mobilize, regardless of what OSHA says. The client is often stricter than the regulator.

OSHA's own guidance makes the recommendation plainly. The agency's Job Hazard Analysis booklet, OSHA 3071, lays out the full method and treats it as a core element of an effective safety program. For how enforcement and fines actually work, see our breakdown of OSHA violation types and penalties.

What Are the 4 Steps of a Job Safety Analysis?

A job safety analysis has four core steps: select the job to analyze, break that job into sequential steps, identify the hazards present at each step, and determine controls to eliminate or reduce those hazards. Many programs add a fifth step, documenting and communicating the finished analysis to the crew who will use it.

1. 1. Select the job to analyze, prioritizing by injury history and potential severity.
2. 2. Break the job into steps, in the order they actually happen.
3. 3. Identify the hazards at each individual step.
4. 4. Determine controls using the hierarchy of controls.
5. 5. Document, approve, and communicate the result to the crew.

Step 1: Select the Job to Analyze

You cannot analyze everything at once, so sequencing matters. OSHA 3071 gives four priority criteria, and they are worth following literally:

• Jobs with the highest injury or illness rates
• Jobs where one mistake could cause severe injury or death, even if nothing has gone wrong yet
• New jobs, or jobs that changed after new equipment, materials, or processes arrived
• Jobs complex enough to need written instructions

Two additions from practice make this sharper.

Read your near-miss logs, not just your injury logs. Pull three to five years. Injury records tell you where somebody already got hurt. Near-miss and first-aid entries tell you where the next one is coming from, and they are the ones most programs never open.

For orientation on hazard categories worth prioritizing, our guide to common workplace hazards covers the main families.

Step 2: Break the Job Into Sequential Steps

This is where most JSAs quietly fail, because people write the steps from memory at a desk.

Go watch the job. Observe two or three experienced workers performing the real task under real conditions. Not a demonstration. The actual work, at the actual pace, with the actual shortcuts people have developed. Those shortcuts are usually the hazard.

Then write each step as an action verb plus an object:

• "Isolate supply at distribution board"
• "Position ladder against structure"
• "Loosen spindle nut with wrench"

Not "be careful with the ladder." Not "electrical work." A step is something a person physically does, in a sequence, that another person could follow.

Keep it to about ten steps. If your breakdown runs past ten, you are not analyzing one job. Split it into two JSAs. A twenty-step form guarantees nobody reads to the bottom, which defeats the entire purpose.

One useful test: hand your step list to someone who has never done the task. If they could follow the sequence and understand what physically happens at each stage, the breakdown is good.

Step 3: Identify the Hazards at Each Step

Now go step by step and ask a specific question: what is the energy here, and what happens if it gets loose?

Working through the energy sources keeps this systematic rather than random:

• Struck-by (falling, flying, swinging, rolling objects)
• Caught-in or caught-between (pinch points, rotating parts, trenches)
• Falls (from height, or on the same level)
• Electrical (contact, arc flash, stored energy in capacitors)
• Chemical (inhalation, skin contact, reaction)
• Ergonomic (lifting, repetition, awkward posture)
• Thermal (hot surfaces, cold, steam, fire)
• Noise and vibration

The citation record shows where hazard identification breaks down most reliably. In OSHA's Top 10 most cited standards for fiscal year 2025, fall protection general requirements (1926.501) drew 5,914 citations, ranking first for the fifteenth consecutive year. Hazard communication followed with 2,546, ladders with 2,405, and lockout/tagout with 2,177.

Fifteen straight years at number one for falls is not a coincidence. It is a category people repeatedly fail to write down.

Two discipline points here:

Name the harm, not the condition. "Wet floor" is a condition. "Slip on wet floor causing head strike against machine base" is a hazard. The second one tells you what control you need.

Step 4: Determine Controls Using the Hierarchy

Controls have a ranking, and it is not a menu you pick from freely. The NIOSH hierarchy of controls runs from most effective to least:

1. 1. Elimination, remove the hazard entirely. Do the work at ground level instead of at height.
2. 2. Substitution, swap in something less dangerous. Water-based solvent instead of a flammable one.
3. 3. Engineering controls, isolate people from the hazard. Machine guarding, local exhaust ventilation, interlocks.
4. 4. Administrative controls, change how people work. Procedures, permits, rotation, training. A lockout/tagout procedure sits here.
5. 5. PPE, protect the individual as the final layer.

Every control above PPE fails away from the worker. PPE falls onto them.

PPE is last for a reason competitors rarely explain: it fails toward the worker.

Think about what happens when each control fails. A machine guard that fails is still bolted to the machine, and someone notices. A procedure that fails leaves a paper trail. But when PPE fails, it fails at the exact moment of contact, on the body of the person it was supposed to protect, and nothing sits between them and the hazard. Every higher control fails away from the worker. PPE falls onto them.

That is why a JSA whose control column reads "wear gloves, wear glasses, be careful" on every line is not a JSA. It is a liability document. It proves you identified hazards and then chose the weakest available response to all of them.

PPE is still necessary, and it is often the correct final layer once higher controls are in place. Our guide to PPE requirements covers selection by industry. Just never let it be the whole answer.

Step 5: Document, Approve, and Communicate It

A JSA in a binder has protected nobody.

The finished form should carry: the task name, date, location, the analysis team's names, each step with its hazards and controls, required PPE and permits, and the signatures of the crew performing the work.

Then it gets used. The JSA is read at the pre-task briefing, out loud, with the crew that will do the job. Not emailed. Not posted. Read, with room for someone to say "that's not how we actually do step 4," because that sentence is worth more than the entire document.

A Complete Filled-In JSA Example

Here is what most guides promise and never deliver: a finished JSA, end to end.

Note on the residual risk column: three steps stay at Medium after controls, and that is the honest result, not a failure. Steps 5, 6, and 8 all carry burst potential, and burst severity is catastrophic regardless of how low you drive the likelihood. A JSA where every line ends at Low after controls is usually a JSA where somebody was filling in boxes.

That is also the column most forms leave blank, and it is the one a reviewer should read first.

Who Is Responsible for the JSA, and Who Signs It?

Two different questions, and they get conflated constantly.

Ownership sits with a named person, usually the supervisor of the work group. Not "the safety department." A named human who is accountable for keeping it current, ensuring the review happens, and pulling the team together. JSAs owned by a department are owned by nobody.

The analysis team should include:

• The supervisor responsible for the area
• Workers who actually perform the task, not just their lead
• A safety professional or EHS coordinator for complex or high-risk work
• A competent person where the standard requires one, such as scaffolding or excavation

Worker participation is not a courtesy here. Under ISO 45001:2018, consultation with workers is a formal requirement of the management system, and OSHA's recommended practices name worker participation as a core program element. Beyond the paperwork, the practical reason is simpler: the person who does the task knows the step you are about to write down is wrong.

The signature is the part people treat as a formality. It should not be. When a worker signs a JSA, they are attesting that they were briefed on the hazards, they understand the controls, and the steps match the job as it will actually be performed. That is a meaningful statement.

How Often Should a JSA Be Reviewed?

Most guides duck this question. Here is a workable cadence, tiered by risk:

The calendar is the floor, not the trigger. Review immediately, regardless of where you are in the cycle, whenever:

• An incident or near-miss occurs on that task
• The equipment, tools, materials, or work environment change
• The procedure changes, even slightly
• A relevant standard is revised
• New workers are assigned to the task
• A worker reports that the JSA does not match the real job

That last one is the most valuable signal you will ever get, and the one most likely to be ignored. When someone says "we don't actually do it that way anymore," your JSA became fiction at some earlier date and nobody noticed.

Who Owns the JSA on a Multi-Employer Worksite?

Almost nobody covers this, and it is where real disputes happen.

When a general contractor and three subcontractors share a site, JSA ownership follows OSHA's multi-employer citation policy logic. Each employer analyzes its own crew's tasks. But the roles matter:

• The controlling employer (usually the GC) has general supervisory authority and is responsible for ensuring subcontractors' JSAs exist, are reviewed, and address hazards created by other trades on site.
• The creating employer owns the hazard it created, even if its own crew is not exposed.
• The exposing employer owns protecting its workers, even from hazards it did not create.
• The correcting employer is responsible for the safety measure it was engaged to install or maintain.

The practical failure mode is predictable. Sub A writes a solid JSA for its own scope. Sub B writes a solid JSA for its scope. Neither one mentions that Sub B will be welding directly above Sub A's crew on Thursday. Both JSAs are individually correct and collectively useless.

9 JSA Mistakes That Undermine the Whole Exercise

1. 1. Writing it at a desk. If nobody watched the job, the steps describe an imaginary version of it.
2. 2. Analyzing a job instead of a task. "Maintenance" is not a JSA subject. "Replace bearing on pump P-101" is.
3. 3. Listing PPE as the control for everything. The weakest tier applied universally means the hierarchy was never used.
4. 4. Too many steps. Past ten steps, comprehension collapses and nobody reads to the end.
5. 5. Vague hazards. "Electrical hazard" tells you nothing. "Arc flash during breaker racking" tells you what to do.
6. 6. Excluding the people who do the work. A JSA written about workers instead of with them will be wrong in ways only they could have caught.
7. 7. Copying a template without adapting it. A generic JSA for "confined space entry" does not know about your tank, your atmosphere, or your rescue access.
8. 8. Never revisiting it. A JSA that has not changed in five years describes a job that no longer exists.
9. 9. Treating signatures as attendance. Signing without briefing converts a safety document into evidence of a missing briefing.

Frequently Asked Questions

Final Thoughts

A job safety analysis is not paperwork. It is a structured argument about how a task could hurt someone, settled before anyone is standing in front of the machine.

The programs that get value from JSAs share a pattern: they watch the real job, they write specific hazards instead of vague ones, they respect the hierarchy of controls instead of defaulting to gloves, and they let the people doing the work correct the document. The ones that get nothing treat the form as the goal.

Fifteen consecutive years of fall protection topping OSHA's citation list is a reminder that the hazards hurting people are not exotic. They are known, documented, and repeatedly written down as "be careful." A job safety analysis done properly is how "be careful" becomes something a worker can actually follow.

Has a JSA ever caught something on your site that would have gone badly? Share it in the comments, because the near-miss somebody else writes down is often the one that saves your crew. If this guide helped, pass it to the supervisor who owns your riskiest task.