ISO 12100 Risk Assessment Template

An ISO 12100 risk assessment template is a structured worksheet for machinery safety. It records each hazard, scores severity, exposure, occurrence, and avoidability, then applies the standard’s three-step reduction method until residual risk is acceptable. ISO 12100:2010 remains the current edition, and the ten fields below follow it clause by clause.

On June 5, 2025, a press brake operator at All FAB Precision Sheetmetal in San Jose lost part of a finger. The machine was running without its required guard. Cal/OSHA’s investigation closed with $212,850 in penalties, announced this year.

That machine was one citation among many. Machine guarding ranked tenth on OSHA’s FY2025 most-cited list with 1,498 citations. The injuries behind the numbers land in OSHA’s severe injury reports, which have logged machine amputations weekly since reporting began in 2015.

ISO 12100 Risk Assessment: Key Takeaways
ISO 12100:2010 is still the current edition; the revision has failed two approval votes and a third draft only appeared on August 1, 2026, so build on the 2010 text today.
Machine guarding ranked tenth on OSHA’s FY2025 most-cited list with 1,498 citations, and Cal/OSHA priced one unguarded press brake at $212,850 in 2026.
The template scores four elements per hazard: severity, frequency of exposure, probability of occurrence, and possibility of avoidance, then ranks the risk.
Risk reduction follows a fixed order: inherently safe design first, safeguarding second, information for use last. Skipping to warnings fails the standard.
Score every lifecycle phase, not just production; setup, jam clearing, and maintenance produce most amputations recorded in OSHA’s severe injury reports.
The EU Machinery Regulation 2023/1230 becomes mandatory on January 20, 2027 with no overlap period, so machines shipped to Europe need updated files this year.

A completed hazard row and a verified guard cost far less than one settlement. This guide rebuilds the ISO 12100 template field by field, scores a real machine with it, and flags the January 2027 deadline that changes the European rules. It assumes basic risk assessment vocabulary, so hand it to the plant engineer as well as the safety office.

What an ISO 12100 Risk Assessment Template Covers

Behind that Cal/OSHA citation sits a method the standard has prescribed since 2010. ISO 12100:2010, Safety of machinery is the type A standard for the field. It defines how to set machine limits, identify hazards, estimate risk, and reduce it in a fixed order.

Type A means every other machine safety document builds on it. Type B standards cover one safety aspect or device across many machines, such as guards or control reliability. Type C standards, like those for injection molding machines, tailor the rules to one machine family.

The template turns those clauses into rows and columns a plant team can complete. It’s the machinery cousin of the general risk assessment matrix you already run elsewhere, with the scoring bent toward physical harm. In the US, ANSI B11.0 mirrors the same structure for domestic machine builders.

One warning before the fields: the standard is under revision, and the process is public and messy. Drafts failed approval votes in 2024 and 2025, and a third draft appeared on August 1, 2026. The 2010 edition stays valid throughout, so don’t wait for the new one.

Why Machine Guarding Failures Cost More in 2026

The revision delay hasn’t slowed the enforcement side at all. OSHA’s 2025 penalty levels run to $16,550 per serious violation and $165,514 per willful or repeat one. The agency also renewed its National Emphasis Program on amputations in manufacturing for another five years.

Figure 1. The US price list for unguarded machines, from citation counts to one amputation’s bill.

The legal baseline is old and blunt. 29 CFR 1910.212 requires guarding for every recognized hazard, and OSHA’s machine guarding page collects the interpretation letters. Neither tells you how to find and rank hazards; that’s what the ISO 12100 method supplies.

Europe raised the stakes on a calendar. The Machinery Regulation (EU) 2023/1230 becomes mandatory on January 20, 2027, and kills the old directive the same day, with no dual-running period. Any machine placed on the EU market from that date needs a conforming risk assessment file, and six machine categories also lose self-declaration.

Inside the Template: Ten Fields That Do the Work

Here are the ten fields, mapped to the standard’s clauses. Run them left to right for one hazard at a time, and keep each machine’s rows together in your risk register so review cycles pick them up. Set the columns up once and reuse them for every machine on the floor.

Field	What you record	Press brake example
1. Machine + limits	Identity, intended use, space, time, and foreseeable misuse	60-ton brake; sheet metal only; two operators max
2. Lifecycle phase	The task and phase being scored	Setup and tool change, not just production
3. Hazard + zone	Hazard type and where it lives	Crushing at point of operation between ram and die
4. Hazardous event	The sequence that produces harm	Hand in die space while foot pedal is live
5. Severity (S)	S1 slight and reversible; S2 serious or fatal	S2: amputation
6. Exposure (F)	F1 seldom; F2 frequent or continuous	F2: operator feeds parts all shift
7. Occurrence (O)	Likelihood of the event, from history and controls	O2: near miss recorded last year
8. Avoidance (A)	A1 possible; A2 scarcely possible	A2: ram is faster than reaction time
9. Risk + priority	Combined level; rank against the other rows	High: treat before next shift
10. Reduction + residual	Measure, type, owner, date, and the rescored risk	Light curtain fitted; residual low; owner: plant engineer

The ten-field ISO 12100 risk assessment template, ready to lift into a spreadsheet.

Field one matters more than teams expect. Limits of use define what counts as foreseeable misuse, and misuse is where juries and regulators live. Field two forces coverage of setup, cleaning, and jam clearing, the phases behind most entries in OSHA’s amputation safeguarding guide.

Gather these inputs before scoring anything, and one machine takes an afternoon instead of a week. The operators’ task list is the one to chase; a pre-start question set like our zero risk assessment prompts shakes loose the tasks nobody ever wrote down:

• Machine drawings, manuals, and the energy inventory: electrical, hydraulic, pneumatic, stored.
• A task list from the operators who actually run, clean, and unjam the machine.
• Incident and near-miss history for the machine and its siblings.
• The applicable type C standard, if one exists for the machine family.
• Photos of the hazard zones with guards in their current state.

Hazard identification has to sweep wider than moving parts. Cover mechanical, electrical, thermal, noise, vibration, substances, and ergonomics for each phase. Specialist prompts help here; our NUDD checklist catches novel and unusual hazards, and the foreign material assessment covers contamination paths on processing lines.

The Three-Step Method, in the Only Order That Counts

Field ten is where assessments usually go soft, because the standard is strict about order and auditors test that order first. Reduce risk by design first, safeguard second, and inform last. A warning sticker on an unguarded pinch point isn’t a measure; it’s evidence.

Figure 2. The three-step method from clause 6: design it out, guard what remains, then warn about the rest.

Step	What qualifies	What it looks like on the floor
1. Inherently safe design	Remove or reduce the hazard itself	Lower ram force; close the gap under 6 mm; slow speeds for setup
2. Safeguarding	Guards, interlocks, protective devices	Fixed guards, light curtains, two-hand controls, hold-to-run
3. Information for use	Warnings, manuals, training, PPE	Signage at the die space; setup procedure; hearing protection

The reduction hierarchy with floor-level examples for each step.

Each measure changes the scores, so rescore after every step. That before-and-after pair is your residual risk record, the same logic as inherent versus residual scoring on any register. Plot the survivors on a heat map and the treatment queue writes the maintenance schedule.

Scoring Severity, Exposure, Occurrence, and Avoidance

The four scoring fields deserve their own rules, because they’re where bias creeps in. ISO 12100 defines risk as severity combined with probability, and probability splits into exposure, event likelihood, and avoidability. Score each separately; don’t average them in your head.

Figure 3. The risk elements from clause 5.5: one severity input, three probability inputs.

Parameter	Levels that work in practice	The question to ask
Severity (S)	S1 reversible injury; S2 irreversible or fatal	What’s the worst credible harm, not the average?
Exposure (F)	F1 seldom or short; F2 frequent to continuous	How often is anyone in the zone, across all tasks?
Occurrence (O)	O1 rare; O2 has happened here; O3 expected	What do our incident and near-miss records say?
Avoidance (A)	A1 avoidable; A2 scarcely avoidable	Is the event faster than a trained person’s reaction?

A working scale for the four ISO 12100 scoring parameters.

Map the combined result onto the matrix format your teams already read. A 5×5 grid works, and so does 4×4; what matters is that acceptability thresholds are written down before scoring starts. Our Excel matrix template carries the same bands if you want a head start.

Severity discipline is the hardest habit to keep. Score the worst credible outcome for the energy involved, not the most common one; a press brake that has only ever bruised knuckles still scores S2. Food plants apply the same discipline through the HACCP matrix, where pathogen severity ignores the plant’s lucky streak.

Running an ISO 12100 Risk Assessment on a Real Machine

Scales mean little until they touch a machine, so here’s a compressed worked example. The subject is a belt conveyor feeding a packaging line, the same machine family as our full conveyor belt assessment. Four rows tell the story.

Hazard + zone	Task	S-F-O-A	Risk	Chosen measure
Drawing-in at head pulley	Production	S2-F2-O2-A2	High	Fixed nip guard; step 2
Drawing-in at tail pulley	Jam clearing	S2-F1-O2-A2	High	Interlocked guard + lockout; step 2
Struck by falling cases	All tasks	S1-F2-O2-A1	Medium	Side rails raised; step 1
Noise above 85 dB(A)	Production	S1-F2-O3-A2	Medium	Damped rollers, then hearing PPE; steps 1 + 3

Worked ISO 12100 risk assessment rows for a packaging-line belt conveyor.

The jam-clearing row outranks steady production, and that’s the point. Maintenance tasks concentrate exposure at the exact moment guards come off, which is why lockout pairs with the interlock. The pattern repeats in joinery shops and on concrete pours: the routine task hides the risk, and the exceptional task delivers it.

Reopen the assessment immediately when any of these triggers fires, whatever the annual review calendar says. Stale files are how a defeated interlock stays invisible for months, and how the inspector or the injury ends up finding it before your own team does:

• The machine is modified, moved, or fed a new material or product size.
• An incident or near miss involves the machine or one like it.
• An inspection finds a guard removed, defeated, or bypassed.
• A new type C standard or regulation lands for the machine family.
• Operators report a task the assessment never scored.

Keep the completed sheets inside your wider risk assessment program, where review cycles will find them; a binder nobody opens protects nobody. A free assessment tool or spreadsheet is enough; what auditors and courts want is the dated reasoning, the scores, and the rescore after each measure.

Frequently Asked Questions About ISO 12100 Risk Assessment

Is ISO 12100:2010 still the current version in 2026?

Yes: the revision has missed two approval votes, and a third draft published on August 1, 2026 is under ballot. Intertek expects the update to chase smarter machines rather than change the core method. Assess against the 2010 edition now; the ten fields above will survive the revision.

How does an ISO 12100 risk assessment relate to ISO 13849 and IEC 62061?

ISO 12100 decides what the risks are and which need safety functions. ISO 13849-1 and IEC 62061 then size those functions, setting the required performance level or safety integrity level for circuits like light curtains and interlocks. Your S-F-O-A scores feed that sizing directly, so keep them honest.

Does OSHA require an ISO 12100 risk assessment?

No US rule names it, but 1910.212 demands guarding for every recognized hazard, and citations follow when recognition fails. An ISO 12100 file is the cleanest evidence of recognition you can hold, and ANSI B11.0 gives the same method a US accent for domestic builders.

Can the ISO 12100 risk assessment template be used on existing machines?

Yes, and it should be. The standard was written for designers, but users own workplace risk, and retrofits follow the same three-step order. Score the machine as installed, including every removed or modified guard, and treat the worst rows first; that’s the whole program.

Who owns the machinery risk assessment, the builder or the buyer?

Both, at different moments. The manufacturer assesses for design and, in Europe, for the CE file under the Machinery Regulation; the employer assesses the machine as used, with real tasks and local modifications. Integrators who join machines into lines inherit both duties for the combination.

What counts as acceptable residual risk in an ISO 12100 risk assessment?

The standard sets the method and leaves the number to you. Acceptability comes from your documented criteria, the state of the art, and any type C standard for the machine, which carries a presumption of adequate reduction. Write the threshold down before scoring, and record why each residual risk clears it; the written reasons outlive the engineer who scored them.

The Traps That Turn Assessments Into Paperwork

The traps in the table all trace back to this article’s citation trail, from the San Jose press brake to the severe injury database. It gives the six we meet most often, each with the correction that costs least. Fix the one your own file shows first.

Trap	How it shows up	Cheapest correction
Production-only scoring	Setup and jam clearing never assessed	Add a lifecycle-phase field and score every task
Warnings before guards	Stickers where interlocks belong	Enforce the three-step order in field ten
Averaged severity	S1 scored because injuries were lucky	Score worst credible harm for the energy present
Frozen assessments	File dated years before the last modification	Wire the five reopening triggers into maintenance
Guards defeated quietly	Bypassed interlocks nobody reports	Inspection line item plus a no-blame reporting route
Missing acceptability criteria	Nobody can say why residual risk passed	Write thresholds down before the next scoring session

Six recurring machinery assessment traps and the lowest-cost correction for each.

Machine Safety Between Now and January 2027

The calendar now does the motivating. On January 20, 2027 the EU Machinery Regulation becomes mandatory with no overlap, adding cybersecurity of safety functions, AI behavior review, and ten-year documentation duties. Machines shipping to Europe need updated files months ahead of that date.

Figure 4. The regulatory runway: adopted 2023, harmonized standards expected late 2026, mandatory January 2027.

The standards side is converging on the same date. The harmonized standards list for the new regulation is expected by the end of 2026, and the ISO 12100 revision is being steered to align with it. Watch the third draft’s ballot; an FDIS could follow within months.

US enforcement won’t wait for either. The amputations emphasis program runs to 2030, penalty levels rise with inflation, and severe injury reporting keeps feeding inspectors a target list. A current, scored template is the difference between an inspection and a case file.

If your machines carry guards nobody has scored, start with the worst one this week. Review our services and contact us to put a scored register behind every guard on the floor; the template above is the one we use.