How to Conduct a Lone Worker Risk Assessment in Australia
A lone worker risk assessment identifies the specific conditions a worker faces when isolated from assistance and determines what controls are needed to manage that risk. It looks at things like how long a worker is alone, how they can be reached, what hazards the role itself involves, and how quickly help could actually reach them if something happened.
Businesses and organisations in Australia are required to carry this out as part of their broader WHS obligations, but a lot of them stop at a generic policy statement instead of a genuine, role-specific evaluation.
This blog breaks down the actual process for lone worker risk assessment that includes: identifying which roles in a business qualify as lone work, assessing the risk for each one, consulting the workers involved, documenting what's found, and putting controls in place based on that. It also covers the mistakes that tend to leave a risk assessment incomplete, or worse, non-compliant.
Why Lone Worker Risk Assessment is Important
Without a documented risk assessment, a business has no way to prove it identified the risks a lone worker actually faced and no way to show its safety measures were based on anything real. A lone worker risk assessment -
Proves the business actually identified role-specific risks, not just general ones
Captures psychosocial risk from isolation, now recognised under WHS guidance as a mental health concern, not just a physical one
Distinguishes between genuinely different risk levels: a support worker facing an aggressive client and a warehouse worker on a night shift don't face the same danger, but a generic policy treats them the same
Becomes the first document a regulator asks for if an incident occurs
Forces safety controls to be based on real findings, not assumptions
Skipping this step doesn't remove the risk. It just delays when the business finds out about it, usually after something's already gone wrong, when the cost is no longer hypothetical.
What a Lone Worker Risk Assessment Actually Needs to Cover
Lone workers aren't just people in remote locations. They include support workers visiting clients alone, retail staff closing up at night, technicians on solo call-outs, delivery drivers, and anyone else working without a colleague nearby to help if something goes wrong. Before conducting a lone worker risk assessment, businesses should first understand who is considered a lone worker under Australian WHS laws.
A proper lone worker risk assessment process includes looking at the actual conditions each of these roles involves.
Location. A client's home, a remote site, a vehicle, or a late-night store each carry different risks and need their own assessment.
Time of day. Night and after-hours work carries more risk than daytime work, for personal safety and for how fast help can arrive.
Contact frequency. How often the worker is checked on, and what happens if a check-in is missed.
Violence or aggression. A documented risk in community, healthcare, and support work, where a worker may enter a client's home or face unpredictable behaviour without backup.
Communication coverage. Mobile signal gaps in rural areas, basements, or certain buildings can leave a worker unreachable when it matters most.
Individual factors. A health condition or lack of experience raises the risk level, even for the same job.
Incapacitation. If a worker can't call for help, something needs to notice and respond in their place.
Psychosocial hazards. Isolation, fatigue, and stress are recognised WHS risks, not just physical ones.
Ultimately, a lone worker safety risk assessment in Australia has to identify which of these a role actually needs, not apply the same controls to both.
How to Conduct a Lone Worker Risk Assessment
Knowing what a risk assessment needs to cover is one part of the process. Actually carrying it out is another. The steps below walk through how to conduct a lone worker risk assessment in Australia from start to finish.
Step 1: Identify and Understand Lone Worker Hazards
Lone workers face different risks depending on where and how they work. A hazard is anything that could potentially harm a worker, such as:
Manual handling and lifting injuries
Confined spaces or work at height
Poor lighting or unsafe entry points at a property
Aggressive or unpredictable clients and members of the public
Hazardous equipment or machinery
Extreme weather or dangerous road conditions
Fatigue from long, irregular, or overnight shifts
This assessment helps organisations look at each hazard and indentify how those hazards could cause injury or put lone workers at risk. They must check any past incident reports or near-miss logs if you have them; they usually show problems you wouldn't spot otherwise.
Step 2: Assess the Specific Risks of Lone Workers
Once lone worker hazards are identified, the next question is: how likely is it to happen, and how serious would the outcome be?
A few practical ways to assess risk across multiple sites:
Talk to the workers doing the job. They'll spot risks a desk review would miss.
Look at past incidents and near-misses. Find out what actually caused them.
Check how often workers deal with vehicle risks, breakdowns, accidents, or bad driving conditions.
Make sure work locations have a safe way in and out - not just one option that could get blocked.
Assessing risk isn't just about spotting problems; it's about being realistic about what can actually be fixed and what it'll cost to fix it.
Step 3: Find the Gaps and Put Safety Controls in Place
A lone worker risk assessment isn't finished once the risks are written down. Its real purpose is to produce a safety programme that actively reduces those risks. That programme can include steps such as:
Removing the hazard entirely where possible, rather than working around it
Assigning a second person to any task too dangerous to do alone, such as confined space entry or work at height
Replacing risky equipment or substances with safer alternatives
Setting fixed working hours for tasks that carry higher risk after dark
Running scheduled check-ins so a missed contact gets noticed quickly
Giving workers a way to raise an alarm without needing to explain the situation first
Ultimately, a worker needs a reliable way to be reached and a reliable way to reach out at any point during an isolated shift. GPS tracking and duress alarms are now standard tools for this, since they let a business see where a worker is and respond the moment something goes wrong, rather than relying on the worker to call for help themselves.
Step 4: Train Lone Workers and Conduct Regular Audits
A safety control only works if the person using it actually knows how. A worker who's never practised triggering a duress alarm or who's never been told what happens after they miss a check-in is likely to freeze or hesitate exactly when speed matters most.
Training needs to cover:
The specific hazards tied to that worker's role
How to operate any safety device they've been given
Who responds once an alert goes out, and how fast
What the worker should do while they wait for help
Audits are what confirm whether any of this training actually holds up once workers are back out on the job. A written procedure means nothing if it's not being followed in practice, so check regularly:
Are check-ins happening on schedule, or quietly slipping?
Can workers demonstrate how to use their safety device, not just describe it?
Have any near-misses gone unreported?
Do the risks identified last year still match the risks that exist now?
Talk to the workers directly as part of the audit, not just the paperwork. They'll usually flag a gap in the system months before it turns into an incident report.
Common Mistakes That Undermine a Lone Worker Risk Assessment
Most lone worker risk assessments don't fail because nobody cared. They fail because the same handful of gaps keep slipping through, often without anyone noticing until an incident forces a closer look.
The mistakes below show up across businesses of every size, and nearly all of them are avoidable once you know to look for them.
Every lone worker is treated the same, even though a support worker dealing with an aggressive client and a warehouse employee locking up at night face very different risks.
Some risks only become clear in practice—such as a dark stairwell or unreliable phone signal at a particular site—and may never be documented if workers aren't asked about them.
A list of things that could go wrong isn't a risk assessment unless you also consider how likely each risk is and how serious the consequences could be.
A scheduled phone call may work for a quiet daytime task, but it may not be enough when there is a real risk of violence.
Roles, sites, and shifts can change, but the risk assessment written two years ago may not reflect those changes.
If you don't check whether the safety plan is actually being followed, you can't know whether it's protecting workers or simply sitting in a file.
Most of these mistakes exist because a written assessment stops working the moment the worker leaves the office.
It can predict a risk, but it can't detect one happening in real time, whether a check-in was missed, a worker hasn't moved in twenty minutes, or an alert needs to reach someone immediately.
How Technology Turns Risk Assessment Findings Into Real Protection
Identifying a risk is only the first step. What actually protects a worker is what happens next: the risk gets watched for, caught in the moment, and answered with real help, fast. That's the job technology does.
Here's how you can build protection for your lone workers:
GPS tracking shows a worker's actual location in real time, so a business isn't waiting on a phone call that might never come.
Duress alarms let a worker send an alert the instant something goes wrong, including discreetly, when calling out loud isn't an option.
Fall and no-movement detection picks up what a manual alarm can't: a worker who's gone down and physically can't press a button.
24/7 monitoring means every alert reaches a trained person straight away, not a notification sitting unread on a manager's phone.
Through these devices, every check-in, alert, and response gets logged automatically, with a timestamp and that log is exactly what regulators look for.
Under WHS in Australia, a documented risk assessment shows a business has identified the risks of working alone, but it's the ongoing record from a working system that shows those risks are actually being managed day to day. If an incident happens and WorkSafe or SafeWork comes asking, that automatic log is the evidence - not a manager reconstructing the day from memory.
Conclusion
A lone worker risk assessment is only as good as what happens after it's written. Identifying hazards, rating risks, consulting workers, and putting the right controls in place all matter, but none of it means much if there's no system actually watching over a worker once they're out on the job alone. The businesses that get this right treat the assessment as the starting point, not the finish line.
If you're building a lone worker risk assessment for the first time or checking whether your current one would actually hold up, GPS Geo Guard can help close the gap between what's written down and what happens in a real emergency. Get in touch to see how our GPS tracking, duress alarms, and 24/7 monitoring can support your risk assessment with real, tested protection for your team.
Frequently Asked Questions (FAQs)
1. Is a lone worker risk assessment a legal requirement in Australia?
Yes, it's part of an employer's broader WHS duty of care, which requires identifying and managing risks for all workers, including those working alone.
2. How often should a lone worker risk assessment be reviewed?
At minimum, annually, but it should also be reviewed immediately whenever a worker's role, site, or working hours change significantly.
3. Do casual or part-time lone workers need a separate risk assessment?
Yes, risk depends on the conditions of the role, not employment type, so casual and part-time lone workers need the same level of assessment as full-time staff.
4. Who is responsible for conducting a lone worker risk assessment?
The employer, or PCBU, is legally responsible, though the process should involve input from supervisors, WHS representatives, and the workers themselves.
5. Can a lone worker risk assessment template be used for every role in a business?
A template can provide a useful starting structure, but it needs to be adapted for each specific role, since generic templates often miss risks unique to a particular job or location.
