How to Write a Job Safety Analysis (JSA): A Step-by-Step Guide

Learn how to write a job safety analysis step by step — break the job into tasks, spot hazards, and apply controls that hold up in an OSHA audit.

What a job safety analysis actually is

A job safety analysis (JSA) is a structured way of looking at a task, breaking it into its steps, finding the hazards in each step, and deciding how to control them before anyone gets hurt. OSHA uses the term job hazard analysis (JHA) for the same technique and describes it as a method that “focuses on job tasks as a way to identify hazards before they occur,” centered on the relationship between the worker, the task, the tools, and the work environment (OSHA Publication 3071, Job Hazard Analysis, 2002 revised).

If you have heard JSA, JHA, and AHA used interchangeably, you are not wrong to be confused. In practice:

JSA and JHA mean the same thing — the terms are used interchangeably across industry and by OSHA.
Activity Hazard Analysis (AHA) is the term you will see on federal and heavy-construction projects (for example, in the U.S. Army Corps of Engineers EM 385-1-1 framework). Same core idea, different paperwork expectations.
A risk assessment is broader — it scores likelihood and severity across an operation. A JSA is task-level and control-focused. A JSA can feed a risk assessment, but they are not the same document.

Pick one term, define it in your program, and use it consistently. Auditors notice when your permit says “JHA,” your training says “JSA,” and your form says “AHA.”

Is a JSA required by OSHA?

Here is the honest answer newer safety pros deserve: there is no single federal OSHA standard that says “thou shalt write a JSA” for every job. OSHA promotes the JHA as a best practice through guidance (Publication 3071), not as a blanket mandate.

But do not read that as “optional.” Several OSHA standards require hazard assessments that a JSA is a natural vehicle for. The clearest example is the PPE standard: 29 CFR 1910.132(d) (General Industry) requires the employer to assess the workplace to determine whether hazards are present that necessitate PPE — and 1910.132(d)(2) requires a written certification of that hazard assessment identifying the workplace evaluated, the person certifying, and the date(s). A well-built JSA is one of the cleanest ways to generate and document that assessment. (Both citations verified against osha.gov this run.)

Compliance note: This article is general educational content, not legal or compliance advice. Requirements differ between OSHA General Industry (29 CFR 1910) and Construction (29 CFR 1926), vary by jurisdiction — the 22 states and territories that run their own OSHA-approved State Plans (covering private plus state/local government) may adopt stricter rules, and 7 more cover public-sector workers only — and change over time. Always confirm the current requirement that applies to your site with OSHA or a qualified safety professional.

With the framing straight, here is the process.

Step 1 — Pick the job and set priorities

You cannot JSA every task in the building at once, and you should not try. OSHA’s guidance says to prioritize the jobs that carry the most risk. Put these at the front of the line:

Jobs with the highest injury or illness rates.
Jobs with the potential to cause severe or disabling injury — even if there is no accident history yet.
Jobs where one simple human error could trigger a serious injury.
Jobs that are new or have recently changed (new equipment, new chemical, new process).
Jobs complex enough to require written instructions.

Pro tip: Pull your OSHA 300 log and your near-miss reports before you pick. The tasks that keep generating first-aid cases and “almost got me” reports are telling you where to start. Priority set by data is easier to defend than priority set by gut.

Step 2 — Involve the people who actually do the work

This is the step that separates a real JSA from a document written at a desk. The operator who runs that machine every shift knows the workaround, the sticky guard, and the shortcut everyone takes when the line is backed up. OSHA is explicit that involving employees improves quality, minimizes oversights, and builds buy-in because workers share ownership of the controls.

Build your JSA team from:

The worker(s) who perform the task regularly.
Their supervisor.
A safety professional to facilitate and check the controls.

Field-tested practice: Watch the job performed live before you write a word. Tell the crew plainly that you are evaluating the job, not their performance — otherwise you get the sanitized, by-the-book version instead of what really happens. Photos or a short video of the task are legitimate references for the analysis, especially for complex sequences.

Step 3 — Break the job into steps

Now the skill that trips up almost everyone: granularity. List each step in the order it actually happens, described as an action. OSHA’s guidance warns against both extremes — do not make the breakdown “so detailed that it becomes unnecessarily long,” and do not make it “so broad that it does not include basic steps.”

A practical rule of thumb: most tasks land in roughly 8 to 12 steps. If you are past 20, you are probably describing keystrokes and hand movements. If you have 3, you are probably hiding hazards inside vague mega-steps like “operate the machine.”

Too broad	Right level	Too detailed
“Grind the casting”	“Retrieve casting from bin and carry to wheel”	“Bend knees 30 degrees, grip casting with right hand…”
—	“Grind burr against wheel”	“Apply 4 lbs of pressure, hold 3 seconds…”
—	“Place finished casting in output bin”	—

Write each step starting with an action verb (“retrieve,” “grind,” “place”). Keep the sequence exact — mixing up the order can hide a hazard or attach it to the wrong step, which undermines the whole analysis. Then review the step list with the worker to confirm nothing was missed.

Step 4 — Identify the hazards in each step

Go step by step and ask, for each one, what could hurt someone. OSHA frames hazard identification as detective work built on five questions:

What can go wrong?
What are the consequences?
How could it happen (how does it arise)?
What are other contributing factors?
How likely is it that the hazard will occur?

A strong hazard description is a short scenario, not a one-word label. OSHA recommends capturing the environment (where it happens), the exposure (who or what is affected), the trigger (what precipitates it), the consequence (the outcome), and any other contributing factors. “Laceration” is a label. “While clearing a snag at the grinder, the operator’s hand contacts the unguarded rotating wheel and is severely cut” is a scenario you can actually control.

Use a consistent hazard vocabulary so nothing slips through. Common categories worth walking every task against include:

Struck-by / struck-against (falling objects, projectiles, tool slips)
Caught-in / caught-between (rotating parts, pinch points, unguarded machinery)
Falls (from height and same-level slips/trips)
Ergonomic strain (lifting, twisting, repetitive motion)
Chemical exposure (inhalation, skin absorption — check the SDS and, where relevant, air-contaminant limits under 29 CFR 1910.1000)
Electrical (shock, arc, contact with energized parts)
Noise (sustained high levels that damage hearing)
Temperature extremes (heat stress, cold stress)

Audit gotcha: Inspectors and incident investigators look for the hazard that was foreseeable and not captured. If a task involves an unguarded rotating part and your JSA does not mention caught-in hazards, that gap is exactly what gets quoted back to you after an incident. Walk every step against your hazard categories, not just the obvious one.

Step 5 — Assign controls using the hierarchy of controls

For every hazard, pick a control — and pick the strongest feasible one. This is where most weak JSAs collapse into “wear PPE and be careful.”

Use the hierarchy of controls, which ranks controls by how effective and reliable they are. NIOSH orders it in five tiers:

Elimination — physically remove the hazard (redesign the task so the exposure no longer exists).
Substitution — replace it with something less hazardous (a less toxic solvent, a lighter part).
Engineering controls — isolate people from the hazard (fixed guards, ventilation, interlocks, enclosures).
Administrative controls — change how people work (procedures, permits, training, rotation, signage).
PPE — protect the worker at the point of exposure (gloves, respirators, eye and hearing protection).

The top three tiers are more effective because they control the hazard without depending on human behavior every single time. PPE and administrative controls sit at the bottom because they rely on people doing the right thing on every shift.

Worth noting: OSHA Publication 3071 folds elimination and substitution into its “engineering controls” tier and lists the precedence as engineering → administrative → PPE. NIOSH breaks elimination and substitution out as their own top tiers. Same philosophy, slightly different labeling — do not let the mismatch confuse your team. The point is identical: design the hazard out before you rely on a respirator.

The test of a good control is specificity. Compare:

Weak control (fails an audit)	Strong control (holds up)
“Be careful around the wheel”	“Install a fixed guard on the grinding wheel; lock out the machine before clearing snags”
“Use caution lifting”	“Stage castings at waist height on an adjustable platform; train no-twist lifting”
“Wear gloves”	“Wear cut-resistant gloves that fit snugly to reduce entanglement risk at the wheel”

“Be careful” and “use caution” are not controls. They are hopes. Name the guard, the procedure, the exact PPE.

Step 6 — Document it, communicate it, and keep it alive

A JSA that lives in a binder no one opens protects no one. Finish the job:

Document each step, its hazards, and its controls on a consistent form (see the template plan below).
Communicate it — train every worker who performs the task on the final controls, and fold the JSA into your toolbox talks and pre-job briefs.
Review it on a trigger, not just a calendar. Re-open a JSA when the job changes, when a new hazard appears, after a near-miss, and especially after any injury on that task. Even an unchanged job can reveal hazards you missed the first time.

Pro tip: Date and version every JSA, and record who reviewed it. When you tie the PPE decisions in a JSA to your 1910.132(d) written PPE hazard-assessment certification, that version history is what demonstrates the assessment was actually performed and kept current.

A worked mini-example

Task: grinding a metal casting (adapted from OSHA’s classic illustration, rebuilt as a JSA row).

Step	Hazard scenario	Control (hierarchy tier)
Retrieve casting from floor bin	Twisting/lifting a 15-lb part from the floor strains the lower back	Stage castings at waist height on a platform (engineering); train no-twist lifting (administrative)
Carry casting to wheel	Sharp burrs cause hand lacerations; dropped part injures foot	Use a clamp/lift device (engineering); cut-resistant gloves + steel-toe boots (PPE)
Grind burr against wheel	Hand contacts unguarded rotating wheel; flying particles hit eyes	Fixed wheel guard (engineering); face shield + safety glasses (PPE)
Place casting in output bin	Repetitive reach/twist over a shift	Reposition output bin within the work zone (engineering)

Notice that PPE never stands alone — it backs up an engineering control, not replaces it. That is what a defensible JSA looks like.

Where the JSA fits in your program

A JSA is one component of a larger safety and health management system, not the whole thing. It feeds your PPE hazard assessments, your toolbox talks, your training records, your permit-to-work packages (hot work, confined space, energy control), and your incident investigations — a good investigation often ends with “update the JSA.” Build them once, keep them current, and they become the connective tissue of the whole program rather than a stack of forms.

Start with your highest-risk task this week. Watch it performed, break it into honest steps, describe the hazards as scenarios, and assign the strongest control you can afford. Then do the next one.

Frequently Asked Questions

What are the four steps of a job safety analysis? In the classic short form: (1) select the job, (2) break it into sequential steps, (3) identify the hazards at each step, and (4) determine controls. In practice, experienced teams add two more — involving the workers up front, and reviewing/updating the JSA over time — which is the fuller process OSHA’s guidance describes.

Is a JSA required by OSHA? There is no single federal OSHA standard mandating a JSA for every job. OSHA promotes it as a best practice in Publication 3071. However, related standards require hazard assessments a JSA supports — most clearly the PPE hazard assessment and written certification under 29 CFR 1910.132(d) (General Industry). Requirements vary by jurisdiction and change over time; confirm what applies to your site.

What is the difference between a JSA and a JHA? None, functionally. Job safety analysis and job hazard analysis are two names for the same technique; OSHA uses “job hazard analysis.” Pick one term and use it consistently across your program.

Who should be involved in writing a JSA? The worker who performs the task, their supervisor, and a safety professional. The worker’s real-world knowledge of the task is the most valuable input and the reason desk-written JSAs miss hazards.

How often should a JSA be reviewed? Review on triggers, not just a set interval: whenever the job or equipment changes, after a near-miss, and after any injury on that task. Periodic review also catches hazards missed the first time, even if the job has not changed.

What is the difference between a JSA and a risk assessment? A JSA is task-level and control-focused — it breaks one job into steps and assigns controls. A risk assessment is broader and scores likelihood and severity across an operation. A JSA can feed a risk assessment, but they are not interchangeable.

How detailed should each JSA step be? Detailed enough to capture the action and its hazards, not so detailed it describes individual hand movements. Most tasks land in roughly 8–12 action-verb steps. OSHA warns against breakdowns that are either too long or too broad.