Job Hazard Analysis (JHA): What OSHA Actually Requires and How to Do One

There is no OSHA standard called "job hazard analysis." JHA is OSHA's own recommended method (Publication 3071) for meeting hazard-identification duties that are legally required elsewhere: 1910.132(d)'s PPE hazard assessment in general industry, and 1926.20(b)(2)'s requirement for frequent, regular jobsite inspections by a competent person in construction. The method itself is simple: break a job into steps, find the hazard in each step, decide the control.

Search "job hazard analysis" and nearly everything that ranks is a university EHS department page or a state consultation program, and most of them state or imply that OSHA requires a JHA. It doesn't, not as a named requirement. What it requires is that you identify workplace hazards and do something about them, under standards that don't use the word "JHA" anywhere in their text. JHA is the tool OSHA recommends for getting there, which is a more useful thing to understand than the loose "OSHA requires it" framing most pages settle for, because it tells you what an inspector can actually cite you under if the underlying hazard assessment never happened.

Where the Requirement Actually Comes From

Two different standards do the legal work, depending on which side of the general-industry/construction line you're on.

Setting	Standard	What It Requires
General industry	29 CFR 1910.132(d)	Assess the workplace for hazards requiring PPE, then select and communicate the PPE. A written certification of the assessment is mandatory: it must name the workplace evaluated, the person who certified it, and the date.
Construction	29 CFR 1926.20(b)(2)	"Frequent and regular inspections of the job sites, materials, and equipment" by a competent person designated by the employer.

Neither section says "conduct a job hazard analysis." Both require you to know what the hazards on a specific job are before someone gets hurt by one, which is exactly what a JHA produces as a byproduct. OSHA connects the dots itself in Publication 3071, which frames JHA as the recommended method for satisfying that broader duty, not a separate rule with its own citation number. Full text of the PPE hazard-assessment requirement is at 29 CFR 1910.132; the construction inspection requirement is at 29 CFR 1926.20.

There's also the general duty clause sitting behind both: Section 5(a)(1) of the OSH Act requires an employer to furnish a workplace "free from recognized hazards... likely to cause death or serious physical harm." When there's no standard specific enough to cite for a hazard that clearly existed and clearly wasn't addressed, OSHA reaches for 5(a)(1) instead. A documented JHA is direct evidence you recognized the hazard and did something about it. That's the difference between a citation and a clean inspection when something goes wrong on a task nobody wrote a specific standard for.

JHA vs. JSA: The Same Thing, Different Name

"Job hazard analysis" and "job safety analysis" describe one technique. OSHA's own publications use "JHA." Much of the ANSI Z590 world and a fair amount of older industry material use "JSA." If you're comparing vendor software or reading a construction company's written program, don't assume a difference in method just because the acronym changed. Check what the document actually does, not what it's titled. Search demand for both terms is real (JHA runs several times higher in raw volume, but JSA-specific phrases like "JSA form" and "JSA software" carry meaningfully higher commercial intent), which is the honest reason most safety vendors, including this one, use both terms rather than picking a side.

The Method: 3 Steps, Plus One Most Content Skips

Publication 3071 actually lays out four steps, and most of what's published online quietly drops the first one.

Step	What It Means
0. Select the job	Not every task needs a written JHA. Prioritize by injury/illness history, near-miss frequency, new or changed equipment, and job complexity.
1. Break the job into steps	Sequential, observable steps in the order they actually happen: not a task description, a step sequence. "Set up ladder," "climb to platform," "position tool" is a step breakdown. "Perform roof repair" is not.
2. Identify the hazard in each step	What could go wrong at this specific point in the sequence, not a generic hazard list for the job as a whole. A fall hazard exists at "climb to platform," not at "set up ladder."
3. Determine the control	In order of preference: eliminate the hazard, engineer it out, change the procedure, then specify PPE. PPE is the last resort in this hierarchy, not the default answer, which is where a lot of quick JHAs go wrong: writing "wear gloves" for every hazard regardless of whether gloves actually address it.

Step 0 is the one most templates skip straight past, and it matters more than it looks. A five-person crew with a JHA requirement for every single task they perform will stop doing them properly within a month, because there are too many to take seriously. OSHA's own guidance is explicit that the point is prioritization: the highest-injury-rate jobs, jobs with a history of near misses, and jobs involving new or changed equipment or processes come first. A task with no incident history and no equipment change is a low priority, not a required weekly form.

Who Should Actually Run the Analysis

Publication 3071 is specific about this in a way that's easy to skip past: the person conducting the analysis needs first-hand knowledge of the job, and the employees who perform the task routinely should be part of it. A safety manager building a JHA from a desk, based on a job description, will miss the hazard that only shows up when the actual ladder on that actual site is six inches shorter than spec, or when the crew has been improvising a workaround for a tool that's been broken for two weeks. The worker doing the job knows where that gap is. The org chart usually doesn't.

Job Hazard Analysis in Construction, Specifically

Construction work adds one wrinkle general-industry JHA guidance doesn't cover: the job site itself changes daily. A JHA written for "framing a wall" on a flat, dry slab doesn't automatically transfer to the same task on a site with an open excavation twenty feet away, or on a day with rain in the forecast. 1926.20(b)(2)'s "frequent and regular" language exists precisely because a construction competent person is expected to re-check conditions routinely, not sign off on a hazard assessment once and treat it as permanent. A JHA for a mobile, changing worksite is closer to a living checklist than a one-time document. That's also the practical argument for doing it on a phone at the site rather than filling out a paper form back at the office at the end of the week.

What a Real JHA Record Should Show

Since there's no prescribed format, the difference between a JHA that holds up and one that doesn't comes down to specificity.

• Named steps, not a task title. "Remove old shingles, position new bundle, nail starter course" beats "roof replacement" as a step breakdown, because it's the specific step where a hazard control failed that matters if something goes wrong.
• A control for each hazard, ranked by the hierarchy above. "Wear fall protection" for every single hazard on the sheet is a sign the analysis wasn't actually done step by step.
• Who conducted it and when. Ties the record to a specific date and a specific person with first-hand knowledge of the job, which matters if the same task is later performed by a different crew under different conditions.
• The trigger for any update. A near miss, a new tool, or a site condition change that caused the JHA to be revised (dated, not folded silently into a new version with no trail).

For a ready-to-fill starting point with these fields already built in, see our job safety analysis template. For the specific hazards worth naming on a construction site, our OSHA inspection prep guide covers what an inspector checks for beyond the paperwork itself.

What Most JHA Content Gets Wrong

Three gaps show up consistently across what currently ranks for this term:

• "OSHA requires a JHA" as a flat statement. It's shorthand for a real underlying requirement (1910.132(d), 1926.20(b)(2), and the general duty clause), but stated as a direct rule it's inaccurate, and it leaves out the citation an inspector would actually use.
• No prioritization step. Most guidance jumps straight to "break the job into steps," skipping OSHA's own first step of deciding which jobs are worth analyzing at all. That's how a five-person crew ends up with a JHA-fatigue problem instead of a working safety program.
• PPE treated as the default control, not the last resort. The hierarchy of controls exists specifically because "just wear gloves" is the answer that requires the least thinking and produces the weakest protection. A JHA that lists the same control for every hazard on the sheet wasn't run step by step.

Safety Team Technologies' JSA module includes a library of pre-built, job-specific hazard assessment checklists (a Pre-Job JHA template among them), plus an Identified Hazard and Correction Record for tracking anything found through to a fix, filled out on a phone at the jobsite rather than a form left blank in a truck.

Frequently Asked Questions

Does OSHA require a job hazard analysis?

Not by that name. There is no standalone CFR section titled "job hazard analysis." OSHA promotes the JHA method in its own voluntary guidance, Publication 3071, as the recommended way to satisfy hazard-identification duties that ARE mandatory: 1910.132(d)'s PPE hazard assessment in general industry, and 1926.20(b)(2)'s frequent jobsite inspection requirement in construction.

What is the difference between JHA and JSA?

None, in practice. Job hazard analysis (JHA) and job safety analysis (JSA) describe the same technique: breaking a task into steps, identifying the hazard in each step, and defining a control. OSHA's own materials use "JHA." Older industry practice, and ANSI Z590 documentation, tends to use "JSA." Search volume for both terms is comparable, which is why most vendors use them interchangeably.

What are the 3 steps of a job hazard analysis?

1) Break the job into a sequence of steps. 2) Identify the hazard in each step. 3) Determine a control for each hazard, in this order of preference: eliminate it, engineer it out, change the procedure, or specify PPE. OSHA's Publication 3071 adds a preliminary step: selecting which jobs need a JHA first, since not every task needs one.

Which jobs need a JHA?

Not all of them. OSHA's guidance points to jobs with the highest injury or illness rates, jobs with a history of near misses, jobs involving new equipment or a changed process, and jobs complex enough that written instructions are necessary. A five-minute task with no history of incidents and no equipment change is a low priority.

Who should conduct a job hazard analysis?

The supervisor or crew lead closest to the work, not a safety manager who has never run the task. OSHA's guidance is explicit that the person conducting the analysis should have first-hand knowledge of the job, and that the employees who do the job routinely should be involved. They're usually the ones who know where the actual hazard lives, not where the org chart assumes it does.

How often should a JHA be reviewed?

There is no fixed calendar interval in OSHA's guidance. Review is triggered by events: an injury or near miss on that job, a new tool or material introduced, a process change, or a periodic review cycle the employer sets for high-hazard tasks. Treating it as a one-time document defeats the purpose.

Is a JHA the same as a JSA form or template?

The form is just the record of the analysis, not the analysis itself. A blank JSA template with the task, hazard, and control columns filled in from a real walkthrough is useful. The same template filled in from memory at a desk, without watching the job actually happen, is a paperwork exercise that will not hold up if an incident happens on that task.