Job Hazard Analysis (JHA): What OSHA Actually Requires and How to Do One

There is no OSHA standard called "job hazard analysis." JHA is a voluntary method OSHA describes in Publication 3071. The duty to identify hazards is legally required elsewhere: 1910.132(d)'s PPE hazard assessment in general industry, and 1926.20(b)(2)'s requirement for frequent, regular jobsite inspections by a competent person in construction. The method itself is simple: break a job into steps, find the hazard in each step, decide the control.

Search "job hazard analysis" and nearly everything that ranks is a university EHS department page or a state consultation program, and most of them state or imply that OSHA requires a JHA. It doesn't, not as a named requirement. What it requires is that you identify workplace hazards and do something about them, under standards that don't use the word "JHA" anywhere in their text. JHA is the tool OSHA recommends for getting there, which is a more useful thing to understand than the loose "OSHA requires it" framing most pages settle for, because it tells you what an inspector can actually cite you under if the underlying hazard assessment never happened.

Where the Requirement Actually Comes From

Two different standards do the legal work, depending on which side of the general-industry/construction line you're on.

Setting	Standard	What It Requires
General industry	29 CFR 1910.132(d)	Assess the workplace for hazards requiring PPE, then select and communicate the PPE. A written certification of the assessment is mandatory: it must name the workplace evaluated, the person who certified it, and the date.
Construction	29 CFR 1926.20(b)(2)	"Frequent and regular inspections of the job sites, materials, and equipment" by a competent person designated by the employer.

Neither section says "conduct a job hazard analysis." Both require you to know what the hazards on a specific job are before someone gets hurt by one, which is exactly what a JHA produces as a byproduct. Publication 3071 doesn't cite either section. It presents JHA as voluntary guidance and tells employers to consult the OSHA standards for their industry and build those requirements into the analysis. So a JHA is a method for meeting the broader duty, not a separate rule with its own citation number. Full text of the PPE hazard-assessment requirement is at 29 CFR 1910.132; the construction inspection requirement is at 29 CFR 1926.20.

There's also the general duty clause sitting behind both: Section 5(a)(1) of the OSH Act requires an employer to furnish a workplace "free from recognized hazards... likely to cause death or serious physical harm." When there's no standard specific enough to cite for a hazard that clearly existed and clearly wasn't addressed, OSHA reaches for 5(a)(1) instead. A documented JHA is direct evidence you recognized the hazard and did something about it. That's the difference between a citation and a clean inspection when something goes wrong on a task nobody wrote a specific standard for.

JHA vs. JSA: The Same Thing, Different Name

"Job hazard analysis" and "job safety analysis" describe one technique. OSHA's own publications use "JHA." A fair amount of older industry material uses "JSA." If you're comparing vendor software or reading a construction company's written program, don't assume a difference in method just because the acronym changed. Check what the document actually does, not what it's titled. People search for both names. "Job hazard analysis" is the more common of the two, but plenty of contractors grew up calling it a JSA, which is the honest reason most safety vendors, including this one, use both terms rather than picking a side.

The Method: 3 Steps, Plus One Most Content Skips

Publication 3071 starts earlier than most guides do. Before you break any job into steps, it has you list, rank and set priorities for the jobs worth analyzing, and most of what's published online quietly drops that part.

Step	What It Means
0. Select the job	Not every task needs a written JHA. Prioritize by injury and illness rates, potential for severe injury, new or changed jobs, and job complexity.
1. Break the job into steps	Sequential, observable steps in the order they actually happen: not a task description, a step sequence. "Set up ladder," "climb to platform," "position tool" is a step breakdown. "Perform roof repair" is not.
2. Identify the hazard in each step	What could go wrong at this specific point in the sequence, not a generic hazard list for the job as a whole. A fall hazard exists at "climb to platform," not at "set up ladder."
3. Determine the control	In order of preference: eliminate the hazard, engineer it out, change the procedure, then specify PPE. PPE is the last resort in this hierarchy, not the default answer, which is where a lot of quick JHAs go wrong: writing "wear gloves" for every hazard regardless of whether gloves actually address it.

Step 0 is the one most templates skip straight past, and it matters more than it looks. A five-person crew with a JHA requirement for every single task they perform will stop doing them properly within a month, because there are too many to take seriously. OSHA's own guidance is explicit that the point is prioritization: jobs with the highest injury or illness rates, jobs that could cause a severe or disabling injury even if nothing has happened yet, and jobs that are new or have changed come first. A routine, low-consequence task is a low priority, not a required weekly form.

Who Should Actually Run the Analysis

Publication 3071 is specific about this in a way that's easy to skip past: watch the employee perform the job, and involve the employees who do it in every phase of the analysis, because they have a unique understanding of the work. A safety manager building a JHA from a desk, based on a job description, will miss the hazard that only shows up when the actual ladder on that actual site is six inches shorter than spec, or when the crew has been improvising a workaround for a tool that's been broken for two weeks. The worker doing the job knows where that gap is. The org chart usually doesn't.

Doing a JHA With a Small Crew and No Safety Manager

Most small businesses assume this is a big-company exercise. It isn't. Neither 1910.132(d) nor 1926.20(b)(2) carves out small employers, so a six-person shop has the same duty to assess hazards as a six-hundred-person plant. One thing that does confuse owners: the partial exemption for companies with 10 or fewer employees in 29 CFR 1904.1 covers injury and illness recordkeeping. It has nothing to do with hazard assessment.

The rules don't ask for a safety department either. In construction, the inspections have to be made by a "competent person", and 1926.32(f) defines that by ability and authority, not by job title: someone "capable of identifying existing and predictable hazards" who "has authorization to take prompt corrective measures to eliminate them". On a small crew that is usually the owner or the lead foreman. In general industry, the written certification under 1910.132(d)(2) only has to name the workplace evaluated, the person certifying it, and the date.

Here is a version that fits a small operation:

• Pick the three to five jobs most likely to hurt someone. Start with anything involving heights, energized equipment, vehicles, or a task where you've already had an injury or a close call. You don't need a JHA for every task in week one.
• Do it standing next to the work. Fifteen minutes with the person who does the job, walking through the steps in order, beats an afternoon at a desk.
• Keep it to one page. Steps, hazards, controls. If it runs longer, the job is probably two jobs.
• Put a name and a date on it. That is what turns a conversation into a record you can show an inspector or an insurer.
• Redo it when something changes. New equipment, a new site, a new hire doing the task for the first time, or an injury are all reasons to look again.

If writing these from a blank page is what stops you, pre-built hazard checklists by job type give you a starting point you can adjust to your own site.

Job Hazard Analysis in Construction, Specifically

Construction work adds one wrinkle general-industry JHA guidance doesn't cover: the job site itself changes daily. A JHA written for "framing a wall" on a flat, dry slab doesn't automatically transfer to the same task on a site with an open excavation twenty feet away, or on a day with rain in the forecast. 1926.20(b)(2)'s "frequent and regular" language exists precisely because a construction competent person is expected to re-check conditions routinely, not sign off on a hazard assessment once and treat it as permanent. A JHA for a mobile, changing worksite is closer to a living checklist than a one-time document. That's also the practical argument for doing it on a phone at the site rather than filling out a paper form back at the office at the end of the week.

What a Real JHA Record Should Show

Since there's no prescribed format, the difference between a JHA that holds up and one that doesn't comes down to specificity.

• Named steps, not a task title. "Remove old shingles, position new bundle, nail starter course" beats "roof replacement" as a step breakdown, because it's the specific step where a hazard control failed that matters if something goes wrong.
• A control for each hazard, ranked by the hierarchy above. "Wear fall protection" for every single hazard on the sheet is a sign the analysis wasn't actually done step by step.
• Who conducted it and when. Ties the record to a specific date and a specific person with first-hand knowledge of the job, which matters if the same task is later performed by a different crew under different conditions.
• The trigger for any update. A near miss, a new tool, or a site condition change that caused the JHA to be revised (dated, not folded silently into a new version with no trail).

For a ready-to-fill starting point with these fields already built in, see our job safety analysis template. For the specific hazards worth naming on a construction site, our OSHA inspection prep guide covers what an inspector checks for beyond the paperwork itself.

What Most JHA Content Gets Wrong

Three gaps show up consistently across what currently ranks for this term:

• "OSHA requires a JHA" as a flat statement. It's shorthand for a real underlying requirement (1910.132(d), 1926.20(b)(2), and the general duty clause), but stated as a direct rule it's inaccurate, and it leaves out the citation an inspector would actually use.
• No prioritization step. Most guidance jumps straight to "break the job into steps," skipping OSHA's own earlier step of deciding which jobs are worth analyzing at all. That's how a five-person crew ends up with a JHA-fatigue problem instead of a working safety program.
• PPE treated as the default control, not the last resort. The hierarchy of controls exists specifically because "just wear gloves" is the answer that requires the least thinking and produces the weakest protection. A JHA that lists the same control for every hazard on the sheet wasn't run step by step.

Safety Team Technologies' JSA module includes a library of pre-built, job-specific hazard assessment checklists (a Pre-Job JHA template among them), plus an Identified Hazard and Correction Record for tracking anything found through to a fix, filled out on a phone at the jobsite rather than a form left blank in a truck.

Frequently Asked Questions

Does OSHA require a job hazard analysis?

Not by that name. There is no standalone CFR section titled "job hazard analysis." OSHA describes the JHA method in its own voluntary guidance, Publication 3071, and calls it one of the best ways to establish proper work procedures. What is mandatory is hazard identification itself: 1910.132(d)'s PPE hazard assessment in general industry, and 1926.20(b)(2)'s frequent jobsite inspection requirement in construction. A JHA is a practical way to meet both.

What is the difference between JHA and JSA?

None, in practice. Job hazard analysis (JHA) and job safety analysis (JSA) describe the same technique: breaking a task into steps, identifying the hazard in each step, and defining a control. OSHA's own materials use "JHA." Older industry practice tends to use "JSA," and OSHA's own booklet uses "job safety analysis" once as well. People search for both, with "job hazard analysis" the more common of the two, which is why most vendors use the terms interchangeably.

What are the 3 steps of a job hazard analysis?

1) Break the job into a sequence of steps. 2) Identify the hazard in each step. 3) Determine a control for each hazard, in this order of preference: eliminate it, engineer it out, change the procedure, or specify PPE. OSHA's Publication 3071 adds a preliminary step: selecting which jobs need a JHA first, since not every task needs one.

Which jobs need a JHA?

Not all of them. OSHA's guidance gives priority to jobs with the highest injury or illness rates, jobs that could cause a severe or disabling injury even with no history of accidents, jobs where one simple human error could lead to a severe injury, jobs that are new or have changed, and jobs complex enough to require written instructions. A simple task with little potential for serious harm is a low priority.

Who should conduct a job hazard analysis?

The supervisor or crew lead closest to the work, not a safety manager who has never run the task. OSHA's guidance is explicit that you should watch the job being performed and involve the employees who do it in every phase of the analysis. They're usually the ones who know where the actual hazard lives, not where the org chart assumes it does.

How often should a JHA be reviewed?

There is no fixed calendar interval in OSHA's guidance. It says to review a JHA periodically, even if the job has not changed, and in particular after an injury, an illness or a close call on that job. A new tool, material or process is also a sensible trigger. Treating it as a one-time document defeats the purpose.

Is a JHA the same as a JSA form or template?

The form is just the record of the analysis, not the analysis itself. A blank JSA template with the task, hazard, and control columns filled in from a real walkthrough is useful. The same template filled in from memory at a desk, without watching the job actually happen, is a paperwork exercise that will not hold up if an incident happens on that task.