vaayaa Inclusive Education
Industrial risk assessment

Automotive Manufacturing Engineering Risk Assessment: Plant Hazards, Quality and Controls

A worked example showing how a body and assembly plant identifies, scores and controls risks to people, equipment, product quality and supply, from machine guarding and energy isolation to supplier defects and software change.

Updated November 2026 8 hazards assessed Review every 6 months Highest risk: Critical to Medium
See the Automotive Manufacturing Engineering course

Executive summary

This assessment shows how an automotive manufacturing engineering team can identify, rate and control the risks that matter most to people, equipment and product conformity on a body, paint and assembly line. Eight hazards were chosen because they are plausible in daily plant work. Energy release during maintenance and unguarded robot and press motion carry the highest inherent scores, with energy release rated Critical before controls. Supplier component defects and dimensional drift are also significant because one batch can stop a line or reach customers. Each hazard is scored before controls and again after existing and added controls. Most fall to Medium or Low once the additional controls are in place. The first actions are verified energy isolation, safeguarding checks, supplier incoming inspection and controlled change to robot and PLC programs. Because the plant is a teaching example, every score illustrates method rather than a real operation.

Focus area
Automotive manufacturing engineering
Setting
Body, paint and final assembly plant for passenger vehicles with supplier-fed components
Method
Five by five likelihood and severity risk register

Scope

This assessment covers the engineering of a body shop, paint shop and final assembly line, including presses, robots, conveyors, weld and paint systems, gauging, maintenance and supplier parts. It looks at risks to people, equipment, product conformity and supply. Assumptions: jurisdiction, plant size, equipment age and vehicle model are not specified, so statutory and standards duties are described in general terms only, and all scores are teaching examples.

Context

The plant runs two shifts with skilled technicians, assembly operators, quality inspectors and maintenance engineers. Robots and presses are programmed through a controller network, while weld and paint systems use gases, solvents and high voltage supplies. Parts arrive from external suppliers on just in time schedules. Each risk is scored before controls to show its natural level, then again after existing controls and the additional controls that should be added. Ratings are a starting point for engineering judgement, not a measurement of a real plant.

Objectives, assets and stakeholders

The objective is to build vehicles that meet specification, protect the health and safety of everyone on site, keep equipment available and meet the legal and standards duties that apply. The assets in scope are presses, robots, conveyors, weld and paint systems, gauges and test equipment, control software, spare parts stock and the supplier relationships that deliver components. Stakeholders include production operators, maintenance technicians, quality inspectors, plant management, customers who receive vehicles, suppliers, safety representatives and the regulators who inspect the site. Every risk has one owner role. The plant engineering manager keeps the register current and reports to the operations board each month.

Risk matrix: before and after controls

Each cell shows hazard numbers placed by likelihood and impact. Compare the two grids to see how controls move each hazard.

Before controls

Inherent risk

Risk before controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely Likelihood 4, impact 3, score 12, high: H04 Likelihood 4, impact 4, score 16, high: H01 Likelihood 4, impact 5, score 20, critical: H02
3 Possible Likelihood 3, impact 3, score 9, medium: H05 H07 Likelihood 3, impact 4, score 12, high: H03 Likelihood 3, impact 5, score 15, high: H06
2 Unlikely Likelihood 2, impact 4, score 8, medium: H08
1 Rare

After controls

Residual risk

Risk after controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely
3 Possible
2 Unlikely Likelihood 2, impact 2, score 4, low: H05 H07 Likelihood 2, impact 3, score 6, medium: H03 H04 Likelihood 2, impact 4, score 8, medium: H01 H02 H06
1 Rare Likelihood 1, impact 3, score 3, low: H08
  • Low 1 to 4
  • Medium 5 to 9
  • High 10 to 16
  • Critical 17 to 25

Hazard register

A summary first, then the detail for each hazard.

Summary of hazards with scores before and after controls
No.HazardBeforeAfterOwner
H01 Unguarded press and robot motion during operation 16 High 8 Medium Plant safety engineer
H02 Hazardous energy release during maintenance and fault finding 20 Critical 8 Medium Maintenance manager
H03 Weld fume, paint solvent and gas exposure in enclosed areas 12 High 6 Medium Occupational hygiene lead
H04 Dimensional defects from specification mismatch and gauge drift 12 High 6 Medium Quality engineer
H05 Unplanned line stoppage from maintenance backlog and wear 9 Medium 4 Low Maintenance planner
H06 Defective supplier components reaching the assembly line 15 High 8 Medium Supplier quality engineer
H07 Procedural deviation and assembly error under production pressure 9 Medium 4 Low Assembly manager
H08 Uncontrolled changes to robot and PLC programs 8 Medium 3 Low Controls engineer
H01

Unguarded press and robot motion during operation

Safety Before 16 After 8

Operators or technicians enter a robot or press envelope while it is moving, or a guard is removed or bypassed to clear a fault, leading to crush, cut or impact injuries.

Who or what is affected: Operators, maintenance technicians and visiting engineers

Causes

Pressure to clear faults quickly, guards removed for access and layout changes that bring people closer to moving equipment.

Consequences

Crushing or amputation injury, lost time, enforcement action and loss of trust on the line.

Existing controls

  • Fixed guards and interlocked gates surround each press and robot cell.
  • Operators are trained on cell entry rules and fault clearing.

Control gaps

Interlock checks are recorded as done but are not tested under fault conditions.

Additional controls

  • Prevent: Fit interlocks that stop all motion on every gate and verify them at each shift start.
  • Detect: Log every bypass key use and review the log at the weekly safety meeting.
Likelihood 4 x impact 4 before; 2 x 4 after Owner: Plant safety engineer Target: Within 30 days Early warning: Guards or interlocks found bypassed or out of service on any cell.
H02

Hazardous energy release during maintenance and fault finding

Safety Before 20 After 8

Electrical, pneumatic or hydraulic energy is not fully isolated before work on a press, robot, conveyor or weld power source, so stored or live energy starts equipment or causes shock, burns or crushing.

Who or what is affected: Maintenance technicians, electricians and cleaners working near equipment

Causes

Shortcuts when production is under pressure, incomplete isolation points on older equipment and unclear lock ownership during shift handover.

Consequences

Electric shock, burns, crush injury, fatality and prohibition of the cell.

Existing controls

  • Lock and tag isolation procedures exist for each machine group.
  • Electricians are qualified and hold current training for live work.

Control gaps

Isolation points on older lines are not fully mapped, and try start tests are often skipped.

Additional controls

  • Prevent: Use a personal lock and a written isolation check that includes a try start test before work begins.
  • Recover: Keep stored energy release points and residual pressure bleed steps in the maintenance instruction.
Likelihood 4 x impact 5 before; 2 x 4 after Owner: Maintenance manager Target: Within 30 days Early warning: Maintenance interventions started without a signed isolation record.
H03

Weld fume, paint solvent and gas exposure in enclosed areas

Safety Before 12 After 6

Welding fume, isocyanate or solvent vapour from paint and sealing work, and shielding gas leaks in enclosed booths or pits, can exceed safe exposure levels over time or during a spill.

Who or what is affected: Weld and paint technicians, cleaners and nearby assembly staff

Causes

Blocked or unchecked ventilation filters, open booth doors during work and frequent solvent handling.

Consequences

Respiratory illness, skin disease, headaches, long term harm and enforcement action.

Existing controls

  • Local exhaust ventilation is fitted to weld stations and the paint booth.
  • Safety data sheets are kept at each area and staff are briefed on them.

Control gaps

Extraction flow is checked at installation only, not on a fixed schedule.

Additional controls

  • Prevent: Substitute lower hazard materials where the process allows and set written exposure limits for each task.
  • Detect: Measure air quality at fixed points each quarter and record results against the limit.
  • Respond: Provide respiratory protection and a clear evacuation route for gas leak alarms.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Occupational hygiene lead Target: Within 60 days Early warning: Extraction flow readings below the set minimum on any booth or weld station.
H04

Dimensional defects from specification mismatch and gauge drift

Operational Before 12 After 6

Stamped, welded or machined parts drift outside tolerance because tooling, fixtures or gauges are worn, or because the drawing revision on the line does not match the approved specification, leading to poor fit and rework.

Who or what is affected: Quality inspectors, assembly operators and downstream customers

Causes

Late drawing changes, worn fixtures and gauges used beyond their calibration interval.

Consequences

Rework, scrap, poor body fit, warranty claims and stopped lines.

Existing controls

  • Dimensional checks are made on the first and last part of each shift.
  • Gauges carry calibration labels and are checked against a master.

Control gaps

Charts are reviewed weekly, so a trend can run for days before anyone acts.

Additional controls

  • Prevent: Release drawings and work instructions through one controlled system that removes superseded revisions from the line.
  • Detect: Run statistical process control charts on critical dimensions and react to trends before limits are breached.
Likelihood 4 x impact 3 before; 2 x 3 after Owner: Quality engineer Target: Within 60 days Early warning: Two consecutive points trending toward a control limit on a critical dimension.
H05

Unplanned line stoppage from maintenance backlog and wear

Operational Before 9 After 4

Preventive tasks slip on presses, weld guns, conveyors and robots, and worn parts fail without warning, stopping the line for long periods and creating pressure to bypass safeguards.

Who or what is affected: Production planners, maintenance technicians and line operators

Causes

Overtime limits, changing production plans and spares not matched to the current wear pattern.

Consequences

Lost output, overtime cost, rushed repairs and a higher risk of unsafe bypass.

Existing controls

  • A preventive maintenance schedule exists for each cell.
  • Critical spare parts are held on site for the main machines.

Control gaps

Backlog is reported monthly, so overdue tasks are not visible to shift leaders.

Additional controls

  • Prevent: Use condition monitoring on weld guns and drive motors to plan replacement before failure.
  • Recover: Keep a tested recovery plan that restores each cell within an agreed time after a failure.
Likelihood 3 x impact 3 before; 2 x 2 after Owner: Maintenance planner Target: Within 90 days Early warning: Overdue critical preventive maintenance tasks on presses and weld equipment.
H06

Defective supplier components reaching the assembly line

Supplier Before 15 After 8

A supplier ships parts with hidden defects such as weak welds, incorrect coating or certificate errors, and the parts are fitted before the fault is found, causing field failures or line stops.

Who or what is affected: Assembly operators, customers, supplier staff and plant reputation

Causes

Sub-tier changes the supplier does not report, pressure on lead times and certificates accepted without testing.

Consequences

Line stoppage, field recalls, supplier disputes and loss of customer confidence.

Existing controls

  • Supplier approval includes an initial sample review and a written quality agreement.
  • Certificates of conformity are checked against each delivery.

Control gaps

Sub-tier suppliers are not visible, and sampling is not linked to component risk.

Additional controls

  • Prevent: Require first article approval for every change in supplier process, material or tooling.
  • Detect: Sample incoming lots with a defined test plan and hold any lot that fails.
  • Respond: Agree containment and recall steps with each supplier in writing.
Likelihood 3 x impact 5 before; 2 x 4 after Owner: Supplier quality engineer Target: Within 60 days Early warning: Supplier lots held or rejected twice in one month from the same source.
H07

Procedural deviation and assembly error under production pressure

People Before 9 After 4

Operators skip a step in a torque, sealing or fastening sequence, use the wrong fastener or work from an outdated instruction, so a joint or label is wrong and the fault is not caught by inspection.

Who or what is affected: Assembly operators, team leaders and downstream inspectors

Causes

Line speed pressure, training gaps for new starters and standard work that is hard to follow.

Consequences

Assembly defects, vehicle recalls, rework and injury from a poorly fitted part.

Existing controls

  • Standard work sheets are displayed at each station.
  • Torque tools record the result for each fastening point.

Control gaps

Torque records are reviewed only after a fault is reported, not during the shift.

Additional controls

  • Prevent: Use error proof fixtures and sockets that only fit the correct part and sequence.
  • Detect: Audit a sample of stations each shift against standard work and record every deviation.
Likelihood 3 x impact 3 before; 2 x 2 after Owner: Assembly manager Target: Within 45 days Early warning: Repeated torque or sequence deviations recorded at the same station in one week.
H08

Uncontrolled changes to robot and PLC programs

Technology and data Before 8 After 3

A controls or maintenance person changes a robot path, PLC logic or safety setting without approval or version control, and the change causes a collision, wrong sequence or lost safety function when production restarts.

Who or what is affected: Controls engineers, maintenance technicians, operators and the plant network

Causes

Quick fixes made at the controller, shared login details and weak version records.

Consequences

Crashes, unsafe motion, production loss and lost traceability of the approved program.

Existing controls

  • Program backups are taken before major changes.
  • Only named engineers have write access to the controllers.

Control gaps

Changes made on the floor are not always recorded against the master copy.

Additional controls

  • Prevent: Require a written change request with peer review before any program is loaded to a live controller.
  • Respond: Keep a tested restore procedure and verify safety functions after every restore.
Likelihood 2 x impact 4 before; 1 x 3 after Owner: Controls engineer Target: Within 60 days Early warning: Unapproved program changes found in the controller version log.

Rating method and evaluation

Each risk is rated on two five-point scales. Likelihood runs from Rare to Almost certain, and severity runs from Negligible to Catastrophic. Multiplying the two gives a score from 1 to 25, which falls into one of four bands. Low is 1 to 4, meaning accept and monitor. Medium is 5 to 9, meaning routine controls with a named owner. High is 10 to 16, meaning senior attention and a dated plan. Critical is 17 to 25, meaning the activity is stopped or restricted until controls are verified. Inherent risk is the score before any controls. Residual risk is the score after existing and additional controls, and it must never be higher than the inherent score. Severity considers harm to people first, then equipment damage, lost output, product nonconformity and effects on customers and reputation. A risk is not rated down simply because it has not happened yet. Ratings are challenged by the operators and technicians who do the work, by a second engineer who did not take part in scoring, and by a review whenever an indicator reaches its threshold.

Likelihood, impact and rating bands

Likelihood

  • 5 Almost certain: Expected to happen in most circumstances.
  • 4 Likely: Will probably happen in many circumstances.
  • 3 Possible: Could happen at some time.
  • 2 Unlikely: Not expected, but it could happen.
  • 1 Rare: Only in exceptional circumstances.

Impact

  • 1 Insignificant: No lasting effect. Handled within routine work.
  • 2 Minor: Small effect that is quickly corrected.
  • 3 Moderate: Noticeable effect that needs managed effort to correct.
  • 4 Major: Serious effect on people, delivery or reputation.
  • 5 Catastrophic: Severe or lasting effect that threatens the whole activity.

Bands (likelihood x impact)

  • Low (1 to 4): Accept and monitor.
  • Medium (5 to 9): Manage with routine controls.
  • High (10 to 16): Senior attention and a treatment plan.
  • Critical (17 to 25): Act first. Do not proceed until reduced.

Monitoring, escalation and review

Review this assessment every 6 months, and sooner when an indicator below reaches its threshold.

Early-warning indicators and escalation thresholds
Indicator to watchEscalate when
Maintenance interventions started without a signed isolation record.Escalate to the maintenance manager at once and stop the job until the record is completed and checked.
Guards or light curtains found bypassed or out of service on any cell.Escalate to the plant safety engineer at once and take the cell out of automatic mode until it is restored.
Supplier lots rejected or placed on hold in the month.Escalate to the supplier quality engineer when two lots are held from one supplier in a month, and to the procurement director if the trend continues.
Unapproved program changes found in the controller version log.Escalate to the controls engineer within one working day, and to plant management if a change reached production.
Overdue critical preventive maintenance tasks on presses and weld equipment.Escalate to the maintenance manager when any critical task is more than 14 days overdue, and to the operations director after 30 days.

Contingency arrangements

If a serious event occurs, such as an injury, a fire, a suspect batch reaching the line or a major equipment failure, the shift leader stops the affected area and makes it safe under the emergency procedure. Nobody restarts equipment until the maintenance lead confirms isolation is verified. Quality holds the affected parts and traces them to the supplier lot. The plant manager informs the safety representative and, where a legal duty applies, the relevant authority through the designated contact. Production moves to a second cell or buffer stock where possible, and customers are told early and plainly.

Prioritized action plan

  1. Enforce a written energy isolation check with personal lock and tag before any maintenance intervention, owner maintenance manager, within 30 days.
  2. Verify all guards and light curtains on presses and robots against the layout drawing, owner plant safety engineer, within 30 days.
  3. Introduce incoming inspection and a supplier quality hold for new lots, owner supplier quality engineer, within 60 days.
  4. Place robot and PLC program changes under documented approval and version control, owner controls engineer, within 60 days.
  5. Clear the critical preventive maintenance backlog on presses and weld guns, owner maintenance planner, within 90 days.

Conclusion

Safe and conforming vehicles depend on steady habits: verified isolation before any intervention, guarded machines, controlled changes to programs, incoming inspection of supplier parts and planned maintenance. The highest scores sit with energy exposure, supplier defects and unguarded motion, and each has actions that bring residual risk down. Treat the register as a living record, review it on the stated cycle, and seek qualified engineering, safety and legal advice for any real plant decision.

Assumptions and limitations

Assumptions

  • The plant follows a documented quality management approach and reviews supplier parts before production release.
  • Machinery is of mixed age, and guarding and isolation points are assumed to exist but may not all be verified.
  • Jurisdiction is not specified, so statutory duties are described generally and should be confirmed by a qualified specialist.

Limitations

  • Scores are educational examples and do not describe any real plant, product or supplier.
  • Safety, electrical and environmental rules vary by country and change over time, so specialist review is needed.
  • This is educational content and does not replace a formal site-specific assessment or licensed engineering advice.

Related frameworks to study

  • Hierarchy of controls
  • Failure mode and effects analysis
  • Lockout and tagout principles for energy isolation
  • Statistical process control basics
  • Production part approval process concepts

Industrial Risk Assessment

China, India, United States, Indonesia, Pakistan, Nigeria, Brazil, Bangladesh, Russia, Japan, Mexico, Philippines, Vietnam, Egypt, Turkey, Germany, United Kingdom, France, Italy, Canada, South Korea, Australia, Spain.

For Learning Reference Only: This assessment demonstrates how risk assessment principles are applied in a practical setting, providing a useful reference for learning and understanding. Actual assessments may be adapted to suit specific site conditions and circumstances.

Keep learning

Study the subject behind this assessment.

Automotive Manufacturing Engineering course Read the best practices for this course

More Industrial risk assessments

Hourly Active: 39,047 Learners