WalkDown

Prototype

Harbour Precinct Stage 2 · synthetic demo data

Risk register

Risk matrix

Every numbered risk, placed by likelihood and consequence as rated in the client risk register. Inherent: no critical controls in place. Register: with the critical controls in place. Ratings do not change during the project. A ring shows a risk with a critical control failed (red) or overdue (amber) today; the status sits on top of the rating and does not change it. Select a number to highlight it everywhere.

Sort by

Mar 2026

Program

Site status Mar 2026

Overdue and failed Failed · critical controls, Nov 2024 to today

Field Leadership

Today's walk · most serious first

Task observations planned today

Today's CCVs

Today's permits

Assurance Health

Next month, from the schedule

Risk matrix, register

Consequence →Ring: control failed or overdue

How it works

WalkDown places the client's critical risk register on the site and shows, at the start of each day, which critical controls are current and where to walk. It reports facts from site records. It does not predict or change risk ratings.

What WalkDown shows

Site model. Only the work areas on today's walk are coloured, by the most serious item there: a failed critical control, an overdue critical control, or a planned task observation. Other live work is a faint grey and the rest of the model is neutral. Areas on today's walk carry a label with their assurance health and the register rating of the worst live risk. Other areas are not labelled; select one in the panel to see its risks.
Assurance health. On each label and in the sidebar: the share of required checks current and passing.
Field Leadership. Today's walk, task observations planned today, today's CCVs (critical control verifications) and today's permits.
Incidents. High-potential incidents and serious near misses put the control that failed at the top of the walk, add a follow-up task observation within 7 days, and stay marked on the model until the corrective action is verified.
Next month. Work starting and finishing from the schedule, new crews, permits needed and controls falling due. A dashed outline marks new critical-risk work starting next month.
Risk matrix. Inherent and register ratings, the risk and control registers, work areas and critical risks.

How colour is used

Colour is reserved for today's walk. Three muted tones, the same on the model and in the side panel: Failed critical controlOverdue critical controlPlanned task observation
An area with more than one item takes the most serious: failed, then overdue, then observation. Walk stop numbers, action tags, label dots and the rings on the matrix use the same tones.
Everything else is neutral. Other live work is a faint grey and areas with no work are plain. Buildings, scaffold, plant and people are grey-blue, whatever their rating.
Exceptions. The small square on each label shows the register rating in the risk register colours (Low, Medium, High, Extreme), as in the Risk matrix. Barriers are yellow when in place and red dashed when degraded. Red tags and pins mark high-potential incidents and serious near misses until their corrective action is verified. The dashed grey outline marks new critical-risk work next month. The crane is yellow, as on site.
Why. At the start of the day the model answers one question: where to walk, and why. Risk ratings do not change day to day, so they stay on the labels and in the Risk matrix.

Data it reads

Data	Typical source
Critical risk register: risks, ratings, critical controls, owners	Client risk register or HSE system
Critical control verifications	Verification app or HSE system
Statutory inspections	Inspection register
Permits	Permit to work system
Plant pre-starts and defects	Plant pre-start app
High-risk work licences	Training and competency register
Corrective actions	HSE system action register
Observation plan and completed observations	Field leadership app or HSE system
Program, crews and permits needed	Project schedule, for example Primavera P6 or MS Project
High-potential incidents and serious near misses: control that failed, interim control, follow-up observation, corrective actions	Incident management system
New starters	Site induction records
Hours worked	Timesheets

All data in this demo is synthetic, generated for a 24-month build.

How ratings are set

Ratings come from the client risk register. WalkDown never calculates or changes them.
Consequence is the credible worst case. Every critical risk has fatal or permanently disabling potential, which is what makes it critical.
Likelihood is the chance of that consequence over the life of the project, using the descriptors in the matrix key.
Inherent assumes competent workers and normal conditions with none of the critical controls. Register assumes the critical controls are in place and effective. Physical controls that are hard to bypass can bring likelihood to Rare. Controls that depend on people usually stop at Unlikely. Interfaces where the design breaks separation stay at Possible.
Each risk is rated where it occurs. Psychosocial hazards, driving to and from site and heat stress (R24 to R26) are site-wide, so they appear in the registers but not on the site model.
Fatigue (R23) is a contributing factor rather than a risk, so it shows as the overtime pressure flag.
The demo ratings are an illustrative register for this site. The client's own register and matrix replace them.

How each output is worked out

Live work. Each risk is live only during the program phases that create it: slab edges during the structure, the crane from structure start to facade end, the switchroom during energisation. In a pilot this comes from the client's schedule.
Area colour. Areas on today's walk take the colour of their most serious item: failed critical control first, then overdue, then a planned task observation. See How colour is used.
Verified, overdue, failed. Verified: checked within its frequency and passed. Overdue, by even one day: not current. Failed at its last check: the work is stopped or an interim control confirmed before it continues.
Assurance health. Whether the required checks are on record, current and passed. It does not measure how well controls work in the field; that is what the walk is for. Required checks current and passing, averaged across up to seven check types: critical control verifications (a shared control counts in each area it protects), statutory inspections, permits, plant pre-starts, high-risk work licences, corrective actions closed on time, and task observations completed in the last 7 days. A type with nothing required is left out. Good 95% or more, needs attention 80% to 94%, poor below 80% (client configurable).
Today's walk. Up to four stops, visited most serious first: failed critical controls, highest register rating first; then overdue critical controls, longest overdue first (register rating breaks ties); then today's planned task observations, by time. Checks in the same area are grouped into one stop. The order follows seriousness, not distance, and the route line joins the stops in that order. Each stop has a time estimate.
Task observations. One or two a day, rotating across live critical risks, more often for fatal risks, never the same task two days running.
Incidents. Only high-potential incidents and near misses with fatal or permanently disabling potential. From the day after the event until it is re-verified, the critical control that failed shows as Failed, so its area leads the walk with the interim control to confirm. A follow-up task observation of the same task is scheduled within 7 days. The corrective action counts in assurance, and the marker on the model clears once the action is verified. The incident response itself (scene, notification, investigation) stays with the site's incident process.
Pressure flags. Facts, not scored: three or more new starters, 10 hours or more overtime per worker this week, three or more concurrent high-risk activities.
Site status target. Average assurance health against the site target: Above Target at 95% or more, On Target from 90% to 94%, Below Target under 90% (client configurable).
Optimiser (planned). When many items rank equally and there is not time for all of them, the optimiser will choose the walk that covers the most risk in the time available.
Start of day. The screen shows the site as at 6:00 am. Today's results appear in assurance the next day.

Critical controls and shared controls

Each risk relies on three critical controls. Every control has its own number (C01, C02 and so on), an owner, a check frequency and a due date.

A shared control, such as the tower crane exclusion zone (R01 and R21), the haul road pedestrian barriers (R19 and R22) or the site traffic management plan, is one item with one owner and one verification. Its status shows against every risk and work area it protects. The full control register is on the Risk matrix tab.

Limits

WalkDown never changes a risk rating. It shows where the controls behind a rating are not current.
A failed critical control still needs the site's own stop-work or interim control process. WalkDown flags it; people act on it.
Assurance counts whether checks were done and passed, not how well they were done. That still needs people in the field.
It reports what is recorded. Missing or late records show as gaps.

Research basis

ICMM (2015). Health and safety critical control management: good practice guide. Critical controls, verification and material unwanted events. ICMM
Constructors Association (2019). Lead Performance Indicators Guideline. Leading indicators for construction, including inspections, corrective actions and leadership activities. PDF
Safe Work Australia. Issues in the measurement and reporting of work health and safety performance. Why leading indicators need clear definitions. PDF
Institute for Work & Health. New workers carry a higher risk of lost-time injury, about three times higher in their first month. IWH
Dembe, Erickson, Delbos & Banks (2005). The impact of overtime and long work hours on occupational injuries and illnesses. Occupational and Environmental Medicine 62(9). Overtime schedules carried a 61% higher injury hazard rate. PMC
Provan, Woods, Dekker & Rae (2020). Safety II professionals: how resilience engineering can transform safety practice. Reliability Engineering & System Safety 195. How safety practitioners spend their time. Record
Safe Work Australia (2025). Key Work Health and Safety Statistics Australia. Vehicles, falls from height and falling objects lead work-related fatalities. PDF
Cox (2008). What's wrong with risk matrices? Risk Analysis 28(2). Why likelihood and consequence scales need clear definitions.

Site plan elements follow the City of Cockburn construction management plan guidelines. Default 5×5 matrix in the style common in Australian practice. ISO 31000 and IEC 31010 do not prescribe a matrix, scales or band names, so the client's own matrix replaces it.

WalkDown

Risk matrix

All work areas

Where it is present

Critical controls to verify