Many businesses treat this as a tick-box exercise. That's a mistake. A weak or incomplete assessment typically triggers requests for further information, application delays, extra permit conditions, costly redesign work, community complaints, or enforcement exposure down the track.
The scale of regulatory activity in this space is significant. NSW EPA alone recorded 4,962 environmental incident notifications through its Environment Line and emergency-service channels in 2024-25, with 99.71% of licences risk-assessed and 93.46% licence compliance achieved. This guide walks through what a proper assessment covers, how to build one, and where to get support with the documentation process.
Key Takeaways
- Link hazards and emission sources to pathways, receptors, consequences, and controls
- Cover air, water, land, waste, odour, noise, dust, bioaerosols, spills, and abnormal conditions
- Screen low-risk impacts; use modelling or specialists when risks are complex or uncertain
- Confirm current state and territory guidance with your responsible regulator before you file
- Keep the assessment live — revise after incidents, complaints, or permit variations
What Is an Environmental Risk Assessment and Why Does It Matter?
An environmental risk assessment is a structured evaluation of how an activity, installation, process, discharge, or potential incident could affect people, property, ecosystems, water, land, and air quality.
Regulators use it to judge whether the environmental values they protect face unacceptable risk—and which controls must be in place before they grant or vary a permit.
The Source-Pathway-Receptor Model
Most Australian regulators build their assessment frameworks around a simple logic chain: identify the source (what creates the hazard), trace the pathway (how it could travel or be released), and name the receptor (what or who could be affected).
EPA Victoria's guide to assessing and controlling risk defines risk this way: a hazard threatens a receptor via a pathway, and the two factors that determine risk are likelihood and consequence.
WA's DWER applies a near-identical approach for works approvals and licences. It rates each emission event by likelihood and consequence after mapping source, pathway, receptor, and existing controls.
How It Differs From Related Work
A risk assessment is often mixed up with related technical workstreams. Each plays a different role:
- Emissions inventory — quantifies what's released and from which specific sources
- Dispersion modelling — predicts where pollutants may travel and at what concentration
- Monitoring — measures actual environmental conditions or control performance in the field
- Environmental management plan — sets out how the risks identified in the assessment will actually be controlled and monitored during operations
A risk assessment sits upstream of all four. It tells the regulator why controls were chosen and what residual risk remains, giving them confidence that monitoring commitments and conditions are proportionate.
When You Need One
Common triggers include:
- A new activity or first-time permit application
- A permit variation, plant expansion, or capacity increase
- A new emission source, discharge point, or changed fuel/feedstock
- An incident response or a direct regulator request
Important caveat: requirements, terminology, thresholds, and submission formats differ materially between states and territories. Always confirm the applicable framework with your responsible environmental regulator before finalising your approach.
How to Carry Out an Environmental Permit Risk Assessment
Build an evidence chain the regulator can follow. Assessments get rejected when they only cover normal operations, ignore nearby sensitive receptors, rely on unsupported assumptions, or fail to link proposed controls to actual monitoring commitments.
Step 1 – Define the Activity, Permit Pathway, and Operating Scenarios
Describe the site in detail: processes, materials, equipment, production capacity, operating hours, discharge points, emission points, storage areas, and waste streams. Then consider every operating scenario, not just the default one:
- Normal and maximum operations
- Seasonal variation
- Start-up, shutdown, and maintenance periods
- Emergency and reasonably foreseeable abnormal conditions
Identify your applicable state or territory regulator early and confirm whether the activity needs a permit, environmental authority, licence, approval, or supporting technical assessment.
Step 2 – Identify Hazards and Sources
Cover every relevant category:
- Point-source and fugitive air emissions, dust, odour, and bioaerosols
- Wastewater, stormwater, and groundwater or soil contamination
- Waste, noise, vibration, spills, fires, flooding, and equipment failure
Desk reviews alone miss things. Pull from multiple sources instead:
- Site inspections and process maps
- Chemical and material registers
- Incident records and complaints history
- Maintenance records and monitoring data
- Direct input from workers who operate the equipment daily
Step 3 – Map Pathways and Sensitive Receptors
Pathways include atmospheric transport, runoff, drainage, infiltration, direct discharge, noise transmission, vibration, and accidental contaminant migration.
Receptors include residents, schools, hospitals, waterways, groundwater, protected areas, ecological communities, and nearby businesses.
A scaled site plan is essential here. It should show the facility, emission or discharge sources, property boundaries, drainage, surrounding land uses, and all relevant sensitive receptors within range.
Step 4 – Screen, Model, and Evaluate Significance
Screening compares predicted or measured impacts against the regulator's criteria, standards, or objectives. The exact approach varies by jurisdiction and pollutant.
NSW's Approved Methods framework, for example, uses Level 1 screening with synthetic worst-case meteorology. Where impact criteria are exceeded, it escalates to Level 2 modelling with at least a year of site-specific meteorological data.
Additional work is typically needed when:
- Emissions are significant or receptors are close and highly sensitive
- Terrain is complex or multiple sources interact
- Data is uncertain or pollutants are toxic
- Odour, cumulative impacts, or protected values are in play
Document your assumptions, data quality, averaging periods, and reasons for screening out or escalating each identified risk.
Step 5 – Select Controls and Document Residual Risk
Engineering controls might include containment, filtration, bunding, drainage controls, dust suppression, wastewater treatment, acoustic barriers, or automated shutdown systems.
Administrative controls cover operating procedures, inspection schedules, staff training, weather-based restrictions, spill response, and emergency plans.
For each identified risk, your report should show:
- The risk level before controls are applied
- The control selected and its expected or verified performance
- The residual risk remaining after controls
- The responsible owner, monitoring method, trigger levels, and corrective action
Step 6 – Submit, Maintain, and Review the Assessment
A regulator-ready package typically includes:
- Executive summary and site/process description
- Hazard register and source-pathway-receptor analysis
- Scaled maps and modelling outputs
- Monitoring records and control measures
- Emergency scenarios and proposed reporting commitments
Build the assessment into your environmental management system, not a standalone file. Review it whenever there's a material process change, incident, complaint, new monitoring evidence, or regulatory update.
EPA Victoria's guidance on preparing a risk management and monitoring program confirms this ongoing obligation sits alongside, not instead of, the original risk identification work.
Environmental Permit Risk Assessment Example
Consider a fictional Australian materials-processing facility proposing to increase throughput and add a new storage and loading area. This example is simplified for illustration — it doesn't replace state or territory-specific technical guidance.
Identified hazards and pathways:
- Dust and particulate matter travelling from material handling and vehicle movement to nearby residents
- Contaminated stormwater moving from storage areas through drains to surface water or soil
- Noise from loading equipment transmitting to nearby residences during evening operations
- A spill, fire, or equipment failure creating an abnormal release requiring emergency response
The assessment evaluates each risk by weighing source strength, frequency, duration, distance to receptors, receptor sensitivity, likelihood, consequence, existing controls, and remaining uncertainty.
This mirrors how real decisions get made. In WA DWER's November 2025 works approval decision for the Apollo Hill Pilot Project, the regulator identified overspraying cyanide solution as the source, windborne transport and overland runoff as pathways, and soil, vegetation, and surface water as receptors.
It rated the event as moderate consequence times unlikely likelihood, landing on a medium-risk rating, then applied specific permit conditions tied to drippers and a berm around the heap-leach pad.
For our fictional facility, controls would likely include:
- Enclosed handling and covered storage areas
- Wheel-wash or dust suppression systems
- Bunding and drainage isolation around storage
- Spill kits and documented incident procedures
- Operating-hour restrictions and noise barriers
- Scheduled equipment maintenance and monitoring
The evidence trail supporting the application would combine updated site plans, emissions and discharge data, monitoring results, control specifications, emergency procedures, residual-risk explanations, and a review schedule tied directly to the eventual permit conditions.
How VJM Global Can Help
Getting an environmental risk assessment right is specialist technical work best done by qualified environmental professionals. What often slows Australian businesses down is coordinating that work with everything else a permit application or expansion needs: timelines, data requests, documentation formats, and communication across multiple advisers.
VJM Global is a compliance and business advisory partner, not an environmental consultancy. We work alongside your environmental specialists rather than replacing them.
How we support the process:
- Organise the business, operational, and compliance information your environmental assessment needs
- Coordinate documentation, data requests, and timelines between your business, environmental specialists, engineers, and other advisers
- Review the final submission package for completeness, consistency, and alignment with your wider compliance obligations
We've supported 250+ Australian businesses across automotive, e-commerce, fintech, and export sectors. That experience shows up in how we coordinate complex, multi-party documentation when permit work, operational data, and wider compliance obligations have to line up.
If your business is handling permit documentation alongside broader regulatory or compliance requirements, we'd welcome a conversation.
For technical modelling, sampling, ecological assessment, or regulator-facing specialist work, engage suitably qualified environmental professionals. We can help you see where those pieces fit in your overall compliance picture.
Conclusion
A strong environmental permit risk assessment does five things well:
- Identifies hazards
- Traces pathways to receptors
- Evaluates significance against regulatory criteria
- Applies proportionate controls
- Documents residual risk with a clear monitoring commitment
Treat it as a living document. Review it whenever your activity, site, receptors, evidence base, or regulatory requirements change. Always verify your final approach with the relevant Australian regulator or a qualified environmental specialist before you submit.
Frequently Asked Questions
What are risk assessments for an environmental permit?
They're structured evaluations of how an activity could harm environmental or community receptors, demonstrating to the regulator that identified risks are controlled sufficiently for the relevant Australian permit or approval process.
What should a risk assessment for an environmental permit include?
It should cover the activity description, hazards and sources, pathways, receptors, operating scenarios, risk evaluation, controls, residual risk, monitoring commitments, scaled maps, and supporting evidence specific to your regulator's requirements.
What risks are included in a risk assessment for an environmental permit?
Relevant risks can include air, water, land, waste, odour, noise, vibration, dust, bioaerosol, accident, spill, flooding, fire, fugitive emission, and ecological risks. Scope depends entirely on the activity and the regulator involved.
What are examples of risk assessments for an environmental permit?
Common examples include air emissions and dispersion assessments, wastewater or stormwater discharge assessments, contaminated land or groundwater studies, odour and noise assessments, and cumulative-impact assessments.
