Robot Cell Risk Assessment: Task-Based Method Under RIA TR R15.306
RIA TR R15.306-2016 describes one task-based method for assessing the risk of a robot cell, written to comply with the 2012 edition of the US robot safety standard, and OSHA's Technical Manual builds its example robot risk assessment on it. UTEC Industrial designs, engineers, machines, fabricates, and installs custom material handling systems for aerospace and heavy industry from its Spokane Valley, WA facility, integrating Allen-Bradley PLC and motion control with in-house CNC machining, heat treating, and stress relief. This article follows OSHA's public description of the method step by step, from the task list to the performance level of each safety function, and names the technical report's own charts and tables that it does not restate. A heavy robot cell is built along one chain, design → engineering → parts machining → fabrication → assembly → weld fatigue → stress relief → drives → controls → tuning → monitoring, and the risk assessment is the design-stage document every later link is checked against.
What is RIA TR R15.306-2016, and which edition of R15.06 was it written for?
A3's store page describes the technical report this way: "This document supplements Standard ANSI/RIA R15.06-2012: Industrial Robot Safety, which requries [sic] that a risk assessment of the robot system be completed in order to comply with the standard. TR 306 describes one method of risk assessment that would comply with the 2012 R15.06 requirements." It adds that the 2016 version "has been updated since the original version was published in 2014."
Three points follow from the public pages:
- One method, not the only one. Both the store page and OSHA's robotics standards page say TR 306 describes "one method" of risk assessment.
- Keyed to the 2012 edition. A3's catalog page says TR 306 "describes one method of risk assessment that complies the requirements of the 2012 R15.06 Standard" and lists it in bundles that supplement ANSI/RIA R15.06-2012. ANSI/A3 R15.06-2025 is a revision of that edition, and no A3 page read for this article states whether TR 306 has been revised for, or endorsed under, the 2025 edition.
- A technical report. It is sold as an RIA technical report, not as a part of R15.06 itself.
As engineering reasoning, a cell specified to R15.06-2025 can still use the TR 306 method as a working procedure, but the specification should say so and should state which edition of R15.06 the assessment is written against (RIA TR R15.306-2016, A3 store page; A3 Robot Safety Standard Documents, 2026; OSHA Robotics: Standards, 2026; ANSI/A3 R15.06-2025).
Why does a robot cell need a task-based risk assessment?
OSHA's robotics guidance points at the non-routine tasks people do near a robot. Its robotics page says "Studies indicate that many robot accidents occur during non-routine operating conditions, such as programming, maintenance, testing, setup, or adjustment," when "the worker may temporarily be within the robot's working envelope where unintended operations could result in injuries."
A NIOSH-authored study of the Census of Fatal Occupational Injuries gives the US numbers, with a method condition attached: the cases were identified by a keyword search of restricted-access research files for 1992 to 2017, and the count is what that search found.
- 41 robot-related fatalities were identified over the 26-year period.
- 83% of the cases involved stationary robots.
- 78% involved robots striking the decedent while operating under their own power.
- "Many" of those striking incidents occurred while maintenance was being performed on a robot; the abstract gives no percentage for that.
NIOSH's robotics overview lists struck-by or caught-between hazards, crushing and trapping, slipping, tripping and falling, and electrical hazards among the hazards robots can pose. A3's 2026 summary says the 2025 standards "require an assessment when a robot system is integrated into a particular application," and describes risk assessment as "an iterative process that works together with risk reduction measures to bring risks to a tolerable level" (OSHA Robotics, 2026; Layne 2023, Am J Ind Med vol. 66 no. 6, Abstract; NIOSH 2024, Risks; A3 Online Marketing Team 2026, "Safety Goes Beyond the Robot Arm"; ISO 10218-2:2025).
Who performs the risk assessment, and who signs it?
OSHA's Technical Manual chapter on industrial robots puts the assessment on the integrator and the team around it:
- Integrator. "It is the responsibility of integrator to ensure that an RA is completed and documented prior to commissioning. It is also their responsibility to provide the results of the RA to the employer (user)."
- Affected workers. OSHA recommends that the integrator and user include the affected workers, and that assessments be completed for hazardous tasks within each stage: assembly, integration, operation, and maintenance.
- Employer. Because the employer is responsible under OSHA for a safe workplace, the chapter says the employer should require the integrator "to provide and train the integrator's RA [risk assessment] to the employees prior to commissioning", and provide these functions itself if the integrator does not.
- Team. "A leader with expertise in process operations, the specific robotic application, and with knowledge of the RA process should be selected"; each team member and the team leader should sign the assessment as acceptable to them.
The chapter adds a point for plants with several identical cells: "Similar applications in the same plant should each have their own individual RAs," because the parts, the robot's path and pose, the end-effector, and the cell's placement next to a wall or a walkway can differ. OSHA's chapter frames these duties around ANSI/RIA R15.06-2012. A3 says ANSI/A3 R15.06-3-2025 now addresses user requirements, including risk-assessment considerations, and Part 3 sets the user's own risk-assessment duties as requirements in its clauses (OSHA Technical Manual, Sec. IV Ch. 4, 2026, §VII; A3 Online Marketing Team 2026; ANSI/A3 R15.06-3-2025).
What are the seven key steps in OSHA's example risk assessment?
OSHA's Appendix 2, which the chapter says "is based on RIA TR R15.306-2016 and does not necessarily cover all RA aspects that may be needed," sets out seven key steps:
- Intended use. Define the operation, including normal and alternate (non-typical) sequences; the expected worker interaction, including reasonably expected misuse and maintenance, repair, cleaning and emergency conditions; the operating space and restricted space; and the desired restricted space, "considering possible limits such as hard stops, travel limit sensors, safety-rated soft-axis limits, etc."
- Task determination based on intended use. Define and document all the tasks each worker will perform, including bystanders and passers-by.
- Hazard determination for each task.
- Risk estimation for each task and hazard. Estimate severity, exposure and avoidance, which determine a risk level, and use the risk levels to determine the required performance level (PLr) of each safety function.
- Risk reduction measure determination for each task.
- Evaluation of risk reduction measures. Each team member checks the assigned risk levels, performance levels and measures before the team resolves the issues together.
- Validate the assessment, train workers, review its effectiveness, and update it as needed.
The appendix also says the assessment "Results in risk reduction measures that need to be implemented to comply with applicable standards and regulations." OSHA's definitions set the boundary of the restricted space where the robot comes to rest: "The maximum distance that the robot can travel after the limiting device is actuated defines the boundaries of the restricted envelope of the robot." FANUC's Dual Check Safety operator's manual says that when DCS shuts down motor power while the robot is moving, the robot's momentum carries it some distance before it completely stops, and that this distance depends on the type of robot, payload, and speed; the manual adds that the stopping distance must be considered when its position and speed checks are used. As engineering reasoning, step 1 therefore fixes a heavy cell's restricted space only once the stopping data for the heaviest part the robot carries are known (OSHA Technical Manual, Sec. IV Ch. 4, 2026, Appendix 1 and Appendix 2; FANUC B-83184EN/12, 2021, §1.7 p. 13; RIA TR R15.306-2016).
Which tasks belong on a heavy-handling robot cell's task list?
OSHA's appendix gives example tasks (path teaching; observing; debugging, troubleshooting, or adjusting; and repairing or replacing components), and it includes work not tied to the robot: a cell installed under overhead lighting that needs periodic lamp replacement includes that task too. The general RA process in OSHA's chapter adds that the tasks important to completing the job safely, or that present hazards to the workers, should be listed, while "collecting tools" may not need to be.
The appendix's hazard categories for each task include:
- Mechanical: crushing, caught-between, struck-by, shearing, cutting, projectiles
- Electrical: shock, spark or arc flash, electrostatic
- Thermal: heat, cold, burns
- Ergonomic: reach, weight, posture, motion
- Machinery instability: falling equipment and tools
- Environmental: chemicals and fumes, heat, dust, radiation, light, sparks, noise
As engineering reasoning, a heavy-handling cell in a steel mill, a sawmill, an aluminum plant or an aerospace assembly hall adds tasks a light cell may not have: changing a large gripper, recovering a dropped or mis-gripped part, clearing a jam at a conveyor hand-off, testing brakes, and working at height on a robot pedestal. The article on choosing a robot or a custom mechanism covers why severity, exposure and avoidance weigh differently for heavy parts. A failure mode to design out is a task list written from the production sequence alone (OSHA Technical Manual, Sec. IV Ch. 4, 2026, §VII and Appendix 2).
How does the method estimate the risk of each task and hazard?
OSHA's appendix names three risk factors and quotes TR 306's section numbers for each:
- Severity. "RIA TR R15.306-2016 section 6.4.1.1 describes injury severity as the degree of estimated harm due to each hazard while the operator is performing the associated task."
- Exposure. Section 6.4.1.2 "describes exposure as a function of the estimated incidence of operator exposure (frequency or duration)," taking into account how frequently and how long the operator would be in the hazard zone, and whether the task is routine or non-routine.
- Avoidance. Section 6.4.1.3 "describes avoidance as an assessment of the operator's ability to sense and elude a hazardous situation."
The three factors are then combined into a risk level "using RIA TR R15.306-2016 Table 2," and the risk level for each task is used to identify a performance level through TR 306 Table 5. OSHA reproduces the charts as figures credited to RIA, and this article does not restate the grades for each factor, the cells of the Table 2 matrix or the Table 5 performance levels.
As engineering reasoning, the exposure factor is where a heavy cell's maintenance tasks and its production tasks separate: an operator who loads parts from outside a light curtain and a technician who enters the cell to change a gripper face different exposure even when the severity is the same (OSHA Technical Manual, Sec. IV Ch. 4, 2026, Appendix 2; RIA TR R15.306-2016, §6.4.1.1–6.4.1.3 and Tables 2 and 5).
How are risk reduction measures chosen and checked against the risk level?
OSHA's appendix sets the order: "The hierarchy of risk reduction measures should comply with RIA TR R15.306-2016 Table 3," and measures "should comply with risk level requirements shown in RIA TR R15.306-2016 Table 4," which OSHA titles "Minimum Risk Reduction Measures as a Function of Risk Level." Its rule for the higher levels is explicit: "For all risks with a very high, high or medium initial risk level, inherently safe design (elimination, substitution, or limiting interaction) or safeguarding should be used as a primary means to reduce risks. Complementary protective measures or information for use should not be used as the primary risk reduction measure for very high, high or medium initial risk levels."
The check then closes the loop. The team determines the performance level achieved by the selected measures using Table 5, compares it with the task-risk performance level, and modifies the measures "until the risk-reduction performance levels are at least as high as the task-risk performance levels."
OSHA's 2005 letter on robotic laundry shuttles shows the same boundary from the enforcement side. It says the answers depend in some cases on facts about the particular machines and how workers interact with them. It also says that the methods in the questions it was asked (training and work rules; warning lights, alarms and emergency stops; chains or fencing that allow easy but conscious access; combinations of warnings, signs, awareness guards, training and emergency stops; and unlocked, non-interlocked gates) "generally would not provide adequate protection," while "in most situations" interlocked gates that put the shuttle into manual mode, or control-reliable interlocked gates that stop shuttle motion, would. As engineering reasoning, the failure mode is a high-risk maintenance task covered by a sign and a procedure alone (OSHA Technical Manual, Sec. IV Ch. 4, 2026, Appendix 2; RIA TR R15.306-2016, Tables 3–5; OSHA Standard Interpretation, July 7, 2005).
How does the performance level from the method connect to ISO 13849-1:2023?
OSHA's appendix uses the risk levels "to determine the required performance level (PLr) of each safety function," and for a detailed explanation of performance levels and structure categories it points to ISO 13849-1:2015. That edition has been replaced: iso.org lists ISO 13849-1:2015 as withdrawn and ISO 13849-1:2023 as the published edition.
ISO 13849-1:2023 specifies a methodology and provides related requirements, recommendations and guidance for the design and integration of safety-related parts of control systems (SRP/CS) that perform safety functions. It applies to SRP/CS for high demand and continuous modes of operation and does not apply to low demand mode of operation. Its abstract also says it "does not specify the safety functions or required performance levels (PLr) that are to be used in particular applications," which is the gap a cell's risk assessment fills.
As engineering reasoning, the PLr that the assessment assigns to each task's safety function is the input the controls designer works to, and a function bought at a lower rating does not meet it however it is wired. The article on what FANUC DCS can and can't replace works through that case for robot zone and speed checks (OSHA Technical Manual, Sec. IV Ch. 4, 2026, Appendix 2; ISO 13849-1:2023).
What controls and sensing measures can a robot cell risk assessment select?
OSHA's chapter lists the safeguarding devices a robot cell draws on: presence-sensing safeguarding devices, fixed barrier or perimeter guards, and interlocked barrier guards. Limiting the space of a robot application "can also be accomplished with" mechanical limiting devices and non-mechanical limiting devices, "which can include soft-axis and space-limiting safety function(s)." Awareness devices such as chain or rope barriers, flashing lights, signs, whistles and horns "are used in conjunction with other safeguarding devices," and their effectiveness "must be evaluated with the level of risk for each hazard."
Where presence-sensing devices and interlocking guards sit relative to a hazard is the subject of ISO 13855:2024, which specifies requirements for the positioning and dimensioning of safeguards with respect to the approach of the human body or its parts. It applies to safeguards used on machinery for the protection of persons 14 years and older, does not consider approaches such as running, jumping or falling, and is not applicable to protection against the risks arising from failure of mechanical parts of the machine or gravity falls. As engineering reasoning, that last exclusion matters in heavy handling: a part dropped from a gripper is a hazard the safeguard distance does not address, and the assessment has to answer it through the gripper's design and the restricted space.
The article on machine guarding that does not block maintenance access covers guard types for each kind of access. UTEC Industrial, a Rockwell Automation Recognized System Integrator, builds the Allen-Bradley ControlLogix and CompactLogix controls that read these devices and stop the cell (OSHA Technical Manual, Sec. IV Ch. 4, 2026; ISO 13855:2024).
How is the risk assessment validated, and when is it redone?
OSHA's chapter says risk assessments should periodically be reviewed and validated per ANSI/RIA R15.06-2012 once the required risk-reduction measures have been implemented, and that "It is not enough to simply trust the integrator or to perform a simple visual inspection alone." Its validation list includes:
- The documented risk assessments
- Electrical and mechanical drawings
- Manuals and training documentation
- Reviews of the safety-related parts of the control system, including checking safety function settings
- Contact event test results for power and force limited applications
- Sensor operation testing
Appendix 2 adds the operating rules: no work should be performed on any hazardous task until an assessment has been validated, issued and trained to; field observations are required while tasks are performed; when measures are found ineffective or not practiced, the work should be stopped immediately; and the modified assessment should be revalidated, and workers retrained, before work continues. The general process says the documentation should be retained and reviewed if any changes are made to the robot application, and OSHA's reviewer checklist asks whether new task-based assessments were prepared for new or modified operating or maintenance tasks before they were performed.
A3 lists management of change among Part 3's user requirements, and quotes the R15.06 subcommittee chair as saying that the content of TR R15.506-2014, on changes to existing robot cells, is now in R15.06-3. UTEC Industrial performs factory acceptance testing (FAT) and on-site commissioning on the systems it builds (OSHA Technical Manual, Sec. IV Ch. 4, 2026, §VII and Appendix 2; A3 Online Marketing Team 2026; Heater 2025, A3 Industry Insights; ANSI/A3 R15.06-3-2025).
Where does the risk assessment sit in the build chain of a heavy robot cell?
The assessment is written at the design link and checked at every link after it:
- Design. The intended use, the operating space and restricted space, and the task list are set here.
- Engineering. The required performance level of each safety function, and the gripper's behavior on loss of air, vacuum or power, follow from the assessment; as engineering reasoning, the gripper design is itself a risk reduction measure for the dropped-part hazard.
- Machining, fabrication, weld fatigue and stress relief. As engineering reasoning, fixtures, guards and grippers built to the drawing keep the restricted space and the contact surfaces the assessment assumed; the article on stress relief for machine frames and bases covers why welded frames are stress-relieved before final machining.
- Drives and controls. Safety functions are designed to their PLr.
- Tuning and monitoring. Safety function settings are checked at validation and after changes.
Maintenance tasks also cross into energy control. OSHA's 2005 letter says that where an employee is exposed to hazards while servicing or maintaining a machine, "the lockout/tagout standard (29 CFR §1910.147) applies, and all sources of hazardous energy must be isolated." That standard covers the servicing and maintenance of machines and equipment in which the unexpected energization or start up of the machines or equipment, or release of stored energy, could cause injury to employees. The lockout/tagout procedure article covers the procedure and hardware (OSHA Standard Interpretation, July 7, 2005; OSHA 29 CFR 1910.147-1989, paragraph a.1.i; OSHA Technical Manual, Sec. IV Ch. 4, 2026, Appendix 2).
What should a buyer require from the integrator's risk assessment?
The list below is engineering practice drawn from the sources above:
- Method and edition. State the method (for example, TR R15.306-2016) and the edition of the robot standard the assessment is written against, given that TR 306 is keyed to R15.06-2012.
- Every task. Include teaching, maintenance, cleaning, recovery, gripper changes and nearby work such as lamp replacement, and each worker group, including bystanders.
- Risk levels and PLr. Record the risk level and the required performance level of each safety function, per task and hazard.
- Hierarchy. Show that very high, high and medium initial risks use inherently safe design or safeguarding as the primary measure, as OSHA's appendix directs.
- Achieved level. Record the achieved performance level of each measure and show it is at least as high as the task-risk level.
- Sign-off and handover. Have the team sign the assessment, deliver its results to the employer before commissioning, and train the workers on it, as OSHA's chapter describes.
- Out-of-scope hazards. Identify hazards the robot standards do not cover, such as molten metal handling, and the sources used to address them.
UTEC Industrial integrates FANUC robotic cells, including vision, with a FANUC design and engineering partner (OSHA Technical Manual, Sec. IV Ch. 4, 2026; RIA TR R15.306-2016, A3 store page; ISO 10218-2:2025).
- Safety-Rated Zones and Speed: What FANUC DCS Can and Can't Replace — safety-rated zones as risk reduction measures
- When Does a Robot Beat a Custom Mechanism for Heavy Material Handling? — how heavy-part tasks change severity, exposure and avoidance
- Machine Guarding That Doesn't Block Maintenance Access — guarding that preserves maintenance access
- Lockout/Tagout for CNC Equipment: OSHA Requirements and Best Practices — energy isolation for the maintenance tasks on the list
- Machinery Risk Assessment Under ISO 12100 and ANSI B11.0-2023 Explained — ISO 12100 risk assessment for the whole machine
References
- RIA TR R15.306-2016: Task-Based Risk Assessment Methodology. Robotic Industries Association/A3, 2016.
- Association for Advancing Automation (A3). Robot Safety Standard Documents (undated web documentation, accessed October 2026).
- ANSI/A3 R15.06-2025: American National Standard for Industrial Robots and Robot Systems – Safety Requirements. A3/ANSI, 2025.
- ANSI/A3 R15.06-3-2025: American National Standard for Industrial Robots and Robot Systems – Safety Requirements – Part 3: Use of Industrial Robot Cells. A3/ANSI, 2025.
- ISO 10218-2:2025: Robotics — Safety requirements — Part 2: Industrial robot applications and robot cells. ISO, 2025.
- OSHA. Robotics (Safety and Health Topics). U.S. Department of Labor (undated web documentation, accessed September 2026).
- OSHA. Robotics: Standards (Safety and Health Topics). U.S. Department of Labor (undated web documentation, accessed September 2026).
- OSHA. OSHA Technical Manual (OTM), Section IV: Chapter 4 - Industrial Robot Systems and Industrial Robot System Safety. U.S. Department of Labor (undated web documentation, accessed September 2026).
- OSHA. Machine guarding and exposure to hazards from robotic laundry shuttles (Standard Interpretation, July 7, 2005). U.S. Department of Labor, 2005.
- OSHA 29 CFR 1910.147-1989: The Control of Hazardous Energy (Lockout/Tagout). Occupational Safety and Health Administration, 1989.
- Layne, L. A. (2023). "Robot-related fatalities at work in the United States, 1992–2017." American Journal of Industrial Medicine, 66(6), 454-461.
- NIOSH. Robotics in the Workplace: An Overview. National Institute for Occupational Safety and Health, CDC, February 9, 2024.
- A3 Online Marketing Team. 2026 Robot Safety Standards Update: What Manufacturers and Integrators Need to Know (Robotics Blog). Association for Advancing Automation, September 4, 2026.
- Heater, B. ANSI, A3 Publish Revised R15.06 Industrial Robot Safety Standard (Industry Insights). Association for Advancing Automation, September 10, 2025.
- ISO 13849-1:2023: Safety of machinery — Safety-related parts of control systems — Part 1: General principles for design. International Organization for Standardization, 2023.
- ISO 13855:2024: Safety of machinery — Positioning of safeguards with respect to the approach of the human body. ISO, 2024.
- FANUC B-83184EN/12: R-30iB/R-30iB Mate/R-30iB Plus/R-30iB Mate Plus/R-30iB Compact Plus/R-30iB Mini Plus Controller Dual Check Safety Function Operator's Manual. FANUC Corporation, 2021.
Ready to Discuss a Material Handling System?
UTEC Industrial designs, engineers, machines, fabricates, and installs custom material handling systems for heavy industry, from the stress-relieved structure and drives to the Allen-Bradley PLC controls, tuning, and monitoring that run them, at its Spokane Valley, WA facility. Send UTEC the application, loads, and duty cycle to start a system review.
Questions? Call (509) 922-1832 or email sales@utec.co