Guide
Conducting risk assessments
How to identify hazards, evaluate risks, and implement controls using the 5-step risk assessment process.
Risk assessment is the foundation of workplace health and safety. It's a legal requirement under the Management of Health and Safety at Work Regulations 1999 for all employers to conduct suitable and sufficient assessments of risks to employees and others affected by their work.
Who must do risk assessments?
- All employers: Regardless of size or sector
- Self-employed: If your work poses risks to others or you work in prescribed activities
- 5+ employees: Must record significant findings in writing
Common hazards by business type
- Office environments
- DSE workstations, slips/trips, manual handling, stress, electrical equipment, fire
- Retail
- Manual handling (stock), slips/trips, violence/aggression, lone working, fire, cash handling
- Hospitality
- Burns/scalds, slips (wet floors), manual handling, knife injuries, fatigue, violence
- Construction
- Working at height, machinery, vehicles, electricity, hazardous substances, noise, vibration
- Manufacturing
- Machinery, COSHH substances, manual handling, noise, vibration, fire/explosion, maintenance
The hierarchy of control
When deciding on controls, apply this hierarchy (in order of effectiveness):
- Elimination: Remove the hazard completely. Can you stop the activity or use a completely different approach?
- Substitution: Replace with something less hazardous. Can you use a safer substance, equipment, or process?
- Engineering controls: Physical measures to reduce exposure. Guards, enclosures, ventilation, safety devices.
- Administrative controls: Safe systems of work, training, supervision, signage, rotation of workers.
- Personal Protective Equipment (PPE): Last resort only. Gloves, goggles, hearing protection, etc.
PPE should only be used when higher-level controls aren't reasonably practicable. It protects only the wearer and depends on correct use.
Recording your assessment
If you have 5 or more employees, you must record your significant findings. Even if you have fewer, keeping records is good practice.
What to record
- Hazards identified
- Who might be harmed and how
- What controls are already in place
- What further action is needed
- Who is responsible for each action
- When actions will be completed
What not to over-complicate
Risk assessment doesn't need to be perfect. It should be proportionate to the risks. A simple office doesn't need the same assessment as a chemical plant.
-
Walk around your workplace
Look for hazards - things that could cause harm. Check equipment, substances, work activities, and environment.
-
Identify who might be harmed
Consider all workers including part-time, contractors, visitors. Note anyone with particular vulnerabilities.
-
Evaluate risks and decide controls
For each hazard, assess likelihood and severity. Apply hierarchy of control - eliminate first, PPE last.
-
Record your findings
Required if 5+ employees. Document hazards, controls, and action needed. Use HSE templates.
-
Implement control measures
Put controls in place. Inform and train workers. Ensure everyone understands their responsibilities.
-
Review regularly
After incidents, when work changes, or at least annually. Update assessment as needed.