Managing workplace health and safety

Conducting risk assessments

How to identify hazards, evaluate risks, and implement controls using the 5-step risk assessment process.

UK-wide
Guide summary

You must assess risks in your workplace to keep employees and others safe. Identify hazards, decide how to reduce risks, put controls in place, and record your findings if you have 5 or more employees. Review your assessment yearly or when work changes.

  • Identify hazards in your workplace
  • Decide who might be harmed and how
  • Put controls in place to reduce risks
  • Record findings if you have 5+ employees
  • Review assessment yearly or when work changes
  • Consult workers about risks and controls
  • Young workers (under 18) need special assessment
  • Fines for not doing risk assessments
  • Use HSE templates to record your assessment
  • Choose the safest control method first (eliminate hazard)
On this page
UK-wide

Related guides in Compliance & Legal

Risk assessment is the foundation of workplace health and safety. It's a legal requirement under the Management of Health and Safety at Work Regulations 1999 for all employers to conduct suitable and sufficient assessments of risks to employees and others affected by their work.

Who must do risk assessments?

  • All employers: Regardless of size or sector
  • Self-employed: If your work poses risks to others or you work in prescribed activities
  • 5+ employees: Must record significant findings in writing

Common hazards by business type

Office environments
DSE workstations, slips/trips, manual handling, stress, electrical equipment, fire
Retail
Manual handling (stock), slips/trips, violence/aggression, lone working, fire, cash handling
Hospitality
Burns/scalds, slips (wet floors), manual handling, knife injuries, fatigue, violence
Construction
Working at height, machinery, vehicles, electricity, hazardous substances, noise, vibration
Manufacturing
Machinery, COSHH substances, manual handling, noise, vibration, fire/explosion, maintenance

The hierarchy of control

When deciding on controls, apply this hierarchy (in order of effectiveness):

  1. Elimination: Remove the hazard completely. Can you stop the activity or use a completely different approach?
  2. Substitution: Replace with something less hazardous. Can you use a safer substance, equipment, or process?
  3. Engineering controls: Physical measures to reduce exposure. Guards, enclosures, ventilation, safety devices.
  4. Administrative controls: Safe systems of work, training, supervision, signage, rotation of workers.
  5. Personal Protective Equipment (PPE): Last resort only. Gloves, goggles, hearing protection, etc.

PPE should only be used when higher-level controls aren't reasonably practicable. It protects only the wearer and depends on correct use.

Recording your assessment

If you have 5 or more employees, you must record your significant findings. Even if you have fewer, keeping records is good practice.

What to record

  • Hazards identified
  • Who might be harmed and how
  • What controls are already in place
  • What further action is needed
  • Who is responsible for each action
  • When actions will be completed

What not to over-complicate

Risk assessment doesn't need to be perfect. It should be proportionate to the risks. A simple office doesn't need the same assessment as a chemical plant.

  1. 1

    Walk around your workplace

    Look for hazards - things that could cause harm. Check equipment, substances, work activities, and environment.

  2. 2

    Identify who might be harmed

    Consider all workers including part-time, contractors, visitors. Note anyone with particular vulnerabilities.

  3. 3

    Evaluate risks and decide controls

    For each hazard, assess likelihood and severity. Apply hierarchy of control - eliminate first, PPE last.

  4. 4

    Record your findings

    Required if 5+ employees. Document hazards, controls, and action needed. Use HSE templates.

  5. 5

    Implement control measures

    Put controls in place. Inform and train workers. Ensure everyone understands their responsibilities.

  6. 6

    Review regularly

    After incidents, when work changes, or at least annually. Update assessment as needed.