Risk Assessment

Employers are legally required to protect employees and others from harm. The Health and Safety Executive (HSE) sets out clear expectations for how businesses must identify hazards, assess risks, and put effective controls in place. This guidance explains the essential steps every employer must follow to comply with the law and manage risks in the workplace. 🔗 Source: HSE – Managing Risks and Risk Assessment at Work 

Under the Management of Health and Safety at Work Regulations 1999, employers must:

• Identify hazards that could cause injury or illness
• Assess how likely harm is and how serious it could be
• Take action to eliminate or control risks

Risk assessment is only one part of the wider duty to manage health and safety, but it is a legal requirement for all employers. 

HSE outlines a simple, structured process for managing workplace risks:

Step 1 — Identify Hazards

Look around the workplace and consider anything that may cause harm, including equipment, chemicals, unsafe practices, and the general condition of the premises. Consider non‑routine tasks such as maintenance or cleaning, and review accident records to spot less obvious hazards. Pay special attention to vulnerable workers such as young people, expectant mothers, migrant workers, and those with disabilities. 

Step 2 — Assess the Risks

Decide who might be harmed and how, what controls are already in place, and what further action is needed. Determine who will carry out the actions and by when. 

Step 3 — Control the Risks

Consider whether hazards can be removed entirely. If not, decide how to reduce the likelihood of harm. Possible controls include redesigning tasks, replacing materials or equipment, improving processes, or providing PPE. Employers must do what is “reasonably practicable” to protect people. 

Step 4 — Record Your Findings

If you employ five or more people, you must record:

• The hazards
• Who may be harmed and how
• What controls are in place

HSE provides templates and examples to help businesses document their assessments. 

Step 5 — Review the Controls

Controls must be reviewed regularly to ensure they remain effective. Reviews are required when:

• Controls may no longer work
• There are changes to staff, equipment, substances, or processes
• Workers report issues
• Accidents or near misses occur

Update your risk assessment whenever changes are made. 

HSE provides downloadable templates and real‑world examples to help businesses understand what a suitable and sufficient risk assessment looks like. Examples include:

• Offices
• Local shops
• Food preparation
• Motor vehicle repair
• Factory maintenance
• Warehousing

These examples must not be copied directly — employers must consider their own specific hazards. 

HSE highlights the most frequent causes of serious injury and ill health, including:

• Slips and trips
• Working at height
• Manual handling
• Harmful substances
• Noise and vibration
• Fire and electrical safety
• Stress and mental health
• Workplace transport

Links to detailed guidance for each risk category are available on the HSE website. 

Small, low‑risk businesses can usually follow the basic steps outlined above. Larger or higher‑risk organisations may require more detailed arrangements, including formal safety management systems and enhanced monitoring. HSE provides additional guidance for major hazard industries and those responsible for leading health and safety at an organisational level. 

• Management of Health and Safety at Work Regulations 1999 https://www.legislation.gov.uk/uksi/1999/3242/contents/made