Getting Risk Assessments Right
Risk assessments sit at the core of effective health and safety management. They are a legal requirement under UK legislation, but more importantly, they are a practical tool for preventing harm when used correctly.
In simple terms, a risk assessment involves identifying hazards, evaluating the risks they present, and putting appropriate controls in place. It should be based on a careful and thorough examination of the workplace and the processes being carried out. However, this simplicity is often lost in practice. Many assessments become overly complicated, generic, or disconnected from the work they are supposed to represent.
A suitable and sufficient risk assessment should reflect the reality of the task and working environment. It should support decision-making, guide safe working practices, and provide clarity for those carrying out the work. If it does not achieve these outcomes, it is unlikely to be effective regardless of how detailed it appears on paper.
The Five Steps to Risk Assessment
The Health and Safety Executive promotes a straightforward approach to managing risk, which can be summarised into five key steps.
Step 1: Identify the Hazards
This involves looking at what could reasonably cause harm. Hazards may arise from the task itself, the equipment being used, the environment, or the interaction with others. The key is to focus on what is actually present, rather than relying on generic lists. A walk-through of the work area, discussion with those carrying out the task, and consideration of previous incidents can all help ensure hazards are properly identified.
Step 2: Assess the Risks
This step involves understanding how harm could occur, who may be affected, and the level of risk involved. It brings together consideration of exposure, likelihood, and potential severity. This should include not only those carrying out the work, but also others who may be affected, such as other trades, visitors, or members of the public. The aim is to form a clear picture of the risk so that appropriate control measures can be determined.
Step 3: Control the Risks
Once the risks are understood, appropriate measures should be put in place to eliminate or reduce them so far as is reasonably practicable. This may involve changes to the way work is carried out, use of safer equipment, implementation of safe systems of work, or the provision of suitable personal protective equipment where required. Controls should be proportionate to the level of risk and practical to implement.
Step 4: Record Your Findings
Recording the assessment provides a clear reference point and demonstrates that the risks have been considered. It also helps ensure consistency in how work is carried out. However, documentation alone is not enough. The findings must be communicated effectively and reflected in actual working practices.
Step 5: Review the Controls
Risk assessments should remain dynamic. Changes to the task, environment, equipment, or personnel can all introduce new risks. Regular review ensures that the assessment continues to reflect reality and remains effective over time.
Understanding the Task in Context
A common weakness in risk assessments is a lack of genuine understanding of the task being assessed. Assessments are often completed remotely or based on assumptions, which can lead to significant gaps.
Understanding the task means considering how the work is actually carried out, including any variations in practice. This includes the sequence of activities, the tools and materials used, and the conditions under which the work takes place. It also involves recognising informal practices that may not be documented but are routinely followed.
Members of the workforce undertaking the task are often best placed to explain how it is carried out in reality, including any challenges, workarounds, or variations that may not be immediately obvious. Collaborating with the workforce helps ensure that the assessment reflects actual working practices rather than an assumed or idealised version of events.
Without this level of understanding, it is difficult to identify hazards accurately or propose meaningful control measures. The result is often an assessment that appears complete but fails to address the real risks.
Identifying Meaningful Hazards
Effective risk assessments focus on hazards that genuinely arise from the work being undertaken. While it may be tempting to include comprehensive lists of potential hazards, this can reduce clarity and dilute attention from the most significant risks.
Meaningful hazard identification requires consideration of the specific environment and circumstances. For example, a task carried out in a controlled workshop environment will present different risks compared to the same task carried out on a busy construction site or in a public area.
The aim is not to capture every conceivable hazard, but to identify those that are reasonably foreseeable and could result in harm if not properly controlled.
Proportionate Risk Evaluation
Risk evaluation should support decision-making rather than complicate it. While many organisations use numerical scoring systems, these can sometimes create a false sense of accuracy.
What matters is understanding whether the risk is low, medium, or high in practical terms, and what level of control is required as a result. A high-risk activity should prompt stronger and more robust controls, whereas lower risks may be adequately managed with simpler measures.
The emphasis should always be on proportionality. Overstating risk can lead to unnecessary controls, while understating it can result in insufficient protection.
Control Measures That Work in Practice
Control measures are the most important output of a risk assessment. They should be specific, practical, and capable of being implemented in the real working environment.
This often requires balancing ideal controls with what is realistically achievable. For example, while elimination of a hazard is always preferable, it may not be possible in many situations. In such cases, risks should be reduced through design, safe systems of work, and appropriate use of equipment.
Where personal protective equipment is required, it should be clearly specified and appropriate for the task. Simply stating that PPE should be worn provides little value unless it is supported by clear guidance on what is required and why.
Effective control measures are those that are understood, accepted, and consistently applied by those carrying out the work.
Communication and Workforce Involvement
Even the most well-written risk assessment will have limited value if it is not properly communicated. Those carrying out the work must understand the risks involved and the measures in place to control them.
This requires more than a signature on a document. It involves clear explanation, opportunity for questions, and, where necessary, demonstration of safe working methods.
Involving the workforce in the development of risk assessments improves both accuracy and engagement. It also helps ensure that control measures are practical and more likely to be followed in day-to-day work.
Common Errors in Risk Assessments
One of the most frequent issues is the use of generic, copy-and-paste content. While templates can provide a useful starting point, they must be adapted to reflect the specific task and environment. Failure to do so often results in irrelevant information and missed hazards.
Another common problem is the disconnect between documented controls and actual practice. Risk assessments may describe how work should be carried out, but if this does not align with reality, the controls are unlikely to be followed.
Overcomplication is also a recurring issue. Lengthy documents and complex scoring systems can obscure the key risks and reduce usability. In many cases, simpler and more focused assessments are more effective.
Vague control measures further reduce the value of an assessment. Statements that lack clarity or specificity do little to influence behaviour and can create uncertainty about what is required.
Finally, risk assessments are often treated as a one-off exercise. Without regular review, they can quickly become outdated and no longer reflect current working conditions.
How Practical Safety Ltd Can Help
Developing risk assessments that are both compliant and genuinely effective can be challenging, particularly where work activities vary or are carried out across different sites.
Practical Safety Ltd supports organisations in producing risk assessments that reflect real working conditions, rather than generic or template-driven documents. This includes working with businesses to understand how tasks are actually carried out, identifying relevant hazards, and developing control measures that are practical and proportionate.
Support can range from reviewing and improving existing assessments through to developing new documentation from the ground up. This may also include integrating findings into wider health and safety arrangements, such as safe systems of work, method statements, and training.
Where required, Practical Safety Ltd can also assist in communicating risk assessments to the workforce, helping ensure that key risks and control measures are clearly understood and applied in practice.
Conclusion
A risk assessment should be a practical tool that supports safe working, not a document produced purely for compliance.
By focusing on the fundamentals—understanding the task, identifying real hazards, implementing workable controls, and keeping the assessment under review—organisations can ensure that their risk assessments remain both suitable and sufficient.
Contact us today to discuss your requirements.
Disclaimer:
This blog post is provided for general information purposes only and is not intended to provide, or be relied upon as, legal or professional advice.
Employers remain responsible for carrying out suitable and sufficient risk assessments in accordance with UK legislation, including the Management of Health and Safety at Work Regulations 1999. Where necessary, competent health and safety advice should be sought to ensure assessments are appropriate to the specific work activities and environment.
While every effort has been made to ensure accuracy, Practical Safety Ltd accepts no liability for any errors, omissions, or where information may be incomplete or out of date.
