Risk Assessment Guidelines

Posted: 2 Apr, 2021.

A risk assessment is the process of identifying hazards that currently exist or may appear in the workplace. It defines which hazards are likely to cause harm to employees and visitors and analyses the measures in place to control the risks.

Although sometimes used interchangeably, the terms hazard and risk have slightly different meanings. A hazard is something that can cause harm, e.g. electricity, chemicals or working at height. A risk is the likelihood of a person being harmed by the hazard – is there a low, medium of high chance of injury or adverse health effects?

Get risk assessment help

Employers are required by law to protect their employees, and others, from harm. Under the Management of Health and Safety at Work Regulations 1999, general risk assessments must be completed by all employers; additionally, those with five or more employees must record significant findings.

Read our health and safety legislation guide for more detailed information about employer’s legal requirements. 


Five step guide for risk assessment

Conducting a risk assessment is a step-by-step process that should be undertaken by management with the involvement of everyone at the workplace: the employers, management and workers and/or their representatives. Each of these groups will provide valuable input to the different stages of the process.

A risk assessment involves the following steps:

  1. Identify hazards
  2. Identify who is at risk
  3. Assess the risks
  4. Consider if risks can be eliminated
  5. Decide on further measures

Identify hazards

One of the most important aspects of a risk assessment is accurately identifying the potential hazards in the workplace. A good place to start is simply walking around the workplace thinking about things with the potential to cause harm. Observe the activities, processes and substances used that could inflict injuries or negatively impact someone’s health:

  • What tasks are people doing?
  • How is plant and equipment being used?
  • What chemicals and substances are being used?
  • What unsafe work practices exist?
  • How is the general state of the premises?

Speaking to workers is a useful exercise to identify hazards because they might be aware of unsafe practices that haven’t been reported. Think about hazards to health such as manual handling, working at height and causes of work-related stress.

To identify less obvious hazards, look over the accident book and other records that track near misses and incidents of ill health. Also take non-routine operations such as maintenance and cleaning into consideration.

Identify who is at risk

For each hazard, the risk assessment needs to be clear about who might be harmed thinking not just about employees, but also contractors, visitors and members of the public where applicable.

Take into account people interacting with the hazard either directly or indirectly. For example, a worker painting a surface is directly exposed to solvents at close proximity, while other workers in the vicinity are inadvertently and indirectly exposed.

Particular attention should be paid to groups of workers who might be at increased risk, such as:

  • staff with disabilities
  • young and old workers
  • pregnant women and new mothers
  • untrained or inexperienced staff (e.g. new recruits, seasonal and temporary workers)
  • lone workers
  • migrant workers

Assess the risks

Having identified the hazards and the people at risk, the next step is to decide how likely it is that harm will occur. In other words, determine the level of risk and evaluate the control measures currently in place.

The easiest way to do this is by having a risk matrix: a diagram used to define the level of risk by considering the category of probability or likelihood of an incident occurring against the category of consequence severity. Each category will be given a score, typically between 1 and 5. By multiplying the scores for likelihood and consequences together, a total risk score will be produced for each activity.

In the above example, there are four risk levels: low (green), medium-low (yellow), medium-high (orange) and high (red).

If the risk level is either low or medium-low, additional safety precautions that could reduce the risk further could be considered if they can be easily implemented and at minimal cost.

If the risk level is medium-high, additional safety precautions that could reduce the risk should be considered, but the effort and cost of their implementation may be taken into account.

If the risk level is high, additional safety precautions that will reduce the risk must be implemented.

Consider if risks can be eliminated

Look at what is currently being done and the risk controls already in place. The first option for reducing risk should always be to try and remove the hazard. For example, windows on tall buildings might be designed so that they can be cleaned from inside, rather than relying on potentially difficult external access.

If it’s not possible for the hazard to be eliminated, think about how the risks can be controlled so that harm is unlikely.

Decide on further measures

Employers are not expected to eliminate all risks, but must do everything that is ‘reasonably practicable’ to protect people from harm. This involves balancing the level of risk against the measures needed to control the hazard in terms of money, time or trouble. If further controls are necessary, consider:

  • redesigning the job
  • preventing access to the hazard
  • replacing the materials, machinery or process
  • organising work to reduce exposure to the materials, machinery or process
  • providing personal protective equipment (PPE) and make sure workers wear it
  • running additional and refresher training sessions

Improving health and safety doesn’t need to cost a fortune. For example, almost a quarter of all deaths involving workplace transport involve drivers reversing; by using a one-way system and planning routes, the need for drivers to reverse is minimised, simultaneously maximising visibility.

Record risk assessment findings

Make a record of significant findings (as previously mentioned, this is a legal requirement if you have five or more employees) – the hazards, how people might be harmed by them and the control measures in place to reduce the risks.

The HSE provide a risk assessment template which you can download as well as example risk assessments to demonstrate how certain businesses would manage risks. They can be used as a guide to think about hazards and the steps needed to control the risks.

A risk assessment is required to be ‘suitable and sufficient’, showing that:

  • a proper check was made
  • all obvious significant hazards have been dealt with, taking into account the number of people who could be involved
  • the precautions are reasonable, and the remaining risk is low
  • employees or their representatives were involved in the process

If the risk assessment identifies a number of hazards, they should be ordered in terms of importance with the most serious risks being addressed first. Design an action plan based on this information and communicate to all employees.

Review risk assessment

As a minimum, risk assessments should be reviewed annually to evaluate the control measures in place to ensure they are working. In this time, new hazards such as new machinery, substances or procedures may have been introduced.

A review may need to take place sooner in the event of an incident, near miss or a problem spotted by an employee. Similarly, the original assessment may no longer be applicable if the data or information on which it is based are no longer valid.

It’s important to keep risk assessments up to date, particularly where the nature of work changes fairly frequently or the workplace changes and develops (e.g. construction site). Employers are advised to set up regular reminders to review risk assessments.

Lone working risk assessment

During the step to identify who is at risk from hazards, lone workers may have been identified as people at increased risk. Defined by the HSE as employees “who work by themselves without close or direct supervision”, lone workers don’t have the benefit of a colleague to spot potential hazards or assist in the event of an incident.

Although it’s not necessary to conduct a separate risk assessment for lone workers, they should be considered in an employer’s general risk assessment.

Risks to consider when lone working

At Peoplesafe, we use the PET risk methodology which examines the people (where work involves proximity to individuals who pose a potential risk), environment (the workplace itself poses a risk to personal safety, for instance a remote or rural location) and task (the nature of the task being undertaken presents a risk, such as operating machinery).

Risks that particularly affect lone workers include:

  • violence
  • stress and mental health or wellbeing
  • working with valuable equipment or money
  • mobile phone coverage
  • emergency services response time
  • the level of experience or expertise of the worker
  • sudden illness
  • driving related incidents

How to minimise risk to lone workers

If lone working is needed to continue, even after identifying hazards, employers must state how each hazard is intended to be managed in the risk assessment. One measure to control risk is to provide training that will help workers to recognise situations where they feel at risk – this is commonly referred to as a dynamic risk assessment. Download our infographic.

Additional training on how to diffuse aggression and conflict resolution techniques may also be useful for workers at higher risk of violence such as public-facing staff.

HSE guidance on lone working was recently updated to advise that employers must monitor their lone workers and keep in touch with them. Implementing a lone worker service is an option that leverages technology.

Providing lone workers with a dedicated lone working device or app allows them to raise an alarm in threatening and dangerous situations. The GPS-enabled devices are able to provide an accurate location of the lone worker which can be relayed to relevant people within the business or the emergency services, if necessary. Having this remote back-up support also provides extra psychological assurance that assistance is available despite working in isolation, helping to improve the mental health and wellbeing of lone workers.

Learn more about the impacts of lone working on mental health

All BS 8484:2016 accredited solutions will have the ability to create timers and leave voice memos to provide additional information of the lone worker’s movements and whereabouts. Employers can establish lone working processes and procedures in their lone working policy that require lone workers to communicate regularly throughout the day.

Additional features such as fall detection can help to control the risks of sudden illness and being struck by falling or moving objects. Incidents like these for lone workers could become increasingly serious when there is no one around to send for help. Having a device with fall detection will automatically raise an alarm if it detects a change in orientation followed by a period of non-movement.

For more information on the market-leading lone worker service provided by Peoplesafe, speak to one of our expert consultants today who will also be able to offer further guidance on best practice lone working risk assessments.


© 2022 Skyguard Ltd T/A Peoplesafe. Company Registration Number: 04107459. All rights reserved. Peoplesafe is part of the Send for Help Group.