As part of managing the health and safety of your business, you must control the risks in your workplace. To do this you need to think about what might cause harm to people and decide whether you are taking reasonable steps to prevent that harm.
This process is known as risk assessment and it is something you are required by law to carry out. If you have fewer than five employees you don’t have to write anything down.
A risk assessment is not about creating huge amounts of paperwork but rather about identifying sensible measures to control the risks in your workplace.
You are probably already taking steps to protect your employees, but your risk assessment will help you decide whether you have covered all you need to.
One of the most important aspects of your risk assessment is accurately identifying the potential hazards in your workplace.
A good starting point is to walk around your workplace and think about any hazards (things that may cause harm). In other words, what is it about the activities, processes or substances used that could injure your employees or harm their health?
When you work in a place every day it is easy to overlook some hazards, so here are some tips to help you identify the ones that matter:
There are some hazards with a recognised risk of harm, for example working at height, working with chemicals, machinery, and asbestos. Depending on the type of work you do, there may be other hazards that are relevant to your business.
Then think how employees (or others who may be present such as contractors or visitors) might be harmed. Ask your employees what they think the hazards are, as they may notice things that are not obvious to you and may have some good ideas on how to control the risks.
For each hazard you need to be clear about who might be harmed – it will help you identify the best way of controlling the risk. That doesn't mean listing everyone by name, but rather identifying groups of people (eg 'people working in the storeroom' or 'passers-by'). Remember:
Having identified the hazards, you then have to decide how likely it is that harm will occur, ie the level of risk and what to do about it. Risk is a part of everyday life and you are not expected to eliminate all risks. What you must do is make sure you know about the main risks and the things you need to do to manage them responsibly. Generally, you need to do everything reasonably practicable This means balancing the level of risk against the measures needed to control the real risk in terms of money, time or trouble. However, you do not need to take action if it would be grossly disproportionate to the level of risk. to protect people from harm.
Your risk assessment should only include what you could reasonably be expected to know – you are not expected to anticipate unforeseeable risks.
Look at what you're already doing and the control measures you already have in place. Ask yourself:
Some practical steps you could take include:
Improving health and safety need not cost a lot. For instance, placing a mirror on a blind corner to help prevent vehicle accidents is a low-cost precaution considering the risks. Failure to take simple precautions can cost you a lot more if an accident does happen.
Involve your workers, so you can be sure that what you propose to do will work in practice and won't introduce any new hazards.
If you control a number of similar workplaces containing similar activities, you can produce a 'model' risk assessment reflecting the common hazards and risks associated with these activities.
You may also come across 'model' assessments developed by trade associations, employers' bodies or other organisations concerned with a particular activity. You may decide to apply these 'model' assessments at each workplace, but you can only do so if you:
Make a record of your significant findings – the hazards, how people might be harmed by them and what you have in place to control the risks. Any record produced should be simple and focused on controls.
If you have fewer than five employees you don't have to write anything down. But it is useful to do this so you can review it at a later date, for example if something changes. If you have five or more employees you are required by law to write it down.
Any paperwork you produce should help you to communicate and manage the risks in your business. For most people this does not need to be a big exercise – just note the main points down about the significant risks and what you concluded.
An easy way to record your findings is to use our risk assessment templates available as Microsoft Word or Open Document Format. When writing down your results keep it simple, for example 'fume from welding – local exhaust ventilation used and regularly checked'.
A risk assessment must be 'suitable and sufficient', ie it should show that:
Where the nature of your work changes fairly frequently or the workplace changes and develops (eg a construction site), or where your workers move from site to site, your risk assessment may have to concentrate more on a broad range of risks that can be anticipated.
Take a look at our selection of selection of example risk assessments. They show you what a completed risk assessment might look like for your type of workplace. You can use these as a guide when doing your own.
We have also developed online risk assessment tools, to help employers complete and print off their own records.
If your risk assessment identifies a number of hazards, you need to put them in order of importance and address the most serious risks first.
Identify long-term solutions for the risks with the biggest consequences, as well as those risks most likely to cause accidents or ill health. You should also establish whether there are improvements that can be implemented quickly, even temporarily, until more reliable controls can be put in place.
Remember, the greater the hazard the more robust and reliable the measures to control the risk of an injury occurring need to be.
Few workplaces stay the same. Sooner or later, you will bring in new equipment, substances and procedures that could lead to new hazards. So it makes sense to review what you are doing on an ongoing basis, look at your risk assessment again and ask yourself:
Make sure your risk assessment stays up to date.
HSE's risk management pages