How to Write a Risk Assessment That Actually Holds Up

 Short answer: walk the actual workplace, write down what could genuinely hurt someone, decide what you're going to do about it, and make sure the actions actually happen. That's it in one sentence. The detail is in doing each of those properly rather than filling in a generic template and filing it away.


STEP 1: FIND THE HAZARDS PROPERLY


Don't do this from a desk. Walk the workplace systematically and talk to the people who actually work there, because the person doing the job every day will spot things a manager walking through once won't. Look at routine operations, but also maintenance, cleaning, and anything that only happens occasionally, those are often where the real risks hide. Past incidents and near misses are worth reviewing too, they tell you what's already gone wrong once.


STEP 2: WORK OUT WHO'S ACTUALLY AT RISK


Not everyone faces the same exposure. Office staff, warehouse workers, maintenance people, contractors on site, visitors, young workers, pregnant employees, anyone with a disability, lone workers, they all need separate thought rather than one generic "staff" entry. Some people genuinely face higher risks than others doing what looks like the same job.


STEP 3: SCORE IT, THEN ACT ON THE HIERARCHY OF CONTROL


Risk is likelihood multiplied by severity, how likely is it to happen, and how bad would it be if it did. Once you've scored it, work down this list in order rather than jumping straight to the easiest option:


Elimination, remove the hazard entirely if you can. Substitution, replace it with something safer. Engineering controls, isolate people from the danger physically. Administrative controls, change how the work is done. PPE, personal protective equipment, comes last, not first, it's the weakest control because it depends on someone wearing it correctly every single time.


STEP 4: WRITE IT DOWN PROPERLY


If you've got five or more employees, you're legally required to record the significant findings. A proper record includes the hazard, who's affected, what controls already exist, the risk rating, what else needs doing, who's responsible for doing it, and by when. Vague entries like "be careful" or "staff to take care" aren't control measures, they're placeholders that won't protect anyone or hold up under scrutiny.


STEP 5: ACTUALLY REVIEW IT


A risk assessment isn't a one off document. Review it annually as a minimum, and immediately after any equipment change, incident, workplace modification, regulatory update, or change in staffing. A risk assessment gathering dust in a drawer protects no one, however well it was written on the day.


WHERE MOST RISK ASSESSMENTS GO WRONG


Generic templates applied without adapting them to your actual workplace. Writing it without asking the people who do the job. Missing subtler hazards like stress or lone working. Vague control measures with no owner and no date. Controls that get written down but never actually implemented. And, probably the most common one, nobody ever reviewing it again once it's filed.


GETTING ONE WRITTEN PROPERLY


If you'd rather have this done properly the first time, specific to your business rather than adapted from a generic template, that's what I do. You can see what's included here: https://www.fiverr.com/tonycarlyon/write-a-professional-health-and-safety-policy-for-your-uk-small-business

Comments

Popular posts from this blog

HMO Fire Safety Requirements, Room by Room

RIDDOR Explained: Which Accidents You Must Report

RAMS Explained: What a Risk Assessment and Method Statement Actually Is