How to Write a Risk Assessment That Actually Holds Up
Short answer: walk the actual workplace, write down what could genuinely hurt someone, decide what you're going to do about it, and make sure the actions actually happen. That's it in one sentence. The detail is in doing each of those properly rather than filling in a generic template and filing it away.
STEP 1: FIND THE HAZARDS PROPERLY
Don't do this from a desk. Walk the workplace systematically and talk to the people who actually work there, because the person doing the job every day will spot things a manager walking through once won't. Look at routine operations, but also maintenance, cleaning, and anything that only happens occasionally, those are often where the real risks hide. Past incidents and near misses are worth reviewing too, they tell you what's already gone wrong once.
STEP 2: WORK OUT WHO'S ACTUALLY AT RISK
Not everyone faces the same exposure. Office staff, warehouse workers, maintenance people, contractors on site, visitors, young workers, pregnant employees, anyone with a disability, lone workers, they all need separate thought rather than one generic "staff" entry. Some people genuinely face higher risks than others doing what looks like the same job.
STEP 3: SCORE IT, THEN ACT ON THE HIERARCHY OF CONTROL
Risk is likelihood multiplied by severity, how likely is it to happen, and how bad would it be if it did. Once you've scored it, work down this list in order rather than jumping straight to the easiest option:
Elimination, remove the hazard entirely if you can. Substitution, replace it with something safer. Engineering controls, isolate people from the danger physically. Administrative controls, change how the work is done. PPE, personal protective equipment, comes last, not first, it's the weakest control because it depends on someone wearing it correctly every single time.
STEP 4: WRITE IT DOWN PROPERLY
If you've got five or more employees, you're legally required to record the significant findings. A proper record includes the hazard, who's affected, what controls already exist, the risk rating, what else needs doing, who's responsible for doing it, and by when. Vague entries like "be careful" or "staff to take care" aren't control measures, they're placeholders that won't protect anyone or hold up under scrutiny.
STEP 5: ACTUALLY REVIEW IT
A risk assessment isn't a one off document. Review it annually as a minimum, and immediately after any equipment change, incident, workplace modification, regulatory update, or change in staffing. A risk assessment gathering dust in a drawer protects no one, however well it was written on the day.
WHERE MOST RISK ASSESSMENTS GO WRONG
Generic templates applied without adapting them to your actual workplace. Writing it without asking the people who do the job. Missing subtler hazards like stress or lone working. Vague control measures with no owner and no date. Controls that get written down but never actually implemented. And, probably the most common one, nobody ever reviewing it again once it's filed.
GETTING ONE WRITTEN PROPERLY
If you'd rather have this done properly the first time, specific to your business rather than adapted from a generic template, that's what I do. You can see what's included here: https://www.fiverr.com/tonycarlyon/write-a-professional-health-and-safety-policy-for-your-uk-small-business
Comments
Post a Comment
Got a question about your own situation? Ask below and I will get back to you. Comments are checked before they go live so there may be a short delay.