How to Complete a Workplace Risk Assessment

A clear guide to planning, recording and reviewing workplace risk assessments.

How to Complete a Workplace Risk Assessment

UK / General HSE Article

A risk assessment should match the real work

A risk assessment should help people understand the job before something goes wrong. This guide explains how to make risk assessments useful at work, not just completed for a file.

A risk assessment is not meant to be a long document that sits in a folder. It should help you look at a job and decide what needs to be controlled before someone is injured or made ill. When it is written well, it gives a supervisor something practical to check, gives workers a clearer understanding of the risk, and gives managers a record of the important controls. When it is written badly, it becomes paperwork that nobody trusts.

01

Start with the task, not the template

Do not start by copying a hazard list from another document. Start by looking at the job. What happens first? What equipment is used? Where do people stand? What can change when the job is rushed, when a delivery arrives late, when a machine jams or when a contractor is working nearby? The assessment should describe the work clearly enough that someone who has not seen the task can still understand what was assessed.

Important: If the first line of the assessment could apply to any workplace, it is probably too generic.
  • Walk the area or talk through the task with the people who do it.
  • Include normal work and foreseeable non-routine situations such as cleaning, breakdowns and changes.
  • Use the language workers and supervisors use on site, not vague office wording.
02

Explain how harm could happen

Listing a hazard is not enough. A forklift, wet floor or chemical is only the starting point. The assessment should explain the route to harm. A forklift may strike a pedestrian at a doorway. A wet floor may cause someone carrying parts to slip. A chemical may splash during decanting or damage skin through repeated contact. This is the part that helps people understand the risk.

Important: A useful risk description sounds like something that could actually happen in that workplace.
  • Write the hazard and the harm together.
  • Think about who is nearby, not only the person doing the task.
  • Include health risks such as dust, noise, fume, vibration and repeated handling.
03

Be honest about the existing controls

Many assessments say controls are in place without checking whether they really work. If the control is training, who has been trained and on what? If the control is guarding, is the guard fitted, checked and not bypassed? If the control is supervision, what does the supervisor actually look for? A control should be visible, understood or supported by evidence. If it cannot be checked, it may just be a phrase on the form.

Important: A control is only useful if it changes what happens during the job.
  • Check whether the control exists at the workplace, not only in the procedure.
  • Write controls clearly enough for a supervisor to inspect.
  • Avoid weak wording such as ‘take care’, ‘be aware’ or ‘use PPE’ without detail.
04

Use better controls before relying on PPE

PPE may be needed, but it should not be the first answer to every risk. Ask whether the hazard can be removed, whether the task can be changed, whether people can be separated from the danger, or whether equipment can be used to reduce exposure. For example, a lifting risk may be better controlled by a lift table or trolley than by telling people to lift carefully. A dust risk may need extraction or wet cutting before respiratory protection is considered.

Important: If the main control is ‘wear PPE’, ask what would happen if the PPE is missing, damaged or worn incorrectly.
  • Remove the hazard where reasonably practicable.
  • Use engineering controls, separation, guarding or mechanical aids before relying on behaviour.
  • Use PPE as a supporting control where it is still required.
05

Record actions so they actually get closed

A risk assessment often identifies improvements, but those improvements must not disappear after the document is saved. If a barrier, repair, training session or new procedure is needed, someone should own it and there should be a realistic completion date. The action should also be checked after completion to make sure it solved the problem.

Important: An open action is not a control until it has been completed and checked.
  • Give actions to a named person or clear role.
  • Use target dates that match the level of risk.
  • Record evidence when the action is closed.
06

Review the assessment when the job changes

A review is needed when the work, equipment, layout, people, substances or incident history changes. A yearly review can help, but it should not be the only trigger. If a near miss happens, if workers keep raising the same concern or if a control is not being followed, the assessment should be looked at again.

Important: A risk assessment should improve as the workplace changes.
  • Review after accidents, near misses and repeated observations.
  • Review after new equipment, new chemicals, layout changes or contractor changes.
  • Check whether the written assessment still matches real work.

Terms that matter in a risk assessment

These terms are useful because they help people write and review the assessment properly.

Hazard

Something with the potential to cause harm, such as a moving vehicle, chemical, machine, poor access route, work at height, dust or electricity.

Risk

The chance that harm will happen and how serious the harm could be. Risk depends on the task, people, controls and working conditions.

Control measure

Something put in place to prevent harm or reduce exposure, such as guarding, segregation, extraction, safe access, supervision or PPE.

Residual risk

The level of risk remaining after controls are applied. It should be acceptable for the work to proceed and supported by real controls.

Review trigger

A change or event that means the assessment should be checked again, such as an incident, new process, layout change or repeated unsafe observation.

Quick quality check

  • The task and location are clear
  • The people affected are properly listed
  • The hazards describe how harm could happen
  • Controls are specific and checkable
  • Further actions have owners and dates
  • The review triggers are clear

What makes risk assessments weak

  • Writing from a template without checking the work
  • Using vague controls such as ‘be careful’
  • Leaving contractors, visitors or maintenance workers out
  • Scoring the risk low without explaining the controls
  • Not closing actions or reviewing after change

Final check before you rely on it

Before approving a risk assessment, ask whether it would help a new supervisor control the job tomorrow morning. If the answer is no, it needs clearer hazards, better controls or a more honest description of the work.

Useful further reading