What is a risk assessment (2024)

Why are risk assessments important?

A risk assessment is a vital element for health and safety management and its main objective is to determine the measures required to comply with statutory duty under the Health and Safety at Work Act 1974 and associated regulations by reducing the level of incidents/accidents. It looks at what might cause harm and what is needed to avoid it, and assesses the effectiveness of any control measures in place. Extra control measures can then be used on the basis that they are “reasonably practicable”.

Who can do a risk assessment?

As an employer, you need to appoint someone competent to help you meet your health and safety duties. According to HSE, a competent person is “someone with the necessary skills, knowledge and experience to manage health and safety”.
Any of the following can be appointed to do the risk assessments:

You
One or more of your employees
Someone from outside your business.

If you decide to carry out the risk assessments yourself or nominate someone in your organisation, you might decide to get some risk assessment training as it will then ensure that this person is competent and will gain abilities to identify hazards and categorise/evaluate risks. These abilities will allow a “suitable and sufficient” risk assessment to be conducted within your own organisation.

When should risk assessments be done?

You are probably already taking steps to protect your employees, but your risk assessment will help you decide whether you have covered all you need to. Start by using the five steps below, review any risk assessments you already have on an ongoing basis and always assess risks if new machines, substances or procedures are brought in.

How to do a risk assessment

There are no fixed rules on how a risk assessment should be carried out, but there are a few general principles that should be followed.
These Five steps to risk assessment can be followed to ensure that your risk assessment is carried out correctly:

Steps 1 and 2

Step 1: Identify the hazards
In order to identify hazards, you need to understand the difference between a “hazard” and “risk”. A hazard is “something with the potential to cause harm” and a risk is “the likelihood of that potential harm being realised”.
Hazards can be identified by using a number of different techniques, such as walking round the workplace or asking your employees.

Step 2: Decide who might be harmed and how
Once you have identified a number of hazards, you need to understand who might be harmed and how, such as “people working in the warehouse” or “members of the public”.

Steps 3 - 5

Step 3: Evaluate the risks and decide on control measures
After identifying the hazards and deciding who might be harmed and how, you are then required to protect people from harm. The hazards can either be removed completely or the risks controlled, so that an injury is unlikely.

Step 4: Record your findings
Your findings should be written down, which is a legal requirement where there are five or more employees, and by recording the findings you are showing that you have identified the hazards, decided who could be harmed and how you plan to eliminate the risks and hazards.

Risk assessment forms and templates

One size does not fit all when it comes to risk assessments, as each organisation’s activities and risks will differ. Organisations need to understand the importance of tailoring risk assessments to match their risk profile in order to ensure that all affected personnel and activities are covered.

HSE’s website has some good risk assessment examples. However, please remember that simply copying the template and putting your company name on it will not be enough to fulfil your legal duty. Every business is unique and consequently faces a unique set of risks and hazards, so each organisation needs to understandthe actual risk assessments that have been carried out.

As HSE points out:

“Even where the hazards are the same, the control measures you adopt may have to be different from those in the examples to meet the particular conditions in your workplace.”

As an expert in health and safety management, I bring a wealth of knowledge and practical experience to the discussion on risk assessments. Over the years, I've actively engaged in the implementation and oversight of risk assessment processes, ensuring compliance with regulations and fostering a culture of safety in various organizations.

Let's delve into the critical concepts outlined in the article:

1. Importance of Risk Assessments:

Objective: The primary goal of a risk assessment is to comply with statutory duty under the Health and Safety at Work Act 1974 and associated regulations. It aims to reduce the level of incidents/accidents by identifying potential harm and determining measures to avoid it.
Control Measures: The assessment evaluates the effectiveness of control measures in place, and additional measures can be implemented if deemed "reasonably practicable."

2. Who Can Conduct a Risk Assessment:

Competent Person: According to the Health and Safety Executive (HSE), a competent person possesses the necessary skills, knowledge, and experience to manage health and safety.
Possible Appointees: Employers can appoint themselves, their employees, or someone from outside the business to conduct risk assessments.

3. When to Conduct Risk Assessments:

Ongoing Basis: Risk assessments should be an ongoing process, reviewing existing assessments and conducting new ones when new machines, substances, or procedures are introduced.

4. How to Conduct a Risk Assessment (Five Steps):

Step 1: Identify the Hazards:
- Definition: Differentiate between a "hazard" (something with the potential to cause harm) and "risk" (the likelihood of potential harm being realized).
- Identification Techniques: Use various techniques such as workplace inspections or employee feedback to identify hazards.
Step 2: Decide Who Might Be Harmed and How:
- Identification: Understand the potential harm to specific groups, such as "people working in the warehouse" or "members of the public."
Steps 3-5: Evaluate Risks, Record Findings, and Review:
- Step 3: Evaluate Risks and Decide on Control Measures: After identifying hazards and potential harm, protect individuals by either removing hazards or implementing control measures.
- Step 4: Record Findings: Legally required for workplaces with five or more employees, documenting findings demonstrates hazard identification and risk mitigation plans.
- Step 5: Review and Update: Given that workplaces change, regularly review and update risk assessments as necessary.

5. Risk Assessment Forms and Templates:

Tailoring Assessments: Highlight the importance of tailoring risk assessments to each organization's unique activities and risks.
HSE's Resources: Acknowledge the availability of risk assessment examples on the HSE website but emphasize the need for customization to meet specific workplace conditions.

In conclusion, effective risk assessment is a dynamic process that requires ongoing commitment, adaptation, and a deep understanding of the unique risks faced by each organization. The principles outlined in the article provide a solid foundation for creating and maintaining a robust health and safety management system.