Risk assessment is the engine of workplace safety, and a legal requirement for every UK employer. Done well it quietly prevents accidents; done badly it's the first thing the HSE finds after one. This guide walks through the five steps, the hierarchy of controls and what the law requires.
Why risk assessment matters
Every workplace has hazards — the question is whether anyone has thought them through. A risk assessment is the structured process of identifying what could cause harm and deciding what to do about it.
It's not paperwork for its own sake — it's the difference between a near miss and a serious injury.
The five steps in practice
The HSE's classic process breaks into clear steps. Tap each to see what it involves.
Identify the hazards
Walk the job and the workplace. What could realistically cause harm — machinery, chemicals, height, manual handling, slips?
The hierarchy of controls
Once you've found a risk, control it in order — strongest measure first, PPE last.
Eliminate
Remove the hazard entirely — design it out, or stop doing the risky task altogether.
Reduce & engineer
Substitute safer materials, guard machinery, add ventilation or change the method of work.
PPE
Protective equipment only protects the wearer and only when worn — never the first line of defence.
Don't jump straight to PPE. It's the last line of defence — always try to eliminate or engineer out the hazard first.
Carrying it out, step by step
Four moves take you from blank page to a working assessment:
Identify the hazards
Look at the real workplace and the real task. Ask the people who do the job.
Decide who might be harmed, and how
List the groups at risk and the way each could be hurt.
Evaluate the risk and act
Rate likelihood and severity, then apply controls top-down from the hierarchy.
Record, share and review
Write down significant findings, brief the team, and review after changes or incidents.
What the law requires
Under the Management of Health and Safety at Work Regulations 1999, every UK employer must carry out a suitable and sufficient risk assessment and record the significant findings. In practice that means being able to:
- Identify hazards and assess workplace risks
- Apply the hierarchy of controls
- Record significant findings and a safety statement
- Review assessments regularly and after changes