Risk Assessment FAQs

Answering commonly asked questions including, when should you review a risk assessment?, who is responsible for carrying out a risk assessment?, what is a dynamic risk assessment? and more.

What is a RAMS risk assessment and method statement?

A Risk Assessment and Method Statement (RAMS) are two documents that form part of a safe system of work.

RAMS are typically used for activities that carry a high degree of risk (e.g. working on a roof, or hot work). A RAMS may require tasks to be undertaken in a specific order and need a high level of understanding and monitoring to reduce the risk.

The risk assessment details the hazards and measures required, whereas the method statement outlines the process, the equipment and supervision.

These documents need to be understood by those completing the activities and often form part of a safety briefing before works are undertaken.

When should you review a risk assessment?

The frequency of risk assessment reviews depends on the nature of the hazards, the activity, the industry, and regulatory requirements.

Risk assessments should be reviewed whenever there are significant changes in a workplace that could mean the current risk assessment is no longer valid. This could be a change in process, new or modified work equipment or new competence requirements. Risk assessments should be reviewed after an internal incident, or as part of an industry safety notice.

The HSE recommends reviewing risk assessments annually as a general guide.

Who can legally carry out a risk assessment?

The Management of Health and Safety at Work Regulations 1999 states that a risk assessment must be carried out by a ‘competent person’.

Under the Regulations a person is ‘competent’ when they have ‘sufficient training and experience or knowledge and other qualities to enable him to properly assist in undertaking the measures…’

Simple, low risk activities should not need the expertise of an in-house competent person or consultant. Higher risk activities may require the risk assessment to be undertaken by a team bringing in operational experience alongside pragmatic risk assessing skills.

How long does a risk assessment take?

The length of time a risk assessment takes depends on the complexity. For example, a display screen equipment (DSE) risk assessment might be completed in half an hour, whereas a fire risk assessment may be completed over several days.

Can you carry out your own risk assessment?

Employers can carry out risk assessments themselves if they are competent to do so. Under the Management of Health and Safety at Work Regulations 1999 competency is defined as having sufficient training and experience or knowledge to undertake the task.

SMEs usually appoint a health and safety consultant to support their risk assessments to ensure they meet their legal responsibilities to protect employees and others affected by their activities.

Can anyone carry out a manual handling risk assessment?

By law, someone who carries out a manual handling risk assessment must be competent to do so. This means they must have the knowledge and experience to be able to identify and address risks effectively.

Someone who has practical experience of managing manual handling and has been trained on both manual handling and risk assessment  has the knowledge to carry out the  assessment.

If the manual handling activity is a high risk, then consulting an experienced safety professional is  advisable.

What risk assessments do I need for an office?

These are some hazards that might be included in a general office risk assessment, or specific risk assessments might be created depending on the work environment.

Are risk assessments a legal requirement?

Yes, all employers must undertake a risk assessment of the risks to the health and safety of employees whilst at work, as well as the risk to those who are not employees but may be affected.

Employers must review the assessment when there is reason to suspect it is no longer valid, or there has been a significant change.

When an employer employs five or more employees the significant findings of the risk assessment must be recorded.

How often should a hazardous substances risk assessment be reviewed?

A hazardous substances risk assessment should be reviewed:

  • Annually as good practice.
  • After incidents or near-misses.
  • When processes or substances change.
  • Following legal updates.
  • If controls fail or worker health concerns arise.

This ensures safety and compliance with the Control of Substances Hazardous to Health Regulations 2002.

How many steps to a hazardous substance risk assessment?

In line with the Control of Substances Hazardous to Health (COSHH) Regulations 2002, a hazardous substance risk assessment follows these steps:

  1. Identify the hazardous substances. Determine which substances are present and could cause harm.
  2. Assess the risks. Evaluate how exposure to the substances might occur and the potential effects on health.
  3. Control the risks. Implement measures to prevent or reduce exposure, such as ventilation, PPE, or substitution.
  4. Record the findings. Document the assessment, including hazards, risks, and control measures.
  5. Review and update. Regularly review the assessment to ensure it remains relevant and effective, especially after changes or incidents.

What is a dynamic risk assessment?

A dynamic risk assessment is a continuous, real-time process of assessing risks in rapidly changing or unpredictable environments. Unlike a formal, pre-planned risk assessment, a dynamic one is conducted on the spot, helping employees to adapt to emerging hazards or evolving situations.

What are the benefits of a dynamic risk assessment?

The benefits of a dynamic risk assessment include:

  • Real-time hazard identification. It enables employees to assess risks as they arise, ensuring emerging hazards are addressed immediately.
  • Enhanced situational awareness. Promotes awareness of the environment, improving decision-making in changing conditions.
  • Flexibility. Enables quick adaptation to unforeseen risks or hazards not covered by pre-planned assessments.
  • Improved safety. Reduces the likelihood of accidents or incidents by addressing risks proactively in dynamic situations.
  • Empowered employees. Encourages individuals to take responsibility for their safety and that of others in unpredictable scenarios.
  • Practicality in high-risk environments. Ideal for emergency services, construction, or lone working, where conditions can change rapidly.

Dynamic risk assessments complement formal assessments, providing an additional layer of safety in real-time operations.

What factors may lead to a dynamic risk assessment?

A dynamic risk assessment may be prompted by:

  • Unforeseen hazards. Encountering risks not identified in a formal risk assessment, such as spills or equipment failures.
  • Changing conditions. Environmental changes like weather, lighting, or terrain that alter the level of risk.
  • Emergencies. Situations requiring immediate action, such as fires, medical incidents, or security threats.
  • New tasks or procedures. Undertaking unplanned work activities or methods not previously assessed.
  • Interactions with others. Presence of external parties, such as contractors or the public, introducing new risks.
  • Equipment malfunction. Tools or machinery failing during use, necessitating immediate evaluation and response.
  • Time-critical decisions. Scenarios where action must be taken quickly to prevent harm, leaving no time for formal assessment.
  • Deviation from plans. Workers encountering unexpected scenarios that differ from initial risk assessments.

What could be a reason to review a risk assessment?

A risk assessment should be reviewed after incidents, process changes, new hazards, regulatory updates, ineffective controls, worker concerns, or as part of routine periodic reviews.

What benefits do we gain from carrying out risk assessments?

Conducting risk assessments improves workplace safety, ensures legal compliance, reduces costs from incidents, boosts employee morale and productivity, informs better decisions, and enhances organisational reputation.

What is a good risk assessment?

A good risk assessment is:

  1. Comprehensive. Identifies all significant hazards and assesses their risks thoroughly.
  2. Specific. Tailored to the workplace, tasks, and individuals involved, rather than being generic.
  3. Practical. Includes realistic and effective control measures to manage risks.
  4. Legally compliant. Meets the requirements of relevant regulations, such as the Management of Health and Safety at Work Regulations 1999.
  5. Easily communicated. Clear and accessible to all employees, ensuring they understand the hazards and controls.
  6. Dynamic. Regularly reviewed and updated to reflect changes in the workplace, processes, or regulations.
  7. Documented. Properly recorded to provide evidence of compliance and a basis for review.

A good risk assessment effectively protects people and supports a proactive safety culture.

What is the difference between a risk assessment and a JSA?

A risk assessment identifies and controls hazards across a workplace or process, while a job safety analysis (JSA) focuses on specific task steps, identifying and managing hazards at each stage. Both improve safety but differ in scope and detail.

How many steps do HSE suggest you follow for risk assessment?

The Health and Safety Executive (HSE) recommends following five steps for risk assessment:

  1. Identify hazards. Spot potential dangers in the workplace.
  2. Assess the risks. Determine who might be harmed and how.
  3. Control the risks. Decide on and implement precautions.
  4. Record your findings. Document hazards, controls, and actions.
  5. Review and update. Regularly reassess to keep the assessment relevant.

What does a complete risk assessment include?

A complete risk assessment includes:

  • Hazard identification. A list of potential hazards in the workplace or activity.
  • Risk evaluation. An analysis of the likelihood and severity of harm, identifying who might be affected and how.
  • Control measures. Details of existing controls and additional measures needed to minimise risks.
  • Action plan. Steps to implement new controls, with assigned responsibilities and timelines.
  • Documentation. A clear record of the hazards, risks, controls, and actions for legal compliance and reference.
  • Review process. A plan for regularly reviewing and updating the assessment as conditions change.

This ensures risks are effectively managed and compliance with the Management of Health and Safety at Work Regulations 1999.

What hazards should be addressed first?

To ensure safety and compliance, prioritise hazards with the greatest risk:

  • High severity (e.g., falls from height, toxic substances).
  • High likelihood (e.g., slips on wet floors, repetitive strain injuries).
  • Legal hazards (e.g., asbestos exposure, manual handling risks).