Risk Assessment in 5 Steps: A Practical Guide for Any Workplace

A risk assessment is not paperwork for its own sake. It is a careful look at what could cause harm in your workplace so you can decide whether you are doing enough to prevent it. Follow these five steps.

Step 1: Identify the hazards

A hazard is anything with the potential to cause harm. Walk around the workplace, look at the tasks people do, talk to workers, and check incident records and manufacturer instructions. Think about physical, chemical, biological, ergonomic and psychosocial hazards.

Step 2: Decide who might be harmed and how

Consider employees, contractors, visitors, cleaners and members of the public. Pay special attention to people with particular needs, such as new workers, young workers, pregnant workers and people working alone.

Step 3: Evaluate the risks and decide on controls

Risk combines how likely harm is with how severe it could be. A simple matrix scoring likelihood and severity helps prioritise action. Then choose controls in order of effectiveness:

1. Eliminate the hazard.
2. Substitute with something less hazardous.
3. Use engineering controls such as guards and ventilation.
4. Apply administrative controls: procedures, training, signs.
5. Provide PPE as the final layer.

Step 4: Record and implement

Write down the significant hazards, who is at risk, the controls and who is responsible for each action, with dates. Share the findings with the people affected. A short, clear record that people actually read is better than a long document nobody opens.

Step 5: Review and update

Review the assessment after any incident or near miss, when the work, equipment or people change, and at regular intervals. Ask whether the controls are working and whether anything new has appeared.

Common mistakes

• Copying a generic template without looking at the real workplace.
• Listing hazards but not deciding on actions.
• Leaving out the people who do the work.
• Never reviewing after the first version.

Build your skills

Risk assessment is a core skill for every safety professional. Explore Hazard Identification & Risk Assessment, Level 2 Award in Risk Assessment and Level 3 Award in Risk Assessment. We also carry out audits and surveys for organisations that want an independent view.

A simple risk matrix

Score likelihood and severity from 1 (low) to 5 (high), then multiply. As a rough guide, scores of 1 to 4 are low risk, 5 to 12 are medium and need controls, and 15 to 25 are high and need action before work continues. Use whatever scale your organisation has agreed, but apply it consistently.

Who should be involved

• The people who do the job; they know where the real hazards are.
• Supervisors, who understand how work is planned and changed.
• Safety representatives or a safety officer, who bring structure and knowledge of standards.
• Contractors and visitors, when they are exposed to the same hazards.

Frequently asked questions

How often should a risk assessment be reviewed?

After incidents or near misses, when work or equipment changes, and at regular intervals set by your organisation or regulations.

Do small businesses need risk assessments?

Yes. The principles are the same, though the record can be short and simple for low-risk work.

Is a risk assessment a legal requirement?

In many countries it is. Check the regulations that apply where you work.