Risk Assessment
Quick answer
A risk assessment is a written review of what could go wrong at work, how likely it is and how bad the impact would be — so time and money go to the risks that matter most. It is the foundation every other workplace safety control (training, breaks, PPE, emergency planning) sits on top of.
What a risk assessment is
A risk assessment is a structured, written document. It identifies the hazards a workplace actually contains, describes who could be harmed and how, evaluates existing controls, and lists further actions needed to reduce risk to an acceptable level.
It is not a checklist you file. A useful risk assessment is short enough to actually be used — a few pages that a supervisor can reference during a shift.
Why regulators expect one
Most national safety regimes — OSHA in the US, HSE in the UK, EU-OSHA across Europe — require employers to assess workplace risks and document controls. A written risk assessment is usually the first document an inspector asks for after an incident.
When to redo one
Review annually at minimum. Redo it any time the work, workforce or site changes meaningfully: new equipment, new shift patterns, renovation, a new line of business, a near-miss or an incident.
Common mistakes
Copying a generic template
A risk assessment that isn't site-specific isn't a risk assessment — it's a compliance prop.
Frequently asked questions
- Who should write the risk assessment?
- The person or people who understand the actual work. In a small business, that is usually the owner or a senior supervisor — not an external consultant with no knowledge of the site.