Risk assessments are a cornerstone of workplace safety, legal compliance, and responsible management across virtually every industry in the UK. Whether you work in construction, healthcare, education, or an office environment, understanding how to conduct a thorough risk assessment is not just good practice; it is a legal requirement under the Management of Health and Safety at Work Regulations 1999.
This guide walks through five real-world examples of conducting risk assessments, explores the different types available, and breaks down the five key steps every assessment should follow.
What Are the 5 Risk Assessments Every Workplace Should Know?
There is no single type of risk assessment that fits every situation. Different environments and hazards call for different approaches, and knowing which assessment is appropriate is the first step towards managing risk effectively.
The five most commonly conducted risk assessments in UK workplaces are: generic risk assessments (used for routine tasks), site-specific risk assessments (tailored to a particular location), dynamic risk assessments (carried out in real time, often by emergency services), manual handling risk assessments (covering lifting and carrying tasks), and COSHH assessments (for hazardous substances under the Control of Substances Hazardous to Health Regulations). Each serves a distinct purpose, and many workplaces will require more than one type depending on their operations.
Are you in need of a risk assessment? Speak with a member of our Professional Risk Assessment Team
What Are the 4 Types of Risk Assessment Used in Professional Practice?
Before diving into examples, it helps to understand the four broad categories that professional risk assessments typically fall under. These categories provide a framework for choosing the right method for the right situation.
The four types are qualitative, quantitative, semi-quantitative, and generic assessments. Qualitative assessments rely on descriptive judgements about likelihood and severity, whilst quantitative assessments use numerical data and statistical modelling. Semi-quantitative methods sit between the two, applying scoring systems to guide decision-making. Generic assessments are pre-written templates adapted for common, repeated tasks, saving time across organisations with consistent work patterns.
| Risk Assessment Type | Best Used For | Method |
|---|---|---|
| Qualitative | Low-complexity environments | Descriptive likelihood and severity ratings |
| Quantitative | High-risk industries (e.g., nuclear, chemical) | Statistical data and numerical modelling |
| Semi-quantitative | Medium-complexity workplaces | Numerical scoring matrices |
| Generic | Routine, repeated tasks | Pre-written templates adapted per task |
What Are the 5 Main Steps of a Risk Assessment?
The Health and Safety Executive (HSE) outlines a clear five-step process that underpins every effective risk assessment, regardless of industry. Following these steps consistently is what separates a legally compliant assessment from a superficial tick-box exercise.
The five steps are: identify the hazards, decide who might be harmed and how, evaluate the risks and decide on precautions, record your findings and implement them, and review the assessment and update it as necessary. This structured approach ensures nothing is overlooked and provides a documented record that can be revisited as working conditions change. The HSE’s guidance on risk assessments provides detailed support for each of these stages.y, including equipment failures, human error, and external factors beyond direct organisational control.
What Are Examples of Risk Assessment Across Different Industries?
Seeing risk assessments applied in practice makes the process far more tangible. Here are five concrete examples of how conducting risk assessments looks across different sectors.
1. Construction Site Risk Assessment: A contractor assesses the hazards of working at height on a scaffolding structure. The assessment identifies falling objects, unstable platforms, and adverse weather as key risks, leading to controls such as guardrails, safety netting, and a weather monitoring protocol.
2. Office Manual Handling Assessment: An office manager reviews the process of moving filing boxes between floors. The assessment highlights musculoskeletal risks from awkward lifting postures, resulting in the introduction of sack trucks and staff training on safe lifting techniques.
3. School Science Laboratory Assessment: A secondary school conducts a COSHH assessment before students handle chemical reagents. The findings prompt the introduction of fume cupboards, mandatory PPE, and updated emergency procedures displayed at eye level throughout the lab.
4. Healthcare Dynamic Risk Assessment: A paramedic arrives at a scene and rapidly evaluates hazards including traffic, unstable surfaces, and the potential for aggressive behaviour. This real-time assessment directly shapes how the team approaches the patient and manages bystanders.
5. Hospitality Fire Risk Assessment: A restaurant owner carries out a fire risk assessment in line with the Regulatory Reform (Fire Safety) Order 2005. The review identifies blocked emergency exits and inadequate signage, both of which are rectified before the next inspection.
| Industry | Common Hazard Identified | Typical Control Measure |
|---|---|---|
| Construction | Falls from height | Guardrails, safety nets, PPE |
| Office | Manual handling injuries | Mechanical aids, staff training |
| Education | Exposure to hazardous substances | PPE, fume cupboards, procedures |
| Healthcare | Dynamic scene hazards | Real-time assessment, team briefing |
| Hospitality | Fire risk | Exit clearance, signage, fire drills |
Under the Management of Health and Safety at Work Regulations 1999, all employers with five or more employees are legally required to record the significant findings of their risk assessments. Equally, the Workplace (Health, Safety and Welfare) Regulations 1992 set out broader obligations that often intersect with risk assessment findings, particularly in relation to the physical working environment.
Have any questions? Talk to a member of our Expert Risk Assessment Team
Conducting Risk Assessments: What You Need to Know to Get It Right
Understanding what risk assessments involve in theory is one thing; building the habit of conducting them properly is another. The five examples above illustrate that effective assessments share common characteristics: they are specific to the task and environment, they involve the people who actually do the work, and they lead to actionable controls rather than paperwork alone.
One of the most frequent mistakes organisations make is treating a risk assessment as a one-time document. Working conditions evolve, staff change, new equipment is introduced, and what was an adequate control measure two years ago may no longer be sufficient. Reviews should be built into the operational calendar, not left until something goes wrong.
Ultimately, the goal of any risk assessment is to reduce harm before it occurs. Whether you are a sole trader assessing a single workstation or a facilities manager overseeing a multi-site operation, the principles remain the same: look carefully, think critically, act decisively, and document everything. A well-conducted risk assessment protects employees, reduces liability, and demonstrates the kind of organisational diligence that regulators and insurers alike expect to see.
What Are 5 Examples of Conducting Risk Assessments: Frequently Asked Questions
The primary legal requirement comes from the Management of Health and Safety at Work Regulations 1999, which obliges all employers to conduct suitable and sufficient risk assessments. Employees and the self-employed are also covered under this legislation if their work activities could affect others.
Yes, any employer with one or more employees has a duty to assess risks in the workplace, though businesses with fewer than five employees are not legally required to write them down. That said, recording findings is strongly recommended as it demonstrates due diligence and supports any future review.
A dynamic risk assessment is an on-the-spot evaluation carried out when circumstances change unexpectedly, most commonly used by emergency services, social workers, and healthcare professionals. It involves rapidly identifying hazards, assessing risks, and adjusting actions in real time without the luxury of a planned assessment process.
There is no fixed legal interval, but assessments should be reviewed whenever there is a significant change to the task, workplace, or workforce, and at regular intervals even if nothing has changed. Many organisations build annual or biannual reviews into their health and safety management cycles.
A COSHH assessment is a specific type of risk assessment required under the Control of Substances Hazardous to Health Regulations 2002, covering any work involving potentially harmful substances. It identifies exposure risks and sets out the controls needed to protect workers, such as ventilation, PPE, and safe storage procedures.
The employer holds ultimate responsibility for ensuring risk assessments are conducted, though the task itself can be delegated to a competent person with the relevant knowledge and training. In larger organisations, this is often a dedicated health and safety officer or an external consultant.
A hazard is anything with the potential to cause harm, such as a wet floor or a chemical substance, whilst a risk is the likelihood that the hazard will actually cause injury or illness combined with the potential severity of that harm. Distinguishing clearly between the two is fundamental to producing an accurate and useful assessment; for a broader definition, the Wikipedia page on risk assessment provides a helpful starting point.
Absolutely, and in many cases their involvement is essential. Workers who carry out a task daily will often identify hazards that a manager or external assessor would miss entirely.
Employers with five or more staff must record the significant findings in writing, including the hazards identified, the people at risk, and the control measures put in place. Keeping dated records also provides evidence of compliance if the assessment is ever challenged by an enforcement authority.
If the HSE or a local authority inspector finds that an assessment is insufficient, they can issue an improvement notice requiring corrective action within a set timeframe. In serious cases, particularly where inadequate assessments have contributed to injury, prosecution and financial penalties may follow.
Yes, lone working introduces specific hazards around communication, emergency response, and supervision that must be addressed within a dedicated risk assessment. The HSE’s guidance on lone working provides practical advice on managing these risks appropriately.
A generic risk assessment is a pre-prepared template covering a common task or activity that can be adapted for use across multiple sites or teams without starting from scratch each time. They are particularly useful in industries with standardised processes, though they must always be reviewed to ensure they reflect the specific conditions of each location.
The level of detail should be proportionate to the complexity and severity of the hazards involved; a simple office environment requires far less detail than a chemical manufacturing plant. What matters is that the assessment is suitable, sufficient, and genuinely reflects the real risks present.
Inherent risk is the level of risk present before any controls are applied, whilst residual risk is what remains after control measures have been implemented. A well-conducted risk assessment aims to reduce residual risk to a level that is as low as reasonably practicable, a standard often referred to in UK health and safety law as ALARP.