What is risk management?

A widely accepted risk management definition is: the identification, measurement, control and financing of risks that threaten the existence, assets, earnings or personnel of an organisation or the service it provides. Risk management can be applied to a wide variety of business objectives, but we will focus here on its most common application in the area of workplace health and safety.

What is risk assessment?

Risk assessment is the initial stage of your overall risk management strategy. It involves determining what the risks are and how they are best tackled within a defined situation. The situation is the context of the workplace, the type of work being done, the employees concerned and so on. Establishing the basic situation is the first step, followed by identifying, analysing and prioritising the risks.

How are risks prioritised?

The risks with the most severe potential impact and with the greatest likelihood of happening should be prioritised first. Almost certainly, the most potentially serious risks will be those least likely to happen, while the least serious will be more likely to happen. Nevertheless, both qualities will need to be taken into account when prioritising.

Start your risk assessment by walking around the workplace, making notes on the possible risks that you observe. Ask your employees what the main risks they notice or encounter are while doing their jobs. It's important to consider individual workers, as different people will find different risks in the same situation, depending on their age, gender, disabilities and conditions, such as allergies or intolerances and whether they are pregnant or not. You must also take into account the risks faced -- and posed by -- members of the public, maintenance workers, contractors and other temporary visitors. It's important to consider individual workers, as different people will find different risks in the same situation Remember, if employees provide input into the process, they are more likely to abide by the assessment.

How can I assess every possible risk?

It isn't possible to assess and control every risk in the workplace. Some are known as acceptable risks, where the cost of protecting against them would be more than the cost of them happening. There are also what are known as one-in-a-million risks, where the consequences may be serious but the likelihood of them happening is minuscule. Once again, concentrate on those risks that are both probable and major and work your way down the list until you reach those that are relatively trivial, or serious. Bear in mind that accurate risk assessment can be subjective, and opposing opinions should be listened to when making a decision as to whether a risk needs to be acted upon.

How often do I need to undertake a risk assessment?

Businesses and workplaces are ever-changing as the business grows and employees come and go. For this reason, risk assessments should be carried out on a regular basis, and especially whenever a change occurs, such as moving to new premises, taking on new equipment or staff and so on. There are no fixed rules on how to carry out a risk assessment. Different industries will have different recommended procedures, while different measures apply to specific disciplines, for instance, health and safety, IT security, environmental risk assessment, project management and so on. Generally, however, the process should involve identifying, evaluating, controlling, recording and reviewing regularly. All significant findings should be noted down, and reasonable measures taken to deal with any risks that you could reasonably be expected to know about or anticipate. You should aim to reduce your risks to a level that is as low as reasonably practicable (ALARP).

What is a risk assessment?

Q: Isn't this just unnecessary red tape?

Risk assessment may seem like a burden, but it is an important step in reducing the likelihood and impact of business disruption, legal costs, physical injury to employees and members of the public, and damage to your company's reputation. Understanding what the risks are is the first step to preventing them. Accurate risk assessment can improve safety, reduce accidents and can also lower your insurance premiums. And even if you are fully insured against an event, surely it is better to take every possible measure to prevent it from happening in the first place.

Q: Is risk assessment a legal requirement?

In the UK, Regulation 3 of the Management of Health & Safety at Work Regulations states that any employer or self-employed person is required to complete an adequate risk assessment. If you employ fewer than five people, you don't have to keep documentation. However, you must be able to prove that a health and safety procedure is in place, so it may be helpful to create a document regardless. The Health & Safety Executive (HSE) can provide information and resources. It is especially important to take appropriate fire safety measures, and some other risks also have specific control measures required by the law. These include working with particular machinery or chemicals, with electricity or at height. In some cases, a permit to work or a licence for risky activities may also be needed.

Q: Who can carry out a risk assessment?

Anyone with a basic level of competence and knowledge can carry out a risk assessment. Responsibility will always rest with the employer, so while risk assessment tasks can be delegated, it is worth bearing this in mind. You may want to bring in a consultant or other specialists to help you. Alan Boswell Group has a dedicated risk management team with years of experience in assessing and controlling workplace hazards.

07/10/2024 Blog Alan Boswell Group

Speak directly to our team

01603 967900

Make an enquiry

Unforeseen circumstances are just that, but unpredictable events don’t have to scupper business plans or leave you financially exposed. A good risk assessment can help you prepare for hazards and minimise losses.

To help your business stay resilient, we look at the role risk assessments play in your overall risk management strategy and why overlooking their importance can leave your business vulnerable.

What’s the point of a risk assessment?
What is the risk assessment process?
How are risks analysed?
What are the different types of risk assessment?
Who can carry out a risk assessment?
Is risk assessment a legal requirement?
Supporting your business and managing risk

What’s the point of a risk assessment?

Risk assessments help you identify and analyse risks to your business, with the aim of preventing or minimising damaging consequences.

Risks can be anything that threaten the smooth running of your organisation. They can impact all aspects of your business, for example, its assets, earnings, or operational efficiency. It can also include incidents that affect your employees.

The importance of risk management

Good risk management can help reduce business disruption, legal costs, and damage to your business’ reputation.

Sadly, risk assessment often has the reputation of being a time-consuming burden, but understanding what the risks are is the first step to preventing them.

On a practical level, risk assessments can prevent injuries, improve workplace safety, and enable your business to meet health and safety rules. A comprehensive risk assessment can also lower your insurance premiums.

What is the risk assessment process?

To put an effective risk assessment in place, you’ll need to:

Identify hazards

A hazard is anything that could negatively affect your business or stop it from operating altogether.

Consider where those risks might come from and who or what they might affect. Risks to look for include:

Operational activities
Employees
Contractors
Visitors or members of the public

Assess the risk

Analyse the likelihood (risk) that those hazards might affect your business immediately, in the short, medium and long-term.

It isn’t possible to assess and control every risk in the workplace. These are known as acceptable risks, where the cost of protecting against them would be more than the cost of them happening.

Some risks are classed as ‘one-in-a-million risks’, where the consequences may be serious but the likelihood of them happening is minuscule.

Bear in mind that accurate risk assessments can be subjective. It’s worth considering different opinions before deciding whether something should be acted on.

Control the risks (control measures)

Control measures are what you can do to minimise or prevent the risk from happening. They’re usually grouped into five areas:

Elimination – removing potential risks completely. For example, replacing damaged equipment.
Reduction – how you can reduce a risk if it cannot be eliminated. For example, training staff if they work at height or with hazardous substances.
Isolation – preventing a hazard from affecting other aspects of your business. For example, putting up a safety barrier in front of machinery.
Safe systems of work (SSOW) – this is about putting safe working methods in place; it could be as simple as making sure only adequately trained staff carry out specific tasks.
Personal protective equipment (PPE) – making sure employees have suitable clothing or equipment to reduce the risks they face at work. For example, face masks, ear defenders, steel toe cap boots, or hard hats.

Record your findings

According to HSE guidelines, if you’ve got more than five employees, you’ll need to record any significant findings (you can find templates on the HSE website). This includes any hazards, who they might affect (and how), and what you can do to prevent or control the risk.

Review and update

You should regularly review and update your risk assessment to check it’s still fit for purpose.

It’s also worth reviewing your risk assessment if your business structure or activities change. For example, if you increase your workforce, expand business operations, or move to new premises.

How are risks analysed?

There are several different ways to approach risk assessments:

Qualitative assessment

This is an assessment based on judgement. Typically, the person identifying and analysing hazards will be experienced and have expertise within their industry.

Qualitative assessments usually label each risk based on the likelihood of something happening and its severity.

Quantitative assessment

This is where risks are prioritised according to specific data (rather than based on experience and judgement).

For example, when a hazard is identified and analysed, it will be given a number based on the likelihood of it happening, and its severity.

Quantitative assessments are generally used in industries where risk must be carefully reviewed, such as manufacturing, or where chemicals are involved.

Generic assessment

This type of assessment applies to everyday workplace activities. This could include display screen equipment (DSE) risk assessments, accessibility, fire exits, or electrical equipment.

Site-specific assessment

This is where your assessment needs to consider any specific circumstances. This could depend on location, the immediate environment, or the equipment used at the site.

For example, if you’re overseeing two or three building sites, each one might start with a generic assessment as there will be similar risks across them all. However, one site might be close to a busy road and need a specific assessment to manage the site and regular traffic.

Dynamic assessment

Dynamic assessments happen on-site and often in real-time. This typically applies to emergency situations or where hazards are unpredictable.

What are the different types of risk assessment?

Some industries will have specific legislation, which may include certain risk assessment standards or templates you need to follow. This could include the Control of Substances Hazardous to Health Regulations or the Control of Vibration at Work Regulations 2005.

Otherwise, risks will vary depending on the type of business you run and the activities carried out. One example is engineering, where machinery and equipment will need to be inspected for safety.

More general risk assessments that are likely to apply to most businesses, include:

Fire risk assessment
Manual handling risk assessment
Young person risk assessment
Display screen equipment (DSE) risk assessment

Who can carry out a risk assessment?

Employers are ultimately responsible for the safety of their employees. But anyone can be tasked with carrying out a risk assessment, so long as they’re considered a ‘competent person’ with sufficient knowledge about the area they’re assessing.

If you delegate the task, it may be worth regularly changing who undertakes the assessment. A fresh pair of eyes may spot new hazards, making your risk assessment more robust.

Is risk assessment a legal requirement?

In the UK, the Management of Health and Safety at Work Regulations states that any employer or self-employed person must carry out an adequate risk assessment.

If you employ fewer than five people, you don’t have to keep documentation, but you will need to be able to prove that health and safety procedures are in place. With that in mind, it’s useful to keep documented evidence.

It is especially important to take appropriate fire safety measures and adhere to any specific control measures required by law (such as working with particular machinery, chemicals, electricity, or at height).

Supporting your business and managing risk

Risk assessments are intrinsic to any risk management strategy, helping you prevent or mitigate damaging consequences to your business.

Remember that some industries will have recommended procedures and legislation to follow. For many other businesses, there won’t be specific procedures detailing how assessments should be carried out.

What’s important is that you follow each step (identify hazards, analyse risk, set out control measures, review and update).

If you’d like further guidance on carrying out thorough risk assessments, we offer a risk management service. We can also support industry-specific needs with our engineering inspection services.

For more information and help, contact our specialist risk management team on 01603 967900.

Business Insurance

Popular Products

Financial Advice

Business financial services

Risk Management

Popular Products

Personal Insurance

Popular Products

Financial Planning

Financial planning services

Landlords Insurance

Landlords insurance

Latest News