A workplace risk assessment is one of the most important tools for keeping people safe at work. It helps businesses identify hazards, evaluate risks, and put practical measures in place to prevent accidents and ill health.
But an effective risk assessment is more than just paperwork. Done properly, it becomes a working safety document that protects employees, supports legal compliance, and improves everyday operations.
In this guide, we’ll explain how to carry out an effective workplace risk assessment step by step.
What is a workplace risk assessment?
A risk assessment is the process of identifying hazards, evaluating the risks they pose, and implementing controls to reduce or eliminate those risks.
Under UK health & safety law, employers have a legal duty to assess workplace risks and take reasonable steps to protect workers and others affected by their activities.
The goal is not to eliminate all risk completely as that’s often impossible, but to reduce risk to an acceptable and manageable level.
Why risk assessments matter
Effective risk assessments help businesses prevent accidents and injuries, reduce downtime and lost productivity, improve employee confidence, demonstrate legal compliance, and support safer decision-making. Most importantly, they help create safer workplaces where hazards are recognised before harm occurs.
5 Steps to an Effective Workplace Risk Assessment
Identify the hazards
The first step is to look for anything that could cause harm. Common workplace hazards include slips and falls, manual handling, working at height, power tools and machinery, hazardous substances, noise and vibration, electrical equipment, and fire risks.
To identify hazards effectively, you should walk around the workplace, observe how tasks are carried out, speak to employees and supervisors, review accident and near-miss records, and check manufacturer guidance and safety data sheets.
Hazards are not always obvious. Long-term health risks such as dust, vibration, stress, or poor ergonomics should also be considered.
Decide who might be harmed and how
Next, identify who is exposed to the hazard and how they could be harmed. This may include employees, contractors, visitors, maintenance staff and members of the public.
For example:
| Hazard | Who could be harmed? | Potential harm |
| Wet floor | Staff and visitors | Slips and fractures |
| Loud machinery | Machine operators | Hearing damage |
| Manual lifting | Warehouse workers | Back injuries |
Thinking about specific groups helps ensure controls are practical and suitable.
Evaluate the risks and decide on controls
Now assess how likely the hazard is to cause harm and how serious the consequences could be. Then decide what controls are needed.
Follow the hierarchy of control where possible:
- Eliminate the hazard
- Substitute with something safer
- Use engineering controls
- Introduce administrative controls (training, procedures)
- Use PPE as a last line of defence
For example, instead of relying only on PPE for dust exposure, use dust extraction systems, wet cutting methods, and restrict exposure time. Controls should be realistic, proportionate, and actually used in practice.
Record your findings
If your business has five or more employees, you are legally required to record significant findings. A good risk assessment should clearly show the hazards identified, who may be harmed, existing controls, additional actions required, who is responsible, and review dates.
Avoid overly complicated documents. The best risk assessments are clear, practical, and relevant to the actual workplace. Generic copy and paste assessments rarely provide meaningful protection.
Review and update regularly
Risk assessments should never be filed away and forgotten. Review them after accidents or near misses, when introducing new equipment or processes, when workplace layouts change, when legislation changes, and periodically as part of routine safety management. Workplaces evolve over time and your risk assessments should too.
Common mistakes businesses make
Some of the most common problems include generic assessments that don’t reflect real work activities, failing to involve employees, ignoring long-term health risks, not reviewing assessments regularly, and relying too heavily on PPE instead of higher-level controls. An ineffective risk assessment creates a false sense of security, which can be dangerous.
Get in touch
A workplace risk assessment is not about creating paperwork for the sake of it. It’s about preventing harm. When carried out properly, risk assessments help businesses identify problems early, reduce incidents, and create safer working environments for everyone.
At Apple Group, we provide practical health & safety training that helps businesses improve hazard awareness, carry out effective assessments, build stronger safety cultures, and stay compliant with UK regulations.


