A risk assessment is a careful examination of what could cause harm, so you can weigh up whether you have done enough or should do more. That definition comes from HSE, and the operative words are "careful examination" — of a specific place, at a specific time, for specific people.
Regulation 3 of the Management of Health and Safety at Work Regulations 1999 makes it a legal duty: a suitable and sufficient assessment of the risks to employees and to anyone else affected by the work, with the significant findings recorded where five or more people are employed.
Start on site, not at the desk
A desk-written assessment can only contain the hazards you can imagine. Walking the area produces the ones you cannot: the delivery route that crosses the pedestrian walkway, the neighbour's fire exit that opens into your compound, the standing water, the overhead line the drawings do not show, the fact that the only access is through an occupied stairwell.
Take the drawings, the pre-construction information and a camera. Photographs of the actual conditions, referenced in the assessment, are the fastest way to make a document unmistakably site-specific.
Step 1: Identify the hazards
Work through three sources systematically.
- The work itself: take each task in the sequence and ask what could cause harm at each stage — the approach in how to complete a RAMS.
- The place: existing structures, services, ground, traffic, neighbours, weather exposure, lighting, access.
- Everyone else: other trades above, below and adjacent; deliveries; the public; the building's occupants; cleaners and security out of hours.
Cover health as well as safety. Dust, noise, vibration, manual handling, chemical exposure and heat or cold cause more long-term harm than the acute hazards that dominate most registers, and they are the ones a walk-round does not reveal because nothing about them looks dangerous. COSHH assessment for construction covers the substances most often left out.
Ask the operatives. The people who have done the task fifty times know where it goes wrong, and a hazard identified by the gang is a hazard the gang already believes in.
Step 2: Decide who might be harmed and how
Not just "operatives". Name the groups and say how the harm occurs: "the scaffolder erecting the tower — fall from height during erection"; "the office staff in the occupied floor below — struck by falling tools through the ceiling void"; "the public on the footpath — struck by vehicles reversing out of the gate".
Give particular attention to anyone at greater risk: young workers, new starters unfamiliar with the site, lone workers, anyone with a health condition affected by the work, and non-native speakers for whom a briefing in English may not land. The duty to assess risks to young persons and new or expectant mothers is explicit in the Management Regulations.
Step 3: Evaluate the risk and decide on controls
Score likelihood and severity before controls, apply the hierarchy of control, then re-score. The scoring system is less important than using it honestly and consistently — a matrix used to justify a decision already made is worse than no matrix, because it dresses up a guess as an analysis.
Two habits keep scoring honest. Score severity on the reasonable worst outcome rather than the most likely one: a fall from three metres is scored on what a fall from three metres can do, not on the assumption that somebody lands well. And score likelihood on this site's conditions, not on your company's overall safety record.
Controls must be specific, assignable and checkable — the test in how to write control measures that actually work. Assign an owner and a date to anything not already in place, and treat those as actions to be closed rather than intentions.
Step 4: Record the significant findings
Record the hazards, who might be harmed, the existing controls, the residual risk, and any further action with an owner and a deadline. Record the date and the assessor, and reference the site-specific inputs you used: the survey, the drawings, the walk-round, the conversations.
The recording standard worth aiming at is that somebody who was not there could pick it up in two years and understand what was assessed, on what basis, and why the controls chosen were considered adequate. That is also the standard an investigation applies — see what happens if you submit an inadequate RAMS.
Step 5: Review
Review when the work changes, when conditions change, after an incident or near miss, when new information emerges, and periodically as a backstop. On construction sites the environment changes weekly, which makes the review cycle much shorter than in a static workplace — the triggers are set out in how often a RAMS should be reviewed.
What makes an assessment "suitable and sufficient"
- It identifies the significant risks and ignores the trivial ones — a register with ninety hazards of equal weight has assessed nothing.
- It is proportionate to the risk: more effort where the consequences are severe.
- It reflects the actual work and the actual place, not a category of work in general.
- The controls are practicable and the people doing the work know about them.
- It identifies the period for which it is likely to remain valid.
- It is written so the people who need to act on it can read it.
The failure modes
Assessing the paperwork rather than the work. Copying a register from a similar job. Listing controls that already exist and calling that an assessment. Leaving residual risk blank. Scoring everything medium. Writing it after the work has started. Filing it without briefing it. Every one of these produces a document that exists and protects nobody.
The mechanical faults among them are checkable, and worth checking before anyone else reads the document — understanding your report explains how the findings are ordered so the ones that matter come first. The judgement about whether the risk has genuinely been reduced as low as reasonably practicable is yours, and no tool takes it from you.
This article is general guidance on UK construction documentation practice. It is not legal advice, a compliance certification or a substitute for review by your own qualified health and safety personnel, who remain responsible for deciding whether any particular document is adequate. See our disclaimer.