What to include in a basic risk assessment

Why risk assessments are important for businesses 

Risk assessments play an essential role in protecting both people and organisations. By identifying hazards early, businesses can take preventative steps before accidents or injuries occur, helping to avoid both harm to individuals and unnecessary financial loss.

Workplace incidents can have serious consequences, including employee injuries, operational disruption, and potential legal or financial implications. Taking the time to assess risks helps reduce the likelihood of these incidents by ensuring hazards are recognised and managed appropriately. 

Risk assessments also demonstrate that a business is meeting its legal responsibilities. UK employers are required to assess workplace risks and take reasonable steps to control them. Having a clear risk assessment process in place shows that a business is actively working to protect employees, visitors, and the wider public, while also reducing the risk of costly legal claims. 

For many organisations, risk assessments also form part of broader safety management practices that support staff wellbeing and help maintain smooth day-to-day operations. Alongside this, insurance can help businesses manage the financial impact of incidents if they do occur, providing protection against unexpected costs and supporting business continuity. 

What needs to be included in a risk assessment? 

Before starting the assessment itself, it helps to understand what needs to be included in a risk assessment. At its core, a risk assessment should clearly identify potential hazards, assess the level of risk they present, and outline the steps taken to control them. 

According to guidance from the Health and Safety Executive, a basic workplace risk assessment typically includes several essential elements that help businesses manage health and safety risks effectively. 

These generally include: 

• A clear identification of hazards present in the workplace 

• Details of who may be harmed and how 

• Practical control measures to reduce or manage the risks 

• A written record of the findings and who is responsible for managing them 

Understanding what to include in a risk assessment helps businesses take a structured and proactive approach to workplace safety. Instead of reacting to incidents after they happen, organisations can identify potential issues early and introduce preventative measures. 

Once these core elements are understood, the next step is carrying out the assessment itself. 

Identify the hazards 

The first step in deciding what to include in a risk assessment is identifying hazards within the workplace. A hazard is anything that has the potential to cause harm. 

The types of hazards present will vary depending on the nature of the business. In many workplaces, common risks may include slips and trips, faulty equipment, exposure to hazardous substances, or environmental issues such as poor lighting or excessive noise. 

For example, an office environment might present hazards such as trailing cables, poorly arranged workstations, or overloaded power sockets. In a warehouse or workshop setting, hazards may include machinery, manual handling tasks, or moving vehicles. 

Observing how work is carried out on a daily basis is often the best way to identify where risks may arise. 

Identify who might be harmed 

Another key part of what needs to be included in a risk assessment is identifying who could potentially be affected by each hazard. 

This should not be limited to employees alone. Depending on the workplace, risks may also affect contractors, customers, visitors, or members of the public. 

Businesses should consider groups such as: 

• Employees carrying out regular tasks 

• Contractors or temporary workers 

• Visitors or customers entering the premises 

• Members of the public who may be nearby 

Some individuals may require additional consideration, such as young workers, new employees, or people with disabilities. Identifying who may be harmed ensures that safety measures are appropriate for everyone in the workplace. 

Evaluate the risks and introduce control measures 

Once hazards and affected individuals have been identified, the next step is evaluating the level of risk and deciding how those risks can be reduced. 

This involves considering how likely an incident is to occur and how serious the consequences could be. Based on this evaluation, businesses can introduce control measures designed to reduce or manage the risk. 

Control measures might include improving housekeeping to prevent slips and trips, providing staff training on the safe use of equipment, or installing signage to highlight hazardous areas. 

The aim is to reduce risks to a level that is reasonable and manageable within the workplace. 

Record the findings 

When considering what needs to be included in a risk assessment, documenting the findings is an essential step. In the UK, businesses with five or more employees are legally required to record the significant findings of their risk assessments. 

A written record typically includes: 

• The hazards identified during the assessment 

• Who could be harmed and how 

• The control measures put in place 

• Who is responsible for managing the risks 

Keeping a clear written record helps businesses demonstrate compliance with health and safety requirements and ensures that safety procedures can be easily communicated to staff. 

Review and update the risk assessment 

Risk assessments should not be treated as a one-time exercise. Work environments change over time, and safety procedures should be reviewed regularly to ensure they remain effective. 

A review may be necessary if new equipment is introduced, work processes change, or an incident highlights a risk that had not previously been identified. 

Regular reviews help ensure that the risk assessment continues to reflect the real conditions of the workplace and that appropriate control measures remain in place. 

Tips for writing a clear risk assessment 

Understanding what to include in a risk assessment is only part of the process. The way the assessment is written also plays an important role in making it effective. 

A good risk assessment should be clear, practical, and easy for staff to understand. Avoid overly technical language where possible and focus on describing the real risks present in the workplace. 

It can also be helpful to involve employees in the process. Workers who carry out tasks every day often have valuable insights into where hazards may exist and how they can be managed safely. 

Finally, risk assessments should remain realistic and proportionate. The aim is not to eliminate every possible risk but to demonstrate that sensible steps are being taken to reduce risks and protect people. 

Final thoughts 

Knowing what to include in a risk assessment helps businesses create safer workplaces while meeting their legal responsibilities. By identifying hazards, considering who may be affected, implementing sensible control measures, and reviewing assessments regularly, organisations can manage risks more effectively. 

A well-prepared risk assessment not only protects employees and visitors but also demonstrates that a business is taking a responsible approach to workplace safety. 

This process can also help businesses identify the types of insurance they may need. By clearly understanding the risks present in the workplace, organisations are better able to determine appropriate cover, such as liability insurance, protection for equipment, or cover for stock. This ensures that, alongside preventing incidents, businesses are also financially prepared if issues do arise. 

*Disclaimer – This blog has been created as general information and should not be taken as advice. Make sure you have the correct level of insurance for your requirements and always review policy documentation. Information is factually accurate at the time of publishing but may have become out of date.