Understanding and managing risk is a legal requirement for all UK employers and a critical component of safe and productive workplaces. Risk assessments form the foundation of that responsibility and support both compliance and good operational practice.
Under the Management of Health and Safety at Work Regulations 1999, employers are required to conduct “suitable and sufficient” risk assessments to protect employees and others who may be affected by their activities. These obligations extend to a wide range of scenarios and working environments. For organisations aligned with ISO 45001, the principles of risk identification, evaluation, and control are woven into broader health and safety management systems.
This article explores the types of risk assessments that businesses may need to carry out, from routine workplace hazards to specific risks requiring technical or legal consideration. Whether you are reviewing existing arrangements or implementing assessments for the first time, this guide provides practical clarity to help you make informed decisions. Kingfisher Professional Services can assist with bespoke support, compliant documentation, and ongoing guidance.
Effective risk assessment starts with a systematic approach to identifying and controlling workplace hazards. Every assessment should follow a logical five-step process: identifying hazards, determining who may be harmed and how, evaluating risks, implementing suitable control measures, and regularly reviewing the effectiveness of those measures.
Risk itself is typically measured using a combination of likelihood and severity: how likely the harm is to occur, and how serious the consequences could be if it does. This can be done through different formats: qualitative assessments based on informed professional judgement, semi-quantitative methods that use scoring matrices (like 3×3 or 5×5), and fully quantitative models often used in highly complex or high-risk industries.
In the UK, risk assessment is also underpinned by the ALARP principle: that risks should be reduced As Low As Reasonably Practicable. This does not mean eliminating all risk, but rather applying proportionate and achievable measures that reflect the seriousness of the hazard and the resources required to control it.
Generic risk assessments cover routine tasks and common hazards that are likely to be found in multiple work areas or across similar job roles. They are often used as a starting point or baseline and are particularly useful for standard operations. However, they must still be reviewed and adapted to reflect the specific context in which the work is carried out.
Unlike generic assessments, site-specific assessments are tailored to the unique features and hazards of a particular location. These are essential when risks vary depending on environmental conditions, such as working at height, in confined spaces, or in locations where chemicals or flammable substances are present. They take into account local infrastructure, access routes, personnel, and emergency arrangements.
Task-based or specialist assessments are designed for specific high-risk activities or those subject to regulatory requirements. This includes:
These assessments are more technical in nature and must meet precise legal standards.
A dynamic or point-of-work risk assessment is completed on the spot, often immediately before a task begins. It is essential when hazards change rapidly or when pre-assessed risks may not reflect actual on-site conditions. Workers must be trained to spot new hazards, assess their impact, and take immediate decisions to stop or adjust the task as needed. This is especially relevant in mobile work, construction, or logistics.
This is the most common and accessible approach, where risks are categorised into broad ratings such as low, medium or high. It relies on the assessor’s knowledge and experience to judge the risk level, taking into account both the likelihood of harm and its potential severity. It’s well-suited to most standard workplace activities and forms the basis of many general or site-specific assessments.
Quantitative assessments use numerical models and data to predict the probability and consequences of risk. These are typically employed in major hazard industries such as chemical processing, energy generation, or aviation, where small miscalculations can have serious consequences. Mathematical modelling, fault trees, and probability analysis are common tools used to create these assessments.
This hybrid method blends qualitative judgement with a structured scoring system. Using matrices like 3×3 or 5×5, assessors can assign a numerical value to both the likelihood and severity of a risk, helping to prioritise and communicate risk levels consistently. It is widely used across sectors where clear, repeatable scoring is beneficial but full modelling is not required.
Beyond the core types, there are several specific assessments that organisations must carry out if the circumstances apply:
These assessments are not optional; they are required by law where risks are foreseeable and potentially harmful.
Choosing the correct type of risk assessment depends on the nature of the task, the complexity of the hazard, and any legal requirements. Some tasks might be suitable for a generic or qualitative assessment, while others, particularly those involving chemicals, vulnerable persons, or high-risk equipment, will require a more specialist approach.
Type | When to Use | Strengths |
Generic | Routine tasks across multiple sites | Efficient and reusable |
Site-Specific | Unique tasks or environments | Tailored and detailed |
Task-Based (Specialist) | High-risk or regulated activities (e.g. COSHH) | Compliant and technically robust |
Dynamic | Rapidly changing or unknown conditions | Fast, flexible decision-making |
Qualitative | Everyday risk scenarios with known hazards | Simple and quick |
Quantitative | Complex, high-risk systems needing precision | Data-driven and objective |
Semi-Quantitative | Situations needing clarity with some structure | Balanced and practical |
Specialist (e.g. Fire) | Where specific legal or technical rules apply | Statutory, non-negotiable |
To guide selection:
This structured thinking ensures that your risk assessment is not only proportionate and practical but also legally sound.
Risk assessment templates vary depending on the type, but all should include a clear record of hazards, who may be affected, the level of risk before and after controls, and any additional actions required.
For example, a generic manual handling risk assessment might cover:
A COSHH assessment for a cleaning chemical might record:
A fire risk assessment for an office environment might identify:
Each assessment should be reviewed regularly, especially if tasks, personnel or processes change. Kingfisher provides ready-to-use templates and can tailor documentation to match your specific needs, ensuring legal compliance and operational clarity.
Risk assessments are not optional; they are a legal requirement in almost all UK workplaces. The Management of Health and Safety at Work Regulations 1999 set out the core obligation: employers must carry out “suitable and sufficient” assessments of the health and safety risks their employees and others may face during work activities.
This legal duty extends to all forms of work, from office-based roles to high-risk environments like construction, logistics, and manufacturing. Specific regulations, such as COSHH, DSEAR, the Fire Safety Order, and the Manual Handling Regulations, require additional, targeted assessments depending on the risk in question.
For organisations following ISO 45001, risk assessment is a central requirement of the health and safety management system. The standard emphasises proactive identification, prioritisation, and control of workplace risks, supporting a culture of continuous improvement.
Employers must also ensure that assessors are competent, that assessments are updated regularly, and that findings are shared with affected workers. A strong risk assessment process not only improves safety but can reduce downtime, enhance employee wellbeing, and demonstrate robust governance.
Kingfisher offers end-to-end support for risk assessment compliance. Our services include:
With deep expertise across multiple industries, we help you stay compliant, confident, and proactive in managing risk.
Choosing the right type of risk assessment is not just about ticking a box; it’s about taking meaningful steps to protect your people, comply with the law, and maintain operational performance.
From simple qualitative approaches to complex quantitative models, the variety of assessment types reflects the range of hazards faced across modern workplaces. Identifying the right approach and updating it as conditions change ensures you remain both compliant and prepared.
Kingfisher Professional Services is here to help you make confident, informed decisions. With our expert guidance, you can simplify the risk assessment process and focus on what matters most: keeping your people safe.