Who Is Responsible for Carrying Out Workplace Risk Assessments?

If you are asking who is responsible for risk assessment in the workplace, the answer is the employer. They can do the assessment themselves or arrange for a competent manager, employee or external specialist to do the practical work. Delegating the task does not transfer the employer’s legal responsibility for managing risks.

The assessor needs enough knowledge and experience to understand the work and recommend suitable precautions. Employees also have an important role: they can explain how tasks are really carried out and help identify problems that may not be obvious to a manager.

The employer’s legal duty

In Great Britain, the Management of Health and Safety at Work Regulations 1999 require employers to make a suitable and sufficient assessment of risks. This covers risks to employees and others affected by their work. Northern Ireland has separate health and safety legislation, so organisations operating there should check the applicable requirements and guidance.

A workplace risk assessment is a careful look at what could cause harm through work, who might be affected and what precautions are needed. A hazard is something with the potential to cause harm. Risk concerns the likelihood of that harm occurring and how serious it could be.

The employer must make sure the assessment reflects the work being done and that appropriate action follows. Producing a document is not the end of the job. If an assessment identifies an unsafe activity, someone must have the authority and resources to address it.

For a small business, the employer may be closely involved in every assessment. In a larger organisation, directors or senior leaders may arrange for managers and safety staff to carry them out across different departments. The arrangements can vary, but the employer remains responsible for ensuring they work.

The Health and Safety Executive’s guidance on managing risk explains the assessment process and the responsibilities involved.

Who can carry out the assessment

A competent person can carry out a workplace risk assessment on the employer’s behalf. Depending on the organisation and the work, that person might be the owner, a supervisor, a health and safety manager or another employee with relevant knowledge. An employer can also obtain external assistance.

Competence means having the appropriate combination of training, knowledge and experience for the task. It is specific to the work being assessed. Someone who understands the risks in an office is not automatically equipped to assess a complex chemical process or a construction activity.

For straightforward work, an employer who knows the activity well may be able to conduct the assessment without a consultant. More complex hazards can require specialist input. The key is to recognise the limits of the assessor’s knowledge before those gaps affect the quality of the assessment.

There is no single certificate that every workplace risk assessor must hold. Relevant training can build understanding, but completing a course alone does not prove someone is competent to assess every hazard. Practical experience, familiarity with the workplace and access to specialist advice may also be needed.

An employer can involve several people in one assessment. For example, a manager may coordinate it, an experienced employee may explain the task, and a specialist may advise on a particular hazard. It should still be clear who is bringing the findings together and who can approve the resulting actions.

Delegation does not remove responsibility

A manager can be given responsibility for arranging an assessment and putting its findings into practice. The employer must still make sure the person has suitable authority, time and support.

Consider a warehouse where a supervisor is asked to assess how deliveries are unloaded. They observe the task, speak to the delivery team and identify a risk where pedestrians cross the unloading area. The supervisor recommends a separate pedestrian route and a change to delivery procedures.

The assessment has identified a useful control. The risk will not be reduced, however, until the route is agreed, marked and communicated. If the supervisor cannot make those changes alone, the employer needs to ensure someone with the necessary authority acts.

A practical arrangement makes three things clear:

• Who is responsible for each action.

• When the action should be completed.

• Who will check that the measure is working.

Without that follow-through, even a carefully completed assessment can become disconnected from everyday work.

Managers may have their own responsibilities under workplace arrangements and health and safety law. Giving someone a task, however, is not a way for an employer to hand over its overall duty. Full Cycle Training’s health and safety training for managers is a related option for managers with wider safety responsibilities.

Employee involvement in practice

Employees are not normally responsible for ensuring their employer’s risk assessment is carried out simply because they perform the work. They do have health and safety duties, including taking reasonable care and cooperating with their employer’s safety arrangements.

Their knowledge makes the assessment more reliable. A written procedure may say that a task is performed in a particular way, while the people doing it know about delays, restricted space or differences between shifts. Those details can change the risks and the practicality of a proposed control.

An assessor should speak to the people doing the work and, where appropriate, their safety representatives. Employers must consult employees or their representatives on health and safety matters. Consultation can reveal hazards, help test proposed precautions and make it easier for the team to understand the final arrangements.

Employees should also report hazards, near misses and concerns through the organisation’s procedures. A report is valuable evidence for the person managing the assessment, but reporting a problem does not replace the employer’s responsibility to respond.

Making an assessment suitable for the work

A suitable and sufficient assessment should cover the significant risks arising from the work, identify who could be harmed and consider the precautions already in place. It should lead to sensible additional measures where existing controls are not enough.

The assessor needs to consider more than employees carrying out routine tasks. Depending on the activity, visitors, contractors, customers or members of the public may also be affected. Different people can face different levels of risk, including new starters who are unfamiliar with a task or workers who need additional support.

The assessment should reflect normal work and reasonably foreseeable variations. For instance, a machine may be guarded during production but present different risks during cleaning, maintenance or clearing a blockage. An assessor who only looks at the normal operating position could miss a significant part of the job.

Generic templates can be useful starting points, especially for similar activities across several sites. They are not a substitute for checking local conditions. The layout, equipment, people involved and way the work is organised may all affect the precautions needed.

Some hazards have additional assessment requirements under specific regulations. Examples include hazardous substances and manual handling. A general assessment can help identify the need for further work, but it should not be assumed to cover every separate duty.

Recording findings and acting on them

Employers with five or more employees must record the significant findings of their risk assessments. These include the measures in place and details of groups of employees identified as being especially at risk. Employers with fewer than five employees do not generally have to record those findings under the general risk assessment regulations, although keeping a record can still be useful.

Other rules may require particular assessments or information to be recorded regardless of workforce size. Employers should check the requirements relevant to their work rather than assume the general threshold applies to every situation.

A useful record is clear enough for someone else to understand the risk and what needs to happen. It can describe the activity, the people affected, existing precautions and any further action. It should also make action owners and deadlines easy to find.

Sharing the relevant findings matters as much as storing the document. Employees need to understand the precautions that apply to their work, including any changes to equipment or procedures. Contractors may also need information about risks and controls that affect them.

A training record or completed assessment form can provide evidence of activity, but neither proves on its own that a workplace is safe. Employers need to check that the agreed controls are in place and being followed.

Review after change or new evidence

A risk assessment must be reviewed if there is reason to suspect it is no longer valid, or if there has been a significant change in the matters it relates to. There is no single review interval that applies to every general workplace risk assessment.

A change in equipment, materials, premises or working methods can make an earlier assessment unreliable. A near miss, incident or employee report may also reveal that a control is not working as expected. In those circumstances, the responsible person should revisit the findings and update them where necessary.

Some organisations also set scheduled reviews as a management practice. That can help keep assessments visible, particularly across multiple teams. A scheduled date should not delay a review when a significant change or warning sign appears sooner.

The review should check the actual work, not simply add a new date to the document. If a control has been introduced, ask whether it is used consistently and whether it has created another problem. Speak to the people affected and agree who will complete any further action.

Shared workplaces and contractors

Where employers share a workplace, each remains responsible for risks arising from their own undertaking. They also need to cooperate and coordinate with other employers where their activities affect one another.

For example, a contractor may assess its own maintenance work, while the site operator provides information about the building, access arrangements and hazards associated with other activities. Both parties need to communicate if the maintenance creates a risk for people elsewhere on site.

It is unsafe to assume that another organisation has assessed every risk simply because it supplied paperwork. Check the scope: what activity does the assessment cover, what information was used and what controls does each party need to provide? Someone should resolve gaps before work starts.

Self-employed people may also have risk assessment duties in relation to their work. The exact requirements depend on the work and who could be affected, so the relevant HSE guidance and legislation should be checked for the circumstances.

Choosing between internal and external support

An internal assessor is often a practical choice when the work is well understood and the organisation has someone with suitable competence. An employee can observe the activity regularly, speak to colleagues and return to check that controls are working. They may also be well placed to notice when a process changes.

The limitation is that familiarity can make gaps harder to spot. An internal assessor may need additional training, time away from normal duties or access to advice on an unfamiliar hazard. Giving the task to the most available person is not the same as choosing someone competent.

External support can be useful when a risk is complex, the business lacks relevant expertise or an independent view would help. A specialist can advise on the hazard and possible controls, but they will still need accurate information about the workplace. They may not see how a task changes across shifts or under pressure unless employees explain it.

A combined approach can work well. An internal manager might coordinate the assessment and maintain the action plan, while an external specialist advises on a specific technical issue. When comparing support, check the person’s experience with similar work, what the engagement covers and how findings will be handed over to the people responsible for acting on them.

Cost is also a consideration. External support may involve fees for site visits, specialist testing or follow-up work, while developing internal competence requires staff time and training. The lowest-cost option is not useful if it leaves a significant hazard outside the assessor’s knowledge.

For organisations building internal skills, Full Cycle Training’s risk assessment training course offers an introduction to identifying hazards, assessing risks and choosing controls. Compare its scope with the work your assessor will cover: general training can support competence, but complex or unfamiliar risks may still need practical instruction or specialist advice.

Frequently Asked Questions

Can Full Cycle Training’s risk assessment course replace workplace-specific instruction?

No. The online course provides an introduction to risk assessment, but assessors may also need practical instruction on your equipment, working methods and hazards. More complex risks may require specialist advice.

How long does Full Cycle Training’s risk assessment course take?

The online course is listed as taking 30 to 40 minutes. It includes a 20-question assessment, and learners receive a digital certificate after successful completion.

Can managers track their team’s training progress?

Yes. Full Cycle Training’s learning management system allows managers to assign training and monitor learner progress. Training records help you see who has completed a course, but they do not replace checks on workplace controls.

Which course suits an employee who needs a general introduction to workplace safety?

Full Cycle Training’s General Health and Safety course introduces common hazards, safety responsibilities and procedures. The risk assessment course is a more focused option for someone involved in identifying hazards and assessing risks.