A risk score is not the assessment
Multiplying likelihood by severity can help an organisation compare risks and apply a consistent action threshold. The number alone, however, does not explain what could cause harm, how people may be exposed or why the selected controls are reasonable.
A useful assessment connects the activity, hazard, exposure, credible consequence, people affected, current controls and further action. It contains enough information for the people doing the work, an approver and a future reviewer to understand the decision.
Separate the hazard, exposure and consequence
One of the most common weaknesses is combining several different ideas into one vague entry. “Risk of injury from machinery” does not give the assessor, operator or approver enough information to select or verify controls.
A clearer description separates the source of harm from the route to harm and the credible outcome. For example: an unguarded rotating shaft is the hazard; contact during adjustment is the exposure; entanglement and serious injury are credible consequences. That clarity creates a stronger basis for deciding whether elimination, isolation, guarding, interlocking or another control is required.
Six tests for a controlled assessment
The hazard is specific
Name the source of harm—such as energy, equipment, substance, condition, behaviour or activity—rather than writing only an injury or a generic risk.
Exposure is explained
Describe how a person encounters the hazard during normal work and during credible abnormal, cleaning, maintenance, start-up or emergency conditions.
Credible harm is clear
State the reasonably foreseeable outcome without exaggerating an impossible worst case or reducing it to an unhelpful phrase such as ‘injury’.
People at risk are considered
Include those doing the work, people nearby, contractors, visitors and anyone whose vulnerability or route of exposure may require different controls.
Controls and actions are traceable
Record what already prevents harm, what further control is required, who owns the action and when it must be completed.
The assessment can be reviewed
Define review triggers and retain enough rationale and evidence for another competent person to understand and challenge the decision.
Consider how work is really performed
Assessments become unreliable when they cover only ideal production conditions. Cleaning, maintenance, breakdown, start-up, shutdown, temporary work, contractor activity and foreseeable error can create different exposure routes. Previous incidents, near misses, equipment history and worker experience can reveal conditions that a written procedure misses.
The people who may be harmed also extend beyond the operator. Supervisors, maintenance staff, nearby employees, delivery drivers, visitors and members of the public may encounter the same source through different routes. Young or inexperienced workers, new starters, pregnant workers, disabled people, lone workers and people with relevant health conditions may need different consideration.
Controls should follow the risk—not the habit
A familiar control is not automatically the most effective control. Assessors should first ask whether the hazard can be removed. If it cannot, they should consider substitution, engineering measures and changes to the way work is organised before relying primarily on information, training or personal protective equipment.
Where further action is required, the assessment should retain an owner and target date. Residual risk should represent the control position after agreed actions have actually been implemented and verified—not the anticipated result while those actions remain open.
Review is part of the control
A review date is useful, but it should not be the only trigger. Changes to people, equipment, substances, processes or environment may alter risk. So may an incident, near miss, worker concern, failed control, new evidence or a reason to believe the assessment is no longer valid.
The assessment should therefore remain a live record of operational control. Approval, communication, action completion and review need to be visible rather than assumed.
Create a controlled risk assessment
RPG Excellence guides the assessor from hazard identification through risk evaluation, control selection, significant findings, action ownership, communication and review.
Reference: UK Health and Safety Executive, Managing risks and risk assessment at work. RPG Excellence supports structured risk management; it does not replace competent professional or legal advice.