A workplace health and safety risk assessment is a documented identification of hazards present in a workplace, the persons at risk from them, and the controls needed to manage that risk so far as is reasonably practicable (SFAIRP). It is a legal requirement under Regulation 3 of the Management of Health and Safety at Work Regulations 1999 for every UK employer and self-employed person whose work creates risk. The assessment must be 'suitable and sufficient' and must be recorded in writing by any employer with five or more employees.
Every UK employer must assess workplace risks under the Management of Health and Safety at Work Regulations 1999. Employers with five or more staff must record the assessment in writing. RiskSorted assessors hold NEBOSH General Certificate, IOSH Managing Safely, or higher qualifications and produce reports following the HSE's recognised 5 Steps to Risk Assessment methodology — suitable for HSE inspection, insurance renewal, lease compliance, and tender submissions. All assessors carry minimum £2m Professional Indemnity insurance and are matched to your premises type and activity profile.
Systematic identification of workplace hazards (physical, chemical, biological, ergonomic, psychosocial), persons at risk (employees including vulnerable groups, contractors, visitors, members of the public), evaluation of existing controls against the SFAIRP standard ('so far as is reasonably practicable'), Likelihood × Severity risk-rating matrix with residual risk score after controls, and prioritised additional control recommendations. Where activity-specific assessments are required (COSHH, manual handling, working at height, lone working, DSE, fire), these are integrated as appendices or quoted separately depending on scope.
A full HSE 5 Steps-aligned risk assessment report, hazard register with risk-scoring per item, prioritised action plan with high/medium/low risk categorisation and realistic timescales (30/90/365 days typical), recommended review frequency, and certificate signed by your assessor. All records retained in your RiskSorted account for the statutory minimum period and beyond. Where the assessment identifies remedial work (electrical repairs, fire safety upgrades, signage, training), follow-on services are quoted separately through verified specialists in our network.
| Assessor qualification | NEBOSH General Certificate or IOSH Managing Safely (minimum); higher qualifications matched to higher-risk premises |
| Insurance requirement | Minimum £2m Professional Indemnity |
| Method | HSE 5 Steps to Risk Assessment; SFAIRP (so far as is reasonably practicable) standard |
| Risk rating | Likelihood × Severity matrix; residual rating after existing controls |
| Statutory recording threshold | 5+ employees (smaller employers still required to assess but not record) |
| Average duration | Half day for small premises (Foundation tier); full day for medium (Intermediate); two days+ for high-risk or activity-specific (Advanced) |
| Certificate format | Branded PDF assessment with full hazard register and action plan, stored in your RiskSorted account |
| Review reminder | 60 and 30 days before review date — automatic |
UK workplace health and safety risk assessment sits within a layered legal framework that has been the foundation of British occupational safety law for fifty years. The legal foundation is the Health and Safety at Work etc. Act 1974, which followed the Robens Report and consolidated decades of fragmented industrial safety legislation into a single comprehensive framework. Section 2 places a general duty on every employer to ensure, so far as is reasonably practicable (SFAIRP), the health, safety and welfare at work of all employees. Section 3 extends that duty to non-employees — visitors, contractors, members of the public — affected by the work. Section 7 places a corresponding duty on every employee to take reasonable care.
The HSWA 1974 is the primary legislation but it is deliberately framed at a high level. The detailed risk-assessment duty comes from Regulation 3 of the Management of Health and Safety at Work Regulations 1999 (MHSWR), which requires every employer (and every self-employed person whose work creates risk) to make a 'suitable and sufficient assessment of the risks to the health and safety' of employees and non-employees arising from work activities. The assessment must be reviewed when there is reason to suspect it is no longer valid, or when there has been a significant change in the matters to which it relates. Employers with five or more employees must record the significant findings in writing.
The phrase 'so far as is reasonably practicable' (SFAIRP) is fundamental to UK health and safety law and is what makes risk assessment specifically a UK exercise rather than a tick-box compliance check. SFAIRP requires the duty holder to weigh the risk being managed against the cost (in money, time and effort) of further controlling it — and to implement controls until the cost of further measures becomes grossly disproportionate to the residual risk reduction. The standard is goal-setting rather than prescriptive: the HSE does not generally tell you what controls to implement, but does inspect the quality of your risk identification, your reasoning, and your implementation. SFAIRP is what gives the UK approach its flexibility, but it also requires judgement — which is why competence of the assessor matters so much.
Beyond the general MHSWR duty, several activity-specific regulations require their own risk assessments where applicable: COSHH 2002 (Control of Substances Hazardous to Health) requires a separate assessment for any work involving substances hazardous to health (chemicals, dust, fumes, biological agents); Manual Handling Operations Regulations 1992 requires assessment of manual handling tasks; Display Screen Equipment Regulations 1992 requires DSE workstation assessments; Working at Height Regulations 2005 requires assessment of any work at height; the Regulatory Reform (Fire Safety) Order 2005 requires a separate fire risk assessment. A comprehensive workplace H&S risk assessment integrates these where relevant, or signposts them as separate assessments as appropriate.
The HSE 5 Steps to Risk Assessment is the practical methodology recognised across UK industry and is the framework HSE inspectors expect to see followed. It is not the only valid approach but it is the most widely used and best understood — particularly important in defending an assessment if its adequacy is ever questioned by HSE, by an insurer, or in court.
Each of the five steps has a specific operational purpose:
RiskSorted assessments follow this framework end-to-end. The hazard register is your operational tool, not just a compliance document — it's what your team uses to stay alive to changing risks between formal review cycles.
H&S risk assessment pricing varies by premises type, activity profile, and the specialism of assessment required. Market rates currently sit roughly as follows.
Small low-risk premises (small office, retail unit, small workshop with no specialist activities): £400 to £600. Site time half a day. NEBOSH General Certificate or IOSH Managing Safely-qualified assessor. Standard hazard categories: slips and trips, manual handling, DSE, electrical safety, fire, lone working, contractor management. Report 12-20 pages with hazard register and action plan.
Medium-complexity workplaces (mid-sized offices with multiple departments, hospitality with kitchens, retail with stockrooms, schools, GP surgeries, small care premises): £600 to £1,200. Site time three-quarters of a day to full day. Higher-risk activities present: kitchens, working with the public, vulnerable users, evening or out-of-hours operation. NEBOSH General Certificate-level assessor with relevant sector experience.
Higher-risk workplaces (manufacturing with machinery, construction sites, warehouses with racking, healthcare with clinical activities, larger care homes, premises with visiting members of the public at scale): £1,200 to £3,000. Site time full day to two days. Activity-specific assessments integrated: COSHH for manufacturing, working at height for warehousing, manual handling for healthcare and care, lone working for security and field staff. NEBOSH Diploma-level assessor or Chartered Member of IOSH (CMIOSH).
Specialist activity-specific assessments (separate quote): COSHH assessment for chemical-handling premises; working at height for buildings with rooftop plant; confined-space assessments for utilities and water industry; specialist fire engineering assessments. Pricing varies with scope but generally £400 to £1,500 per specialist assessment.
RiskSorted's pricing is shown in full at the point of booking based on your premises, sector, and activity profile. There are no hidden extras for re-issue of the report, the action plan template, or storage of records in your account. Where the assessment identifies remedial work, those follow-on services are quoted separately through verified specialists in our network — not bundled into the assessment fee where you can't see what you're paying for.
Bundle savings. H&S risk assessment pairs naturally with Fire Risk Assessment under the RRFSO 2005, Legionella risk assessment under ACoP L8, and the standard suite of PAT, EICR, fire extinguisher and emergency lighting compliance. Most office and small commercial customers benefit from a coordinated bundle on a single visit — typical 15–20% saving on combined pricing versus booking each service separately, driven by single-trip mobilisation rather than discount marketing.
Every H&S risk assessor in the RiskSorted network is verified before their first booking. Verification includes:
When you book an H&S risk assessment through RiskSorted, the booking is matched to the assessor with the appropriate competence level for your premises, sector experience for your activity profile, the closest postcode to your premises, current insurance, and capacity in your timeframe. Match-by-sector is the discipline that distinguishes a useful assessment from a generic template — a NEBOSH-qualified assessor with retail experience handles your retail unit; a manufacturing-experienced assessor handles your factory; a care-sector assessor handles your residential care home. Verification is repeated annually; assessors whose insurance or competence evidence lapses are removed from the matching pool until renewed.
Health and safety risk assessment is the compliance service where the gap between regulatory requirement and accessible buyer-facing content is widest. Most existing UK content on H&S risk assessment is one of three types — and none of them serves the buyer well.
The first type is HSE primary documents: technically authoritative but written for safety professionals, dense, and hard to navigate for an SME owner trying to work out whether they need an assessment, what it should cover, and how much they should expect to pay. The HSE's own guidance is the gold-standard source but it isn't a buyer journey.
The second type is SaaS H&S software vendor content — written to drive sign-ups for digital risk assessment platforms. This content systematically over-emphasises the role of templates and software while under-emphasising the role of competent assessor judgement. The UK legal duty is to make a 'suitable and sufficient' assessment, which is a judgement call rooted in SFAIRP reasoning. Software platforms can support that judgement but cannot replace it. SaaS content rarely says so clearly.
The third type is large H&S consultancy thought-leadership — written for facilities managers and procurement professionals at large enterprises, full of jargon, designed to drive enterprise sales contracts rather than answer specific buyer questions. Useful for FTSE-250 H&S directors; useless for the owner of a small office trying to renew their insurance.
The buyer query that genuinely isn't well served is the SME owner asking: 'I employ 12 people in an office. My insurance renewal asks for a current H&S risk assessment. What does that mean, who can do it, what should it cost, what should I expect to receive, and how does this fit alongside my fire risk assessment and other compliance documents?' That's the query RiskSorted's H&S content is written to answer directly.
What proper H&S risk assessment looks like. A site visit by a competent assessor (NEBOSH General Certificate or IOSH Managing Safely as the minimum bar). Systematic walk-through following the HSE 5 Steps methodology. Conversations with staff — not just the manager — because the people doing the work see the practical hazards. Hazard register tailored to your specific premises, not a generic template with your name swapped in. Risk scores using a Likelihood × Severity matrix with residual scoring after existing controls. Action plan with realistic priorities and deadlines, named responsibilities, and SFAIRP reasoning that holds up to scrutiny. Written report you can present to HSE inspectors, insurers, lease auditors, and tender processes without having to explain it. Annual review built into your renewal calendar.
Every booking through RiskSorted supports a UK NEBOSH or IOSH-qualified consultant or small specialist H&S practice — not a national franchise running templated assessments on premises they've never properly visited. Compliance spend stays in the UK communities where the work is done, and the assessment quality reflects the genuine specialism the law expects.
Reviewed by RiskSorted's compliance team. RiskSorted's in-house team holds collective qualifications across NEBOSH General Certificate, IOSH Managing Safely, Fire Risk Assessment (PAS 79-1), and electrical compliance. All service guides are reviewed against current UK regulations and the latest editions of the relevant British and ACoP standards.
This page provides general guidance on UK compliance services and is not a substitute for professional advice. Specific compliance requirements should be confirmed with a qualified professional based on the particulars of your premises, business activities and applicable regulations.
Bundle Health & Safety Risk Assessment with your other compliance services and save on a single-visit booking.
See all services