How to write a risk assessment
A plain‑English walkthrough of a widely used 5‑step process. Use the free template or the online generator.
You can use the generator without an account. You’ll need a free account to save and edit at a later date.
Quick index
What is a risk assessment?
It’s a sensible, written look at what might cause harm and how you’ll control it.
Local laws differ, but the core steps are broadly recognised: identify hazards, assess and control risks, record, and review.
Good to know: Official guidance links for your region are below.
The 5 steps (General)
- Identify hazards: What could cause injury or illness?
- Assess the risks: Who might be harmed and how; how likely/severe is it?
- Control the risks: Decide on practical measures to reduce risk.
- Record your findings: Keep a simple written record.
- Review the controls: Check they work and update when things change.
Walkthrough
1) Identify hazards
Walk your activity or site and list what could cause harm. Think equipment, environment, substances, people, and tasks. Note anything unusual about your location or group.
2) Assess the risks (who, how, likelihood & severity)
For each hazard: who could be harmed (participants, staff, visitors), how they could be harmed, and how likely/serious it is before controls.
3) Control the risks (measures)
Choose proportionate controls. Prefer simple, proven measures: supervision ratios, equipment checks, training, signage, PPE where appropriate, and clear procedures.
4) Record your findings
Keep a brief record of significant hazards, who could be harmed, the controls, and the risk level before/after controls. Assign responsibilities and target dates.
5) Review and update
Revisit the assessment after incidents, changes in people/kit/locations, or on a routine schedule. Update controls that aren’t working in practice.
Scoring risk (3×3 matrix)
Many teams use a 3×3 matrix to combine likelihood and severity into a score. Keep your thresholds consistent with your organisation’s policy.
- Low: Acceptable with routine controls; monitor.
- Medium: Improve controls and keep under review.
- High: Do not proceed until risks are reduced.
Scoring risk (5×5 matrix)
A 5×5 matrix provides more detail, helping teams prioritise risks where activities are complex or involve higher stakes. It allows for finer distinction between levels of likelihood and severity.
- Very Low / Low: Acceptable with routine controls; monitor.
- Medium: Improve controls and keep under review.
- High: Action required — reduce risks before proceeding.
- Very High: Unacceptable — stop until controls are in place.
For sector-specific examples: Free Templates Library
Recording your findings
Keep a simple written record covering: who might be harmed and how, what you’re already doing, what further action is needed, who will do it, and when it’s due.
Reviews & updates
Review your assessment regularly and when things change — new equipment, locations, team, incidents, or after feedback from sessions. Update controls that aren’t working in practice.
Reminder: This page is guidance, not legal advice. You remain responsible for completeness and accuracy.
FAQs
Is a risk assessment a legal requirement?
Requirements vary by country. This guide covers widely accepted steps; please check your local regulations or standards for specifics.
Do I have to use a 3×3 matrix?
No. Use scoring that fits your policy. The important part is consistent, reasoned decisions and proportionate controls.
Do I need an account to use the generator?
You can use it without an account. You’ll need a free account to save for a later date.
Get started
Open the generator for a tidy, branded PDF, or download the free blank template and print to PDF.
