A risk assessment is the starting point for safe work on any construction site. It is how a contractor works out what could cause harm, decides how to prevent it, and shows they have thought it through before anyone picks up a tool. It is also a legal duty, not a nice-to-have.
This guide explains what a construction risk assessment is, walks through the five steps to writing one, and covers how method statements (RAMS), dynamic risk assessments and the hierarchy of control fit around it. It finishes with the practical part that trips teams up: keeping every assessment current across a busy portfolio of jobs.
Walk the job and note anything with the potential to cause harm, from work at height to manual handling and hazardous substances.
For each hazard, think about who is at risk and how, including your team, subcontractors, visitors and the public.
Rate the risk, then decide the controls using the hierarchy of control, so the highest risks are dealt with first.
Write down the significant hazards, who is affected and the controls. This is a legal requirement for businesses with five or more employees.
Revisit the assessment when the job changes, after an incident, or at set intervals, so it reflects the work as it is now.
What is a construction risk assessment?
A risk assessment is a careful look at what, in your work, could cause harm to people, so you can decide whether you have done enough to prevent it. It is worth being clear on two words that often get mixed up. A hazard is anything with the potential to cause harm, such as a scaffold, a power tool or a hazardous substance. A risk is the chance that the hazard actually harms someone, and how serious that harm could be.
Risk assessments are a legal requirement. Under the Management of Health and Safety at Work Regulations 1999, every employer must assess the risks to workers and anyone else who could be affected by their work. If you have five or more employees, you must record the significant findings. For the wider legal picture, see our construction health and safety legislation guide.
The 5 steps to a risk assessment
The most widely used framework, set out by the Health and Safety Executive (HSE), breaks a risk assessment into five steps. The cards above summarise them; here is what each one means in practice on a construction site.
1. Identify the hazards. Look at the actual work, not a generic list. Walk the site, talk to the people doing the job, and think about less obvious hazards such as noise, dust and fatigue as well as the obvious ones like falls and moving plant.
2. Decide who might be harmed and how. Be specific. Some groups need extra thought, such as young or inexperienced workers, and anyone working near but not on your task, including the public and other trades.
3. Evaluate the risks and decide on controls. For each hazard, weigh how likely harm is against how serious it would be. Many teams score this on a 5x5 risk matrix so the highest risks stand out. Then decide your control measures using the hierarchy of control, described below.
4. Record your findings. Write down the significant hazards, who could be harmed, and the controls you have put in place. The record does not need to be complicated, but it does need to be a true reflection of the work and easy to find.
5. Review and update. A risk assessment is not a one-off. Review it when the method or the site changes, when new people or equipment arrive, after a near miss or incident, and at sensible intervals in between.
Risk assessments and method statements (RAMS)
On site you will often hear risk assessments and method statements spoken about together as RAMS. They are two documents that do different jobs. The risk assessment identifies the hazards and the controls. The method statement, sometimes called a safe system of work, sets out step by step how the task will be carried out safely, using those controls.
They belong together because one without the other is incomplete: a risk assessment tells you what could go wrong, and the method statement tells the team exactly how to do the work so it does not. Most principal contractors will ask for RAMS before high-risk work starts.
The hierarchy of control
When you decide how to control a risk, the hierarchy of control sets the order to work through. Always start at the left and only move right when a higher control is not reasonably practicable. PPE is the last line of defence, not the first.
What is a dynamic risk assessment?
A written risk assessment is prepared before the work. A dynamic risk assessment is the continuous check a competent person makes on the day, as conditions change. Weather turns, a delivery blocks an access route, another trade starts work nearby: any of these can change the risk, and the team needs to reassess on the spot and adjust.
Dynamic risk assessment does not replace the written one. It sits alongside it, and where it leads to a lasting change, that change should be fed back into the recorded assessment so the document stays true to the work.
Do you need a risk assessment template?
A template is worth using because it keeps your risk assessments consistent, prompts you not to miss a step, and makes them quicker to complete and easier to read. The HSE publishes free risk assessment templates and examples that are a sensible starting point.
Whatever format you use, the template matters less than what happens to the finished assessment. It needs to be recorded, kept with the job it belongs to, shared with the people doing the work, and reviewed when things change. A perfect template filed on someone’s laptop helps nobody.
Keeping risk assessments current across projects
For one task, a risk assessment is straightforward. Across every live job, with method statements, COSHH assessments and reviews all due at different times, it becomes an admin job that is easy to lose control of.
This is where Sync’s risk management helps. It is the home for your completed risk assessments and RAMS: kept in one place, linked to the project they belong to, with review dates tracked so nothing quietly runs out of date. When a health and safety audit comes around, the current version is already to hand rather than scattered across drives and inboxes.
Get risk assessments right, then keep them current
A good construction risk assessment is not about paperwork for its own sake. It is a genuine look at how the work could hurt someone and what you are doing to stop it, recorded clearly and kept up to date. Get the five steps right, pair each one with a method statement where the risk calls for it, and make sure the finished document lives somewhere your team will actually find it.
To see how Sync keeps your risk assessments, RAMS and reviews in one current place, explore risk management or talk to our team.