INDG1633 min read

Five Steps to Risk Assessment

The HSE's essential guide to workplace risk assessment. Explains how to identify hazards, evaluate risks, and implement controls. Required reading for all employers and anyone responsible for workplace safety.

Get a free compliance checklist for this guidance.

Get the checklist

Official HSE Document

Read the full official guidance on the HSE website.

View INDG163 on HSE.gov.uk

What is this document?

INDG163 is the HSE's foundational guide to risk assessment in the workplace. Originally titled "Five Steps to Risk Assessment", it has been updated to "Risk Assessment: A Brief Guide to Controlling Risks in the Workplace" while retaining the core five-step approach.

This document forms the basis of all health and safety compliance in the UK. Risk assessment is a legal requirement for employers, and this guide explains how to do it properly without overcomplicating things.

Who needs to read this?

  • All employers regardless of business size or sector
  • Self-employed people who work with others or whose work affects others
  • Managers and supervisors responsible for workplace safety
  • Landlords managing properties where people work
  • Property managers overseeing commercial or mixed-use buildings
  • Trustees and charity leaders with duty of care responsibilities
  • Care providers managing risks to staff and service users

If you have any responsibility for workplace safety, this document applies to you.

Key points covered

The document sets out the five essential steps to conducting a risk assessment:

  1. Identify the hazards - Walk around your workplace and look for things that could cause harm. Consider all activities, not just obvious dangers.

  2. Decide who might be harmed and how - Think about employees, visitors, contractors, and members of the public. Consider vulnerable groups like young workers, pregnant women, and those with disabilities.

  3. Evaluate the risks and decide on precautions - For each hazard, consider how likely harm is and how serious it could be. Then decide what controls are reasonably practicable.

  4. Record your significant findings - If you employ 5 or more people, you must write down your risk assessment. Even if you have fewer employees, it is good practice.

  5. Review and update your assessment - Risk assessments are not one-off exercises. Review them regularly and whenever things change.

The guide emphasises that risk assessment does not need to be complicated. You are not expected to eliminate all risks, but you must do what is reasonably practicable to protect people.

How this applies to you

Every workplace needs at least one general risk assessment. Depending on your activities, you may also need specific assessments for:

Start with the basics. Walk through your workplace with fresh eyes. What could cause someone harm? Who is at risk? What are you already doing about it? What more should you do?

If you have not done a risk assessment, or yours is out of date, this HSE guide gives you the framework to get started. For complex or high-risk activities, you may need professional help from a competent health and safety advisor.

Note:

Risk assessment is the foundation of workplace safety. Getting this right helps you meet your legal duties and, more importantly, protects the people who work for you.

Related guidance


Official HSE document: Risk assessment guidance on HSE

Read the Full Document

This page provides a summary to help you understand if INDG163 is relevant to you. For complete guidance, always refer to the official HSE publication.

View on HSE.gov.uk

Explore Related Topics

Get a compliance checklist

Enter your email to receive a tailored checklist based on this guidance.

We respect your privacy. See our privacy policy.

Last reviewed: 27 December 2025