Risk assessments are the backbone of effective health and safety management. When done well, they reduce accidents, protect employees, and demonstrate compliance with UK legislation — particularly the Management of Health and Safety at Work Regulations 1999. But even experienced managers and safety professionals fall into predictable traps. These risk assessment mistakes weaken controls, expose organisations to enforcement action, and create blind spots that put people at risk.
This guide breaks down the most common errors, explains why they happen, and provides practical steps — grounded in HSE risk assessment guidance — to help you avoid them.
Not Identifying All Relevant Hazards
One of the biggest and most frequent mistakes is failing to identify every hazard present in a task, process, or environment. Many organisations focus only on obvious physical hazards (machinery, slips, trips) and overlook less visible risks such as:
- Stress and fatigue
- Lone working
- Chemical exposure
- Ergonomic strain
- Noise and vibration
- Psychosocial risks
- Environmental conditions
Why This Happens
People tend to assess familiar tasks quickly, assuming they already understand the risks. This leads to complacency and missed hazards.
How to Avoid It
- Walk the site and observe real working conditions.
- Speak to employees — they often know risks managers don’t.
- Use HSE templates and checklists to broaden your scope.
- Review accident, incident, and near‑miss data for clues.
- Consider non‑routine tasks such as maintenance, cleaning, and emergency situations.
Using Generic or Copy‑and‑Paste Assessments
Generic assessments are one of the most criticised issues in HSE risk assessment guidance. A risk assessment must reflect the specific environment, people, equipment, and processes involved. Copy‑and‑paste documents rarely do this.
Why This Happens
Time pressure, lack of training, or a belief that “something is better than nothing” leads organisations to reuse old templates.
How to Avoid It
- Tailor every assessment to the task and location.
- Include photographs to demonstrate real conditions.
- Update assessments whenever processes change.
- Ensure each control measure is relevant and achievable.
Generic assessments may tick a box, but they won’t stand up to scrutiny during an HSE inspection.
Failing to Consider Vulnerable Workers
Risk assessments must account for individuals who may be at greater risk, including:
- Young workers
- Pregnant workers
- People with disabilities
- Inexperienced staff
- Contractors unfamiliar with the site
- Older workers
- Night‑shift workers
Why This Happens
Assessors often focus on the task rather than the people performing it.
How to Avoid It
- Add a section specifically addressing vulnerable groups.
- Consult HR and occupational health where needed.
- Adjust controls to suit individual capability and needs.
Underestimating the Severity or Likelihood of Harm
Many organisations unintentionally downplay risk levels. This leads to inadequate controls and a false sense of security.
Why This Happens
- Lack of understanding of risk matrices
- Optimism bias (“It won’t happen here”)
- Pressure to keep risk ratings low
How to Avoid It
- Use evidence: incident data, industry statistics, manufacturer guidance.
- Challenge assumptions — especially when risks are rated “low”.
- Involve multiple people in scoring to reduce bias.
Not Implementing Control Measures Properly
A risk assessment is only useful if its control measures are actually put in place. Many organisations fail at this stage.
Why This Happens
- Controls are unrealistic or too expensive
- Responsibilities are unclear
- No follow‑up or monitoring
- Lack of training or supervision
How to Avoid It
- Assign clear responsibilities and deadlines.
- Ensure controls follow the hierarchy of control (eliminate, substitute, engineer, administrate, PPE).
- Train staff on new procedures.
- Monitor compliance through audits and inspections.
Ignoring Human Factors
Human behaviour plays a huge role in risk. Fatigue, stress, distraction, workload, and culture all influence how safely people work.
Why This Happens
Risk assessments often focus solely on physical hazards.
How to Avoid It
- Include human factors in every assessment.
- Consider shift patterns, workload, and environmental conditions.
- Assess whether controls rely too heavily on human behaviour (e.g., “workers must remember to…”).
Not Reviewing Risk Assessments Regularly
Risk assessments must be reviewed:
- After an accident or near miss
- When equipment changes
- When processes change
- When new staff join
- When legislation changes
- At least annually for most workplaces
Why This Happens
Organisations assume risk assessments are “done” once completed.
How to Avoid It
- Schedule annual reviews.
- Use digital reminders or compliance software.
- Encourage staff to report changes that may affect risk.
Poor Documentation and Record Keeping
Incomplete or unclear documentation is a common compliance issue.
Why This Happens
Assessors rush the process or lack training in writing clear, audit‑ready documents.
How to Avoid It
- Use structured templates aligned with HSE guidance.
- Include photos, diagrams, and evidence of controls.
- Keep version control and update logs.
- Ensure assessments are accessible to all staff.
Not Involving Employees in the Process
HSE guidance is clear: risk assessments must involve workers. They understand the job better than anyone.
Why This Happens
Managers often complete assessments alone or rely solely on supervisors.
How to Avoid It
- Hold short hazard‑spotting sessions with staff.
- Encourage open reporting of risks.
- Include employee feedback in the final document.
Over‑Reliance on PPE
PPE is the last resort in the hierarchy of control, yet many organisations use it as the first.
Why This Happens
PPE is cheap, quick, and easy to implement — but it does not remove the hazard.
How to Avoid It
- Prioritise elimination, substitution, and engineering controls.
- Use PPE only when other controls cannot fully reduce risk.
- Ensure PPE is suitable, maintained, and worn correctly.
Failing to Communicate the Findings
A risk assessment is useless if employees don’t know what’s in it.
Why This Happens
Documents are stored away and never shared or explained.
How to Avoid It
- Brief staff during toolbox talks.
- Display key controls on posters or digital screens.
- Provide training for high‑risk tasks.
- Ensure contractors receive relevant assessments before starting work.
Not Following HSE Risk Assessment Guidance
HSE provides clear, structured guidance on:
- Identifying hazards
- Assessing risk
- Implementing controls
- Recording findings
- Reviewing assessments
Why This Happens
Some organisations rely on outdated internal processes or misunderstand legal requirements.
How to Avoid It
- Use HSE templates and examples.
- Train assessors in current legislation.
- Benchmark your assessments against industry standards.
- Conduct periodic audits to ensure compliance.
FAQs: Common Risk Assessment Mistakes
What is the most common risk assessment mistake?
Failing to identify all hazards — especially non‑routine or less visible risks — is the most frequent and dangerous mistake.
How often should risk assessments be reviewed?
At least annually, and whenever there are changes to equipment, processes, staff, or legislation.
Are generic risk assessments acceptable?
No. HSE guidance is clear: assessments must be specific to the task, location, and people involved.
Who should be involved in a risk assessment?
Managers, supervisors, employees performing the task, and competent health and safety advisors.
What happens if risk assessments are not done properly?
Poor assessments can lead to accidents, enforcement notices, fines, civil claims, and reputational damage.
Need help? Speak to a Health & Safety Advisor
If you want audit‑ready, compliant, and practical risk assessments tailored to your organisation, professional support can make all the difference.