Free Risk Assessment Template Download: HSE-Compliant, Ready to Use
Short answer: A risk assessment template is a structured form that helps you identify workplace hazards, evaluate who might be harmed and how, record existing controls, and plan further actions. This page gives you a free downloadable template that follows the UK HSE 5-step approach and aligns with ISO 31000:2018 risk management principles. No email sign-up required.
Running a business means you're responsible for keeping people safe. Under the Management of Health and Safety at Work Regulations 1999, UK employers must assess workplace risks and put controls in place. In the US, OSHA's General Duty Clause (Section 5(a)(1) of the OSH Act) requires employers to provide a workplace free from recognized hazards. A risk assessment template makes this manageable. You don't need to be a safety professional to get it right.
What Is a Risk Assessment Template?
A risk assessment template is a standardized document that guides you through the process of identifying hazards, evaluating risks, and recording your findings. Most templates include columns for:
- Activity or task being assessed
- Hazards identified
- Who might be harmed (employees, contractors, visitors, members of the public)
- Existing control measures
- Risk rating (likelihood × severity)
- Further actions required
- Person responsible
- Completion date and review date
The HSE provides a free risk assessment template on its website in both Word (.docx) and Open Document (.odt) formats. It's a simple three-column table covering hazard, existing controls, and further action needed. But for most businesses, a digital template that integrates with your inspection workflow saves more time than a paper form you have to file manually.
Risk Assessment Requirements Under UK and US Law
UK: Management of Health and Safety at Work Regulations 1999
Under Regulation 3 of the Management Regulations, every employer must make a "suitable and sufficient assessment" of the risks to their employees and to others affected by their work. The HSE's guidance breaks this into five steps:
Step 1 — Identify hazards: Walk through your workplace and look for anything that could cause harm. Think about physical hazards (trip risks, machinery), chemical hazards (cleaning products, dust), ergonomic hazards (repetitive movements, poor posture), and psychosocial hazards (stress, lone working).
Step 2 — Decide who might be harmed and how: Don't just think about employees. Consider agency staff, contractors, visitors, cleaners, maintenance workers, and members of the public. Pay extra attention to vulnerable groups: new or young workers, pregnant women, people with disabilities, and night-shift workers.
Step 3 — Evaluate risks and decide on precautions: Ask yourself: can I remove the hazard entirely? If not, what controls can reduce the risk? Follow the hierarchy of controls: elimination, substitution, engineering controls, administrative controls, personal protective equipment (PPE).
Step 4 — Record your findings: If you have five or more employees, you must record your significant findings. This is where a risk assessment template comes in. It gives you a clear structure for what to write down.
Step 5 — Review and update: Risks change. New equipment, new processes, and new people can all introduce new hazards. The HSE recommends reviewing your assessments regularly and updating them when circumstances change.
US: OSHA Requirements
OSHA doesn't prescribe a specific risk assessment format, but the General Duty Clause and specific standards (like 29 CFR 1926 for construction and 29 CFR 1910 for general industry) effectively require hazard assessment. OSHA's Recommended Practices for Safety and Health Programs outline a four-part framework:
- Management leadership — commitment from leadership to safety
- Worker participation — involve workers in identifying and fixing hazards
- Hazard identification and assessment — identify hazards, conduct inspections, assess severity and likelihood
- Hazard prevention and control — implement controls, track progress, evaluate effectiveness
OSHA does not require you to submit your risk assessments, but you must maintain records of workplace injuries and illnesses (OSHA 300 Log) and make hazard assessments available to employees upon request.
ISO 31000:2018 — Risk Management Guidelines
ISO 31000:2018 is the international standard for risk management. Unlike the HSE regulations or OSHA requirements, it's a voluntary framework that applies to any type of risk. Not just health and safety, but also financial, strategic, operational, and compliance risks.
The standard outlines three components:
- Principles — risk management should be integrated, structured, customized, inclusive, dynamic, and based on the best available information
- Framework — leadership commitment, design, implementation, evaluation, and improvement of risk management processes
- Process — communication and consultation, establishing the context, risk identification, risk analysis, risk evaluation, risk treatment, monitoring and review
ISO 31000 was last reviewed and confirmed in 2023, meaning it remains current. It's not a certifiable standard (you can't get "ISO 31000 certified"), but it provides the foundation for risk management frameworks across industries.
How to Use a Risk Assessment Template (5-Step Guide)
Fill out a risk assessment template in five steps.
1. List each activity or work area. Break your workplace into manageable chunks. Don't try to assess the whole office in one go. Split it by room, by task, or by process.
2. Identify hazards for each area. Walk through each area and note what could cause harm. Common hazards include trailing cables, wet floors, unguarded machinery, manual handling, hazardous substances, noise, and inadequate lighting.
3. Decide who's at risk. Be specific. Instead of writing "staff," note which staff. Cleaning crew who work evenings, receptionists who sit near the entrance, maintenance workers who access the roof. Include anyone who might be affected, even if they don't work directly in the area.
4. Rate the risk. Most templates use a simple risk matrix: likelihood (rare, unlikely, possible, likely, almost certain) × severity (minor, moderate, major, severe, catastrophic). This gives you a priority ranking so you can address the highest risks first.
5. Document controls and set deadlines. For each hazard, note what you're already doing to control it. If more action is needed, assign it to a specific person with a due date. Then set a review date. The HSE recommends reviewing your risk assessment at least annually or whenever significant changes occur.
Common Risk Assessment Mistakes
Treating it as a paperwork exercise. The most common mistake by far. A risk assessment that sits in a binder and never gets read won't prevent a single incident. The value is in the walk-through, the conversations with workers, and the actions you take afterward.
Copying someone else's template without customizing it. The HSE explicitly warns against this: "Do not just copy an example and put your company name to it as that would not satisfy the law and would not protect your employees." Generic assessments miss the specific hazards of your workplace.
Forgetting to review. Risks aren't static. A risk assessment from 2024 might miss the equipment you bought last month, the new hire who's still learning the procedures, or the changed layout after the office renovation. Set a calendar reminder to review.
Overcomplicating the risk matrix. A 5×5 matrix with 25 possible risk ratings can make every risk feel urgent when none of them are. For small businesses, a simple low/medium/high classification works better.
Not involving workers. Your employees know the hazards of their jobs better than anyone. A risk assessment done from your desk without talking to the people doing the work will miss half the risks.
Using InspectionReport.app for Digital Risk Assessments
A paper risk assessment template works fine for small businesses. But if you're managing risks across multiple sites, teams, or contractors, a paper system quickly becomes unmanageable. Lost forms, illegible handwriting, no way to track whether actions were completed.
InspectionReport.app gives you the digital version of a risk assessment template. Instead of printing forms and filing them manually, you create the same risk assessment structure in a mobile-friendly interface. Key features that matter for risk assessment:
- Customizable checklists — build your risk assessment template once and reuse it across all your inspections
- Photo capture and annotation — photograph hazards during walk-throughs and mark them up directly
- Real-time collaboration — share assessments with your team as you complete them
- PDF report generation — export completed risk assessments for records, clients, or regulators
- Signature capture — get sign-off from responsible parties for each action item
- Cloud storage — all assessments stored securely, no more lost paper forms
- Offline mode — complete risk assessments in the field without internet access
Build and preview free. Export a finished PDF or Word report for €9.95, or go Unlimited at €29/month. Taxes included worldwide.
FAQ
What's the difference between a hazard and a risk?
A hazard is anything that could cause harm. A trailing cable, a chemical spill, unguarded machinery. A risk is the likelihood that someone will be harmed by that hazard, combined with how serious the harm could be. Risk assessment templates help you separate these two concepts: you list the hazards, then evaluate the risk each one presents.
Do I need a risk assessment if I'm self-employed?
Under UK law, yes. If your work could create risks to others (contractors, clients, members of the public), the Management of Health and Safety at Work Regulations 1999 apply to you. However, if your work poses no risk to anyone else, many of the requirements do not apply. The HSE's guidance pages have a self-employed checklist to help you decide.
How often should I update my risk assessment?
The HSE recommends reviewing your risk assessment at least annually and whenever significant changes occur. New equipment, new processes, changes to the workplace layout, or after an incident. In practice, the best approach is to set a fixed review date and flag specific assessments for review when you know something has changed.
Can I use InspectionReport.app for free?
Yes. Build and preview free. Export a finished PDF or Word report for €9.95, or go Unlimited at €29/month. Taxes included worldwide. If you need more capacity, paid plans start at $29/month.
Internal links to include: