Risk Assessment for Construction Sites: A Practical Guide for UK Site Managers

Risk assessments are the most misunderstood documents in UK construction. Every site has them. Filing cabinets and shared drives are stuffed with them. But ask a labourer on site what the top three risks are for the task they are doing right now, and you will usually get a blank look.

That is the gap between risk assessment as a compliance exercise and risk assessment as a tool that actually keeps people safe. This guide is about closing that gap.

What a Risk Assessment Actually Is

A risk assessment is a structured process for identifying hazards, evaluating the likelihood and severity of harm, and deciding what control measures are needed. Under UK law, specifically the Management of Health and Safety at Work Regulations 1999, every employer must carry out suitable and sufficient risk assessments for their work activities.

In construction, risk assessments are typically produced alongside method statements to form RAMS (Risk Assessment and Method Statement). The risk assessment identifies what could go wrong. The method statement explains how the work will be done to prevent it.

The Legal Position

Risk assessments are a legal requirement, not a suggestion. If you employ five or more people, the assessment must be written down. Even if you employ fewer than five, the HSE strongly recommends recording your assessments. In construction, written risk assessments are expected regardless of team size because of the inherent dangers of the work.

Under CDM 2015, both the principal contractor and individual contractors must ensure risk assessments are in place for their work. The site manager typically manages this process on site, checking that subcontractors have produced adequate RAMS before they start work.

The Five Steps to Risk Assessment

The HSE sets out a straightforward five-step approach that works for any construction activity.

Step 1: Identify the Hazards

Walk the site and the specific work area. Look at what could cause harm. Talk to the workers who will do the task, because they usually know the risks better than anyone. Review accident records for similar tasks. Check manufacturer instructions for plant and equipment.

Common construction hazards include working at height (falls from scaffolds, ladders, roofs), moving plant and vehicles (struck by excavators, dumpers, delivery vehicles), manual handling (lifting heavy materials, repetitive tasks), falling objects (materials dropped from height, unsecured loads), excavations (trench collapse, striking underground services), electrical hazards (contact with overhead or underground cables), hazardous substances (dust, chemicals, asbestos), noise and vibration (from power tools, plant, and equipment), and fire (hot works, flammable materials, poor housekeeping).

Step 2: Decide Who Might Be Harmed

Consider everyone who might be affected, not just the workers doing the task. This includes other trades working nearby, visitors and inspectors, members of the public passing the site, and delivery drivers entering the site.

Pay particular attention to vulnerable groups. Young workers, new starters, and lone workers may face higher risks due to inexperience or isolation.

Step 3: Evaluate the Risks and Decide on Controls

For each hazard, decide how likely it is to cause harm and how severe that harm could be. Then apply the hierarchy of controls: eliminate the hazard entirely if possible, substitute with something less dangerous, use engineering controls (guards, barriers, ventilation), use administrative controls (procedures, signage, training), and provide personal protective equipment as a last resort.

PPE is always the last line of defence, not the first. "Wear a hard hat" is not a risk assessment. It is one small part of a broader control strategy.

Step 4: Record Your Findings

Write it down clearly and simply. A good risk assessment for a construction site uses plain English, not safety jargon. The person reading it might be a 19-year-old apprentice on their first site. If they cannot understand it, it has failed.

Step 5: Review and Update

Risk assessments are not permanent. They must be reviewed when conditions change, after an incident or near miss, when new information becomes available (such as updated COSHH data), or at regular intervals throughout the project.

A risk assessment that was written six months ago for different ground conditions and a different workforce is not suitable or sufficient. Review regularly.

Risk Assessment Example for a Construction Site

Here is a practical example for a common construction activity: working at height from a mobile scaffold tower.

Activity

Installation of external cladding panels at first floor level using a mobile aluminium scaffold tower.

Hazards Identified

Falls from the working platform. Tower collapse or overturning. Objects falling from the platform onto people below. Manual handling injuries during tower assembly. Contact with overhead power lines during tower movement.

Control Measures

Tower to be erected by PASMA trained operatives only. Tower specification confirmed as suitable for intended working height and load. Base plates and locking castors fitted and checked before use. Guardrails, mid-rails, and toe boards fitted to all working platforms. No work from incomplete platforms. Tower inspection by a competent person before first use and after any modification. Exclusion zone at base of tower with warning signage. Materials secured on platform, no loose items. Overhead power line survey completed, confirmed no risk at this location. All operatives briefed through toolbox talk before work commences.

Residual Risk

With all controls in place, the residual risk is low. Work can proceed subject to daily visual inspection of the tower before use.

Common Mistakes in Construction Risk Assessments

Generic Documents

A risk assessment that says "construction site" for the location and "various" for the hazards is not suitable or sufficient. Every assessment must be specific to the task, the site, and the conditions on the day.

Copy and Paste Culture

Copying a risk assessment from a previous project and changing the header is so common it is almost standard practice. It is also the exact opposite of what the regulations require. If the site, the task, or the conditions are different, the risk assessment must reflect those differences.

Nobody Reads Them

The best risk assessment in the world is useless if the workforce has never seen it. Risk assessments must be communicated to the people doing the work. That means briefing the team, not just filing the document.

No Review

A risk assessment written on day one of a 12-month project and never updated is a liability, not a safeguard. Conditions change. Personnel change. Weather changes. The assessment must keep pace.

Creating Risk Assessments Faster

The biggest practical challenge for site managers is time. Producing site-specific risk assessments for every activity, reviewing them regularly, and ensuring they are communicated takes hours that most site managers simply do not have.

Site Manager AI was built to solve this problem. Describe the task and the conditions, and the AI generates a site-specific risk assessment in under a minute. Every document follows the HSE five-step approach, references CDM 2015, and uses clear, practical language that works on site.

The result is not a generic template. It is a targeted assessment that reflects the actual work you are doing, the actual hazards involved, and the actual control measures required.

Better Assessments, Safer Sites

A good risk assessment does not just protect you legally. It protects your people physically. Take the time to get them right, communicate them properly, and review them when things change.

If the paperwork is holding you back, try Site Manager AI and generate your first professional risk assessment in 60 seconds. Built for UK construction site managers who care about safety and cannot afford to spend all day on admin.