How R1SK Improves Compliance and Claims Risk

Picture the letter. A solicitor acting for a former employee says their client hurt their back lifting stock in your warehouse eighteen months ago. They want to know what you did to manage the risk.

You know you had a manual handling assessment. Somebody wrote one. It was on the shared drive, or in a folder in the site office, or attached to an email from the safety consultant you used back then. Was it the current version? Did it cover that task? Had anyone reviewed it since the racking was moved?

That's the moment most businesses find out what their risk assessments are actually worth. Not when they're written, but when somebody asks them to prove something.

What the law actually asks for

The duty itself is short. Regulation 3 of the Management of Health and Safety at Work Regulations 1999 requires every employer to make a suitable and sufficient assessment of the risks to their employees and anyone else affected by their work.

HSE's guidance fills in the practical detail. If you employ five or more people, managers included, you must record the significant findings. That means the hazards that matter and your key conclusions about controlling them. You also have to tell your employees and any safety reps what you found, and keep the assessment up to date as work and equipment change.

None of that requires a 40-page document. HSE is clear that an assessment doesn't need to be complicated or technical. What it needs to be is true: specific to the work, current, and reflected in what actually happens on the ground.

Why your records matter more since 2013

Here's a change a lot of people missed. Before 1 October 2013, an injured worker could often sue simply by showing a breach of a health and safety regulation. Section 69 of the Enterprise and Regulatory Reform Act 2013 removed that civil right of action for most regulations. For incidents since then, claims generally have to be brought in negligence.

On paper that sounds like good news for employers, and in part it is. The claimant now has to show you failed to take reasonable care. But the regulations didn't go away. Courts still look at them to judge what reasonable care looks like, and a breach still carries weight as evidence.

So the question in a claim becomes: can you show you identified the risk, thought about it properly, and put sensible controls in place? Your risk assessment is the most direct answer you have. A vague, generic or out-of-date one doesn't just fail to help. It can be used against you, because it shows you knew the hazard existed and didn't deal with it properly.

Timing makes this harder. Personal injury claims commonly arrive months or years after the event. The supervisor who briefed the team has left. Nobody remembers whether the two-person lift rule was actually enforced. What survives is what was written down, and when.

What an inspector is really looking for

I've been on both sides of enough inspections and audits to know an inspector can tell within a few minutes whether a risk assessment is doing a job or just filling a folder.

The ones that stand up have a few things in common:

• They describe the actual work. "Unloading 25 kg sacks from the delivery van to the rear store, roughly 40 per delivery, twice a week" tells an inspector you've looked. "Manual handling – low risk" tells them you haven't.
• The controls match what's happening. If the assessment says a trolley is used and there's no trolley on site, the paperwork has just become evidence of a gap.
• They name who's affected. Not just "employees", but the new starter, the agency worker covering holidays, the delivery driver who helps out.
• Actions have owners and dates. "Consider a hoist" is a wish. "Hoist to be fitted by J. Smith by 30 November" is a plan.
• They've been reviewed for real. A review date that was quietly rolled forward three years running doesn't count.

None of this is exotic. It's what HSE's five steps have always asked for. The trouble is that the usual tools make it far too easy to fall short.

Where Word documents and spreadsheets let you down

Most of the businesses I talk to run their risk assessments on some mix of Word templates, Excel sheets and PDFs. It works, right up until somebody needs to rely on it.

Templates get copied from one site to the next, so the office assessment ends up listing hazards from a warehouse. Versions multiply, and nobody's sure which file is current. Review dates sit in a cell that no one is prompted to look at. When something changes, the old version gets overwritten, so you can't show what the assessment said on the day that mattered.

That last point is the one that bites in a claim. "Here's our assessment" is weak if you can't show it was the assessment in force at the time.

How R1SK helps

I built R1SK because I was tired of watching good safety work get undermined by bad record-keeping. It does one thing, risk assessment, and tries to do it properly.

Structure that pushes you to be specific

Every assessment in R1SK follows the same logic HSE sets out: the activity, the hazards, who might be harmed and how, the controls in place, the residual risk, and what else needs doing. Blank boxes for "who's at risk" and "how" are hard to ignore. It's much harder to write a one-line generic assessment when the structure keeps asking you for the detail.

Actions that don't disappear

Further actions sit against the hazard they relate to, with an owner and a due date. You can see what's outstanding across your assessments instead of digging through individual files. When an inspector asks what you've done about the gap you identified in March, you have an answer.

Reviews that actually happen

Each assessment carries a review date, and R1SK makes overdue reviews visible rather than leaving them buried in a document nobody opens. Regular review is one of the five steps for a reason, and it's the one that slips first.

One record, in one place

There's one current version of each assessment, held centrally, not five copies scattered across laptops and inboxes. When the solicitor's letter arrives or the inspector asks to see your assessments, you can pull them up in minutes and show who prepared them and when they were last reviewed.

What it won't do for you

I'd rather be straight about this. Software can't make an assessment suitable and sufficient on its own. That still takes someone competent who has looked at the work and spoken to the people doing it. R1SK gives that person a better structure and a record that holds up. It doesn't replace their judgement.

The bottom line

Your risk assessments are already your evidence, whether you planned it that way or not. When something goes wrong, they're what the HSE, your insurer and any claimant's solicitor will read first, and they'll read them looking for gaps.

The aim is simple: assessments that describe the real work, controls that match reality, actions that get closed out, and a record that shows all of that was true at the time. Get that right and the paperwork stops being a liability and starts doing its job.

If you want to see what that looks like in practice, have a look at our completed example risk assessment.