How to Write a Risk Assessment in Ireland: A Step-by-Step Guide
Every employer in Ireland is legally required to identify hazards and write them down. Yet many owners freeze at the blank page. Here is exactly how to produce a risk assessment that satisfies the HSA and actually keeps people safe.
If you employ even one person in Ireland, the law expects you to look at the dangers in your workplace and decide what to do about them. That process has a name: risk assessment. Under Section 19 of the Safety, Health and Welfare at Work Act 2005an employer must identify the hazards present, assess the risks they create, and record the conclusions in writing. It is not optional, and it is not a once-off form to be filed and forgotten.
The good news is that a risk assessment is far less intimidating than it sounds. It is simply a careful, honest look at what could go wrong and what you are doing to prevent it. Below we break the task into manageable stages, written for real Irish businesses rather than for lawyers.
What a risk assessment actually is
A hazard is anything with the potential to cause harm: a trailing cable, a slippery floor, a noisy machine, a stressed workload. The risk is the likelihood that the hazard will hurt someone, combined with how serious that harm could be. A risk assessment is the document where you list each hazard, judge the risk, and set out the control measures that reduce it.
The Health and Safety Authority (HSA) does not expect a 60-page report. It expects a clear, suitable and sufficient assessment that is proportionate to your activities. A small office will have a short assessment; a construction site will have a longer one.
Step one: get to know your workplace
Walk the premises with fresh eyes. Better still, walk it with the people who do the work every day, because they spot the awkward shortcuts and near-misses that managers never see. Look at how tasks are really carried out, not how the manual says they should be.
- Inspect equipment, walkways, storage areas and entrances.
- Review any accident or near-miss records you already keep.
- Check manufacturer instructions and safety data sheets for chemicals.
- Talk to staff about what worries them.
Step two: identify the hazards
Group hazards into categories so you do not miss anything. Common Irish workplace hazards include manual handling, slips and trips, working at height, electricity, hazardous substances, fire, machinery, and psychosocial pressures such as excessive workload. The Safety, Health and Welfare at Work (General Application) Regulations 2007 set detailed requirements for many of these areas, so they are a useful prompt list.
A hazard you have not written down is a hazard you have not managed. The act of recording forces you to decide who could be harmed and how.
Step three: decide who might be harmed and how
For each hazard, note the people at risk. This includes employees, but also contractors, visitors, members of the public, and people who need particular care such as young workers, new starters or pregnant employees. Describing the harm specifically ("a worker could strain their back lifting boxes from the floor") is far more useful than a vague label.
Step four: evaluate the risk and choose controls
Now judge how likely the harm is and how severe it would be. You do not need a complicated scoring matrix, though many people find a simple low/medium/high rating helpful. The real value is in the next decision: what will you do to reduce the risk? Work through the hierarchy of controls in order.
- Eliminate the hazard entirely where you can.
- Substitute it for something safer.
- Use engineering controls such as guards or extraction.
- Apply administrative controls such as safe procedures and training.
- Provide personal protective equipment as the last line of defence.
Personal protective equipment should never be your first answer. It protects one person if everything else fails, whereas removing the hazard protects everyone.
Key takeaways
- Risk assessment is a legal duty under Section 19 of the 2005 Act.
- Identify hazards, decide who could be harmed, then choose controls.
- Follow the hierarchy of controls — PPE is the last resort, not the first.
- Record findings in writing and review them regularly.
- The findings feed directly into your safety statement.
Step five: record, communicate and review
Write your findings down in plain language. The record should show the hazard, who is affected, the controls in place and any further action needed, with a name and a date attached to each action. Crucially, the assessment is useless if it sits in a drawer. Brief your team on the controls and make sure new starters are told.
Review the assessment whenever something changes: new equipment, a new process, an accident, or simply the passage of time. There is no fixed legal interval, but an annual review is sensible for most businesses, with immediate updates after any significant change.
Risk Assessment training from €33
Self-paced, HSA-aligned, certificate the same day — €33 per person.
From assessment to safety statement
Your completed risk assessments are not the finish line. Under Section 20 of the same Act, the results feed into your written safety statement, which sets out how safety is managed across the whole organisation. The two documents work together: the assessment finds the risks, the statement explains how you control them.
If you would like a structured method to follow rather than improvising, our five-step approach to risk assessment turns the principles above into a repeatable routine. A short, certified course gives you the confidence to write assessments that genuinely protect your team and stand up to HSA scrutiny.
