Do Risk Assessments Need to Be Site-Specific?

Risk assessments are a legal requirement in every UK workplace—but do they need to be tailored to each site? Or is it enough to use a generic, one-size-fits-all document?

The short answer is: Yes—risk assessments must be site-specific if you want to comply with the law and keep people safe.

Let’s explore why, what the law says, and how to make your risk assessments relevant to the location, task, and team.

⚖️ What Does the Law Say?

Under the Management of Health and Safety at Work Regulations 1999, employers must:

“Make a suitable and sufficient assessment of the risks to the health and safety of employees… to which they are exposed whilst they are at work.”

This means considering actual conditions—not just theoretical ones.

A generic risk assessment might outline general hazards for a type of task (e.g. working at height), but it won’t reflect the specific risks present on a given site, such as:

• Uneven ground
• Weather conditions
• Nearby services (e.g. power lines)
• Site access and traffic routes
• Presence of the public or third-party contractors

️ A risk assessment that doesn’t reflect real site conditions is unlikely to be considered “suitable and sufficient” under the law.

✅ What Is a Site-Specific Risk Assessment?

A site-specific risk assessment considers:

• The location: What’s unique about this place?
• The task: What exactly are we doing here, and how?
• The people: Who’s involved, and what are their roles, skills, and vulnerabilities?
• The conditions: Are there weather, access, or environmental factors to consider?
• The controls: What site-specific measures are in place—or needed?

Rather than creating a brand-new assessment from scratch every time, a site-specific assessment often involves modifying a standard or template assessment to suit the actual conditions.

Why Site-Specific Assessments Matter

1. They reflect the real risks

Each site is different—even for identical tasks. A rooftop on a city office block poses different hazards than a farm outbuilding or school.

2. They protect workers and others

A site-specific approach ensures hazards aren’t overlooked, especially those affecting vulnerable groups, visitors, or the public.

3. They demonstrate due diligence

If the HSE investigates an accident and your assessment is found to be generic or outdated, you could face enforcement action or prosecution.

4. They empower site teams

A relevant, accurate assessment helps supervisors and operatives understand the risks and work safely.

How to Make a Risk Assessment Site-Specific

Here’s a simple process:

1. Start with a standard or template risk assessment for the task
2. Visit the site (or have someone competent do so)
3. Identify site-specific hazards not covered in the generic version
4. Modify or add control measures to reflect real conditions
5. Include maps, photos, or drawings if relevant
6. Consult workers who will do the task—they often spot risks others miss
7. Sign and date the final version, and ensure it’s communicated on site

Keep a copy of the site-specific version available on site for inspections or team reference.

Common Pitfalls to Avoid

• Reusing a risk assessment from a previous job without review
• Failing to update assessments when site conditions change
• Assuming “standard controls” are good enough everywhere
• Not involving the people who will actually carry out the work
• Treating risk assessments as paperwork instead of a live tool

Site-Specific Doesn’t Mean Overcomplicated

You don’t need to write a novel—just make sure the document:

• Is clear, relevant and proportionate to the task
• Covers hazards that exist on that specific site
• Shows that you’ve thought about and controlled the risks properly

Even small tweaks—such as noting unstable ground, local weather risks, or overhead obstructions—can make a big difference.

Final Thoughts

Site-specific risk assessments are not just a legal box to tick—they’re your frontline defence against accidents, injuries, and enforcement action.

They show that you’ve considered the real-world context of your work, not just followed generic procedures. In short, they help you do your job better, safer, and legally.

So next time you’re reviewing a risk assessment, ask yourself:
“Does this reflect this site, this job, and this team—today?”

If not, it’s time to make it site-specific.