Dynamic Risk Assessment: The 4 Conditions That Make It Lawful
Somebody has suggested dynamic risk assessment, and it sounds like relief. Instead of writing an assessment for every variable situation, you train people to assess the risk in front of them and act on their judgement. There are templates available, and a form you can fill in afterwards.
Used that way it is not a method. It is a gap in your arrangements with a name on it.
Dynamic risk assessment is a real and valuable discipline, and it does something a written assessment cannot: it handles conditions that change faster than paperwork. What it never does is replace the written assessment, because the law that requires the written one contains no exception for situations that move quickly. A dynamic assessment is what a competent person does inside the framework the written one establishes, when the framework meets something it did not anticipate.
That distinction decides whether you have a defensible system or an undocumented one. Here are the four conditions that have to be in place, and the sectors where this genuinely applies.
What the law actually requires first
Regulation 3 of the Management of Health and Safety at Work Regulations 1999 requires every employer to make a suitable and sufficient assessment of the risks to its employees at work and to people not in its employment arising out of its activities. There is no carve-out for unpredictable work.
Two further parts of regulation 3 matter here. An assessment must be reviewed by the person who made it if there is reason to suspect it is no longer valid, or if there has been a significant change in the matters to which it relates. And where an employer has five or more employees, it must record the significant findings of the assessment and identify any group of employees especially at risk.
So the written assessment is the obligation, and the recording duty attaches to it. What a dynamic assessment contributes is judgement applied at the point of work. The HSE's guidance on managing risks and risk assessment sets out the general discipline, and our note on the three tests a risk assessment must pass covers what suitable and sufficient means in practice.
Now the four conditions.
1. A written assessment that sets the boundaries
The first condition, and the one that distinguishes a method from an excuse.
A dynamic assessment needs something to be dynamic within. The written assessment should establish what the person is authorised to do, what they are not, what the known hazards are, and what the control measures are for the foreseeable variants. The dynamic element then handles the residue: the specific building, the specific person, the specific weather, the thing nobody could have listed.
The practical test is whether a person could describe the boundary. If a lone visitor cannot say what would make them leave, there is no boundary, and what is being called dynamic assessment is actually delegation of an employer duty to an individual at the moment they are least equipped to carry it.
2. A person with the capability to make the judgement
Need Expert H&S Guidance?
Our qualified consultants can help you implement the right health & safety measures for your business.
The second condition, and it is a statutory requirement rather than good practice.
Regulation 13 requires an employer, in entrusting tasks to employees, to take into account their capabilities as regards health and safety. It then requires health and safety training on recruitment and on exposure to new or increased risks, including from a transfer or change of responsibilities, new or changed equipment, new technology, or a new or changed system of work. That training must be repeated periodically where appropriate, adapted to new or changed risks, and take place during working hours.
Read that against a dynamic model and the implication is direct. If you are asking somebody to exercise judgement about risk in an unfamiliar environment, the capability to do so is something you must have taken into account and trained for. A graduate surveyor in their second week and a loss adjuster of fifteen years are not interchangeable in a dynamic system, and the written assessment should say which tasks each is authorised to take on.
Our note on who can carry out a risk assessment deals with the related question for the written document.
3. A defined stop point, and no penalty for using it
The third condition, and the one most often missing in professional services.
A dynamic assessment is only meaningful if its possible outcomes include not doing the work. That means a stated authority to withdraw, leave, postpone or refuse, held by the person on the ground rather than by somebody on a phone, and a culture in which using it carries no consequence.
This is where commercial pressure does real damage. A consultant who withdraws from a client site, an adjuster who leaves a damaged property unvisited, or an education welfare officer who abandons a home visit has made the system work, and if that decision is questioned at the next review the system stops working immediately and silently. The authority has to be explicit and it has to be defended the first time somebody uses it inconveniently.
Pair that with a check-in arrangement. Our note on the sections a lone working policy needs covers the mechanics, and the HSE's lone working and violence at work guidance sit behind both.
4. A route back, so the written assessment learns
The fourth condition, and the one that turns individual judgement into organisational knowledge.
If a person encounters something the written assessment did not anticipate, that finding has to travel. Regulation 3 requires review where there is reason to suspect the assessment is no longer valid or where there has been a significant change, and a dynamic assessment that surfaced an unanticipated hazard is precisely such a reason.
Without that route you get the characteristic failure of mature dynamic systems: the same hazard assessed from first principles by forty different people, forty times, with nobody ever adding it to the written document. The second visitor to a property with an unlit basement stair should not have to discover it independently.
Practically this is a short report after any dynamic assessment that changed the plan, read by whoever owns the assessment. Our note on how often an assessment should be reviewed covers the trigger-based approach that makes this work.
The four conditions, and the failure if each is absent
| Condition | What it looks like in place | The failure if it is missing |
|---|---|---|
| A written assessment setting boundaries | The person can state what would make them stop | Delegation of the employer's duty to the individual |
| Capability taken into account and trained | Tasks authorised by experience, with training recorded | Judgement expected from people not equipped to exercise it |
| A defined stop point, used without penalty | Explicit authority to withdraw, defended when used | A system that exists on paper and never triggers |
| A route back into the written assessment | A short report when the plan changed | The same hazard rediscovered indefinitely |
Rows three and four are where we most often find the gap, and both are organisational rather than technical. Rows one and two are the ones that would be examined after an incident.
Where this genuinely applies in our sectors
Dynamic risk assessment is associated with emergency response, which makes professional and education employers assume it is not their concern. It is, in specific places.
Lone visits to premises the employer does not control, which covers surveyors, loss adjusters and claims inspectors attending damaged property, education welfare and safeguarding visits to homes, and researchers doing fieldwork. Client site working, where our note on secondments and client site working covers who carries the duty. Front-of-house and reception staff dealing with aggression, which is a dynamic situation by definition. Off-site education, trips and residentials. Facilities and estates staff responding to a fault out of hours. And security or duty managers on campus at night.
In each case the common factor is the same: a person in a place the organisation has not assessed, at a time when nobody senior is available, making a decision that cannot wait. That is the legitimate domain, and it is narrower than the way the term usually gets used.
Keeping the written assessments, the authorisation levels, the training currency and the feedback reports in one place is where health and safety consultants and software are worth more in combination than either alone, because a dynamic system generates evidence continuously rather than annually. Periodic health and safety audits should test condition three by asking for an example of somebody withdrawing from a task, and what happened next.
How this reads to a regulator abroad
For multi-country groups there is a specific trap here, because the phrase does not translate into a legal concept in most jurisdictions.
Several of the regimes a British group operates under expect the assessment to be a document with prescribed contents, held and sometimes approved. Spain requires a prevention plan with the organisational structure, responsibilities and resources named. Brazil requires a risk inventory with nine specified elements and a twenty-year retention of its update history. The Philippines requires a programme submitted for approval. In none of those settings is "we conduct dynamic risk assessments" an answer to the question of where the assessment is, and offering it as one reads as an admission that there is not one.
The workable approach is to treat the dynamic element as a control measure described inside the local document rather than as a substitute for it. The written assessment in each country records that certain tasks require on-the-spot judgement, names who is authorised, states the stop criteria and the check-in arrangement, and references the training. That satisfies a prescriptive regime and it is also simply a better description of what you actually do.
Where Arinite fits
Arinite has spent 15+ years with organisations whose riskiest work happens in buildings they do not own, at times nobody planned, which is where this discipline earns its place. We support 1,500+ businesses in 50+ countries and protect 100,000+ employees, with 95%+ client retention.
Our health and safety consultants work extensively with insurance, legal, education and office-based clients, and where a dynamic element is needed we write it into the assessment and the health and safety training rather than leaving it as a word in a policy.
For multi-country groups, our global health and safety consultants describe the dynamic element inside each country's own instrument, and our international health and safety consultants can tell you which entities are relying on judgement where the local regulator expects a document.
Ask one person who works alone off-site what would make them leave. If they cannot answer in a sentence, you have condition one to fix. Then book a free gap analysis and we will tell you in one call whether your dynamic assessments are a method or a gap.
Related Articles
Written by
Arinite Health & Safety Consultants
Health & Safety Expert at Arinite
