Workplace compliance · MHSWR 1999 · HSWA 1974 · Nationwide
Suitable and sufficient risk assessments, documented arrangements, and practical audits for organisations that need to show the Management of Health and Safety at Work Regulations are more than a binder on a shelf. Safety Certificates UK matches vetted auditors and consultants nationwide — one enquiry, usable findings, honest matching.
Tell us about your organisation and sites for a no-obligation audit quote.
Why it matters
Every employer in Great Britain has duties under the Health and Safety at Work etc. Act 1974 to ensure, so far as is reasonably practicable, the health, safety and welfare of employees and to protect others who may be affected by the work. Those general duties are given sharper operational shape by the Management of Health and Safety at Work Regulations 1999 (the Management Regulations or MHSWR). Regulation 3 requires suitable and sufficient risk assessment. Where an employer employs five or more employees, significant findings must be recorded, and health and safety arrangements must also be recorded.
A health and safety audit, in the sense used on this page, is a structured review of how well those duties are being met in practice: whether risk assessments exist and reflect real work, whether preventive and protective measures are planned and monitored, whether competent assistance is in place, and whether emergency arrangements are credible.
It is not a substitute for day-to-day management, and it is not the same document as a fire risk assessment or a legionella risk assessment — though a thorough audit will usually check that those specialist assessments exist where required and are being acted upon.
Before insurance renewals, after growth or relocation, when a new facilities contract starts, following an incident or enforcement visit, or simply because directors want independent eyes on whether the safety management system matches the risk profile of the business.
Below: Management Regulations expectations, typical audit themes, sector examples, how our matching network operates, and how workplace audits sit alongside fire, water and electrical products. Practical articles: Advice Hub. Local coverage: locations. Quotes also at /quote/.
Sectors
Scopes vary with your brief. A common SME audit samples policies and arrangements, examines a selection of risk assessments, walks the workplace to compare paperwork with reality, interviews key role-holders, reviews accident and near-miss recording, checks contractor control and induction, and samples training and maintenance records. Findings are prioritised so leadership can see quick corrective actions versus strategic gaps.
DSE, wellbeing interfaces, contractor control for M&E, and hybrid working updates to assessments. Lighter hazard profiles still need suitable and sufficient assessment — and evidence when clients or insurers ask.
Workplace transport, racking, charging areas and agency labour dominate many findings. Multi-site employers often rotate audits around a sample of locations each year, or deep-dive a higher-risk site after a process change.
Public interface, premises management and volunteer induction sit alongside staff duties. Tell us the audience for the output — operations managers and trustees need different levels of detail.
Workplace H&S alongside clinical regimes — clarifying boundaries so water and fire specialists still do their parts. An audit should not pretend to replace clinical governance products.
Where letting businesses employ staff, Management Regulations duties sit beside property compliance products aimed at tenants’ safety. Keep the purposes distinct while bundling visits for access efficiency.
Machinery, chemicals and delivery yards need a heavier touch than a small office. Micro-employers still need suitable risk assessment — “five or more” is a recording threshold, not a competence holiday for smaller firms.
Framework
The Management Regulations require employers to assess risks to employees and to others arising from the undertaking; to apply principles of prevention; to make arrangements for planning, organisation, control, monitoring and review of preventive and protective measures; to provide health surveillance where appropriate; to appoint competent persons to assist; to establish procedures for serious and imminent danger; and to provide information, training and coordination where employers share a workplace. Young workers and new and expectant mothers attract specific assessment considerations.
HSE publishes extensive guidance on managing risks and risk assessment. The practical message for employers has been stable for years: identify significant hazards, decide who might be harmed and how, evaluate precautions, record what matters (especially at five or more employees), and review when things change.
When you employ five or more people, the Management Regulations require you to record the significant findings of your risk assessment and your health and safety arrangements. That record should be living: dated, owned, and reviewed. Audits often find beautiful templates that do not match the work as done — or excellent local practice that was never written down. Both gaps matter. Writing things down without implementing them is theatre; implementing without recording leaves you exposed when an inspector or claims handler asks for proof. Culture shows up in audit interviews: do supervisors stop unsafe work, are near misses welcomed, is temporary labour inducted properly? Paper scores collapse if the yard tour shows blocked fire exits or unguarded machines.
How it works
After you submit an enquiry, our coordination team confirms headcount, sector, number of sites, and whether you want a full sweep or a risk-based sample plan. We then match a vetted practitioner — keeping the journey simple: one form, clear communication, multi-service options where useful.
You tell us sector, headcount, sites and any upcoming tender or insurer deadline. We confirm whether the output is for operations managers, directors, or both.
Practitioners on the network are screened for relevant competence and insurance. You remain the employer with legal duties; the matched professional delivers the audit opinions they sign.
Typical visits sample policies and assessments, walk representative work areas, interview role-holders, and compare paperwork with reality. Preparation — policy, training matrix, accident summaries — makes the time count.
You receive clear findings, priorities and suggested next steps — not a vanity score. Leadership should assign owners and dates, track closure, and refuse silent “accept the risk” on indefensible issues.
Open, overdue and evidence attached — reviewed monthly
Real competent-person arrangements with time and authority
Slim leading indicators — not checklist noise
Selection, induction and permit controls sampled
FRA existence and action tracking visible
L8 and EICR/PAT regimes visible without replacing them
Keep purposes distinct
A fire risk assessment under the Fire Safety Order examines fire hazards and general fire precautions for relevant persons. A legionella risk assessment examines water system risk under the L8 / HSG274 framework. A health and safety audit examines the wider management system that should ensure those and many other risks are controlled. Confusing them creates false comfort: a glowing FRA does not prove COSHH assessments exist; a legionella report does not prove workplace transport is managed.
That said, bundling makes operational sense. Many clients ask us to coordinate an FRA, a Legionella assessment and a management audit in one mobilisation so site access and document gathering happen once. See fire risk assessments, legionella risk assessments and EICR and PAT.
Network model
We do not employ an in-house audit team that delivers every assignment under our own consultancy brand. Through PASECOM / Safety Certificates we match vetted health and safety practitioners to your enquiry based on sector, geography and complexity. You get coordination, a clear customer journey, and the option to combine services.
Why choose us
SME desk-and-walk audits through to multi-site sampling plans — matched to risk, not vanity.
Findings that test whether assessments match the work as done on the floor.
Coordinate with fire, Legionella and electrical services through one enquiry journey.
Preparing for an audit visit: gather your health and safety policy, organisation chart for safety roles, current risk assessments, training matrix, accident book summaries, maintenance schedules, previous audit or inspection reports, and access to representative work areas. Nominate a guide who knows both the paperwork and the shop floor. The better the preparation, the more the auditor’s time is spent on insight rather than hunting for missing files. Directors often ask for a plain answer — “Are we roughly in control, and what should we fix first?” — and a matched audit is designed to answer that without drowning you in jargon.
FAQ
Straight answers for employers and leadership teams considering a health and safety audit.
The law requires risk assessment and effective management arrangements. An independent audit is a widely used way to test those arrangements; it is not a named statutory certificate in the same way some property checks are. Many insurers and clients nonetheless expect periodic independent review.
You must still assess risks suitably. Recording significant findings becomes a statutory requirement at five or more employees, but documenting controls is still wise for smaller firms.
No. Fire risk assessment is a specific duty product under fire safety law. An H&S audit is broader. You may need both.
Some assignments include producing or updating risk assessments; others are purely audit/gap analysis. Specify which you need when requesting a quote.
We match vetted practitioners via PASECOM / Safety Certificates. We coordinate; matched professionals deliver.
Yes. Describe the estate size and whether you want a full sweep or a risk-based sample plan.
Audits can be mapped to ISO 45001 themes if you wish, with or without a certification goal. Say if that mapping matters to your board.
Use the primary sources below — legislation.gov.uk for the Regulations and Act, and HSE for guidance on managing risks and risk assessment.
Workplace health and safety management — start with official law and HSE guidance:
Tell us headcount, sector and sites. We match a vetted practitioner and keep recommendations usable. Also see /quote/, the Advice Hub and locations.
Get a Quote