A Practical Guide for Small and Medium Business Owners
Risk assessments are one of the most important safety documents in any business—yet they’re also one of the most commonly rejected during audits, tenders, and compliance checks. If your risk assessment didn’t make the cut, don’t panic. Rejection doesn’t mean your business is unsafe; it simply means the document didn’t meet the required standard.
This guide breaks down the most common reasons risk assessments are rejected and how you can fix them with confidence.
1. The Assessment Was Too Generic
Many businesses use a “copy‑and‑paste” risk assessment downloaded from the internet. Auditors reject these instantly because:
• They don’t reflect your actual site conditions
• They don’t consider your specific equipment, chemicals, or processes
• They fail to show that you understand your own risks
How to fix it
• Walk the site yourself
• Identify hazards you actually see
• Use photos, measurements, and real examples
• Tailor controls to your workplace, not someone else’s
A risk assessment must feel like it was written for your business, not for “any business.”
2. Hazards Were Listed, But No Real Controls Were Provided
A common mistake is listing hazards like “slips,” “electricity,” or “working at heights” but failing to explain what you’re doing to control them.
Auditors want to see specific, actionable controls, not vague statements like “be careful” or “use PPE.”
How to fix it
Use the hierarchy of controls:
• Eliminate
• Substitute
• Engineer
• Administer
• PPE
Controls should be clear, practical, and measurable.
3. No Risk Rating or Incorrect Risk Rating
A risk assessment must show:
• The severity of the hazard
• The likelihood of it happening
• The risk level before and after controls
If your document doesn’t show how you calculated risk—or if the numbers don’t make sense—auditors will reject it.
How to fix it
• Use a simple 1–5 matrix
• Explain your scoring method
• Ensure the “after control” rating is actually lower
4. The Wrong People Completed the Assessment
Risk assessments must be completed by someone who:
• Understands the task
• Understands the hazards
• Has authority to implement controls
If the assessment was done by someone with no training or no involvement in the work, it will be rejected.
How to fix it
• Involve supervisors, operators, and safety reps
• Include names, roles, and signatures
• Show that competent people participated
5. The Assessment Was Outdated
Risk assessments expire—especially when:
• Equipment changes
• Chemicals change
• Staff change
• Work processes change
• New legislation is introduced
If your assessment is older than 12 months (or doesn’t reflect current conditions), it’s likely to be rejected.
How to fix it
• Review risk assessments annually
• Update them after any incident or change
• Keep version numbers and revision dates
6. Missing Legal References
In South Africa, risk assessments must align with:
• The Occupational Health and Safety Act
• Relevant Regulations (e.g., Construction Regulations, HCS, Electrical Machinery, etc.)
If your document doesn’t reference the applicable legislation, auditors may reject it for non‑compliance.
How to fix it
• Add a section listing relevant Acts and Regulations
• Ensure controls match legal requirements
• Use correct terminology
7. No Evidence of Implementation
A risk assessment is not just a document—it’s proof of action. If you cannot show that the controls are actually being used, the assessment loses credibility.
How to fix it
Provide supporting evidence:
• Training registers
• Toolbox talks
• Photos of controls in place
• Inspection checklists
• Maintenance logs
Auditors want to see that your risk assessment is alive, not a file collecting dust.
8. Poor Formatting or Missing Information
Sometimes the assessment is rejected simply because it’s incomplete or difficult to read.
Common issues include:
• Missing task descriptions
• No assessor details
• No signatures
• No dates
• No approval section
• Confusing layout
How to fix it
• Use a clean, structured template
• Include all required fields
• Keep language simple and clear
A well‑designed document shows professionalism and competence.
Final Thoughts
A rejected risk assessment isn’t a failure—it’s an opportunity to strengthen your safety culture and protect your team. When done correctly, a risk assessment becomes more than a compliance requirement; it becomes a powerful tool for preventing injuries, improving productivity, and building trust with clients.
If you’re a small or medium business owner, remember:
You don’t need to be a safety expert—you just need to understand your workplace and document it properly.
