What Is Dynamic Risk Assessment? a UK Workplace Guide

Dynamic risk assessment is an on-the-spot mental process workers use to identify and control unforeseen hazards as conditions change, and it matters because the UK recorded over 0.7 million non-fatal work-related injuries in 2019/20 while 150 lone workers are attacked every day. If you're responsible for HR, operations, or compliance, that means a written assessment on a clipboard isn't enough on its own when risk appears halfway through the job.

You're probably dealing with exactly that tension now. The paperwork may be in place, the induction may be done, and the method statement may look sound, yet the actual working day still throws up moving vehicles, blocked exits, changing weather, agitated members of the public, equipment faults, and staff making judgement calls under pressure.

That's where many organisations get dynamic risk assessment wrong. They either treat it as a vague “use common sense” instruction, or they bury it under so much process that nobody can use it in real time. In practice, a good DRA system sits between those two extremes. It gives frontline people permission to stop, think, adjust, and act safely, while giving managers a way to train, document, and audit those decisions.

Table of Contents

• Beyond the Clipboard Why Safety Needs Real-Time Thinking - Where static paperwork starts to fail - What works in real workplaces

• Defining Dynamic Risk Assessment - The practical meaning of DRA - What ALARP means in day-to-day work

• Static vs Dynamic Risk Assessment - They solve different problems - A side-by-side comparison

• How to Perform a Dynamic Risk Assessment in 5 Steps - A five-step mental checklist - What good looks like in the moment

• Dynamic Risk Assessment in Practice Sector Examples - Construction and site work - Hospitality events and lone working

• Training and Implementing DRAs in Your Organisation - Train judgement not just terminology - Technology AI and employer liability

• Frequently Asked Questions about DRAs - Do I need to write down every dynamic risk assessment - How is a DRA different from a toolbox talk - Who is responsible if a DRA fails - Can technology do the DRA for us - What is the biggest mistake organisations make

Beyond the Clipboard Why Safety Needs Real-Time Thinking

A routine task rarely stays routine for long. A contractor arrives to carry out a simple repair. The original assessment assumed clear access, stable flooring, and normal foot traffic. By the time work starts, a delivery has blocked part of the route, rain has made an entrance slippery, and someone has moved materials into the work area. The document hasn't changed, but the risk has.

That's the gap dynamic risk assessment fills. It deals with what the formal assessment didn't, or couldn't, capture in advance. In many workplaces, the written assessment is still essential, but it can't see around corners. Workers can.

The scale of the problem is hard to ignore. In the UK, the Health and Safety Executive recorded over 0.7 million non-fatal work-related injuries in the 2019/20 reporting year, as noted in this summary of dynamic risk assessment and UK injury data. For any HR manager trying to meet UK employer health and safety obligations, that isn't just background reading. It's a reminder that static controls alone won't cover a live working environment.

Where static paperwork starts to fail

The failure point usually isn't that nobody assessed risk at all. It's that the assessment was done once, then treated as fixed while the job kept changing.

Common examples include:

• Changed surroundings: A clean corridor becomes a shared storage route.

• Changed people: A lone worker arrives to find an agitated client or member of the public.

• Changed equipment: A tool is available, but its guard is damaged or missing.

• Changed conditions: Wind, noise, lighting, temperature, or visibility shift during the task.

Practical rule: If the job no longer matches the assumptions in the original assessment, the worker needs to reassess before carrying on.

What works in real workplaces

The organisations that handle this well don't rely on slogans like “be careful out there”. They train staff to pause, scan, decide, and, if needed, stop the task. They also make it clear that stopping work for safety reasons is a valid outcome, not a failure.

What doesn't work is expecting perfect judgement from untrained staff, then blaming them after the event. If you want reliable DRA in your business, you need a system that supports quick decisions under ordinary workplace pressure.

Defining Dynamic Risk Assessment

The idea becomes clear once you compare it to driving. You may set off with a route planned, your vehicle checked, and the weather looking fine. Then visibility drops, traffic changes, and a road closes. You don't keep driving as if nothing has changed. You adjust in real time. That's the practical answer to the question, what is dynamic risk assessment.

The practical meaning of DRA

In workplace terms, dynamic risk assessment is the live judgement a competent person makes when conditions shift during the job. It isn't a replacement for formal risk assessment. It's the worker's real-time response to what the formal assessment couldn't fully predict.

The formal UK definition is tighter than many guides make it sound. In JSP375 guidance on safety risk assessment and safe systems of work, dynamic risk assessments are defined as real-time processes specifically for conditions subject to real-time changes, where further control measures must be introduced at short notice to ensure risk remains ALARP and tolerable.

That wording matters. It tells you three things.

• It happens in real time: not after the incident, and not at the next monthly review.

• It responds to change: DRA is for conditions that move, develop, or deteriorate.

• It leads to controls: it isn't just noticing danger. It requires action.

What ALARP means in day-to-day work

ALARP means As Low As Reasonably Practicable. In plain English, that asks whether the worker and employer have done what is reasonable to reduce the risk without pretending every risk can be removed entirely.

A sensible DRA question is: “Can this task still be done safely with added controls?” Sometimes the answer is yes. Add a barrier, change access, bring in another person, wait for better conditions, or use different equipment.

Sometimes the answer is no. That's just as important.

Good DRA doesn't push people to finish the job. It helps them recognise when the safe decision is to pause or stop.

A lot of poor practice comes from confusing DRA with instinct. Instinct helps, but DRA is better understood as trained judgement. Workers need enough knowledge of the task, the environment, and the control measures to make a defensible call in the moment.

Static vs Dynamic Risk Assessment

A common mistake is treating static and dynamic risk assessment as alternatives. They're not. One gives the job its planned control framework. The other keeps people safe when reality moves away from the plan.

They solve different problems

A static risk assessment is prepared before the task. It deals with known hazards, foreseeable steps, standard controls, and normal conditions. It's documented, reviewed, and used to brief people before work starts.

A dynamic risk assessment happens during the task. It deals with what's emerging now. That might be a blocked fire exit, a sudden change in behaviour from a service user, unstable ground, a leaking container, or an overcrowded entrance.

A side-by-side comparison

Aspect	Static risk assessment	Dynamic risk assessment
When it happens	Before work starts	During the task
Main purpose	Plan safe work in advance	Respond to change on the spot
Format	Written document	Mental process, sometimes recorded after
Typical owner	Manager, supervisor, competent assessor	Frontline worker or supervisor on scene
Best for	Known and repeatable hazards	Emerging or unforeseen hazards
Review point	Periodic or when the task changes	Continuous while conditions are changing

That distinction helps managers design the right controls. If your system expects a written form for every moment of live decision-making, staff won't use it. If your system relies only on verbal judgement with no underlying assessment, you'll struggle to show that work was properly planned.

Manager's test: If a worker had to choose between following the paperwork and responding to the actual hazard in front of them, your system is too rigid.

The stronger model is simple. Build a solid static assessment first. Then train staff to recognise when the live situation no longer matches it. That's where DRA begins.

How to Perform a Dynamic Risk Assessment in 5 Steps

The most usable DRA models are short enough to remember under pressure. CHAS sets out a five-step process that works well because it turns a fuzzy idea into a practical sequence. You can see the same logic in competent site supervision, emergency response, and lone working decisions.

In CHAS guidance on dynamic risk assessment, the five steps are: evaluate the situation, take action, choose Safe Systems of Work, assess whether those systems are proportionate, and continue assessing residual risks. If your team already knows how to conduct a risk assessment, this is the live version of that thinking.

A five-step mental checklist

1. Evaluate the situation

Start with what has changed. Don't jump straight to action without identifying the actual problem. A retail worker notices a display unit leaning into a customer walkway. A site operative sees that recent rain has softened ground near plant movement. A carer arrives and finds the home environment more volatile than expected.

The key question is simple: what's different from the planned job?

1. Take action

Immediate action might mean making the area safe, stopping the task, moving people away, calling for support, or waiting. This step isn't about writing a perfect explanation. It's about preventing harm while there's still time.

Some situations call for a pause, not heroics.

1. Choose Safe Systems of Work

Once the immediate risk is contained, decide how the task can continue safely, if it can continue at all. That may involve barriers, permits, isolations, revised access routes, additional supervision, different equipment, or a second person attending.

The difference between trained and untrained workers becomes apparent. Trained workers know which control options are realistic in their setting.

To see the idea in action, this short video gives a useful visual overview:

https://www.youtube.com/watch?v=VuhBqORTKZ4

What good looks like in the moment

1. Assess proportionality

Not every control is sensible for every task. If the control introduces delay, complexity, or another hazard, the worker needs to judge whether it's proportionate. The safest option on paper isn't always the safest option in practice.

For example, fetching unsuitable access equipment just to avoid a short delay can create a bigger risk than stopping and rescheduling the task properly.

1. Continue assessing

A DRA isn't a one-off decision. Conditions can worsen again. Weather shifts. Crowds build. People become tired. Equipment behaves differently after use. Residual risk needs ongoing attention until the task is complete.

If staff think DRA happens only at the moment something first looks wrong, they'll miss the second and third change that often matter more.

The practical test for a good DRA is whether the worker can explain, in plain language, what changed, what control they applied, and why they believed it was safe to continue or necessary to stop.

Dynamic Risk Assessment in Practice Sector Examples

The value of DRA becomes clearer when you look at ordinary jobs, not textbook definitions. Different sectors face different triggers, but the pattern is the same. Something changes, someone notices, and a decision has to be made before harm occurs.

Construction and site work

A scaffold inspection was completed in the morning. By early afternoon, wind conditions have changed and loose materials are appearing near the edge. The original paperwork may still be valid in broad terms, but the live condition has altered. The supervisor's DRA may lead to stopping work at height, securing materials, and restricting access until conditions improve.

Manufacturing has its own version of the same problem. A production line starts normally, then a minor leak creates a slip risk near moving equipment. Waiting for the next formal review would be absurd. The operator isolates the area, stops nearby movement, reports the fault, and only restarts once controls are in place.

A fire safety issue can also become dynamic. A venue or workplace may have a sound fire risk assessment, but storage creeps into escape routes, temporary equipment blocks exits, or an event layout changes crowd movement. In those settings, managers often need both live judgement and a reliable underlying fire risk assessment service to keep controls grounded in the actual site.

Hospitality events and lone working

Hospitality and events are full of moving parts. A broken glass incident in a dimly lit bar isn't just a cleaning issue if customers are still walking through the area and staff are carrying trays at speed. The DRA might mean stopping service in one zone, putting a staff member on access control, improving lighting, and changing the route until the hazard is cleared.

At events, entry points are another common flashpoint. Crowd behaviour can change quickly if queues stall or a bottleneck forms. A team that relies only on the original event plan can fall behind the risk. A team using DRA can re-route attendees, open another lane, call for support, and slow inflow before pressure escalates.

Lone working is where DRA becomes especially personal. According to the Bodytrak guide citing the Crime Survey for England and Wales, as many as 150 lone workers in the UK are physically or verbally attacked every single day. In those roles, the worker often doesn't have a colleague nearby to validate the decision. Their ability to read the environment, spot early signs of aggression or vulnerability, and leave before the situation worsens can be the control that prevents injury.

A lone worker's DRA often starts before they step through the door. Access, tone, behaviour, escape route, signal strength, and check-in arrangements all matter.

Training and Implementing DRAs in Your Organisation

Most organisations don't fail because they've never heard of dynamic risk assessment. They fail because they haven't embedded it in a way that survives a busy shift, staff turnover, competing priorities, and uneven supervision.

Train judgement not just terminology

If training stops at definitions, staff will nod through the session and still freeze when something changes on site. Good DRA training uses scenarios relevant to the role. Construction teams need changing ground, weather, traffic movement, and contractor interface examples. Hospitality teams need customer behaviour, spill response, crowding, and back-of-house obstructions. Lone workers need boundary-setting, withdrawal points, escalation, and communication checks.

Useful implementation usually includes:

• Role-based scenarios: Use examples staff recognise from their own shift patterns and sites.

• Clear stop-work authority: Workers need explicit permission to pause or abandon unsafe tasks.

• Simple recording rules: Decide what must be documented after a dynamic decision, and keep it proportionate.

• Supervisor review: Managers should test not only whether staff acted, but whether their reasoning was sound.

A practical audit trail doesn't mean documenting every mental check. It means recording significant changes, decisions to stop or alter work, incidents, near misses, and recurring patterns that suggest the original assessment needs revision.

Some employers also bring in external support to review whether their DRA process is realistic, trainable, and auditable. KODOBI, for example, provides workplace health and safety consultancy that includes reviewing dynamic risk assessment arrangements as part of wider compliance systems.

Technology AI and employer liability

Technology is starting to change how some employers approach DRA. According to a SafetyCulture article referencing a 2025 EPSRC report, 31% of large UK construction firms use wearable sensors and AI algorithms to flag dynamic hazards in real time, and the same report states these tools reduced incident rates by 28% compared to manual DRA methods. The same source also notes legal ambiguity around whether AI-generated DRA data can be used in HSE enforcement.

That creates a real trade-off for employers. Better visibility can support faster intervention, stronger audit trails, and more consistent hazard detection across multi-site work. But once a system generates alerts, the organisation needs to know who monitors them, who acts on them, how records are retained, and what happens if a warning is missed.

Technology can strengthen DRA. It doesn't remove the employer's duty to train people, design safe systems, and make competent decisions.

The safest position is to treat AI and wearables as support tools, not substitutes for managerial control or worker competence. If you adopt them, update your procedures, training content, and escalation routes at the same time.

Frequently Asked Questions about DRAs

Do I need to write down every dynamic risk assessment

No. A DRA is primarily a live mental process. If workers had to stop and document every small judgement, they'd lose the speed that makes DRA useful. What should be recorded are significant changes, decisions to stop work, altered methods, incidents, and any pattern showing that the original assessment no longer reflects reality.

How is a DRA different from a toolbox talk

A toolbox talk is a briefing. It prepares people before work starts. A DRA happens during the work when conditions change. Toolbox talks can support DRA by reminding staff what to look for, but they don't replace the live judgement needed on the ground.

Who is responsible if a DRA fails

Responsibility is shared. The employee has a duty to act reasonably, follow training, and respond to obvious hazards. The employer has the wider duty to provide competent training, safe systems of work, supervision, and an environment where staff can stop unsafe work without pressure.

Can technology do the DRA for us

No. Technology can help detect change faster, especially in larger or more complex environments. It can't take over legal responsibility, moral judgement, or local decision-making. Someone still has to interpret the information and act on it.

What is the biggest mistake organisations make

They treat DRA as either a paperwork problem or a common-sense problem. It's neither on its own. It's a practical skill that has to be designed into training, supervision, and daily operations.

---

If your organisation needs help turning dynamic risk assessment from a vague expectation into a workable system, KODOBI supports UK employers with health and safety consultancy, training, audits, and practical reviews of workplace risk controls across multiple sectors.