Lesson Overview
Lesson 01 set out the safety officer's duty: that the first responsibility in any practical training is the safety and welfare of the people in your charge, and that training which injures someone has failed, however well it taught the skill. This lesson gives you the central tool by which that duty is carried out. A risk assessment is the disciplined way of looking ahead at an activity, asking what could go wrong and to whom, judging how bad and how likely each thing is, and putting measures in place to stop it before it happens. It is not paperwork done to satisfy a regulation. It is thinking done to keep people whole, and the writing down is only its record.
This lesson teaches the recognised five-step method of risk assessment and then teaches the thing that keeps it alive once the activity begins: dynamic risk assessment, the continuous re-judging of risk on the spot as conditions change. A risk assessment written the night before is a plan made in calm. The field is not calm. The weather turns, a student tires past the point of safety, the light fails, the ground proves worse than the map promised, and the safety officer must see the change and respond to it. The written assessment and the dynamic one are the two halves of the same discipline, and a safety officer needs both.
Remember as you read that this is the knowledge layer. Reading the five steps is not the same as walking a real training area with a hazard in front of you and judging it honestly, and filling in a worked example here is not the same as standing accountable for the safety of a live activity. The discipline of risk assessment is mastered only by doing it, by assessing real activities, having your assessment checked by a qualified safety officer, and running training under it. Where supervision allows, your practical assessment work is watched and signed off in person. By the end you will be able to state the five steps of risk assessment in order and explain what each one requires, identify the hazards in a practical activity and decide who might be harmed and how, evaluate a risk by judging its likelihood multiplied by its severity and place it on a risk matrix, decide and record proportionate control measures, explain when and why a risk assessment must be reviewed and re-assessed, define dynamic risk assessment and give worked examples of conditions that trigger it, and fill in a risk-assessment row for a real practical activity from hazard through to residual risk.
Key Terms
- Hazard: anything with the potential to cause harm. A weapon, a steep bank, cold water, a vehicle, bad weather, fatigue, or the activity itself are all hazards. A hazard is not yet a problem; it is a source of possible harm that the assessment must find and judge.
- Risk: the chance that a hazard will actually cause harm, taken together with how serious that harm would be. Risk is the hazard's potential turned into a judgement of likelihood and severity, and it is risk, not the hazard alone, that the assessment evaluates and reduces.
- Risk assessment: the disciplined process of identifying hazards, deciding who might be harmed and how, evaluating each risk and deciding control measures, recording the result, and reviewing it. It is thinking done in advance to prevent harm, and its written form is only its record.
- Likelihood: how probable it is that a hazard will cause harm, judged on a simple scale from very unlikely to very likely. One of the two halves of a risk.
- Severity: how serious the harm would be if it happened, judged on a simple scale from minor to fatal. The other half of a risk.
- Risk rating: the result of likelihood multiplied by severity, used to rank risks so that effort goes first to the worst. A high rating demands strong control before the activity may proceed.
- Control measure: anything put in place to reduce a risk, whether by removing the hazard, reducing it, separating people from it, controlling it with a procedure, or protecting people with equipment. The output of the assessment.
- Residual risk: the risk that remains after the control measures are applied. The point of control is to bring the residual risk down to a level that is acceptable for the activity; if it cannot be, the activity is changed or not run.
- Dynamic risk assessment: the continuous, on-the-spot re-judging of risk as conditions change during an activity, and the changing of controls or the stopping of the activity in response. The written assessment kept alive in the field.
- Review: the deliberate re-examination of a risk assessment, done when something changes, after an incident or near miss, or at a set interval, to confirm it still holds and to update it if it does not.
Why we assess risk before we act
The whole case for risk assessment rests on a single plain fact: harm is far easier to prevent than to repair. A broken ankle, a cold injury, a face wound from an airsoft round that struck unprotected skin, none of these can be undone, and each was almost always foreseeable and preventable by someone who had looked ahead. Risk assessment is that looking ahead made into a method, so that the foreseeing does not depend on luck or on one experienced person happening to notice. It is a discipline precisely so that it can be taught, repeated, and relied upon.
It matters that the assessment is honest. The temptation, under pressure to get an activity run, is to fill the form with reassuring words and forget it, to write "brief students on hazards" against every risk and call it controlled. That is not assessment but paperwork pretending to be safety, and it is more dangerous than no assessment at all because it carries the appearance of care without the substance. A real assessment looks hard at what could actually hurt someone in this activity, on this ground, in this weather, with these people. The test is not whether the form is full but whether, if the worst thing on it happened, you could stand over the activity and say you had taken every reasonable measure to prevent it.
It also matters that the assessment is proportionate. Risk assessment is not a counsel of doing nothing. The safest training, as Lesson 01 held, is not the training where nothing is attempted but the training where real things are done under real control. A good assessment weighs each risk on its merits and puts the weight of control where the danger actually lies, which is why the method evaluates likelihood and severity rather than treating every hazard as equal. Effort is finite, and it must go first to the risks that are both likely and severe, because those are the ones that injure people.
The five steps of risk assessment
The recognised method has five steps, worked in order, and the order matters because each step rests on the one before. You cannot decide who might be harmed until you have found the hazards, and you cannot judge a risk until you know who it threatens and how. Work them in turn, and work them properly, because a step skimmed is a danger missed.
Step one: identify the hazards. Walk the activity through in your mind, and where you can, walk the ground itself, and find everything with the potential to cause harm. For practical training the usual sources are weapons, terrain, weather, water, vehicles, fatigue, and the activity itself, and you go through each deliberately rather than waiting for hazards to occur to you. The airsoft exercise has the weapons and their velocity, the ground with its trip hazards and steep banks, the weather, and the heat or cold of exertion. The field exercise adds navigation, water crossings, and the accumulation of fatigue over time. List them. A hazard you have not named cannot be controlled, and the commonest failure in the whole method is simply not seeing a danger that was there to be seen.
Step two: decide who might be harmed and how. For each hazard, ask who it threatens and in what way. The students are the obvious answer but not the only one. The instructors and safety staff are exposed to the same ground and weather, and may be more exposed because they are concentrating on the students rather than on themselves. Members of the public may be present if the training area is not fully closed, and a stray airsoft round, a vehicle movement, or a person wandering into a live activity is a real hazard to them. Naming who and how sharpens the assessment, because "the steep bank by the stream could cause a fall, most likely to a tired student carrying a load in the last hour" is far more useful than "fall hazard". The how points you towards the control.
Step three: evaluate the risk and decide control measures. This is the heart of the method. For each hazard, judge the risk by weighing its likelihood against its severity. Likelihood is how probable the harm is, from very unlikely to very likely; severity is how serious it would be, from minor to fatal. Multiply the two, in judgement if not in arithmetic, and you have a risk rating that lets you rank the hazards and put your effort where it counts. A thing both likely and severe is a high risk that demands strong control before the activity may run at all; a thing severe but very unlikely, or likely but minor, sits lower and needs proportionate measures. Then, for each risk, decide the control measures that will reduce it, and judge the residual risk that remains after they are applied. Lesson 03 teaches the hierarchy of control, the ordered way of choosing those measures; here, hold that the aim is to bring each residual risk down to a level acceptable for the activity, and that if a risk cannot be brought down that far, the activity is changed or not run.
Step four: record the assessment. Write it down. Recording forces the thinking to be complete, because a half-formed judgement shows up as a blank box. It lets the assessment be checked by someone more experienced before lives depend on it. It is the basis of the safety brief you will give, because you brief from the assessment. And it is the record you and the Army stand on afterwards, the evidence that the activity was thought through and that reasonable measures were taken. A useful record names each hazard, who it threatens and how, the likelihood and severity and the rating, the control measures, and the residual risk. It need not be long, but it must be honest and complete.
Step five: review and re-assess. A risk assessment is not written once and trusted forever. It is reviewed when things change, and re-assessed accordingly. The change may be in the plan, a new activity added, a different ground, larger numbers; in the conditions, a forecast that has turned, a water level that has risen; or it may be forced on you by an incident or a near miss that shows the assessment missed something. It is also reviewed at sensible intervals for a recurring activity, so that a stale assessment is not run year after year while the ground and the equipment and the people change around it. Review closes the loop and feeds Lesson 10's culture of learning: every near miss reviewed is a hazard found before it injures someone.
THE FIVE STEPS OF RISK ASSESSMENT
+---------------------------------------------------------------+
| 1. IDENTIFY THE HAZARDS |
| weapons, terrain, weather, water, vehicles, fatigue, |
| the activity itself. Name everything that could harm. |
+-------------------------------+-------------------------------+
v
+---------------------------------------------------------------+
| 2. DECIDE WHO MIGHT BE HARMED, AND HOW |
| students, instructors, the public. Name who and in what |
| way for each hazard. |
+-------------------------------+-------------------------------+
v
+---------------------------------------------------------------+
| 3. EVALUATE THE RISK + DECIDE CONTROL MEASURES |
| LIKELIHOOD x SEVERITY = rating. Reduce it. Judge the |
| RESIDUAL risk. If it cannot be made acceptable, change |
| or do not run the activity. |
+-------------------------------+-------------------------------+
v
+---------------------------------------------------------------+
| 4. RECORD THE ASSESSMENT |
| write it down: hazard, who/how, L x S, controls, residual. |
| The basis of the safety brief and the record you stand on. |
+-------------------------------+-------------------------------+
v
+---------------------------------------------------------------+
| 5. REVIEW AND RE-ASSESS WHEN THINGS CHANGE |
| plan changes, conditions change, after an incident or |
| near miss, or at a set interval. Close the loop. |
+---------------------------------------------------------------+
^ |
+--------------------------------------------+
review feeds back into the assessment
Judging likelihood by severity: the risk matrix
The third step asks you to multiply likelihood by severity, and a simple tool makes that judgement consistent rather than a matter of mood: the risk matrix. It sets likelihood along one axis and severity along the other, and where they meet gives the risk rating. The arithmetic is rough on purpose. The point is not a precise number but a shared, defensible judgement that ranks the risks so that the worst get the most control, and that draws a clear line above which an activity may not run until the risk is brought down.
Likelihood runs on a plain scale: very unlikely, unlikely, possible, likely, very likely. Severity runs on its own: minor (first aid, no lasting harm), moderate (an injury that takes someone off the activity), serious (a major injury, a broken limb, a cold injury needing treatment), and fatal or life-changing. You judge each honestly for this activity, on this ground, with these people, and you read off the rating where they cross. A common reading bands the result into low, medium, and high. Low risks are tolerable with the normal sensible measures. Medium risks need specific control measures named and briefed. High risks must be reduced before the activity proceeds, by stronger controls, by changing the activity, or, if they cannot be brought down, by not running it.
Read the matrix the right way round. A minor harm that is very likely, blisters on a long march, is a real and common risk worth controlling, but it is not the one that ends a life. A fatal harm that is very unlikely, a drowning at a shallow, slow water crossing with throw-lines rigged, may sit lower than instinct suggests once the controls are counted, but the severity means you treat any remaining likelihood with great respect. The matrix disciplines the instinct; it does not replace it. Where your judgement and the matrix disagree, look again at your scores, because one of them is probably wrong, and the honest answer is found by fixing the input, not by overriding the tool.
RISK MATRIX: LIKELIHOOD x SEVERITY
S E V E R I T Y ------------------->
MINOR MODERATE SERIOUS FATAL /
(first (off the (major LIFE-
aid) activity) injury) CHANGING)
L +------------+-----------+-----------+-----------+-----------+
I | VERY | LOW | LOW | MED | MED |
K | UNLIKELY | | | | |
E +------------+-----------+-----------+-----------+-----------+
L | UNLIKELY | LOW | LOW | MED | HIGH |
I +------------+-----------+-----------+-----------+-----------+
H | POSSIBLE | LOW | MED | MED | HIGH |
O +------------+-----------+-----------+-----------+-----------+
O | LIKELY | MED | MED | HIGH | HIGH |
D +------------+-----------+-----------+-----------+-----------+
| | VERY | MED | HIGH | HIGH | HIGH |
v | LIKELY | | | | |
+------------+-----------+-----------+-----------+-----------+
LOW : tolerable with normal sensible measures.
MED : specific control measures named and briefed.
HIGH : reduce BEFORE proceeding, change the activity,
or do not run it.
Rate the RESIDUAL risk (after controls) the same way.
How to actually fill in a risk assessment
Knowing the five steps is one thing; sitting down with a blank assessment for a real activity is another, and this is where the method is made practical. Work it as a table, one row per hazard, and fill the row left to right so that each judgement builds on the last. Take the hazards from step one, name who and how from step two, score likelihood and severity and read the rating from the matrix, write the control measures, then score the residual risk that remains once those controls are in place. Do not leave the residual column blank, because it tells you whether the row is finished: if the residual is still high, the controls are not enough and the row is not done.
Take a worked example. You are planning an airsoft milsim exercise over wooded ground on a cold, damp afternoon, with light fading by the end. One hazard among several is eye and face injury from airsoft rounds: serious in severity, because an unprotected eye struck at velocity is a life-changing injury, and possible in likelihood for an exercise where people run, fall, and lift their masks to clear them. Serious crossed with possible reads medium on the matrix, before controls. The control measures come from the Airsoft Milsim Safety and Conduct Standard you will meet in Lesson 04: full-seal eye and face protection worn at all times in the play area, a velocity limit checked at the chronograph before play, marshals present to enforce it, and protection never lifted except in a designated safe zone. With those properly briefed and enforced, the likelihood drops to very unlikely, and very unlikely crossed with serious reads low. That is an acceptable residual risk, and the row is complete. Had it still read medium or high, you would add controls or change the activity until it did not.
A WORKED RISK-ASSESSMENT ROW (airsoft milsim, wooded ground)
HAZARD : Airsoft round striking the eye or face
WHO + HOW : Students + marshals; a round strikes unprotected
skin or eye, most likely if protection is lifted
in the play area to clear a fogged lens
LIKELIHOOD : Possible (people run, fall, lift masks)
SEVERITY : Serious (eye injury is life-changing)
RATING : MEDIUM (possible x serious)
----------------------------------------------------------------
CONTROL MEASURES (see Lesson 03 hierarchy; Lesson 04 standard):
- Full-seal eye + face protection worn at ALL times in play area
- Velocity limit set and checked at the chronograph before play
- Marshals present to observe and enforce
- Protection lifted ONLY in a designated safe zone
- Covered in the safety brief; anyone unbriefed does not play
----------------------------------------------------------------
RESIDUAL LIKELIHOOD : Very unlikely (controls enforced)
RESIDUAL SEVERITY : Serious (unchanged; cannot be lowered)
RESIDUAL RATING : LOW -> acceptable, row complete
Notice two things in that row that hold for every assessment you will write. First, severity rarely changes under control, because a struck eye is a struck eye whatever you do; what you change is the likelihood, by making the harm far less probable, and a row is brought down chiefly by driving its likelihood down. Second, the controls are specific and enforceable, not vague reassurances. "Be careful" controls nothing. "Full-seal protection worn at all times, checked by a marshal, lifted only in the safe zone" is a measure someone can actually carry out and you can actually check, and only such measures move the residual risk. Build every row to that standard, and the table that results is a real safe system of work rather than a form filled in to be filed.
Dynamic risk assessment: keeping it alive in the field
Everything so far has been the written assessment, made in advance and recorded. But the conditions you assessed in the calm of planning do not hold still once the activity begins, and a safety officer who fixes their attention on the written sheet while the real situation changes around them has missed the point. Dynamic risk assessment is the discipline of the live activity: the continuous, on-the-spot re-judging of risk as conditions change, and the changing of controls or the halting of the activity in response. It is the written assessment kept alive, and it is at least as important as the document, because the document cannot foresee everything and the field will always produce the unforeseen.
The triggers are the changes you can see if you are watching for them. The weather turns: rain sets in and the wooded ground becomes slick, raising the likelihood of a fall from unlikely to likely, and the response is to slow the movement, reroute around the worst banks, or end early. A student tires past the safe point: their footing goes, their judgement dulls, their reactions slow, and the activity that was safe at the start becomes a fall or a cold casualty waiting to happen, and the response is to rest them, lighten their load, or take them off. The light fails faster than planned: navigation that was straightforward in daylight becomes a hazard, and the response is to close in, use the agreed lights, or stop and wait. None of these is in the written sheet by name, all of them are real, and the safety officer who is present, watching, and willing to act is the control that catches them.
This is where the written and the dynamic assessments meet, and they are partners, not rivals. The written assessment sets the frame: it names the foreseeable hazards, fixes the controls, and draws the lines beyond which the activity may not go. The dynamic assessment works inside that frame, judging the actual moment against it and adjusting. The two share one instrument above all, the stop procedure of Lesson 05: when the dynamic judgement says the risk has risen beyond what the controls hold, anyone may call the stop, the activity halts at once, the danger is dealt with, and it resumes only when it is safe or is ended. A safety officer who has done a faultless written assessment but will not raise their eyes from it to see the rain coming in has done only half the job. The risk assessment is not a document you produce; it is a judgement you keep making, before the activity and all the way through it.
In Practice: Corporal Vael Assesses a Cold-Weather Fieldcraft Period
Corporal Vael is the safety officer for a fieldcraft period: a section of recruits moving across broken, wooded ground over an afternoon that the forecast says will be cold and damp, with the light going early. She does not wait for the day to arrive. The evening before, she works the five steps as a table, because she has learned that an assessment written in the calm is the frame that lets her judge the chaos later.
She identifies the hazards in turn: the terrain with its steep banks and a stream crossing, the cold and damp with the risk of cold injury, the fatigue that will build over the afternoon, and the failing light. For each she names who and how, and is careful to include the instructors, who will be watching the recruits and not their own footing. She scores each on the matrix. The cold-injury risk she rates serious in severity and, given the conditions and young recruits new to it, possible in likelihood, which reads medium. Her control measures are specific and checkable: the cold-weather dress and routine from FLD 240, a kit check before they move, hot drinks at the halt, and a watch kept on each recruit for the early signs. With those in place she judges the residual rating low, and the row is complete. She does the same for the crossing, the banks, and the light, records the lot, then takes the sheet to a qualified safety officer, who questions her on the crossing, and she strengthens that row before she is satisfied.
On the day, the written assessment becomes the frame and her eyes do the rest. An hour in, the damp turns to steady rain and the banks go slick, and she does not need the sheet to tell her the fall risk has climbed; she sees it and reroutes the section away from the worst bank, a dynamic decision the sheet never named. Later she watches a recruit begin to lag, his footing growing careless, and reads the early signs the cold-injury row warned her of, so she rests him, gets a hot drink into him, and checks him before the section moves on. When the light fails faster than the forecast promised, she closes the section in and brings the period to an early, orderly end rather than push a tired class across darkening ground. Nothing went wrong, which is the quiet measure of a safety officer doing the job well, and it went right because the written assessment was honest and the dynamic one never stopped. Afterwards she notes the rain and the early dark against the assessment, so next time the frame is better still, which is the review step closing the loop.
Check Your Understanding
- State the five steps of risk assessment in order and explain in one line what each requires. Why must they be worked in order rather than skipped between, and which step is the commonest one to fail at?
- Explain how a risk is evaluated by likelihood multiplied by severity, and what a risk matrix is for. A water crossing is judged fatal in severity but very unlikely once throw-lines are rigged: explain why the residual rating may be acceptable and yet the severity still demands respect.
- Define dynamic risk assessment and explain how it differs from the written assessment and how the two work together. Give two changes in conditions during a practical activity that would trigger a dynamic re-judging of risk, and say what the safety officer might do in response to each.
Reflection (write a short paragraph): Think of a practical activity you might one day run or supervise, in airsoft, physical training, fieldcraft, or first-aid drills. Identify three real hazards in it, decide who might be harmed by each and how, and for one of them score the likelihood and severity, read the rating off the matrix, name the control measures you would put in place, and judge the residual risk that would remain. Then describe one change in conditions that might occur once the activity is under way, explain how it would alter your judgement of the risk, and say what dynamic decision you would make in response, including the point at which you would call a stop.
Summary
- A risk assessment is the disciplined looking-ahead by which the safety officer's duty is carried out. It is thinking done to prevent harm, and its written form is only its record. It must be honest, complete, and proportionate, putting the weight of control where the danger actually lies.
- The five steps, worked in order, are: identify the hazards (weapons, terrain, weather, water, vehicles, fatigue, the activity itself); decide who might be harmed and how (students, instructors, the public); evaluate the risk and decide control measures (likelihood multiplied by severity, then reduce it and judge the residual); record the assessment; and review and re-assess when things change.
- A risk is judged by likelihood crossed with severity, read off a risk matrix that bands the result low, medium, or high. Low risks are tolerable with normal measures, medium risks need specific named controls, and high risks must be reduced before the activity may proceed, the activity changed, or the activity not run.
- Fill in an assessment as a table, one row per hazard, left to right, ending in the residual risk. Controls usually drive down the likelihood rather than the severity, and they must be specific and enforceable; a row is not finished until its residual risk is acceptable.
- Dynamic risk assessment is the continuous on-the-spot re-judging of risk as conditions change during the activity: weather turning, a student tiring, light failing. It works inside the frame the written assessment sets, and its sharpest instrument is the stop procedure, by which anyone may halt the activity the moment risk rises beyond the controls.
- This lesson supplies the assessment that the safety officer's duty of Lesson 01 demands, and feeds directly into the hierarchy of control and the safe system of work of Lesson 03, the application to the Army's real training of Lesson 04, the supervision, emergency plan, and stop procedure of Lesson 05, and the recording, review, and no-blame reporting culture of Lesson 10. It draws on FLD 240 Cold-Weather Operations and the Airsoft Milsim Safety and Conduct Standard for worked controls, and connects to the duty of care and ethical reporting of LDR 420 Command Responsibility and Ethical Leadership.
Crown Copyright © 2026 | Published by Authority of H.R.H. The Prince of Kaharagia