What is a lone worker risk assessment?

A lone worker risk assessment is a documented review of the hazards faced by workers who operate without close or direct supervision, the likelihood and severity of each, and the specific controls in place to reduce residual risk to an acceptable level. It is the evidence base a UK HSE inspector or a US OSHA officer asks for first after any serious lone-worker incident, and it is what sets the check-in cadence, SOS behaviour, and escalation chain the lone-worker app enforces.

Is a lone worker risk assessment legally required?

In the UK, the Management of Health and Safety at Work Regulations 1999 (Regulation 3) require a suitable and sufficient assessment of the risks to which any employee is exposed — lone working is not exempt, and HSE guidance INDG73 makes it explicit. In the US, OSHA's General Duty Clause (Section 5(a)(1)) requires employers to provide a workplace free from recognised hazards, and lone-worker risk is a recognised hazard where it applies. Neither regulator prescribes a template, but both expect the assessment to exist, be documented, and be reviewed.

What hazards should a lone worker risk assessment cover?

Group them into three classes so nothing is missed. Environmental hazards: remote sites, no mobile coverage, adverse weather, working at height or near water alone. People-based hazards: violence, aggression, home visits, cash handling, vulnerable service users. Task-based hazards: manual handling, hot work, hazardous substances, driving alone, energised equipment. Serious incidents typically combine two of these classes, so assess each role against all three lists.

How often should a lone worker risk assessment be reviewed?

Annually as a minimum, and immediately after any of: a real SOS or lone-worker near miss, a change of staffing (new roles, new shift patterns), a change of site or route, a change to the alerting app or ARC, or a regulator visit. Log every review — HSE inspectors treat a risk assessment with no review history as an unmaintained control regardless of what it says on the page.

What controls should a lone worker risk assessment recommend?

Controls should be specific, auditable, and enforced by a system rather than by memory. Typical control set: lock-screen SOS long-press with ARC escalation for people-based risk, man-down / no-motion detection with cancellable pre-alarm for task-based fall risk, welfare check-ins at 15 / 30 / 60 minute cadences based on risk tier, geofences on high-risk sites with entry/exit alerts, and offline-cached check-ins for remote sites with no coverage. 'The manager will phone' is not a control.

How is a lone worker risk assessment different from a lone worker policy?

The risk assessment identifies the hazards, scores them, and names the controls for a specific role, site, or shift. The policy is the organisation-wide statement of how lone-worker risk will be managed, who is accountable, and what the escalation chain looks like. The policy sits above many risk assessments — the risk assessment is what turns the policy's abstract commitments into concrete numbers (check-in cadence, geofence coverage, ARC threshold) for one role at one site.

Can I use the same 5×5 matrix as our other risk assessments?

Yes — and you should. A standalone lone-worker scoring scheme cannot be aggregated into the enterprise risk register, so it disappears from the ExCo dashboard and stops being taken seriously. Use the same likelihood × severity matrix, the same tolerability thresholds, and the same review cadence as the rest of your register so lone-worker risk shows up next to the risks it competes with for investment.

Guide · Lone worker risk assessment

Lone worker risk assessment: guide + template

A practitioner's guide for safety managers producing a defensible lone-worker risk assessment — the UK HSE INDG73 and US OSHA General Duty Clause requirements, the three hazard classes every assessment must cover, a 5×5 scoring method that plugs into your existing register, and a downloadable template.

Get the template Jump to hazard classes See SafeGuard's lone worker app

Legal basis

What UK and US regulators expect

United Kingdom

The Management of Health and Safety at Work Regulations 1999 (Regulation 3) require a "suitable and sufficient" assessment of the risks to any employee — lone working is not exempt. HSE INDG73 Protecting lone workers is the reference guidance inspectors and coroners cite, and BS 8484 sets the accreditation standard for the ARC that receives escalated SOS alerts.

United States

OSHA's General Duty Clause (Section 5(a)(1)) requires employers to provide a workplace free from recognised hazards. Lone-worker risk is a recognised hazard where it applies, and state-level rules (e.g. Cal/OSHA 3203 IIPP) require it to be documented in the written Injury and Illness Prevention Programme.

The three hazard classes

Every lone-worker risk assessment covers all three

Environmental hazards

Remote sites with no mobile coverage
Adverse weather (heat, cold, storms, flooding)
Working at height, near water, or in confined spaces alone
Poor lighting during out-of-hours shifts

Primary control: GPS breadcrumb + geofence entry/exit alerts, cached offline check-ins that flush when coverage returns.

People-based hazards

Violence, aggression, or threats from clients or the public
Community healthcare or social-care home visits
Cash handling or high-value equipment transport
Working with distressed service users or vulnerable adults

Primary control: Discreet lock-screen SOS long-press with silent ARC escalation and BS 8484 police response where applicable.

Task-based hazards

Manual handling, hot work, or use of hazardous substances
Driving alone or extended time in vehicles
Working with energised equipment or on isolated systems
Physically demanding work with fall or collapse risk

Primary control: Man-down / no-motion detection with cancellable pre-alarm, configurable welfare check-in cadence per risk tier.

Serious lone-worker incidents typically combine two classes — e.g. a remote site (environmental) plus a fall (task). Score each role against all three lists, not just the obvious one.

Method

Five steps to a defensible risk assessment

1

Inventory every lone-worker role and shift

List every role, site, and shift pattern where a worker operates without direct supervision — including intermittent lone working (e.g. last-out close-down). If it isn't on the list, it won't be assessed.

2

Enumerate hazards across all three classes

For each role, walk the environmental, people-based, and task-based hazard checklists. Do not stop at the first — most serious lone-worker incidents combine two classes (e.g. remote site + man-down after a fall).

3

Score likelihood × severity on a 5×5 matrix

Use the same 5×5 risk matrix the rest of your risk register uses — a standalone lone-worker scoring scheme drifts and can't be aggregated at the ExCo dashboard.

4

Assign a control per hazard — with an owner and a system

For every hazard above 'low', name the control (SOS, man-down, check-in cadence, geofence, buddy call), the owner, and the system that enforces it. 'Manager will phone' is not a control; a configured check-in in the app is.

5

Review annually and after every incident

Log the review. A lone-worker risk assessment with no review history is treated by HSE inspectors and coroners as an unmaintained control. Trigger an immediate review after any real SOS, near miss, or change in staffing/site.

Making the assessment enforceable

Where SafeGuard's lone worker app closes the gap

A risk assessment is only meaningful when the controls it names are actually enforced. Each hazard class above maps to a native SafeGuard control so the assessment ships as an executable configuration — not a filing-cabinet document.

People-based hazards → discreet lock-screen SOS long-press with silent ARC escalation (BS 8484 police response in the UK).
Environmental hazards → geofence entry/exit alerts, cached offline check-ins that flush when coverage returns, live GPS on active shifts only.
Task-based hazards → man-down / no-motion detection with a cancellable pre-alarm, plus welfare check-ins at 15 / 30 / 60 min cadences.
Review evidence → every real SOS becomes an incident record with corrective actions and audit trail — the annual review pack builds itself.

Related reading: the lone worker policy template sits above this assessment and names the accountability chain. The lone worker safety app buyer's guide covers the ARC / BS 8484 requirements the control column points at.

FAQs

Lone worker risk assessment — common questions

Download

Get the lone worker risk assessment template

The full editable template (Word + Google Docs): role inventory, hazard checklist across all three classes, a 5×5 likelihood-severity matrix, a control-owner-system column for every scored hazard, and a review log. Vendor-neutral — adopt it whether or not you use SafeGuard EHS.

Prefer to see the controls enforced live? Book a SafeGuard EHS demo and we'll wire the assessment's control thresholds into a working SOS + ARC + geofencing configuration.

Related pages