Guidance · Reviewed August 2026
How to run health and safety as a system rather than a pile of paperwork — the four steps HSE sets out, who is responsible for what, and how to know whether it is working.
The short answer
Managing health and safety means controlling workplace risks through planning, implementation, monitoring and review — the practical layer on top of what health and safety means in UK law. Under the Health and Safety at Work Act 1974 (HASAWA), every employer has a legal duty to provide a safe working environment and suitable systems of work.
Managing health and safety is a core responsibility for every employer and business owner. It means identifying hazards, assessing risks, and taking practical steps to protect workers and others from harm. Done properly it prevents injuries and ill health — and it also tends to improve productivity and morale, because people work better when they aren’t working around problems.
Plan, Do, Check, Act
HSE’s guidance Managing for Health and Safety (HSG65) is built around a four-stage cycle: Plan, Do, Check, Act. It replaced the older POPIMAR model, and it deliberately treats health and safety as part of general good management rather than a bolt-on system. It also aligns with ISO 45001, which matters if you are working towards certification.
The word that does the work is cycle. Act leads back into Plan; a management system that stops after “Do” is the most common failure mode. Follow the guidance and you will normally be doing enough to comply — inspectors may refer to it.
PLAN
Decide what you are trying to achieve
Set your direction and say who is accountable for what. In practice this is your health and safety policy — aims, responsibilities and the arrangements you intend to put in place. Written down if you employ five or more people.
DO
Identify your risks and control them
Work out your risk profile, organise the people and resources to deal with it, and actually implement the controls. That means risk assessment, competent people, adequate supervision, and consulting your workforce.
A control that exists on paper and not on the floor is worse than no control at all — it shows you identified the risk and then left it.
CHECK
Measure whether it is working
Two kinds of monitoring. Active — inspections, checks and audits that look for problems before anything happens. And reactive — investigating incidents and near misses to find out why controls failed. Sickness absence patterns are worth watching too, since ill health rarely announces itself.
ACT
Review, learn, and change something
Review performance against what you set out in Plan, learn from what the checks found, and act on it. Then round again. This is also where the management system either improves or quietly ossifies.
Understanding and Managing Workplace Risks
Every workplace faces its own set of hazards — moving vehicles and equipment, chemical exposure, stress, ergonomic risks. Employers must carry out a suitable and sufficient risk assessment to identify them and put controls in place.
⚙️
Safe systems of work
Method statements and permits for tasks with residual risk, backed by PPE where controls can’t remove the hazard. See safe systems of work.
🚪
Signage and emergencies
Clear signage, evacuation procedures and first aid arrangements that people actually know about rather than ones filed away.
🧹
Maintenance and housekeeping
Routine upkeep prevents a surprising share of incidents. Slips, trips and falls are among the most commonly reported workplace injuries, and most are preventable with basic controls.
🗣️
Open communication
Employers must consult employees on health and safety. Reporting a hazard should be routine rather than something that takes nerve.
Roles and Responsibilities
Health and safety duties sit at every level of an organisation, and they are not interchangeable.
| Who | What they must do |
|---|---|
| Employers | Assess risks, implement preventive measures, and provide training, information and supervision — so far as is reasonably practicable. |
| Managers and supervisors | Enforce the standards day to day and monitor conditions. Under section 37 of HASAWA, senior managers can be prosecuted personally where an offence involved their consent, connivance or neglect. |
| Employees | Take reasonable care for their own health and safety and that of others affected by what they do, and co-operate with their employer. These are duties under sections 7 and 8, enforceable in the criminal courts. |
Training and Competence
Providing information, instruction, training and supervision is a legal duty under section 2(2)(c) of HASAWA, not a discretionary extra. People need to understand the hazards of their own work and how to control them.
| If you need to… | Usual route |
|---|---|
| Manage safety for a team | IOSH Managing Safely — three days, covering the legal framework and risk assessment. |
| Hold a formal H&S role | NEBOSH General Certificate, or the wider range of NEBOSH certificates. |
| Carry out assessments | Risk assessment training. |
| Investigate incidents | Accident investigation and reporting. |
| Qualify on the job | NVQ in Health and Safety, or see health and safety officer courses. |
Monitoring, Auditing and Continuous Improvement
Performance needs checking, not assuming. Regular audits, inspections and employee feedback surface the gaps between what your documents say and what actually happens. Record what you find and act on it with a named person and a date — an audit finding with neither is just an observation.
Find the gaps first
A health and safety risk review identifies what your arrangements are missing, and monitoring, review and audit covers how to keep checking. Or map training requirements by sector, hazard and job role — free, no account needed. The tools sit on envicourse.com, our course marketplace, and open in a new tab.
Why It’s Worth Doing Well
The legal case is straightforward — breaches are criminal offences with unlimited fines available. But the commercial case tends to land harder with the people who hold the budget.
Fewer incidents
Reduced accidents, injuries and work-related ill health — and less time spent dealing with the aftermath.
Staff stay
Better wellbeing and retention. People notice whether an employer takes their safety seriously.
Lower costs
Insurance premiums, sick pay, lost output and compensation all track incident rates.
You win work
Demonstrable competence is increasingly a condition of bidding — accreditation schemes, principal contractor requirements, insurer questions at renewal.
Managing health and safety well isn’t only about compliance. It’s about a workplace where people can get on with the job without working around problems that should have been fixed.
Related Guidance
Risk assessment →
HASAWA 1974 explained →
What is health and safety? →
Becoming a health and safety officer →
All guidance topics →
General guidance only, reviewed against HSE guidance and the Health and Safety at Work etc. Act 1974 in August 2026. Envico is an independent training intermediary and is not affiliated with the HSE.