Par Syed Muhammad Daud Rizvi — Cofondateur de TapOkie Work. Pointages de visite et suivi audit-ready pour travailleurs isolés dans de petites équipes — sans lock-in enterprise.
A lone worker risk assessment identifies who works alone, what could go wrong, how likely and severe that harm is, and which controls reduce risk so far as is reasonably practicable. For small teams, a short written assessment reviewed when roles change is usually enough to drive training, check-ins, and escalation procedures.
What a risk assessment is trying to do
A lone worker risk assessment is not a compliance document you file and forget. Its purpose is to identify who in your organisation works alone, what could go wrong when they do, and what controls reduce that risk to an acceptable level. The paperwork is evidence of the thinking. That is what matters.
This guide gives you a plain-English framework for carrying out that assessment, designed for managers in care, estate agency, charity, and field service settings.
Step 1: Identify who works alone
Start with a complete list of roles in your organisation that involve lone working. Lone working includes visiting clients at their home or a property alone, working at a remote site without colleagues present, opening or closing premises alone, outreach or community work without a buddy, and travelling between visits without anyone knowing your status in real time.
Do not limit this to full-time staff. Include part-time workers, contractors, bank workers, and volunteers who work under your supervision. Many organisations discover more lone working than they expected once they map it out.
Step 2: Identify realistic hazards
For each lone working scenario, ask: what could go wrong? Common categories include:
- Violence or aggression: most relevant to home care workers, estate agents, and outreach workers visiting unfamiliar people or locations
- Medical emergency: a worker has a health event and nobody is nearby, relevant to any lone worker particularly in physically demanding roles
- Accidents or injury: slips, falls, or equipment incidents at sites without colleagues to assist
- Nobody noticed in time: the most common failure mode, where a worker needs help but the alert does not fire, fires too late, or fires and nobody acts on it promptly
Be realistic, not alarmist. A care worker on a routine familiar visit carries different risk from a lone estate agent viewing an empty property with a new contact. Your controls should match the actual risk level.
Step 3: Assess the level of risk
For each hazard, consider how likely it is to happen based on the specific context, how severe the consequences would be if it did, and what controls already exist. A simple low, medium, high matrix is sufficient for most small businesses. You do not need specialist software. The goal is to show you thought about it, not to produce an actuarial model.
Step 4: Identify controls
Controls reduce either the likelihood of a hazard occurring or the severity of its impact. For lone workers, practical controls include:
- Check-in procedures: workers confirm they have started and ended a visit; if they do not confirm the end within an agreed window, a manager is alerted
- SOS capability: workers can raise an immediate alert if they feel unsafe or need help
- Escalation chain: if the primary manager does not respond to an alert, a backup is notified automatically
- Visit records: timestamped history of visits, alerts, and responses, demonstrable to an inspector or insurer
- Training: workers know the procedure and what to do if they feel unsafe
- Communication: managers know who is out on visits and can contact them when needed
Not all controls apply to every situation. Match the controls to the actual risk level you identified in step three.
Step 5: Record your findings
Regulation 3 of the Management of Health and Safety at Work Regulations 1999 (SI 1999/3242) requires employers with five or more employees to record significant findings in writing. HSE's guidance publication INDG73, "Working alone: health and safety guidance on the risks of lone working," sets out what that record should cover for lone working specifically. A risk assessment does not need to be elaborate. A clear document that shows you identified the hazards, considered the likelihood and severity, and put controls in place is sufficient.
Keep it updated when new roles involve lone working, incidents or near-misses occur, the nature of the work changes, or workers raise concerns. A risk assessment that was accurate three years ago may not reflect what your team actually does now.
Step 6: Choose monitoring that people will actually use
The most common failure in lone worker monitoring is a system that workers find burdensome and quietly stop using. False alarms are the second most common failure. When alerts fire too often for non-events, managers start ignoring them.
A good check-in system should require as little friction as possible from the worker: start visit, end visit. It should warn the worker before an alert fires so they can extend a session if a job runs long. It should send alerts to managers in real time without requiring someone to watch a screen all day. And it should generate exportable records automatically.
If workers are reluctant to use your current system, or managers are muting alert notifications, your risk assessment is not working in practice. Revisit both the controls and the tool.
What to keep for evidence
If an inspector, insurer, or client asks about your lone worker process, you should be able to produce your written risk assessment, evidence of the monitoring system you use and how it works, records of visits and missed alerts and how they were handled, and your escalation chain.
Having a system is not the same as having the records. The records are what make the difference when something has gone wrong or a review specifically asks for them.
Related reading
- UK lone worker legislation: employer duties explained
- What is BS 8484?
- Lone worker compliance
- Duty of care overview
Questions fréquentes
Who needs a lone worker risk assessment?
Any employer with people working without close or direct supervision — including part-time care visits, viewings, field engineers, and home outreach — should assess those activities and record significant findings.
How often should it be reviewed?
Review after incidents, near misses, role or site changes, and at least annually as good practice. Treat it as a living document, not a one-off form.
What controls usually follow the assessment?
Training, visit start/end check-ins, SOS or panic options, manager escalation, and records. Match heavier controls to higher-risk visits and empty properties or high-risk clients.
Can software replace the assessment?
No. Software helps implement and evidence monitoring. The assessment is a management duty that decides who is covered and which tools are suitable.