Risk Assessment
Scope of this chapter
This chapter should be read in conjunction with local processes. Any local templates and matrixes should be used.
Amendment
In May 2025, this chapter was replaced with an updated version following a full tri.x review.
This chapter looks at what risk assessments are and how they should be completed for the person and carer.
Risk is broadly defined as 'the probability that an event will occur with beneficial or harmful consequences'. A practitioner’s role is to support a person to identify, define and explore the beneficial or harmful outcomes of the identified activity or decision with the person or carer.
Risk assessments may be required at any stage of the social care process, for example:
- The assessment of need;
- Care and Support Planning/Support Planning;
- Review;
- Following a safeguarding enquiry;
- Protection Planning;
- Arranging a reablement service;
- Arranging equipment;
- Making a Best Interest decision under the Mental Capacity Act;
- When completing a best interest assessment as part of the DoLS process;
- Writing a social circumstances report.
The following table sets out some key principles of risk assessment that apply regardless of the context in which risk is being assessed.
Principle |
How? |
---|---|
Ensure the person's involvement |
Make sure the person is encouraged to be part of the process. Sharing information, transparency, support and accessibility should also be part of the process. |
Evidence |
Always make judgements about likely risk, impact and strategy based on evidence. Never make judgements based on assumptions, emotion or anxiety. |
A positive and strengths based approach to risk taking |
Actively encourage and support a person to take risks as taking risks can achieve personal change, growth and promote individual wellbeing. |
Promote independence, resilience, choice and control |
Always have regard for the person's wishes, views and feelings. Support and encourage the person to find their own solutions and strategies to risk. |
Seek to manage risk |
Risk is a normal everyday experience, from which we all learn and grow. Unless the risk is abuse or neglect, seek to manage risk. Remember not all risks can or should be eliminated. |
Least restrictive |
The best way to manage risks should always be the least restrictive in terms of the person's human rights. |
Monitor and Review |
Risks can constantly change. Always review plans and monitor them when their likely effectiveness is unclear, change is likely, or if they are unstable. |
When identifying risks you need to consider the following:
- Risks to the person;
- Risks to a carer;
- Risks to another vulnerable adult;
- Risks to a child;
- Risks to the public;
- Risks to providers of care and support/support; and
- Risks to property and belongings.
Every situation is different, but the table below sets out some examples of risk that may be present.
Risk |
Examples |
---|---|
Risk associated with an impairment, health issue or disability |
|
Risk of accidental injury |
|
Risks around medication |
|
Risks around the use of drugs or alcohol |
|
Risk from environment |
|
Risk of abuse or neglect |
|
Risks to a Care and Support Plan / Support Plan |
|
Other Risks to Consider |
|
In many cases family members will not classify or identify themselves as carers. They may not receive allowances or support for the role they are playing. In some cases, carers will be managing complex, risky situations on an ongoing basis, which can result in the person with care and support needs becoming ‘invisible’ and not known to health and social care services until there is a breakdown of the situation, a crisis or a serious incident. Early recognition of the carer and support can help to reduce the risk.
The person/carer's involvement in risk assessment can:
- Be empowering; and
- Increase the likelihood of positive engagement with any plan to manage risk; and
- Build resilience, confidence and independence.
As such it is important that, whenever it is practicable to do so, the person/carer is directly involved in the risk assessment. This includes:
- Providing information about the purpose of risk assessment;
- Carrying out the risk assessment in an accessible way;
- Supporting the person with advocacy where appropriate;
- Talking about all of the risks that exist;
- Talking about all of the benefits and potential harmful consequences of taking the risk;
- Exploring all of the available options to manage risk; and
- Making an informed decision about whether to take a risk, or how best to manage risk.
If the risk assessment is being carried out as part of a care and support process under the Care Act (including safeguarding) and the person/carer is likely to have substantial difficulty being involved, the duty to provide an independent advocate will apply if there is no other suitable representation available.
See: The Duty to Provide an Independent Advocate for further guidance about when the advocacy duty applies under the Care Act.
If there are concerns that the person may lack capacity to be involved in the risk assessment, then a mental capacity assessment must be carried out to determine whether this is the case.
For further guidance see the Mental Capacity Act 2005 Resource and Practice Toolkit.
If the person/carer has capacity to decline to be involved you should encourage them to be a part of the process, but ultimately the decision is theirs to make.
You should proceed to carry out the risk assessment based on the information available.
The person's refusal to be involved should be clearly recorded, and a copy of the completed risk assessment should be provided to them. They should then have the opportunity to review and amend any plan to manage risk.
If a person/carer requests that someone else is involved in the risk assessment, then you should involve that person unless you have evidence that doing so would place the person (or another vulnerable adult or child) at increased risk of harm or abuse.
It may be relevant to consult with, or involve others in one or more of the stages of the risk assessment such as:
- Carers;
- Advocates;
- Family members, friends or neighbours;
- Professionals working with the person such as service providers, health professionals/services such as occupational therapy, another local authority, the police, fire service and/or housing.
If the risk assessment is being carried out in relation to a person with care and support needs as part of a formal care and support process under the Care Act (including safeguarding), the duty to involve any carer applies, even if the person does not consent to their involvement unless:
- The risk assessment relates to possible abuse or harm of the person caused by the carer; and
- The carers' involvement in the risk assessment is likely to increase the risk of further harm or abuse occurring.
When a person has not consented to the carer being a part of the risk assessment you should agree the most appropriate way to involve the carer and how information can be shared.
Consideration may need to be given to whether an advocate is needed.
If an independent advocate has been appointed to support the person/carer to be involved in the risk assessment, their contribution must be regarded.
See: The Duty to Provide an Independent Advocate for further guidance about when the advocacy duty applies under the Care Act
All information sharing that takes place must be in line with Data Protection Legislation (namely the UK General Data Protection Legislation and the Data Protection Act 2018) and local policy.
Please also see: Providing Information about the Person or Carer
When the risks have been identified you must consider, based on the available evidence:
- How likely it is that the risk will occur; and
- What the likely positive impact of the risk will be on the person/carer; and
- What the likely negative impact may be on the person/carer; and
- What the likely negative impact may be on others; so that
- The level of risk can be determined.
There could be:
- A high likelihood of risk;
- A low likelihood of risk;
- Risks that are likely to have a significant impact on the person/carer;
- Risks that are likely to have a minimal impact on the person/carer;
- Risks that are likely to have a significant impact on others;
- Risks that are likely to have a minimal impact on others.
When determining the overall level of risk to a person/carer more weight should be given to:
- The impact of the risk on the person/carer (particularly their wellbeing); and
- The likelihood of the risk occurring; rather than
- The number of risks that exist.
Risk is a normal everyday experience, from which we all learn and grow.
Unless the risk is abuse or neglect the purpose of risk assessment is to:
- Maximise the positive impact of taking the risk; and
- Reduce the negative impact; and this
- May or may not lead to the elimination of risk.
If the risk is abuse or neglect the risk assessment should seek to eliminate the risk wherever possible.
Wherever possible you should take a positive approach to risk assessment unless taking the risk will increase the risk of abuse or neglect of the person (or another vulnerable adult or child).
This involves taking steps to:
- Actively encourage and support a person to take a risk; when
- Taking the risk is likely to achieve personal change, growth and promote individual wellbeing.
Conversations with the person/carer about risk should be from a strengths based perspective. This means supporting them to explore whether there is:
- Anything within their own power that they can do to manage the risk; and
- Anything within the power of their family, friends or community that they can use to manage risk.
Other options to consider if available, include:
- What steps providers of services can take; and
- What steps professionals can take or put in place.
It is important that the measures to manage risk are:
- Appropriate and proportionate to the overall level of risk present looking at the likelihood and consequences of something going wrong;
- The least restrictive that they can be.
When working with people virtually, managing risk can be more difficult as the information gathered from observations is reduced. Closer consideration is needed to what or how questions and what other sources of information are available to aid the assessment and management of risk. For further guidance, see: SCIE: Risk assessment process and key points to risk identification in virtual interactions.
In the Care Act people are seen as experts in their own lives, and as such are best placed to make their own decisions if they are able to do so. Supporting people to make their own decision about how best to manage risk can:
- Be empowering; and
- Increase the likelihood of positive engagement with any plan to manage risk; and
- Build resilience, confidence and independence.
Therefore, if a person (with capacity) or a carer has a clear view about how best to manage risk any risk management plan should be based upon this unless:
- The method to manage risk is not available; or
- The method does not reduce the risk of abuse or neglect; or
- The method increases the risk of abuse or neglect; or
- The method places another vulnerable adult (or child) at risk of abuse or neglect.
If any of the above circumstances apply you must explain to the person/carer why the plan cannot reflect their wishes, and then make risk management decisions that:
- Are evidence based; and
- Have regard for their views, wishes and feelings; and
- Are appropriate and proportionate to the overall level of risk present; and
- Are the least intrusive that they can be; and
- Are the least restrictive of the person's human rights, particularly their right to liberty and their right to family life.
Unwise decisions
The Mental Capacity Act 2005 protects a person’s right to make decisions, and they cannot be deemed to lack capacity purely because the decision is unwise.
An unwise decision is any decision that you, or anyone else thinks is not the best decision for them.
There may be cause for concern if someone:
- Repeatedly makes an unwise decision that puts them at serious risk of harm, abuse or exploitation; or
- Makes an unwise decision about risk that is obviously irrational or out of character.
In this situation you must carry out an assessment of capacity where it is appropriate and relevant to do so before making any decision about risk on their behalf.
A mental capacity assessment can only be carried out if:
- The person/carer has is unable to make a particular decision about risk at the time it needs to be made; and
- You believe the inability to make the decision is caused by an impairment of, or a disturbance in the functioning of the person’s mind or brain; and
- All practicable steps have been taken to support them to make their own decision about risk.
See the Mental Capacity Act 2005 Resource and Practice Toolkit, which provides further guidance about unwise decisions and assessing mental capacity.
If a person lacks capacity to make a decision about the best way to manage risk this decision must be made in their Best Interests using the 4th and 5th principles of the Mental Capacity Act.
In particular, any decision must:
- Be evidence based; and
- Have regard for their views, wishes and feelings; and
- Be appropriate and proportionate to the overall level of risk present; and
- Be the least intrusive that it can be; and
- Be the least restrictive of the person's human rights, particularly their right to liberty and their right to family life.
See the Mental Capacity Act 2005 Resource and Practice Toolkit, which provides comprehensive guidance about making best interests decisions.
Under no circumstances should you agree a risk assessment plan that you know will place another vulnerable adult or child at risk of harm, abuse or neglect.
If, as part of any conversation or information gathering you become concerned that a vulnerable adult or child is experiencing, or at risk of abuse or neglect you must respond appropriately by raising a concern.
See Safeguarding Adults, which also includes information about how to raise a children's safeguarding concern.
In all cases a record of risk should be made on the person's file. This should be in line with local requirements around the recording of risk.
The record should evidence and detail;
- What the actions are;
- Who will be carrying them out;
- The timeframe to act; and
- How the impact of the action on risk will be monitored and reviewed.
Where a risk management plan has been prepared this should be provided (unless there are safeguarding issues that would make it unsafe to share the document). The risk assessment should be provided;
- To the person or carer to whom it relates, and consideration should be given to any accessibility issues; and
- Anyone who the person or carer asks to be provided with a copy; and
- Anyone directly involved in managing the risks in the plan.
If you believe it is relevant to share the plan with anyone else, it can only be shared if:
- The person has consented; or
- The carer has consented (when the risk assessment relates to a carer); or
- If the person lacks capacity a best interest decision has been made.
Risk can be dynamic and constantly changing. Arrangements should be made to monitor a risk assessment and detail who will take on this role.
Risk assessments should be reviewed in line with any timeframes that were agreed when the assessment was completed.
A review of the risk assessment should also take place when there is evidence that indicates either:
- The level of risk has changed;
- The risk management strategies are not effective;
- The risk management strategies are no longer required; or
- There may be a less restrictive way of managing risk.
Any review of risk should establish whether:
- Risks continue to be well managed by any plan;
- There have been changes to risk;
- There is any risk of abuse or neglect; and
- Whether there is a risk to the Care and Support Plan/Support Plan’s effectiveness.
If risks have not changed and are well managed
If the review identifies that risks have not changed and the measures in place are effectively reducing risk this should be clearly recorded, and the current plan should continue subject to further review or monitoring.
If risks have changed or are not managed
If the review identifies a change in risk, or that risks are not working, you will need to explore:
- What is working and not working with current measures;
- What steps can be taken to resolve any issues with the current measures to reduce risk; and
- Any new measures to manage risk; and
- If risks have changed, carry out any new assessment of risk.
Last Updated: May 23, 2025
v60