Event Risk Assessment: A Complete Guide for UK Event Organisers

By UK Event Managers • Event Safety • 10 min read

A risk assessment isn’t just a box-ticking exercise — it’s the document that keeps your attendees safe, satisfies your insurers, and demonstrates to councils and licensing authorities that you’ve thought seriously about event safety. Get it wrong and you could be turned away at the gate by the local authority, invalidate your event insurance, or — worst of all — face the consequences of a preventable accident.

This guide walks you through exactly what a UK event risk assessment needs to cover and how to write one that actually works.

Who Needs an Event Risk Assessment?

Under the Health and Safety at Work etc. Act 1974 and the Management of Health and Safety at Work Regulations 1999, anyone organising an event where people are employed or where members of the public are present has a legal duty to identify and manage foreseeable risks.

In practice, this means virtually every event — from a small village fete to a multi-stage music festival — should have a risk assessment. For larger events (typically 500+ people), a full Event Management Plan (EMP) incorporating the risk assessment will be required by the local council as a condition of permission to hold the event. Once your risk assessment is complete, it forms a core section of your Event Management Plan — the comprehensive document local authorities require for events of significant scale.

The Risk Assessment Process: 5 Steps

The Health and Safety Executive (HSE) sets out a standard 5-step approach that works well for events of any scale:

Step 1: Identify the hazards

Walk the site (or review plans if the site isn’t yet built) and systematically think through everything that could cause harm. Common event hazards include:

• Crowd crushing or surging
• Slips, trips and falls (especially in wet conditions)
• Fire
• Electrical hazards from temporary power supplies
• Structural failure of temporary structures (stages, marquees, barriers)
• Vehicle movements on site
• Food safety and hygiene risks
• Medical emergencies
• Noise-induced hearing damage
• Adverse weather (wind, lightning, extreme heat or cold)
• Terrorist threat or civil disorder (for large public events)

Step 2: Decide who might be harmed and how

Consider all groups who could be affected: general attendees, performers and artists, staff and volunteers, contractors (caterers, technical crew), children and vulnerable adults, and people with disabilities or reduced mobility.

Step 3: Evaluate the risks and decide on precautions

For each hazard, assess the risk using a standard matrix. Most risk assessment templates use a simple scoring system:

• Likelihood: 1 (very unlikely) to 5 (almost certain)
• Severity: 1 (minor injury) to 5 (fatality or multiple fatalities)
• Risk score: Likelihood × Severity

Scores of 15–25 are high risk and require immediate action. Scores of 8–12 are medium risk. Scores of 1–6 are low risk but should still be managed.

Step 4: Record your findings and implement controls

Document every hazard, your risk score, and the control measures you’ll put in place to reduce the risk. Your controls should bring the residual risk (the risk remaining after controls are applied) down to an acceptable level.

Step 5: Review and update

A risk assessment written six months before the event needs to be reviewed as the event date approaches and updated when circumstances change. Any significant changes to site layout, performer line-up, expected attendance numbers, or weather forecast should trigger a review.

What Your Risk Assessment Document Should Include

A well-structured event risk assessment document should contain:

• Event details: Name, date, venue, expected attendance
• Organiser details: Named event organiser with contact details
• Risk assessment date and review date
• A hazard register: Each hazard listed with likelihood, severity, risk score, control measures, residual risk score, and person responsible
• Emergency procedures: What happens in the event of a fire, medical emergency, evacuation, or severe weather
• Site plan reference (for larger events)
• Signatures: The document should be signed by the event organiser

Common Mistakes UK Event Organisers Make

1. Copying a template without adapting it to the specific event

Generic templates are a useful starting point, but a risk assessment that lists “marquee collapse” as a hazard when there’s no marquee at your event is a red flag to any competent reviewer. Every risk assessment must be specific to the event.

2. Setting residual risk scores too low without adequate controls

Scoring a crowding hazard at a 5,000-person event as “low risk” without demonstrating how you’ve achieved that — trained crowd management personnel, appropriate barrier configurations, clear entry/exit points — will not be accepted by any experienced reviewer.

3. Not updating the assessment when plans change

A risk assessment signed off in February for a July event needs to be reviewed when your expected attendance doubles in May.

4. Failing to address the weather

For outdoor events, adverse weather should always be on the hazard register — specifically high winds (affecting temporary structures), lightning, extreme heat (heatstroke risk), and heavy rain (slipping, flooding, electrical safety).

When Do You Need a Full Event Management Plan?

For events with more than approximately 500 people, or events taking place on public land, most local authorities will require a full Event Management Plan (EMP). An EMP incorporates the risk assessment but also covers:

• Communication plan (radio channels, key contacts)
• Medical provision (first aiders, ambulances, hospital liaison)
• Security and crowd management plan — including your SIA licensing obligations for access control and search roles
• Traffic management plan
• Waste management plan
• Noise management plan
• Contractor management

Frequently Asked Questions

Is a risk assessment a legal requirement for events in the UK?

Yes. Under the Health and Safety at Work etc. Act 1974 and the Management of Health and Safety at Work Regulations 1999, any event organiser employing people or hosting members of the public has a legal duty to carry out a risk assessment and implement controls to manage foreseeable risks. The assessment must be recorded in writing if the organisation employs five or more people.

How long does an event risk assessment take to complete?

For a small community event, a basic risk assessment might take 2–4 hours to complete properly. For a large outdoor festival or multi-stage event, a comprehensive risk assessment and Event Management Plan can take several days and may require input from multiple specialists (crowd management, structural engineers, medical). Always allow more time than you think you’ll need.

Who should sign off on an event risk assessment?

The event organiser or a designated competent person is responsible for producing and signing off the risk assessment. For larger events, it may be reviewed by a health and safety adviser or the local authority safety advisory group (SAG). Where a licensed venue is involved, the licence holder’s designated premises supervisor (DPS) may also be involved.

Does my event insurance require a risk assessment?

Most event insurers require evidence of a risk assessment as a condition of cover. Some will ask to see it before issuing a policy. Without a documented risk assessment, you risk having a claim refused in the event of an incident. Always check your policy conditions and ensure your risk assessment is completed before your event insurance is arranged.

What is an Event Management Plan and do I need one?

An Event Management Plan (EMP) is a comprehensive document that incorporates the risk assessment and also covers communications, medical provision, security, crowd management, waste, transport and emergency procedures. Most local authorities require an EMP for events with more than approximately 500 attendees or for events on public land. The risk assessment is a core section of the EMP but is not a substitute for it at larger events.