How Can Multi-Site Businesses Manage Risk Assessments Consistently?

Multi-site businesses should manage risk assessments through a central compliance register, a consistent assessment process and a separate action plan for every location.

Standardising the way assessments are arranged and recorded makes gaps easier to identify. However, each report must still reflect the building, people, systems and activities at the individual site.

A risk assessment copied from one location to another is unlikely to provide suitable evidence that the risks have been properly considered.

Why Is Multi-Site Compliance Difficult to Manage?

Risk assessments can often be managed informally when an organisation operates from one or two locations. As the property portfolio grows, that approach can quickly become unreliable.

Different opening dates, landlords, building types, local managers and assessment providers can all create inconsistencies.

One site may have a current Fire Risk Assessment but no evidence that the recommended actions were completed. Another may have a Legionella Risk Assessment that does not cover every part of its water system.

Reports may also be stored in local inboxes, filing cabinets or different online systems. This makes it difficult for the central compliance team to establish what has been completed and what remains outstanding.

The problem is not always a missing report. A report may exist but cover the wrong area, contain outdated information or leave responsibility for important actions unclear.

Start With a Complete Site Register

The first step is to create a central register containing every location operated or managed by the organisation.

This should include trading sites, vacant properties and locations that are due to open. Temporarily closed or little-used buildings should not be overlooked, particularly when water safety and fire security arrangements are being considered.

For each location, the register should record:

• Full property address
• Building type and current use
• Responsible site manager
• Landlord or managing agent
• Tenure and areas of control
• Assessments currently held
• Date of each assessment
• Recommended review arrangements
• Outstanding actions
• Significant changes since the last assessment
• Location of reports and supporting evidence

This creates one reliable overview of the portfolio. It also exposes missing information before it becomes a problem during an inspection, audit or client request.

Decide Which Assessments Each Site Requires

Not every site will require exactly the same combination of assessments.

A retail unit, warehouse, dental practice and office may belong to the same organisation but present very different risks. The assessments required should reflect the property, people, equipment and activities at each location.

The organisation may need to consider Fire, Legionella, Health and Safety and Disability Access Risk Assessments. Specialist or task-specific assessments may also be required depending on the work carried out.

A central compliance team should establish the expected assessment schedule for each property while allowing competent assessors to identify additional requirements at site level.

Use a Consistent Scope Across the Portfolio

Multi-site businesses benefit from using a consistent assessment scope and report format.

This makes it easier to compare sites, monitor recurring issues and provide local managers with clear instructions. It also allows the central team to understand priorities without having to interpret several completely different reporting systems.

Consistency can be applied to:

• The areas inspected
• The evidence collected
• The questions asked
• The way risks are rated
• The structure of each report
• The format of the action plan
• The supporting photographs provided

Standardisation should improve visibility, but it should never result in generic reports.

Every assessment must remain specific to the individual property. Findings should reflect its layout, occupancy, condition, water systems, fire precautions and everyday working activities.

Appoint Clear Responsibility

Every part of the process should have a named owner.

The central compliance or property team may coordinate assessments, maintain the portfolio register and monitor performance. Local managers may provide access, explain working practices and complete everyday operational actions.

Landlords or managing agents may be responsible for communal areas, structural issues and shared building systems.

Responsibility should be recorded rather than assumed. This is particularly important in leased or multi-occupied buildings where duties may overlap.

If an assessment recommends an improvement, the action should be assigned to a specific person or team with the authority to complete it.

Coordinate Assessments During the Same Visit

Where the site and scope are suitable, Fire, Legionella, Health and Safety and Disability Access Risk Assessments can be completed during one coordinated visit.

This reduces the number of appointments required and avoids repeatedly disrupting employees, customers or service users. It can also reduce duplicated administration and provide a more joined-up view of each property.

Each discipline should still have its own suitable scope and individual report. Coordinating the visit should not result in important details being combined into one generic checklist.

This approach can be particularly valuable for organisations managing large numbers of similar properties, including dental groups, healthcare providers, retailers, hospitality operators and property management companies.

Group Sites Geographically

Geographical scheduling can make a nationwide assessment programme more efficient.

Sites within the same town, city or region can be grouped into planned assessment days. This can reduce unnecessary travel and make it easier for the organisation to manage access arrangements.

Regional scheduling works particularly well when sites have similar opening hours, property types and assessment requirements.

However, efficiency should not be prioritised ahead of risk. Urgent or higher-risk properties may need to be assessed sooner, even when they do not fit conveniently within the planned regional schedule.

Separate Review Dates From Changes at the Site

Multi-site organisations often work towards scheduled review dates. This is useful, but relying entirely on a calendar can create problems.

Risk assessments should also be reviewed when there is reason to believe they are no longer suitable or when significant changes occur.

A review may be required when:

• A new site opens or an existing location closes
• The use or layout of a property changes
• Staffing or occupancy changes significantly
• Refurbishment affects hazards or escape routes
• The water system is altered
• A building has been vacant or experienced low use
• New equipment, substances or processes are introduced
• An incident or near miss exposes a weakness
• Responsibility changes between a landlord and tenant

Local managers should know how to report these changes to the central compliance team.

An assessment can still require review even when its planned review date has not yet been reached.

Turn Every Report Into an Action Plan

Completing an assessment does not complete the compliance process.

Every recommendation should be transferred into an action tracker containing the priority, responsible person, target date and current status.

The tracker should also show what evidence is required before the action can be marked as complete. This may include photographs, invoices, maintenance records, updated procedures or staff training records.

High-priority actions should be visible to senior managers and escalated when they become overdue.

A consistent action-tracking process allows the organisation to compare performance between sites and identify managers who may require additional support.

Keep Evidence in One Central Location

Reports and supporting documents should be stored centrally in a system that can be accessed by the appropriate people.

Each property should have a clear record containing its assessments, action plans and evidence of completed work.

This might include:

• Current and previous risk assessment reports
• Photographs of completed improvements
• Contractor invoices and service records
• Fire alarm and emergency lighting records
• Staff training and fire drill records
• Legionella monitoring information
• Updated policies and procedures
• Accessibility arrangements
• Details of significant changes

Local managers should have access to the information relevant to their site. The central team should be able to see the position across the entire portfolio.

Monitor the Right Compliance Information

A large number of completed assessments does not necessarily mean that risks are being managed effectively.

Multi-site businesses should monitor whether assessments remain current, whether recommendations are being completed and whether supporting evidence is available.

Useful performance measures may include:

• The percentage of sites holding every required assessment
• The number of high-priority actions still open
• The number of overdue actions
• The average time taken to complete recommendations
• Sites that have changed since their last assessment
• Reports and evidence available centrally
• Assessments approaching their planned review point

These measures provide a more useful picture than simply counting how many reports have been produced.

Maintain Independence Between Assessment and Remedial Work

Where possible, businesses should separate independent risk assessment from the sale of remedial services.

An independent assessor should identify the risks, explain the priorities and recommend proportionate action. The organisation can then decide how any necessary improvements should be completed.

This reduces the risk of recommendations being influenced by an opportunity to sell additional work.

It also allows the organisation to compare costs, use existing approved contractors and prioritise work consistently across its portfolio.

What Should a Nationwide Risk Assessment Provider Offer?

A risk assessment provider working across multiple locations should be able to deliver a consistent service without losing the site-specific detail required at each property.

Businesses should look for:

• Competent and appropriately experienced assessors
• Reliable coverage across the required locations
• A consistent assessment scope
• Site-specific reports
• Clear priorities and practical actions
• A named point of coordination
• Flexible geographical scheduling
• Transparent service exclusions
• Consistent reporting across the portfolio
• No unnecessary remedial upselling

The provider should also understand the organisation’s internal reporting requirements and how access will be coordinated with local managers.

How The HSRA Can Help

The HSRA provides independent Fire, Legionella, Health and Safety and Disability Access Risk Assessments throughout England, Wales and Scotland.

Our nationwide network of multi-skilled assessors allows us to coordinate assessments across individual properties, regional groups and larger multi-site portfolios.

Where the premises and scope are suitable, several assessment types can be completed during one visit. Each site receives its own clear, detailed reports containing practical recommendations and prioritised actions.

We work with property managers, dental groups, healthcare providers, retailers, hospitality operators and other organisations that require consistent risk assessments across multiple locations.

Our independent approach means we do not use assessment reports to sell unnecessary remedial work. This gives organisations clear evidence of the risks while allowing them to manage any required improvements through their own trusted contractors.

Contact The HSRA for a no-obligation quotation for one site or a nationwide property portfolio.

FAQs