RAMS vs risk assessment: what's the difference and when do UK trades need each (2026)

"Do I need a risk assessment or a RAMS?" is one of the most common questions UK trades ask before starting a job. The short answer is: usually both, combined into one document. The longer answer is more nuanced and depends on the work, the contract, and what the main contractor demands. This guide explains the difference between a risk assessment and a RAMS, when each is required, and why most UK construction practice has settled on RAMS as the default.

What a risk assessment is

A risk assessment is a written document that identifies hazards in a piece of work, evaluates who might be harmed and how, scores the severity and likelihood of harm, and lists the controls in place to reduce the risk to an acceptable level. Risk assessments are required under the Management of Health and Safety at Work Regulations 1999 for any work activity that could reasonably foreseeably cause harm.

The HSE describes the risk assessment as a 5-step process: identify the hazards; decide who might be harmed and how; evaluate the risks and decide on precautions; record findings and implement; review and update. The output of the process is the risk assessment document, which captures the hazards and controls in writing.

A risk assessment is what is required by law. The risk assessment alone, however, does not describe how the work will be done.

What a method statement is

A method statement is a separate document that describes the step-by-step sequence of how a piece of work will be carried out safely. It answers the practical question: "show me how, in order, you are going to do this." A method statement specifies the equipment used, the personnel involved, the safety controls at each step, and the emergency arrangements.

Method statements are not strictly required by law in the same way risk assessments are - they are an industry-standard practice rather than a regulatory requirement. However, the HSE expects "safe systems of work" to be documented, and a method statement is the documentation of a safe system. So while the legislation says "risk assessment", the practice says "risk assessment plus method statement".

What a RAMS is

A RAMS - Risk Assessment and Method Statement - combines both documents into one. The first half is the risk assessment (hazards, controls, residual risk). The second half is the method statement (sequence, equipment, personnel, emergency procedures). UK construction has standardised on RAMS as the default document because main contractors want both pieces of information together rather than separately.

A complete RAMS in 2026 typically runs 10-15 pages and includes:

• Project information and scope
• Risk assessment matrix with all identified hazards
• Control measures in HSE hierarchy (engineering, administrative, PPE)
• Method statement with step-by-step sequence
• Plant and equipment register
• PPE register
• Legislation references
• Emergency procedures
• Sign-off and review schedule

The same job, both halves: a worked example

The quickest way to understand the difference is to take one real job and split it into its two halves. Take erecting a scaffold in a public place - a shop front on a high street, say, with people walking past all day. Here is how the same job looks as a risk assessment and as a method statement.

The risk assessment half: the risks involved

The risk assessment answers what could go wrong. A useful way to write each risk is three parts: what the risk is, who it affects, and how you minimise it. For this job the standout risk is not to the scaffolders, it is to the public. People walking past are not thinking about the work - they are on their phones, they are distracted, and they will happily walk straight under a scaffold or through a loading area if nothing stops them. So the risk is being struck by the work or by falling material, the people most affected are the public, and the controls are a pedestrian-free exclusion zone around the work, a separate loading zone for materials, and a clear marked pathway that keeps pedestrians away from the lorry and the lift. Where people are walking below the work, the controls go further: the scaffold is double-boarded with debris sheeting between the boards to stop anything falling through, and the working lift is netted or brick-guarded.

The method statement half: how the job is done

The method statement answers how, in order. For the same job the sequence runs roughly: set up the exclusion zone and loading area first; set down the base plates; stand the legs up and fix them to the ledgers; once the legs and ledgers are in place, transom out for the boards; handrail the lift above using scaff steps and a ladder gate; board out; and use a ladder to access the safe working lift. The scaffold type is chosen for the job - a fixed transom system (sometimes called bone), or tube and fitting using 5-foot or 6-foot tube. Where the public pass below, the double-boarding with debris sheeting and the netting or brick guards from the risk assessment are built in as part of the sequence, not added as an afterthought.

How the two connect

Notice that the controls in the method statement are the same controls the risk assessment identified. That is the whole point. The risk assessment works out what the dangers are and what reduces them; the method statement builds those controls into the actual order of work. One without the other is half a document - which is exactly why UK construction combines them into a RAMS.

Side-by-side comparison

Aspect	Risk assessment	Method statement	RAMS
What it covers	Hazards and controls	How work is done	Both
Required by law?	Yes (MHSWR 1999)	Not directly	Effectively yes - via main contractor demand and CDM 2015 'safe systems of work' duty
Length	2-5 pages	3-7 pages	10-15 pages
Audience	Worker, supervisor, HSE	Worker, supervisor	Worker, supervisor, main contractor, HSE
Frequency	One per work activity	One per work activity	One per work activity
Review trigger	Change of scope or annually	Change of scope or annually	Change of scope or annually
Typical UK construction usage	Increasingly rare alone	Almost never alone	Industry standard

When you need each

Risk assessment alone

A risk assessment alone is sufficient for office-based or non-construction activities where the legal duty applies but a written method is not required. Examples: workplace ergonomics assessment, fire risk assessment for premises, manual handling risk assessment for general lifting. None of these are construction activities and none would normally have a method statement attached.

Method statement alone

Almost never. A method statement without an underlying risk assessment is rejected by every main contractor because the safety controls cited in the method statement need to be derived from a risk assessment process. There is no scenario in UK construction where you would submit a method statement without the risk assessment that informed it.

Combined RAMS

Almost all UK construction work. Any activity covered by CDM 2015 (which is essentially all construction work involving more than one contractor or lasting more than 30 working days) effectively requires a RAMS. Main contractors typically demand RAMS as part of pre-start documentation and will not allow work to begin without it.

Why UK construction has standardised on RAMS

The shift from separate documents to combined RAMS happened because main contractors wanted one document covering both the hazards and the work method. Reading two separate documents and cross-referencing controls between them was inefficient and error-prone. Combining them into a single RAMS solved this and became industry practice.

The result is that a UK trade business doing construction work effectively has to produce RAMS, even though the legal requirement is just for a risk assessment. The method statement portion is enforced by commercial pressure (main contractor pre-start checks) rather than legislation.

Common confusion

"My risk assessment is fine"

The risk assessment may be fine for legal compliance but rarely passes commercial pre-start checks. Main contractors want to see the method too. A risk assessment without a method is half a job in their eyes.

"The method statement is just the steps"

A complete method statement includes plant, personnel, emergency arrangements, PPE per task, and competency requirements. Listing the steps without these other elements is incomplete.

"I can use the same RAMS for every job"

Generic RAMS get rejected. Each project is supposed to have its own RAMS reflecting the specific scope, site, hazards, and controls. Some boilerplate is unavoidable, but the project-specific content needs to be there.

Why a real RAMS is specific, not "everything"

One thing worth saying from the experience of writing these for real: a good risk assessment is not the one with the most risks in it. The temptation, and something we see some health and safety advisors do, is to write a RAMS that covers every conceivable angle so that nothing is missed. The problem is that an inspector reading it can usually tell the difference between a document written for the actual job and one written to cover all bases - and a RAMS that lists fifty generic risks, most of which do not apply, reads as exactly what it is. The honest approach is to include the risks that are genuinely present on this job, properly thought through, and leave out the ones that are not. If a real risk for the job is missing and something then goes wrong, the first question asked is why it was not in there. So the standard to aim for is not "have I covered everything" - it is "does this document describe this job."

Generating both, faster

Writing risk assessments and method statements separately, then combining them into a RAMS, is the slow path. The Complys AI RAMS builder generates both halves of the document in one pass, drawing on trade-specific hazard libraries for the risk assessment portion and trade-specific sequence templates for the method statement. Total time: about 30 seconds for the AI generation; 5 minutes including answering setup questions.

See the RAMS builder or start the 90-day free trial.

FAQ

Is a RAMS legally required?

The risk assessment portion is legally required. The method statement portion is required by industry practice and main contractor demand. In commercial construction, both are effectively mandatory.

Can I write a RAMS for a small job?

Yes. Even small jobs need RAMS if the main contractor or client demands it. The proportion of effort should match the risk - a 1-day, low-risk job might have a 5-page RAMS, while a 6-month, high-risk project might have a 30-page RAMS.

Who can write a RAMS?

A 'competent person' - someone with sufficient training, knowledge and experience to identify hazards in the trade and devise effective controls. For most UK trade businesses, the owner, foreman or supervisor qualifies. External consultants are required only when in-house competence is insufficient.

How often must a RAMS be reviewed?

Reviewed when scope changes, when an incident or near miss occurs, when legislation changes, when controls prove inadequate, and at least annually. Most main contractors expect a review date in the document.

Who is responsible for each document

A common source of confusion is who actually has to produce these documents, and the answer is clear in law. The duty to carry out a suitable and sufficient risk assessment falls on the employer, or on the self-employed person for their own work, under the Management of Health and Safety at Work Regulations 1999. The method statement is not named in legislation in the same way, but it is the practical means of showing how the assessed risks will be controlled, and on construction work a principal contractor will require it as a condition of coming on site. So the responsibility for both sits with the firm doing the work, not with the main contractor who asks for them — the contractor's job is to check they are adequate, not to write them for you.

This matters because it is your name on the document and your accountability behind it. Whether you write it yourself, delegate it to a competent member of staff, or draft it with a tool and review it, the legal responsibility for it being suitable and sufficient stays with you. Understanding that removes the temptation to treat a RAMS as someone else's box to tick.

How often to review a risk assessment and a RAMS

Neither document is meant to be written once and filed forever. A risk assessment should be reviewed whenever there is reason to think it is no longer valid — a change in the work, the method, the people or the site — and in any case periodically to make sure it still reflects reality. The same applies to the RAMS as a whole: if the job changes on the ground, the document should change with it, because a method statement that no longer describes the actual work has stopped protecting anyone. Many firms also set a routine review interval, commonly annually for standing assessments, and always after an incident or near miss, because those are the moments that reveal what a document missed.

The practical discipline is to treat review as a trigger-based habit, not a calendar chore: any significant change to the work is a prompt to revisit the paperwork. A document that is dated, versioned and reviewed when things change is both more credible to a contractor and more genuinely useful to the people relying on it.

Dynamic risk assessment: the layer that happens on the day

There is a third idea that sits alongside the written risk assessment and method statement, and understanding it rounds out the picture: dynamic risk assessment. This is the ongoing, in-the-moment judgement that workers make on site as conditions change — the weather turns, a delivery blocks the planned access, another trade is working where they should not be. No written document can anticipate every such change, so competent workers are expected to reassess and adapt safely as they go, within the framework the written RAMS sets.

This does not replace the written documents; it complements them. The RAMS sets out the plan and the controls, and dynamic assessment handles the reality that no plan survives contact with a live site unchanged. A firm that both produces a solid written RAMS and trains its people to think on their feet has the full picture — the planned controls and the judgement to apply them when the day does not go to plan.

The cost of getting the distinction wrong

Confusing a risk assessment with a method statement, or supplying one when a contractor needs both, has real consequences beyond a pedantic point of definition. Submit a method statement with no risk assessment behind it and the controls in your method have nothing to justify them; submit a risk assessment with no method statement and you have identified the hazards but not shown how the work will actually be done safely. Either way a competent checker sees an incomplete picture, and on a construction site that usually means the document goes back and your start is delayed. Worse, if the gap is never noticed and something goes wrong, an investigator will find that the paperwork did not properly connect the hazards to the way the job was carried out.

Getting the distinction right is therefore not academic. A risk assessment identifies what could go wrong and sets the controls; a method statement describes, step by step, how the work is done with those controls in place; and together, as a RAMS, they tell the complete story a contractor and the law expect. Understanding that each does a different job, and that most construction work needs both, is what keeps your documents from being the thing that trips you up.

Related guides

• What is a RAMS document and do you need one? - the plain-English explainer
• RAMS template free UK 2026 - what makes a good template
• Method statement examples UK 2026 - real examples for several trades
• How to write a RAMS for scaffolding - step-by-step