| # | Action and source | Owner | Due | Priority | When |
|---|
This log records the hazards identified across A M Water Services Limited’s operations under ISO 45001 Clause 6.1.2, grouped into assessed work areas, and consolidates every open action arising from them into one place with a named owner and a date.
| Likelihood →<br>Severity ↓ | Remote (1) | Unlikely (2) | Likely (3) | Almost Certain (4) |
|---|---|---|---|---|
| Negligible (1) | 1 | 2 | 3 | 4 |
| Minor (2) | 2 | 4 | 6 | 8 |
| Serious (3) | 3 | 6 | 9 | 12 |
| Catastrophic (4) | 4 | 8 | 12 | 16 |
This register summarises the eighteen risk assessments that make up AMWS's hazard identification under ISO 45001:2018 Clause 6.1.2. It is a summary of the assessments, not a second assessment. The full hazard-by-hazard scoring lives in each RA and is not duplicated here, so the two cannot drift apart.
Three things to read carefully:
A medium residual is not a failure of control. Nine of the eighteen work areas still sit at 🟡 after controls (office fire safety, fire safety management, first aid, cyber, wellbeing, lone working, PPE, driving and environment), and in each case the register states whether that is an outstanding action or an exposure that cannot reasonably be reduced further.
| Ref | Work Area | Persons Affected | Principal Hazards | Controls in Place — and where they are evidenced | Initial | Residual | Open Action — owner, due | RA |
|---|---|---|---|---|---|---|---|---|
| HO-06 | Office fire safety — Units 1 and 2 | Directors, Site Supervisor and both office administrators; operatives calling in; visitors and delivery drivers; neighbouring units | Kitchen fire; electrical fire; obstructed escape route; alarm not raised across both units; service falling overdue | Extinguishers and fire blanket serviced annually to BS 5306 by Oxford Fire Solutions, next due 14/09/2027, tracked in APP_18 · emergency lighting on monthly test and annual service to BS 5266 (APP_18) · single-storey units with short travel distances · housekeeping checked at the monthly Onyx site visit · SOP 8.15 Fire | 🟡 8 | 🟡 8 | Fire Marshal cover — both certificates in date and on file, Jason May to 21/07/2029 and Leanne Mason to 15/11/2026. Leanne Mason's renewal to be booked — Leanne Mason, 31/10/2026 | RA_HO_06 |
| HO-17 | Fire safety management — both premises | All employees and Directors, including both office administrators; operatives, visitors and contractors; neighbouring units; attending fire crews | No fire risk assessment on file; responsible-person duties not formally assigned; Marshal cover falling due for renewal; evacuation practice limited to the units; fuels stored at the yard | Physical provision evidenced in APP_18 · Aaron Mason carries the responsible-person duty by role, accountabilities in MAN_01a · FORM_PTW_01 Permit to Work issued 04/05/2026 covers hot work · petrol and diesel assessed at COSHH_23 / COSHH_24, quantities small and away from ignition sources · SOP 8.15 Fire | 🟡 9 | 🟡 8 | Fire risk assessment — the 2026 internal audits refer to one dated March 2025 in an office folder; it is not under document control and has not been produced. Locate and control it, or commission a new one — Sean Ashton, 31/12/2026 · evacuation drill extended to the yard — the annual office drill is already run and timed (2.5 min 04/09/2025, 2.8 min 14/01/2026, logged in APP_16) — Leanne Mason, 31/12/2026 · responsible-person duties formally assigned — Sean Ashton, 30/04/2027 | RA_HO_17 |
| HO-16 | First aid provision | All employees and Directors; labour-supply subcontractors; visitors and delivery drivers; the public near street works | Delayed response at a site with no postal address; no defibrillator; no psychological first aid; provision not matched to a documented need | Five kits — one burns kit and one HSE 20-person workplace kit at the premises, three vehicle kits — inspected quarterly with named inspector, seal and contents, recorded in APP_18 · what3words used to give the emergency services a precise site location · MHFA cover, Jason May and Leanne Mason (POL_HSQE_29) · SOP 8.3 First Aid · POL_HSQE_14 | 🟡 8 | 🟡 8 | First aid cover — two qualified first aiders on file, Leanne Mason to 16/06/2029 and Jason May to 29/11/2028 · first aid needs assessment to be documented — Sean Ashton, 31/12/2026 · AED decision and nearest public-access location recorded — Sean Ashton, 31/12/2026 | RA_HO_16 |
| HO-10 | Slips, trips and falls — office, yard and approaches | Directors, Site Supervisor and both office administrators; operatives collecting materials and PPE; visitors and delivery drivers | Wet floors at entrances; trailing cables; ice on the yard and approaches; uneven yard surface; poor winter lighting; cluttered walkways in the store | Entrance matting; low footfall and small wet areas · cables routed behind desks · yard surface and housekeeping checked at the monthly Onyx site visit · external lighting at both units, emergency lighting tested monthly (APP_18) | 🟡 9 | 🟢 4 | Winter gritting — grit stock held and a named person responsible for the approaches recorded — Jason May, 30/11/2026 | RA_HO_10 |
| HO-07 | Manual handling — office and yard | Leanne Mason, Joanne Graham and Laura Walden; Jason May; Aaron Mason; operatives collecting stock; delivery drivers | Back or shoulder injury lifting deliveries, PPE stock or archive boxes; awkward posture at racking; training not reaching office staff | Deliveries broken into smaller loads, sack truck available at the yard · stock at waist height where racking allows · archive boxes kept below 15 kg · delivery drivers unload their own vehicles; AMWS staff do not operate tail-lifts · SOP 8.2 Manual Handling · POL_HSQE_18 · manual handling toolbox talk delivered August 2026 | 🟡 6 | 🟢 4 | None open | RA_HO_07 |
| HO-11 | Display screen equipment — fixed office workstations | Leanne Mason; Laura Walden; Aaron Mason; Jason May | No documented DSE assessment for any workstation; eye strain; neck and back discomfort from laptop-only working; adjustments not identified for a user with a health need | Conventional desk setups with adjustable office chairs · work is task-varied, broken up by calls, visitors and yard trips · screens positioned away from direct glare where the layout allows · laptop risers, separate keyboards and mice available through the Lyreco account · POL_HSQE_11 recognises the reasonable-adjustment duty | 🟡 9 | 🟢 4 | DSE assessments — documented assessment for every workstation and user, carrying the 20-20-20 prompt and the funded eyesight-test route — Leanne Mason, 31/10/2026 | RA_HO_11 |
| HO-01 | Remote workstation setup | Aaron and Leanne Mason on occasional home-working days; Sean Ashton (Onyx) regularly; the office administrators if home working is agreed; household members sharing the space | Musculoskeletal discomfort from a non-adjustable setup; eye strain; controlled documents held insecurely at home; isolation; blurred work/home boundary | Home working is occasional and short-duration — AMWS runs no general home-working scheme and the 20 field teams do not home-work · laptop riser, keyboard and mouse available through the Lyreco account · controlled documents live on the IMS portal, not in paper (POL_HSQE_09, POL_HSQE_30) · standing weekly Director / HSQE compliance call, WhatsApp Works group, monthly Onyx site visit · POL_HSQE_31 Fatigue | 🟡 6 | 🟢 4 | DSE self-assessment for each home worker, and the funded eyesight-test arrangement confirmed in writing — Leanne Mason, 31/10/2026 | RA_HO_01 |
| HO-03 | Home electrical safety | Aaron and Leanne Mason; Sean Ashton; household members present in the working area | Faulty AMWS-issued equipment; overloaded or daisy-chained sockets; trailing leads; domestic fixed wiring outside AMWS control; electrical fire | Equipment issued is modern, low-voltage, double-insulated IT kit; user visual check before use; faulty items withdrawn and replaced rather than repaired — HSE guidance does not require fixed-interval PAT for low-risk office IT, so user checks are the proportionate control · load is limited to laptop and phone chargers · no charging of tools or batteries at home · POL_HSQE_12 Equipment | 🟡 6 | 🟢 4 | None open — AMWS has no power to inspect a domestic fixed installation and the exposure is proportionate to occasional use | RA_HO_03 |
| HO-05 | Cyber security | All employees and Directors; labour-supply subcontractors using personal devices; Sean Ashton; data subjects; AMWS's commercial position | Phishing or invoice fraud diverting a payment; ransomware; weak or reused passwords; unsecured public networks; compromise of a customer-portal credential; supply-chain IT exposure; a notifiable breach missed | MFA on finance and all cloud services; urgent-payment and unexpected-attachment emails paused and checked with the Directors (POL_HSQE_30 Section 2–3) · endpoint antivirus, automatic updates, BitLocker / FileVault full-disk encryption (Section 5) · minimum 12-character passwords, no reuse, no shared logins (Section 2) · customer portals accessed by individual named credentials (Section 7) · Microsoft 365 / OneDrive provider backup plus GitHub history for both portals (Section 4) · 24-hour internal / 72-hour ICO breach pathway (Section 8), logged in APP_21 | 🔴 12 | 🟡 6 | Breach-response walkthrough to test the Section 8 pathway before it is needed — Sean Ashton, 04/09/2027 · Cyber Essentials certification remains the target that would move the phishing and ransomware residuals below medium | RA_HO_05 |
| HO-02 | Cloud data management | Directors, Site Supervisor and Laura Walden; Sean Ashton; subcontractors using personal devices; data subjects; framework customers | Personal-data breach by misdirected email or over-broad share; loss of working files; unauthorised access after device loss; leaver retaining access; cloud outage during a live job; accidental deletion | MFA on Microsoft 365 and cloud storage; role-based access with the access list held by Leanne Mason; no shared logins (POL_HSQE_30 Section 1–2) · provider backup as primary, both portals versioned in GitHub, restore procedure in APP_17 · same-day access revocation for leavers, list reviewed at the Management Review · field work packs carried in the vans and on the Van Packs portal as the outage fallback | 🟡 9 | 🟢 4 | Restore test — documented restore from backup to prove the APP_17 procedure works — Sean Ashton, 31/03/2027 | RA_HO_02 |
| HO-09 | Confidential data handling | Employees and subcontractors whose personal data AMWS holds; Leanne Mason; Aaron Mason and Laura Walden; framework customers; AMWS's position with the ICO | Right-to-work and HR data exposed; customer commercial information over-shared; paper records left accessible; conversations overheard; screen contents visible; device loss; data retained too long | HR folder on Microsoft 365 with role-based access (POL_HSQE_30 Section 1) · PROC_R2W_01 Right to Work governs collection and retention · POL_HSQE_09 Data Protection · named individual credentials for customer systems, no bulk export (Section 7) · laptops locked when unattended and encrypted (Section 5) · HR and payroll conversations held privately | 🟡 6 | 🟢 4 | Clear-desk and secure-disposal arrangement written down and briefed — Leanne Mason, 31/12/2026 · remote-wipe capability confirmed for company devices — Aaron Mason, 31/12/2026 · retention schedule documented against POL_HSQE_09 — Leanne Mason, 31/03/2027 | RA_HO_09 |
| HO-08 | Stress and wellbeing | All employees and Directors; Jason May; Leanne Mason; labour-supply subcontractors; Sean Ashton | Workload peaks from framework delivery and emergency call-out; no confidential external counselling route; non-disclosure through stigma; bullying and third-party harassment; key-person pressure | Standing weekly Director / HSQE compliance call where workload is visible across the team; monthly Onyx site visit; flexible start times case by case · MHFA cover — Jason May and Leanne Mason (POL_HSQE_29) · Samaritans 116 123 on the card in every van pack; NHS Talking Therapies self-referral route · POL_HSQE_05 and POL_HSQE_11, both reissued 04/09/2026 citing the Worker Protection Act 2023 preventative duty; POL_HSQE_27 Whistleblowing · POL_HSQE_31 Fatigue. No Employee Assistance Programme is in place | 🟡 9 | 🟡 6 | EAP decision — provide an external confidential counselling route or record the decision not to, at the September Management Review — Aaron Mason, 30/09/2026 · harassment risk assessment under the Worker Protection Act preventative duty, before it strengthens to "all reasonable steps" on 30/10/2026 — Sean Ashton, 23/10/2026 · financial-wellbeing signposting — Leanne Mason, 31/03/2027 | RA_HO_08 |
| HO-04 | Lone working | Leanne Mason; Aaron Mason; Sean Ashton; visiting contractors or delivery drivers met by a lone person on the premises | Accident or sudden illness while alone on the premises; no formal out-of-hours monitoring; aggression from an unexpected caller; lone working while fatigued; communication failure | Mobile carried at all times; WhatsApp Works group; the Directors know each other's movements through the day · HSE 20-person kits at both premises, checked monthly (APP_18) · secured business estate, external doors kept closed when one person is on site, no cash held · MHFA cover (POL_HSQE_29) · SOP 8.8 Lone Working · POL_HSQE_31 Fatigue. Monitoring is informal — there is no lone-worker device, app or automated check-in | 🟡 9 | 🟡 6 | Out-of-hours check-in — a written check-in arrangement for yard and unit work outside normal hours, proportionate to a five-person office — Sean Ashton, 30/04/2027 | RA_HO_04 |
| HO-18 | Fatigue management | All operatives; drivers; the Site Supervisor and Team Leaders; lone workers on early-start or late-finish jobs | Driver fatigue leading to a road traffic accident; cumulative fatigue from the call-out rotation; fatigue interacting with HAVS exposure; cognitive fatigue causing a near-miss; poor rest in overnight accommodation | Drivers' hours observed, in-cab telematics across the fleet, SOP 8.13 Driving · 11-hour daily rest, 9-hour driving day except in emergency, maximum 1-in-4 on-call frequency, rest day after a night call-out over four hours · on-call rota across multiple operatives, call-outs logged (SOP 5.4) · HAVS trigger-time monitoring and rotation (SOP 8.10) · RAMS sign-off, toolbox talks and supervisor presence · POL_HSQE_31, issued 01/06/2026 | 🔴 12 | 🟢 4 | None open — the control set was implemented 04/05/2026 and is embedded. Manager working hours are tracked informally at the weekly call | RA_HO_18 |
| HO-12 | Driving for work | Grab lorry and tipper drivers; van drivers; Directors and the Site Supervisor driving on company business; other road users and pedestrians; Sean Ashton | Road traffic collision; driver fatigue; mobile phone distraction; vehicle defect; adverse weather; medical fitness deteriorating between checks; load security failure; highway breakdown | Licence checks held by Leanne Mason; HGV medicals at DVLA intervals · POL_HSQE_25 Company Vehicles, hands-free requirement with disciplinary consequence for handheld use · in-cab telematics recording harsh events · maintenance and inspection regime under the O-Licence; daily driver walkaround checks and defect reporting to the Site Supervisor · load security checked before moving off, Jason May supervises loading · SOP 8.13 Driving · breakdown cover, hi-vis and vehicle first aid kits in the fleet (APP_18) | 🟡 8 | 🟡 6 | None open. The residual on collision reflects irreducible exposure on the public highway rather than a missing control | RA_HO_12 |
| HO-15 | PPE management | AMWS operatives and the Site Supervisor; labour-supply subcontractors; Directors and visitors entering the yard or a site; visiting contractors | PPE not provided to limb (b) workers; issue not recorded so condition and replacement cannot be evidenced; damaged or unfit PPE in use; wrong selection; poor fit; heat stress; RPE used without face-fit testing | PPE specified in the job RAMS and in each COSHH assessment (APP_09), confirmed by the Site Supervisor at the pre-start briefing · pre-use visual check by the wearer, damaged items replaced from yard stock · range of sizes held, wearer chooses their own · hydration and break arrangements, summer heat brief issued June 2026 · POL_HSQE_19 PPE, reissued 04/09/2026 citing the PPE at Work (Amendment) Regulations 2022 · SOP 8.4 PPE | 🟡 9 | 🟡 6 | Limb (b) worker review — work through which labour-supply arrangements bring the 2022 duty to provide PPE, and provide accordingly — Leanne Mason and Sean Ashton, 31/12/2026 · PPE issue register consolidated (carried from the May 2026 tracker) — Leanne Mason, 31/12/2026 · face-fit testing records for tight-fitting RPE — Sean Ashton, 31/03/2027 | RA_HO_15 |
| HO-14 | Environmental impact | The local environment; the local community and neighbouring units; protected species and habitats on or adjacent to work sites; regulators; AMWS's operating licences and framework position | Diesel or hydraulic oil spill; chlorinated water discharged to a watercourse; waste not segregated or duty of care not evidenced; carbon footprint not reduced against baseline; energy and water waste; dust and noise; disturbance of protected species | Spill kits at the yard and in vehicles, checked weekly (APP_18); SOP 9.3 Land & Water; COSHH_24 Diesel; toolbox talk TBT-2026-03 · MS 3.6 Disinfection, dechlorination before discharge, COSHH_07 Chlorine Tablets, TBT-2026-04 · licensed carriers only with transfer notes retained, SOP 9.4 and SOP 9.5, Waste Carrier registration valid to 12/08/2028 · 2025 baseline published 12/05/2026 at 288.7 tCO₂e Scope 1 + 2 · SOP 9.2 Wildlife & Plants, ecological constraints flagged in the RAMS · POL_HSQE_10 Environmental | 🟡 9 | 🟡 6 | Carbon reduction — diesel is 97% of the footprint, so the residual stays medium until the two remaining pre-Euro 6 vehicles are replaced (APP_10 L31) — Aaron Mason, 01/12/2026 | RA_HO_14 |
| HO-13 | Contractor and subcontractor management | Labour-supply subcontractors; AMWS operatives working alongside them; contractors attending the premises; customers and the public affected by the work; AMWS as principal contractor where CDM applies | A subcontractor works unsafely; competence not verified before deployment; lapsed insurance; right to work not verified; poor interface communication; a visiting contractor unaware of site rules; performance affecting delivered quality | RAMS issued and signed before work starts, published on the Van Packs portal (SOP 5.1 RAMS); Jason May supervises · work allocated only to firms on the approved list (APP_19, four checks AMWS answers from its own records: used in the year, supplied as ordered, no issue attributed, no invoicing dispute) · EUSR Water Hygiene and NRSWA cards checked before deployment, tracked in Leanne Mason's live register referenced by APP_13 · insurance checked at engagement · PROC_R2W_01 and POL_HSQE_17 · visitors and contractors signed in and briefed on escape routes · SOP 5.3 Supplier Evaluation | 🟡 8 | 🟢 4 | None open | RA_HO_13 |
Each work area above links to a full risk assessment. The register of those assessments — issue, status, last review and next review — is APP_08.
All eighteen were reviewed and reissued together: RA_HO_01 to RA_HO_17 at Issue 2 on 04/09/2026, and RA_HO_18 at Issue 1 on 04/05/2026 when fatigue was first assessed.
Applied in order of preference.
| 1 | Elimination | Remove the hazard completely where possible |
| 2 | Substitution | Replace with a safer alternative |
| 3 | Engineering controls | Physical barriers or modifications |
| 4 | Administrative controls | Procedures, training, signage |
| 5 | PPE | Personal protective equipment, as the last resort |
This register has been developed through consultation with:
| Role | Responsibility |
|---|---|
| Sean Ashton HSQE Consultant | Maintains the log, consolidates the actions and tracks them to closure |
| Jason May Supervisor | Identifies hazards on site and applies the controls |
| Aaron Mason · Leanne Mason Directors | Own the actions assigned to them and provide the resources the controls require |
| All workers | Report hazards as they are found, without waiting for a review date |
Approved by the Directors. Actions are reviewed at the standing weekly Director / HSQE compliance call and at the monthly Onyx site visit, and the log as a whole is an input to the annual Management Review.
| Issue | Date | Approved by | Change |
|---|---|---|---|
| 1 | 01/04/2025 | Aaron Mason, Director | Initial issue. |
| 2 | 03/07/2025 | Aaron Mason, Director | Post-inspection update; remote-working hazards added. |
| 3 | 04/07/2025 | Aaron Mason, Director | Comprehensive update to include all 17 risk-assessment categories. |
| 4 | 01/06/2026 | Aaron Mason, Director | Annual review for 2026. HO-18 Fatigue Management added [NEW 2026] (initial 12 / residual 3, owner Aaron + Jason, implemented 04/05/2026 via SOP refresh + RA_HO_18). |
| 5 | 09/09/2026 | Aaron Mason, Director | Register rebuilt against the reissued risk assessments. |
| 6 | 15/09/2026 | Aaron Mason, Director | Persons affected corrected — Laura Walden named. Issue 5 described the office administrator post as vacant across six hazard rows. |