What Is RAMS — and Why Getting It Right Matters More Than You Think
RAMS stands for Risk Assessment and Method Statement. Together, these two documents form the backbone of safe working practice on any UK construction site. A risk assessment identifies what can go wrong, who can be harmed, and how likely it is to happen. A method statement describes step by step how the work will actually be carried out — in a way that any operative can follow without ambiguity.
Under the Management of Health and Safety at Work Regulations 1999, every employer and self-employed person must assess the risks of their work activities and record significant findings. Under CDM 2015, contractors must ensure their work is planned, managed, and monitored by competent persons with adequate resources. RAMS documents are the evidence that this has been done. Get them wrong, and you may not get on site. Get them right, and you demonstrate competence that earns trust from principal contractors and clients.
The practical stakes are just as high. An unclear method statement causes rework, disputes, and unsafe working practices. A generic risk assessment that does not reflect the actual site conditions gets challenged by principal contractors and sent back — costing you hours of lost time. A RAMS that is clear, site-specific, and properly reviewed is more likely to move through approval without avoidable delay.
The 5-Step Framework for Writing a Risk Assessment That Passes Review
The HSE's five-step framework for risk assessment applies to every construction activity. Applied properly, it produces a risk assessment that is easier for principal contractors to review and easier for your own team to rely on:
Step 1: Identify the Hazards
Walk through the actual work sequence — from arrival on site to demobilisation — and identify what could cause harm at each stage. Do not list generic categories. Name specific hazards in specific contexts: not "working at height" but "installation of ceiling-mounted light fixtures at 3.2m height using a 3m podium steps on a suspended ceiling grid." The specificity is what makes the risk assessment credible.
For each task within the work, consider: the work activity itself — cutting, drilling, lifting, handling, traversing; the materials involved — including dust, fumes, sharp edges, heavy loads; the plant and equipment — power tools, lifting equipment, access equipment, vehicles; the working environment — wet floors, poor lighting, extremes of temperature, confined spaces; and the interface with other trades — other contractors working adjacent, public access, live services.
Step 2: Decide Who Might Be Harmed and How
For each hazard, identify who is at risk. In construction, this is rarely just the person doing the work. Consider: the operative performing the task; colleagues on the same work area; other trades working nearby or passing through; members of the public — especially in occupied buildings or street-facing sites; clients or visitors who may access the work area; and delivery drivers or suppliers during unloading.
The key question is not just "who can be harmed" but "how can they be harmed in this specific context." An operative working at height faces a fall hazard. But the person below who could be struck by a falling object faces a different hazard from the same activity. Both must be captured separately.
Step 3: Evaluate the Risks and Decide on Controls
For each hazard, assess the likelihood and severity using the standard 5×5 risk matrix. The formula is: Likelihood (1–5) × Severity (1–5) = Risk Rating. A risk rating above 12 is generally High and requires immediate action. Between 6 and 12 is Medium and requires controls. Below 6 is Low and may be acceptable with monitoring.
Controls must follow the hierarchy. This is where most RAMS fail review — because principal contractors are specifically looking to see whether you have applied the hierarchy correctly:
Step 4: Record Your Findings and Implement Them
The risk assessment must be recorded — not just thought through. Under the Management of Health and Safety at Work Regulations 1999, significant findings must be documented. Record: each hazard identified; who might be harmed; the initial risk rating; the controls applied at each level of the hierarchy; the residual risk rating after controls; and who is responsible for implementing and monitoring the controls.
The record must also identify who prepared the assessment — with name, qualification, and date — and who approved it. This is your evidence of competence under CDM 2015.
Step 5: Review and Update
A risk assessment is not a one-time document. It must be reviewed and updated when: site conditions change — different floor level, new interfaces, changed weather exposure; the work method changes — a different approach is adopted; a near miss or incident occurs — the assessment clearly failed to capture the risk; or the project moves to a different phase — new hazards emerge as work progresses.
The review date should be recorded on the document. For longer projects, a formal review at regular intervals — monthly for projects over three months — is good practice and demonstrates active management of health and safety.
How to Write a Method Statement That Passes Principal Contractor Review
A method statement translates the risk assessment into a clear, sequential plan for how work will be carried out. Where a risk assessment says "here is what can go wrong and how we stop it," a method statement says "here is exactly what we will do, in what order, with what equipment."
Principal contractors are looking for specific things in a method statement. If your method statement is vague, generic, or does not connect to the risk assessment, it will be returned for revision.
The Minimum Content of Every Method Statement
Every method statement submitted to a principal contractor must include:
How to Write Method Steps That Operatives Can Actually Follow
The most common criticism of method statements by principal contractors and site supervisors is that the steps are too vague to be useful on site. Steps like "install the unit" or "make safe" or "carry out the work" tell an operative nothing actionable.
Good method steps are: numbered, sequential, and specific. They name the exact action, the exact location within the work area, the exact equipment to be used, and the exact outcome at each step. They anticipate what could go wrong at each step and include a control or a check.
A good method step reads like a site instruction, not a legal document. It should be possible for an experienced operative to read it and understand exactly what to do without additional context.
The 5 Most Common Reasons RAMS Get Rejected — and How to Fix Them
Principal contractors see large numbers of RAMS submissions, and the reasons they send them back are often consistent. Knowing the recurring issues in advance helps you reduce avoidable revisions.
1. Task Description Is Too Vague to Be Credible
"General electrical work" or "construction activity" as a task description is not a task description — it is a category. A principal contractor needs to see exactly what work, where, in what conditions, at what stage of the project. Vague task descriptions suggest the RAMS was written without visiting or researching the specific site.
The fix: write a task description that answers all of these questions. What exactly are you doing? Where — address, building, floor, area. What is the building — new build, refurbishment, domestic, commercial, occupied. At what stage of the project does this work happen? What access route will workers use to reach the work area?
2. Controls Don't Follow the Hierarchy
Listing PPE as your primary control — "wear gloves, wear eye protection, wear a hard hat" — without first showing elimination, substitution, isolation, and engineering controls tells a principal contractor that you have not properly managed the risk. PPE is the last line of defence, not the first.
The fix: for each hazard, work down the hierarchy and show your reasoning. If PPE is genuinely the primary control — because elimination and isolation are not reasonably practicable — explain why. That explanation is what makes the RAMS credible.
3. No Risk Rating Shown
A risk assessment that says "medium risk" or "high risk" without showing the Likelihood × Severity calculation is an opinion, not an assessment. Principal contractors cannot verify whether a Medium rating is correct or consistent with other ratings in the document.
The fix: show the full equation for each hazard. Likelihood (1–5) × Severity (1–5) = Risk Rating. Show both the initial rating — before controls — and the residual rating after controls. This demonstrates active risk reduction and gives the principal contractor something to verify.
4. Method Statement Doesn't Connect to the Risk Assessment
A method statement that lists hazards separately from the method steps — treating them as two unrelated documents — is a structural failure. The whole point of RAMS is that the method is designed around the hazards, and the hazards are managed through the method.
The fix: reference the relevant hazard in each method step. "Step 3: Drill 16mm holes through the stud wall at marked positions. Hazard: struck by falling debris — eye protection mandatory, debris screen to be used below the work area."
5. No Evidence of Competent Person Sign-Off
A RAMS without a name, qualification, and signature is a blank sheet. Under CDM 2015, the risk assessment must be prepared by a competent person. You must demonstrate competence in the document.
The fix: include full name, relevant qualification — NVQ, CSCS card, ECS card, SMSTS certificate — registration number, date prepared, and your signature confirming you have reviewed and approved this RAMS.
CDM 2015 and RAMS — What the Regulations Specifically Require
The Construction (Design and Management) Regulations 2015 set out specific requirements for RAMS on construction projects. These apply regardless of project size, though the formality of arrangements scales with the project tier. Understanding which tier applies to your work is the first step to producing RAMS that satisfies the regulatory requirements — and that passes principal contractor review.
For all contractors on notifiable projects — projects lasting more than 30 days or involving more than 500 person-days of construction work — the CDM 2015 requirements are more stringent. The threshold for notification is set by the HSE's F10 form criteria. Notifiable projects must be notified to HSE before construction begins using the F10 form, available at hse.gov.uk. The principal contractor must ensure that the construction phase plan includes arrangements for managing the construction phase, including RAMS for all significant construction activities. Contractors must provide their RAMS to the principal contractor before work begins — and RAMS that is not provided in advance may constitute a breach of the contractor's CDM 2015 duties.
On all projects — notifiable or not — contractors must ensure that their workers have received appropriate health and safety information, instruction, and training. The RAMS is part of that information. Operatives must be briefed on the RAMS before work begins, and that briefing must be recorded — a signed acknowledgement if done formally, or a recorded toolbox talk if done informally. Either way, the record demonstrates that the information has been communicated.
CDM 2015 also introduces the competence requirement explicitly. Regulation 8 requires that all persons working on construction projects are competent — or are under appropriate supervision. For RAMS purposes, this means that the person preparing the risk assessment must have the skills, knowledge, and experience to do so. A risk assessment prepared by an unqualified person for a technically complex task is not CDM 2015 compliant, regardless of how well formatted the document is. Including your qualification, CSCS card number, and experience in the RAMS is your evidence of compliance with this requirement.
How RAMS Builder Helps You Write RAMS That Passes First Time
Writing RAMS that stands up to principal contractor review requires knowing what principal contractors are actually looking for. RAMS Builder's document generation is built around those requirements — the five-step risk assessment framework, the hierarchy of controls, the specific content requirements for method statements, and the CDM 2015 competence requirements.
Describe your trade, your job, and your site conditions. RAMS Builder helps you draft a site-specific RAMS with trade-specific hazard libraries, risk rating tables, method steps that reference the relevant hazards, and a competence sign-off section ready for completion and review. Use it to speed up drafting, then tailor the document before submission.
Frequently Asked Questions
Q: Does every construction worker need their own RAMS document, or can a contractor's RAMS cover all their workers?
A: Each contractor needs RAMS that covers their work activities. The RAMS is prepared by the contractor — or by a competent person on their behalf — and covers the work that contractor's operatives will carry out. A subcontractor's RAMS does not need to duplicate the principal contractor's overall site risk assessments, but must address the specific hazards of their own work activities and how they interface with other site activities. Each employer is responsible for the health and safety of their own workers, and the RAMS is the evidence of that responsibility.
Q: Can I use the same RAMS document for multiple similar jobs, or do I need to write a new one for each project?
A: You can use the same RAMS as a starting point — the hazard libraries, control measures, and method steps for a given trade and job type will have significant overlap between projects. However, each RAMS must be reviewed and updated to reflect the specific site conditions of the individual project. A RAMS that was written for a ground-floor refurbishment cannot be used without modification for a fourth-floor refurbishment in an occupied building. The task description, site-specific hazards, access conditions, and emergency procedures must all be specific to the job in question.
Q: What is the penalty for working without a RAMS document on a construction site?
A: The specific penalty depends on the enforcement action taken. Under the Management of Health and Safety at Work Regulations 1999, failure to carry out a suitable and sufficient risk assessment is a criminal offence, prosecutable by HSE, with fines on conviction. Under CDM 2015, failing to prepare a construction phase plan or provide RAMS before work begins can result in enforcement action including Improvement Notices and Prohibition Notices. In practice, the most immediate consequence is that a principal contractor will not allow you on site without adequate RAMS — which means lost work and lost income. RAMS that is inadequate or incomplete will be returned for revision, causing delays.