How to Show an HSA Inspector Your Safety System Is Live
Imagine an HSA inspector walking into your workplace tomorrow. Would they see a safety system that is running, or a folder of PDFs that hasn’t been opened since last year? That question sits at the heart of every inspection, and it is why your risk assessment should feel like a working habit, not a filing cabinet. Inspectors and client auditors aren’t looking for perfect binders. They want proof that hazards were identified, controls were put in place, and risks were reviewed as things changed.
In this post, we will walk through what an inspector actually asks to see and which records answer each request. We will look at why a filed safety system fails, how to match questions to evidence, and how to prove your assessment is current rather than archived. You will also learn how training, communication, worker consultation, contractor visits and site records fit together, plus how to choose a risk assessment tool that leaves a clear trail. We will clarify HSE or HSA, walk through inspection day, and finish with practical steps to stay ready all year. By the end, you will know where to start this week.
Why a Filed Safety System Fails on Inspection Day
Section 19 of the Safety, Health and Welfare at Work Act 2005 makes identifying hazards and assessing the risks they create a statutory duty for every employer, and for anyone who controls a workplace to any extent. It is not only high-risk sectors.
Section 19 requires every employer to assess risks in writing; Section 20 builds the safety statement on that foundation.
The standard is “reasonably practicable”: identify hazards, assess risks and put proportionate controls in place.
On the day, what matters is whether those controls are in place, still fit the current work, and have been re-reviewed. A dated folder of PDFs cannot answer that. Inspection readiness is a capability, not a filing cabinet, as this guide to digitising health and safety in Irish manufacturing sets out.
What an HSA Inspector Actually Asks to See
On the day, the inspector won’t work from a script, but certain requests come up again and again. HSA guidance on safety statements and risk assessments sets out what a compliant assessment should contain, including a hazard checklist and a template you can adapt. Using the HSA format isn’t mandatory if the substance is covered.
Expect to be asked for the written risk assessment and the safety statement, and to show they’re consistent rather than drafted years apart. You’ll also face questions about how controls were chosen, who owns each one, and what backs them up: inspection checklists, maintenance logs, test certificates, PPE issue records. Incident and near-miss records, and what changed because of them, expose a live system fastest. Training, induction and worker consultation records, including safety representatives, complete the picture. Treat these as typical areas of interest grounded in HSA guidance rather than a fixed question list.
Matching Each Request to the Record That Answers It
Once you know what is likely to be asked, inspection readiness becomes a matching exercise. Each request has a specific record that answers it:
- Risk assessment: the current version showing its issue date, review date and named owner, plus the version history showing what changed and when.
- Safety statement: the statement itself, with named responsibilities and resource commitments that match how the business is actually managed.
- Control evidence: inspection checklists, maintenance and servicing logs, equipment test records and monitoring results, each traceable to a control named in the assessment.
- Training: induction records, task-specific training, refresher dates and attendance sheets, each tied to the risk that justified the training.
- Contractors: contractor risk assessments and method statements, insurance and competency evidence, and site induction and sign-in records for every visit.
A simple mapping table makes this fast. Whether you build it in a spreadsheet or on a standard risk assessment form, put the request in one column and the record, plus where it lives, in the next. Our Frequently Asked Questions explain how these pieces connect.
Proving Your Assessment Is Current, Not Archived
Retrieval is half the job. An inspector also wants to see whether the assessment is current, which is where version control earns its keep.
Every assessment should carry an issue date, a review date and a named owner, so its status is visible at a glance.
Trigger reviews rather than relying on the calendar. New equipment, a changed process, new substances, a layout change, an incident or near miss, a new worker under 18 (this needs its own separate risk assessment), or a change in legislation should prompt a fresh look. Then review, repeat and update when necessary at intervals that reflect risk level; be ready to explain your reasoning for the intervals you choose.
Keep a change log showing who updated what and when. That trail is the practical difference between a live system and a document with a stale date.
When a review finds nothing new, record it as completed with no changes required, so a quiet period reads as a documented decision rather than a gap.
Training, Communication and Worker Consultation Records
Your review trail means little if nobody was trained on what changed. Link training to a specific risk in the assessment, so an inspector can trace the hazard through to the control and then to the person trained on it. Attendance sheets and refresher dates work best when each one names the risk it relates to.
Keep induction records for new starters, agency staff, seasonal workers and anyone returning after a long absence, with dates rather than just names.
Toolbox talks, safety committee minutes and consultation records show workers were told about the risks affecting them and had a chance to raise concerns. Keep the date, topic and any actions.
Drill records tie back to the safety statement’s emergency arrangements, so file the date of each exercise and any lessons identified from it.
The common failure is training that happened but was never recorded, leaving you relying on memory that an inspector cannot verify. Log it as it happens. Health and Safety Training: What Every Business Needs to Know shows how.
Contractor and Site Visit Records
Training records close one loop. Contractor visits open another. Irish health and safety law requires employers to manage risks not only for employees but for others affected by work on site, and an inspector will ask about contractor controls. They will also ask for your own records of who was on site, when, and under what controls.
Collect contractor risk assessments and method statements before the visit starts, not after the work finishes, so the controls were agreed in advance. Keep site inductions, sign-in and sign-out logs, permits to work, and insurance or competency evidence together, retrievable by date. Where a contractor introduces a risk to your staff or premises, update your own assessment and note what changed and why.
One place holding contractor details and site visits means a question about a specific visit gets answered on the spot rather than promised later. Contractor Genie is built to manage and maintain contractors and their site visits in one place. For the process behind it, see our guide to contractor site visit management.
Choosing a Risk Assessment Tool or Form That Leaves a Trail
With contractor records handled, the next question is your core assessment tool. Paper forms can work if each one is consistently completed and retrievable.
If you’re comparing a risk assessment tool, judge it on the trail it leaves: version history, a named owner, review date reminders and a change log. A workable form captures the hazard, who could be harmed, existing and further controls needed, and the likelihood and severity of harm.
Digital tools can make the evidence trail easier to maintain, timestamps, version history and review reminders are by-products of normal use rather than a separate task.
Our Health and Safety App, built on the Compliance genie, digitises health and safety processes so assessments, records and review dates sit in one place you can open and show an inspector. For a wider look at closing the gaps that cause last-minute scrambles, see 7 Safety Solutions Every Business Should Have in Place.
HSE or HSA: Getting the Regulator Right
Whichever tool you pick, the name on the regulator matters as much as the trail it leaves. If you have been searching for an HSE risk assessment, you are using the UK Health and Safety Executive’s name. In Ireland, the regulator is the Health and Safety Authority, the HSA, and the two are not interchangeable. The legal basis differs: this piece deals with duties under the Irish Safety, Health and Welfare at Work Act 2005, which our plain-English guide walks through.
Whether your operations span both jurisdictions or not, for any Irish inspection, cite the Act and HSA guidance, UK HSE material is useful reference only, never your legal standard.
Inspection Day: A Short Walkthrough
Terminology sorted, inspection day comes down to navigation and honesty.
Before the visit, name one person who has rehearsed the request-to-record mapping. They lead the walkthrough while others answer technical questions.
On the day, open with the risk assessment and safety statement, then follow the controls each one names to where the supporting records sit. That presents the paperwork as a chain rather than a stack.
Keep what you say on the floor consistent with what the documents say. An honest gap you can explain does far less damage than a contradiction you cannot.
Show the review trail: issue dates, named owners, what changed, and the trigger behind each change. A current revision with visible history reads as a live system.
If something is missing, say so, write it down with an owner and a target date, and show how it will be closed out. That turns a weak spot into proof the system is being managed.
How to Stay Inspection Ready All Year
That walkthrough works far better when readiness is a habit rather than a scramble. Five simple routines keep your safety system live between inspections.
- Name an owner and a review date for every assessment. Stop relying on an annual tidy-up that only happens when a visit is announced.
- Capture records inside the task. Log checks, inductions and contractor visits as they happen, not from memory the week before.
- Keep one index of where every record lives, so retrieval takes minutes and anyone on the team can find it.
- Review after trigger events, as covered in Proving Your Assessment Is Current, and record even quiet-period reviews as documented decisions.
- Diarise a quarterly check of review dates, training refreshers and contractor documentation, so nothing ages out unnoticed.
None of this is a statutory checklist, but each habit makes your written risk assessment easier to defend on the day. Start with whichever one is weakest this week.
Where to Start This Week
If you have set your quarterly checks, the first practical move is to gather what you already have. Pull your current risk assessment and safety statement. Read them side by side and against a normal day’s work. Do they agree? If not, fix that first.
Then confirm each assessment carries a named owner and a review date, applying the trigger-event approach set out in How to Stay Inspection Ready All Year.
With that done, build the one-page record-to-request mapping described in Matching Each Request to the Record That Answers It.
Pick up the loose records first. An unrecoverable record is treated the same as a missing one, so a photo on a phone or an undated sheet helps nobody.
Paper or digital, the aim is identical: show hazards were identified, controlled and re-reviewed, not just filed. A digital system such as our Health and Safety App can digitise that process.
Conclusion
An HSA inspector is not looking for a perfect binder. They are looking for proof that your safety system is alive. Keep three ideas in view: match each likely request to a record you can produce, confirm every assessment has a named owner and review date, and maintain training, consultation and contractor trails.
Start with the weakest area this week, and make inspection readiness a habit.