Could You Prove It? Building an Audit Trail for Health and Safety

If the HSE Came Knocking Tomorrow, Could You Prove It?

The Health and Safety at Work etc. Act 1974 places the legal duty for health and safety on employers — but in practice, defending against enforcement action often comes down to one thing: evidence. If the HSE investigates an incident, the question isn't just whether you were following good practice, but whether you can demonstrate it.

Why Records Matter as Much as Actions

Good health and safety management and good record-keeping go hand in hand. A risk assessment that was carried out but never written down, or training that was delivered but never recorded, offers far less protection than the same actions properly documented. In an investigation, the HSE will typically look for:

  • Risk assessments — dated, specific to the task or area, and reviewed when things change
  • Training records — showing who was trained, in what, and when
  • Maintenance and inspection records — for equipment, premises and safety systems
  • Incident and near-miss reports — showing that issues are identified and acted on, not ignored

Building an Audit Trail as You Go

The most effective approach is to build this evidence as part of normal operations, not retrospectively after something goes wrong. Practical steps include:

  • Keeping a simple training matrix showing who's completed what, and when refreshers are due
  • Filing risk assessments where they can be found quickly, and reviewing them on a set schedule
  • Recording even minor incidents and near misses, and noting what action was taken as a result
  • Retaining certificates from courses such as NEBOSH HSE Introduction to Incident Investigation and Risk Assessment as evidence of competence

Training as Part of Your Defence

Beyond the practical safety benefits, completing recognised risk assessment courses and keeping the certificates on file is itself part of demonstrating that reasonably practicable steps were taken. It's far easier to make this case proactively than to assemble evidence after an incident has already happened.

Frequently Asked Questions

What does the HSE look for during an investigation?

Typically, evidence that risks were properly assessed, that staff were trained appropriately, and that the business responded to any previous incidents or concerns — supported by documentation, not just verbal assurances.

How long should training records be kept?

There's no single fixed period set in law for all records, but keeping training records for at least as long as the certificate remains valid — and ideally longer — helps demonstrate an ongoing commitment to competence.

Does having a risk assessment guarantee protection from prosecution?

No — but a genuine, up-to-date risk assessment that's been acted upon is strong evidence that reasonably practicable steps were taken, which is central to how breaches of UK health and safety law are assessed.

Related Content

Related Courses