Safety RAMS Documents: Legal Duties, Contents & Worked Example

Safety RAMS sit at the intersection of two distinct legal frameworks. Understanding exactly where one ends and the other begins — and what each document must contain — is the difference between a RAMS that satisfies a principal contractor's review and one that stalls your start on site.

---

What Are Safety RAMS? Definition and Legal Standing in the UK

RAMS stands for Risk Assessment and Method Statement. The term describes a single combined document — or a paired set of documents — in which a contractor records the hazards present in a task, rates the risk those hazards create, specifies the controls that will reduce that risk, and then sequences the work steps that operatives must follow to carry out the task safely.

There is no single statutory instrument called "RAMS." The legal obligations that make RAMS documents effectively mandatory in UK construction derive from two separate pieces of legislation, each with its own scope and duty-holder:

• Management of Health and Safety at Work Regulations 1999 (MHSWR 1999), reg 3 — applies to every employer across every sector and requires a suitable and sufficient risk assessment before work begins.
• Construction (Design and Management) Regulations 2015 (CDM 2015) — applies specifically to construction work and imposes coordination, planning, and documentation duties on clients, principal designers, principal contractors, and contractors.

Neither regulation uses the word "RAMS," but together they make the document's content functionally mandatory for any contractor working on a construction site.

---

The Two Halves of a RAMS Document: Risk Assessment vs Method Statement

Element	Risk Assessment	Method Statement
Primary legal driver	MHSWR 1999, reg 3	CDM 2015 regs 12–13; general principles of prevention
Question it answers	What can go wrong, and how bad could it be?	How will the work be done safely, step by step?
Core output	Hazard list, risk rating, control measures	Task sequence, plant/equipment, PPE, emergency procedure
Who it protects	Employees and any person affected (reg 3(1)(b))	Operatives, other contractors, members of the public
When it must be reviewed	When no longer valid or significant change (reg 3(3))	When scope, sequence, or site conditions change

The risk assessment is the analytical foundation; the method statement is the operational translation of that analysis into a safe working sequence. A document that has one without the other is legally and practically incomplete.

---

Legal Duties That Make RAMS Mandatory (MHSWR 1999 reg 3 and CDM 2015)

Every employer must make a suitable and sufficient assessment of the risks to the health and safety of their employees and of persons not in their employment arising out of or in connection with the conduct of their undertaking (MHSWR 1999, reg 3(1)). Where an employer has five or more employees, the significant findings of that assessment and any group identified as especially at risk must be recorded (MHSWR 1999, reg 3(6)).

On construction projects, CDM 2015 layers additional duties on top. The principal contractor must draw up a construction phase plan before the construction phase begins (CDM 2015, reg 12(1)), keep it reviewed and updated throughout (CDM 2015, reg 12(4)), and plan, manage, monitor and coordinate health and safety across the site (CDM 2015, reg 13(1)). Subcontractor RAMS feed directly into that coordination function.

CDM 2015 requires all duty-holders to take account of the general principles of prevention — avoiding risks where possible, evaluating those that cannot be avoided, and putting in place proportionate measures that control them at source (HSE L153, para 5). Those principles are the logical spine of any well-constructed RAMS.

---

Who Must Produce RAMS and Who Must Coordinate Them on Site

Subcontractors and contractors produce RAMS for their own scope of work. The duty is grounded in MHSWR 1999 reg 3 — every employer assesses the risks their work creates.

The principal contractor is appointed by the client to control the construction phase of any project involving more than one contractor, and must plan, manage, monitor and coordinate the entire construction phase, taking account of health and safety risks to everyone affected, including members of the public (HSE CDM principal contractors page). Under CDM 2015 reg 13(3), the PC must organise cooperation between contractors and coordinate implementation of applicable legal requirements. In practice this means reviewing and accepting RAMS from each subcontractor and incorporating the control measures into the construction phase plan.

Anyone responsible for appointing contractors must also ensure those appointed have the skills, knowledge and experience to carry out the work safely, and where an organisation is appointed they must have the appropriate organisational capability (HSE L153, para 7). A RAMS document is one of the key pieces of evidence that capability exists.

---

What Every RAMS Document Must Contain: Element-by-Element Breakdown

A PC review-ready RAMS will typically include: project and task identification; a hazard register; a risk rating for each hazard; the hierarchy of control measures to reduce rated risk; a step-by-step task sequence; plant, equipment and material specifications; PPE requirements; emergency and first-aid procedures; and operative sign-off. The RAMS Audit Checklist below maps each element to its statutory source.

---

RAMS Audit Checklist — Map Every Section to Its Statutory Source

Review and adapt this checklist to your specific site, task and contractor before use. It is designed to reduce RAMS rework, not to replace the judgement of a competent person.

#	Document Element	Statutory / Guidance Basis
1	Project details, task description, work location	CDM 2015 reg 12(2) — construction phase plan must set out health and safety arrangements
2	Hazard identification (all foreseeable hazards for the task)	MHSWR 1999 reg 3(1) — suitable and sufficient assessment; HSE five-step process step 1
3	Who might be harmed and how (employees, other trades, public)	MHSWR 1999 reg 3(1)(a) and (b) — covers employees and persons not in employment
4	Risk rating before controls (likelihood × severity — see worked example)	HSE five-step process step 2 — assess the risks; industry best practice scoring
5	Hierarchy of control measures (elimination → substitution → engineering → admin → PPE)	HSE L153 — general principles of prevention, applied through the PC's CDM 2015 reg 13 duties
6	Residual risk rating after controls applied	HSE five-step process step 2 — decide what further action is needed
7	Step-by-step task sequence / method statement	CDM 2015 reg 13(3)(c)(ii) — operatives to follow the construction phase plan
8	Plant, equipment and materials to be used	CDM 2015 reg 12(2) — health and safety arrangements for the construction site
9	PPE specification (type, standard, inspection requirement)	MHSWR 1999 reg 3(1) — identifying measures needed; HSE five-step process step 3
10	Emergency procedures and first-aid arrangements	HSE L153 para 10 — procedures in the event of serious and imminent danger
11	Document version, review date, author and competent person signature	MHSWR 1999 reg 3(3) — assessment must be reviewed when no longer valid
12	Operative briefing record (toolbox talk sign-off sheet)	CDM 2015 reg 13(3) — PC organises cooperation; a briefing record evidences your side of that coordination (good practice, not a named statutory document)

---

Worked Example: Groundworks Subcontractor RAMS on a Two-Contractor Refurbishment

Scenario: A groundworks subcontractor is excavating a drainage trench on a domestic refurbishment project. The project involves two contractors (groundworks and a building contractor finishing internal works), so a principal contractor has been appointed. The project does not meet the notification threshold (it will run for four weeks with a maximum of six people on site simultaneously, well below the 500 person-day / 30-working-day-with-20-simultaneous-workers threshold (HSE CIS80)).

Step 1 — Risk Assessment (MHSWR 1999 reg 3)

Hazard identified: Collapse of an unsupported excavation (trench depth 1.8 m).

Risk rating before controls (industry best-practice likelihood × severity matrix — not a statutory formula):

Factor	Score	Scale
Likelihood of harm occurring	3	1 (rare) → 5 (almost certain)
Severity of potential harm	4	1 (minor) → 5 (fatal)
Risk Score	12
Risk Band	HIGH	1–4 Low / 5–9 Medium / 10–25 High

A score of 12 (HIGH) means controls must be implemented before work proceeds.

Control measures selected (applying the general principles of prevention per HSE L153 para 5):

1. Avoid: Can the trench be redesigned as a shallower duct run? — Not practicable given drainage falls required.
2. Engineering control at source: Install aluminium trench box before excavation deepens beyond 1.2 m.
3. Engineering control: Excavated spoil stored minimum 0.6 m back from trench edge.
4. Administrative: Exclusion zone marked with barrier tape; no person to enter unshored trench.
5. Administrative: Daily inspection of trench box by competent person before each entry.
6. PPE: Hard hat, safety boots, high-visibility vest worn by all persons near excavation.

Residual risk rating after controls:

Factor	Score
Likelihood	1
Severity	4
Residual Risk Score	4 — LOW

Step 2 — Method Statement (feeds into PC's Construction Phase Plan)

Sequenced task steps:

1. Mark out trench line and confirm no buried services (utility drawings reviewed; CAT scan completed).
2. Machine excavate to 1.2 m; stop. Competent person inspects ground conditions.
3. Install trench box before excavating to final depth of 1.8 m.
4. Deposit spoil at least 0.6 m from trench edge; erect barrier tape exclusion zone.
5. Lay drainage pipe bedding; place pipes; haunching and surround to specification.
6. Remove trench box in stages as backfill proceeds; compact in 150 mm layers.
7. Reinstate surface.

Step 3 — PC Coordination under CDM 2015

The principal contractor must plan, manage, monitor and coordinate health and safety during the construction phase (CDM 2015, reg 13(1)) and must organise cooperation between contractors and coordinate implementation of applicable legal requirements (CDM 2015, reg 13(3)). In practice the PC reviews the groundworks RAMS, checks that the trench-box control appears in their construction phase plan, confirms the building contractor's operatives will be excluded from the excavation zone, and signs the RAMS as accepted before groundworks begin.

---

When to Review and Reissue a RAMS: Five Trigger Events

MHSWR 1999 reg 3(3) requires a risk assessment to be reviewed when there is reason to suspect it is no longer valid or there has been a significant change in the matters to which it relates. The HSE five-step process also specifies that controls must be reviewed if they may no longer be effective or if there are changes in the workplace that could lead to new risks. The table below translates those duties into practical turnaround guidance.

#	Trigger Event	Recommended Review Turnaround
1	Scope change — task, materials, plant or work sequence altered	Before revised work begins; same day if change is immediate
2	Incident, near miss or ill health — any occurrence linked to the task	Within 24 hours of the incident being recorded
3	New operatives — workers unfamiliar with the task or site join the crew	Before those operatives start the task; re-brief required
4	Site condition change — ground conditions, weather, adjacent activity, or services discovery	Before work resumes in the affected area
5	Regulatory or guidance update — relevant legislation or HSE guidance revised	Within the period specified by the change; at minimum before next project mobilisation

---

Common RAMS Mistakes That Expose Employers to Enforcement Action

• Generic hazard lists copied between projects. A risk assessment must be suitable and sufficient for the specific task (MHSWR 1999 reg 3(1)). A paving contractor's groundworks RAMS is not a suitable assessment for overhead steel erection.
• No residual risk rating. Recording only the pre-control score gives no evidence that the controls actually reduce risk to an acceptable level.
• Method statement disconnected from the risk assessment. If the risk assessment identifies a trench-collapse hazard rated HIGH but the method statement contains no reference to a trench box, the document has an internal contradiction that a PC reviewer — or an HSE inspector — will immediately identify.
• Stale documents. Failing to review when site conditions change breaches reg 3(3). A RAMS dated six months before significant ground-condition changes were discovered will not withstand scrutiny.
• Missing operative briefing records. CDM 2015 reg 13(3) requires the PC to ensure contractors apply controls consistently. A sign-off sheet is the practical evidence that operatives received the briefing.

---

How RamsDocs Helps You Build Compliant Safety RAMS Faster

RamsDocs is designed around the legal structure described on this page. The platform guides you through each element of the RAMS audit checklist — hazard identification, risk scoring, control hierarchy, and task sequencing — so that the risk assessment and method statement remain connected rather than becoming two separate, inconsistent documents.

Documents produced with RamsDocs are PC review-ready and designed to reduce RAMS rework. They are not pre-approved by HSE or any principal contractor, and must be reviewed and adapted to your specific site, task, and contractor by a competent person before issue.

---

Frequently Asked Questions

What does RAMS stand for in health and safety? RAMS stands for Risk Assessment and Method Statement — a combined document recording hazards, risk ratings, control measures, and the safe work sequence for a specific task.

Are RAMS documents a legal requirement in the UK? There is no single regulation titled "RAMS," but the content is effectively mandatory. MHSWR 1999 reg 3 requires every employer to carry out a suitable and sufficient risk assessment. CDM 2015 requires principal contractors to coordinate those assessments into a construction phase plan. The two together make a complete RAMS document functionally compulsory on any construction site.

What is the difference between a risk assessment and a method statement? The risk assessment identifies hazards, rates the risk, and specifies controls — its legal root is MHSWR 1999 reg 3. The method statement translates those controls into a step-by-step safe working sequence — it fulfils the operational planning duties under CDM 2015. One without the other is incomplete.

What must a safety RAMS document contain? As a minimum: task and project identification; a hazard register; who might be harmed; pre- and post-control risk ratings; the hierarchy of control measures; a sequenced method statement; plant, equipment and PPE specifications; emergency procedures; version control; and an operative briefing record. See the RAMS Audit Checklist above for the full element-to-statute mapping.

Who is responsible for producing RAMS on a construction project? Each contractor produces RAMS for their own scope of work. The principal contractor reviews, coordinates, and incorporates those RAMS into the construction phase plan under CDM 2015 regs 12 and 13.

When do RAMS need to be reviewed or updated? Under MHSWR 1999 reg 3(3), whenever there is reason to suspect the assessment is no longer valid or there has been a significant change. In practice: scope change, incident, new operatives, site condition change, or regulatory update. See the review trigger table above.

How does a RAMS relate to the CDM 2015 construction phase plan? The construction phase plan must set out the health and safety arrangements for the site (CDM 2015, reg 12(2)). Subcontractor RAMS are the source documents from which those arrangements are drawn. The PC reviews each RAMS, integrates the controls into the plan, and under reg 13(3) ensures every contractor applies the general principles of prevention consistently. RAMS do not replace the construction phase plan; they inform and feed it.

---

Disclaimer: The information on this page is intended as general guidance on UK health and safety law and does not constitute legal advice. All RAMS documents must be reviewed and adapted to the specific site, task, work sequence, and contractor by a competent person before issue or use. RamsDocs documents are designed to reduce RAMS rework and support PC review readiness — they do not guarantee regulatory compliance or principal contractor acceptance. Does a RAMS package need to include a COSHH assessment, and what does a full submission typically contain? Where work involves substances hazardous to health — adhesives, solvents, cement dust, silica, and similar — a COSHH assessment is required under the Control of Substances Hazardous to Health Regulations (COSHH), which are separate from the task-level risk assessment required by MHSWR 1999 reg 3. In practice, principal contractors commonly expect a four-part package: Risk Assessment, Method Statement, COSHH Assessment, and Training Records (including operative sign-off sheets). Bundling all four into a single submission keeps substance-specific controls visible alongside the task sequence and gives the PC the competence evidence it needs in one place.

Why do the Work at Height Regulations 2005 matter when writing RAMS for fall-hazard tasks? The Work at Height Regulations 2005 apply to all work at height where there is a risk of a fall liable to cause personal injury, and place duties on employers, the self-employed, and any person who controls the work of others (The safe use of vehicles on construction sites, Table 9). For tasks such as roofing, scaffold erection, or working from MEWPs, your RAMS should reference this legislation explicitly in the relevant hazard entries and address the hierarchy of measures — avoiding work at height where reasonably practicable, then using work equipment that prevents falls, then mitigating the consequences of a fall. Referencing the correct regulation for each hazard signals to a reviewing PC that the assessment has been authored competently.

When should a RAMS reference PUWER 1998, and what does that mean in practice? The Provision and Use of Work Equipment Regulations 1998 (PUWER) applies to the selection, use, and maintenance of work equipment on site (The safe use of vehicles on construction sites, Table 9). Where your method statement specifies plant or equipment — excavators, concrete saws, elevated work platforms, or any other powered tool — the relevant RAMS section should acknowledge PUWER obligations: that the equipment is suitable for the task, maintained in an efficient state, and operated only by trained, competent personnel. Including pre-use inspection requirements and operator competence checks within the method statement is the practical way to demonstrate those duties are being met.