RAMS stands for Risk Assessment and Method Statement. As a contractor, you must produce a suitable and sufficient risk assessment before starting any work that could harm people, and a method statement for high-risk tasks or whenever a client or principal contractor requests one. RAMS are industry shorthand for these two paired documents, not a single statutory form.

Three things to know immediately:

What they do: the risk assessment identifies hazards and selects controls; the method statement turns those controls into a sequenced, on-site safe system of work.
Legal status: a risk assessment is a legal duty under the Management of Health and Safety at Work Regulations 1999; a method statement is not named in statute but is functionally required for high-risk tasks and routinely demanded by principal contractors and clients.
Immediate action: produce a task-level risk assessment for every significant activity, prepare a method statement for high-risk or notifiable work, and submit both to the principal contractor before mobilising.

Key takeaways

A risk assessment is a legal duty under MHSWR 1999; a method statement is not named in statute but is functionally required for high-risk tasks and routinely demanded by principal contractors before site access is granted.

Point	Details
RA is a legal duty	Every contractor must produce a suitable and sufficient risk assessment under MHSWR 1999, Regulation 3.
MS maps RA controls	Every control in the risk assessment must appear as a named, actionable step in the method statement.
Orphan controls cause rejection	Principal contractors reject RAMS when RA controls are not traceable to specific MS steps.
Review RAMS when conditions change	Scope changes, new hazards, accidents, and equipment changes all trigger a mandatory review and resubmission.
Deltafirst provides full RAMS packs	Deltafirst submits task-specific RAMS with competency records and plant certificates for all maintenance and project works.

What are RAMS and how do a risk assessment and method statement relate?
Are RAMS a legal requirement for UK contractors?
What should you include in a risk assessment?
What should a method statement include?
How to write RAMS step by step
Common construction hazards and practical controls
When should you review, update, and store RAMS?
How to present RAMS to clients, principal contractors, and inspectors
Practical templates, free resources, and digital tools
Why generic RAMS are the biggest risk contractors take
Deltafirst’s RAMS support for planned maintenance and compliance work
Sources

What are RAMS and how do a risk assessment and method statement relate?

A risk assessment is an analytical document. You identify each hazard associated with a task, decide who might be harmed and how, evaluate the likelihood and severity, record the controls already in place, and determine what further action is needed. CHAS describes the risk assessment as the document that evaluates hazards and mitigation, while the method statement describes how the task will be done safely.

A method statement is procedural. It takes the controls you selected in the risk assessment and converts them into a step-by-step sequence that operatives can follow on site. SafetyStack frames this as the RA being the analytical layer and the MS being the procedural layer. The two documents must map to each other: every control in the RA should appear as an actionable step in the MS.

A simple traceability example: if your RA identifies “fall from height” as a hazard and lists “erect scaffold to NASC TG20 standard” as the control, your MS must include a step that reads “erect scaffold to NASC TG20 before any operative works above 2 metres — scaffold supervisor to sign off before access is permitted.”

Feature	Risk Assessment	Method Statement
Purpose	Identify hazards, evaluate risk, select controls	Describe the safe sequence of work
Format	Hazard register with risk ratings	Step-by-step operational procedure
Legal weight	Statutory duty (MHSWR 1999, Reg 3)	Not named in statute; contractually required
Timing	Before work begins	Before work begins; updated if scope changes
Typical content	Hazard, who is at risk, existing controls, additional controls, residual risk	Scope, sequence of operations, PPE, plant, responsibilities, emergency arrangements

Are RAMS a legal requirement for UK contractors?

A risk assessment is a legal requirement. Regulation 3 of the Management of Health and Safety at Work Regulations 1999 requires every employer to carry out a suitable and sufficient assessment of risks to employees and others affected by their work. Where you employ five or more people, you must record the significant findings.

A method statement is not named in statute, but CDM 2015 requires contractors to plan, manage and monitor construction work so far as is reasonably practicable. In practice, that duty makes a written method statement functionally necessary for any task carrying significant risk, because it is the clearest evidence that planning has taken place.

The practical rule: produce a risk assessment for every task where work could harm someone. Prepare a method statement for high-risk activities (work at height, confined spaces, excavation, asbestos, lifting operations) and whenever a client or principal contractor requests one. Principal contractors routinely withhold site access until RAMS are reviewed and accepted.

Key compliance points:

Risk assessments must be “suitable and sufficient” — generic, recycled documents that do not reflect site-specific conditions will not satisfy this standard.
CDM 2015 places duties on contractors to cooperate with the principal contractor and provide information that feeds into the construction phase plan.
HSE guidance on construction administration confirms that risk assessments, method statements and construction phase plans must be available for inspection and kept up to date.
If you employ fewer than five people, you still carry out the assessment — you are simply not required to write it down, though doing so is strongly advisable for any significant task.

What should you include in a risk assessment?

A task-level risk assessment needs to be specific enough that an operative reading it can identify the actual hazards on that site, not a generic list copied from a previous job. Follow HSE’s five-step approach: identify hazards, decide who might be harmed, evaluate and record controls, and review as necessary.

Field-by-field checklist:

Task description: what activity is being assessed, where, and when.
Hazards identified: specific hazards for this task (e.g. “unguarded edge at roof level” rather than “working at height” alone).
Who might be harmed: operatives, other trades, members of the public, building occupants.
Existing controls: measures already in place before you add anything (e.g. existing edge protection, permit-to-work system).
Additional controls required: what you will put in place to reduce risk further.
Likelihood and severity: a simple 3×3 or 5×5 risk matrix is sufficient for most trade tasks.
Residual risk rating: the risk level after controls are applied.
Review date: when the assessment will be revisited.
Author and competence: name, role, and relevant qualification or experience.

Completed example row:

Hazard	Who at risk	Existing control	Additional control	Residual risk
Fall from height (flat roof access)	Electricians, other trades	Roof access permit	Install temporary edge protection before any operative accesses roof; daily inspection log	Low

Pro Tip: Never copy a previous job’s risk assessment and change the address. Inspectors and principal contractors can spot a recycled RA immediately — the hazards will not match the site, and it will fail the “suitable and sufficient” test. Spend ten minutes walking the task area before you write a single line.

What should a method statement include?

A method statement translates your risk assessment controls into a practical, sequenced plan that operatives can follow without needing to interpret anything. If it requires a safety professional to decode it, it will not be used on site.

Standard method statement sections:

Project and task details: site address, task description, dates, document reference, and revision number.
Scope of work: what is included and, where relevant, what is excluded.
Sequence of operations: numbered steps in the order they will be carried out.
Control measures per step: the specific PPE, precautions, and procedures that apply at each stage.
Plant and equipment: tools, machinery, and lifting equipment to be used, with inspection or certification status noted.
Resources and competencies: named supervisors, required qualifications (e.g. IPAF, PASMA, CSCS), and minimum experience levels.
Permits required: hot work, confined space entry, permit to dig, and any others relevant to the task.
Emergency arrangements: first aid provision, emergency contacts, nearest hospital, and evacuation procedure.
Handover and monitoring: how completion will be confirmed and who signs off.

Pro Tip: Add a simple annotated sketch or photograph of the work area to your method statement. A diagram showing scaffold positions, exclusion zones, or plant routes takes minutes to produce and dramatically reduces the chance of operatives misinterpreting written instructions on site.

Traceability example: if the RA lists “PPE: hard hat, safety boots, and harness when working above 2 metres” as a control, the corresponding MS step should read: “Step 4 — Operative to don harness and connect to anchor point before stepping onto scaffold above 2 m. Supervisor to check harness fit before work commences.”

How to write RAMS step by step

This workflow suits trade teams and small subcontractors preparing task RAMS for a single activity or a short programme of works.

Gather pre-construction information. Obtain the construction phase plan, site induction pack, any existing surveys (asbestos, structural, services), and the principal contractor’s RAMS requirements.
Break the job into tasks. List every distinct activity: demolition, installation, testing, commissioning. Each significant task may need its own RA.
Carry out the task-level risk assessment. Walk the area, identify hazards specific to that location, and complete the RA fields listed above.
Decide on controls. Select controls using the hierarchy: eliminate, substitute, engineer out, administrative controls, PPE. Record the residual risk.
Write the method statement. Map each control from the RA into a numbered MS step. SafetyStack warns that the most common reason principal contractors reject RAMS is “orphan controls” — controls in the RA that have no corresponding step in the MS.
Consult your workforce. Brief operatives on the RAMS before work starts. Their input often surfaces hazards that desk-based assessors miss. Record attendance.
Submit to the principal contractor. Allow time for review. PCs may return RAMS for revision; build this into your programme.
Brief operatives on site. A toolbox talk or pre-start briefing using the RAMS is both good practice and evidence of communication.
Monitor and record changes. If site conditions change, update the RAMS before continuing. Record the revision, re-brief operatives, and resubmit if required.

Work at height — worked example through the workflow:

Hazard identified (step 3): unprotected leading edge at roof level, 6 m above ground.
Control decided (step 4): erect temporary edge protection before any operative accesses roof.
MS step written (step 5): “Step 2 — Scaffold contractor to erect edge protection to all open edges before electrical team accesses roof. Scaffold supervisor to sign inspection tag. No access until tag is signed.”
Workforce consultation (step 6): electricians confirm roof hatch is also a fall risk; hatch guard added to RA and MS.
Evidence (step 8): toolbox talk record signed by all operatives.

Pro Tip: For multi-contractor sites, cross-reference your RAMS against the construction phase plan before submission. A RAMS that contradicts the CPP’s traffic management or exclusion zone arrangements will be rejected immediately.

Common construction hazards and practical controls

The hazards below appear regularly in construction RAMS. Use this as a starting bank and adapt every entry to your specific site conditions.

Work at height: install edge protection or collective fall arrest before access; use MEWP or scaffold rather than ladders for sustained work; inspect equipment daily.
Manual handling: use mechanical aids (pump trucks, hoists) where loads exceed safe limits; provide manual handling training; break loads into manageable units.
Asbestos: before disturbing any asbestos-containing material, carry out a suitable and sufficient risk assessment and plan of work as required by the Control of Asbestos Regulations 2012; use HSE asbestos task sheets (EM0) for specific task requirements; licensed contractors required for licensable work.
Excavation: inspect trench walls before each shift; install shoring or battering to prevent collapse; establish exclusion zones around plant; check for buried services before breaking ground.
Plant and vehicles: segregate pedestrians from plant routes with physical barriers; appoint a banksman for reversing movements; check plant pre-use inspection records.
Electricity: isolate and lock off supplies before work; use a permit-to-work system for live work where unavoidable; test before touch.
Confined spaces: carry out a confined space risk assessment under the Confined Spaces Regulations 1997; appoint a trained attendant; have rescue equipment and a rescue plan in place before entry.
Hazardous substances (COSHH): carry out a COSHH assessment for each substance; use substitution or engineering controls before relying on RPE; store and dispose of substances per safety data sheets.
Slips and trips: keep access routes clear; use non-slip matting in wet areas; report and remedy defects immediately; provide adequate lighting.

Where a hazard requires a specific statutory assessment — asbestos, COSHH, lifting operations under LOLER 1998 — the task RAMS should reference that specialist assessment rather than attempt to replace it.

When should you review, update, and store RAMS?

RAMS are live documents. A risk assessment written at tender stage and never revisited is unlikely to reflect site conditions by the time work starts.

Triggers for review:

Scope of work changes (additional tasks, revised sequence).
A new hazard is identified on site.
An accident, near miss, or dangerous occurrence.
Change in workforce, plant, or equipment.
A significant change in site conditions (weather, adjacent works, occupancy).
Periodic review at agreed intervals for long-duration projects.

Who reviews and signs off:

The original author checks the document against current site conditions.
A competent supervisor or site manager confirms the controls are still adequate.
The principal contractor reviews and accepts the revised RAMS before work resumes.

Version control checklist:

Unique document reference number on every page.
Revision number and date clearly shown.
Name and signature of the reviewer.
Distribution list updated to confirm who holds the current version.
Superseded versions marked “SUPERSEDED” and removed from active site use.
Digital master stored centrally; site copy accessible to operatives.

HSE administration guidance confirms that construction project records, including risk assessments and method statements, must be kept up to date and available for inspection. A version-controlled document trail is your primary defence if an incident occurs.

How to present RAMS to clients, principal contractors, and inspectors

Submitting RAMS is not a formality. Principal contractors routinely refuse site access where documents are generic, omit site-specific risks, or contradict the construction phase plan. Build submission into your programme, not your last-minute checklist.

Pre-submission checklist:

Completed risk assessment with site-specific hazards and residual risk ratings.
Method statement with numbered steps and controls mapped from the RA.
Competency records for all operatives (CSCS cards, IPAF/PASMA certificates, trade qualifications).
Plant and equipment inspection certificates (LOLER thorough examination records, PAT test certificates).
Copies of any permits required (hot work, confined space, permit to dig).
Cross-reference to the relevant section of the construction phase plan.

Using RAMS in pre-start meetings and toolbox talks:

Walk through the method statement step by step with operatives before work begins. Ask operatives to confirm they understand each step and have the equipment described. Record attendance on a sign-in sheet and keep it with the RAMS pack. This record demonstrates that you have communicated the safe system of work — a point inspectors specifically look for.

When an HSE inspector visits site, they will ask to see the construction phase plan, risk assessments, and method statements together. CDM 2015 places a duty on contractors to cooperate with the principal contractor and provide information that feeds into the CPP; your RAMS are the primary vehicle for that information.

Practical templates, free resources, and digital tools

The right tool depends on the volume of RAMS you produce and the complexity of your projects.

Free resources:

HSE risk assessment templates and task sheets cover common construction activities and provide a compliant starting structure.
CHAS guidance includes sector-specific advice on what assessors look for when reviewing contractor RAMS during accreditation.
Free RAMS templates from providers such as Protecting give small contractors a quick starting point, but every template must be tailored to site specifics to meet the “suitable and sufficient” standard.

Digital RAMS platforms:

Platforms such as MyRams and HammerTech allow contractors to build, store, and distribute RAMS digitally, with version control, operative sign-off, and audit trails built in. These systems suit contractors managing multiple sites or working under principal contractors who require digital submission. The key advantages over paper templates are mobile accessibility on site, automatic version control, and the ability to link RAMS to site inductions and toolbox talk records.

Choosing between free templates and a paid system:

Use a free template when you are a sole trader or small team producing RAMS for a single, straightforward task. Move to a digital system when you are managing RAMS across multiple projects, need an audit trail for accreditation (CHAS, SafeContractor), or your principal contractor requires digital submission. The non-negotiable criterion for any template or system is traceability: every control in the RA must appear as a named step in the MS, and the document must be specific to the task and site, not a generic form with the address changed.

For technical definitions used in RAMS documents, the Delta First building services glossary is a useful reference for facilities teams and site managers confirming terminology before submission.

Why generic RAMS are the biggest risk contractors take

Most RAMS failures are not caused by missing documents. They are caused by documents that exist but say nothing useful. A four-page risk assessment that lists “working at height” as a hazard with “use a ladder safely” as the control is not suitable and sufficient. It will not survive a principal contractor’s review, and it will not protect your operatives.

The “orphan control” problem is the clearest symptom of this. A contractor writes a thorough RA, lists twelve controls, and then produces a method statement that describes the task in broad strokes without referencing a single one of those controls. The PC reviewer cannot trace the controls through to the MS, so the document fails. The contractor is surprised, because they spent two hours on the RA. The problem was not effort — it was structure.

There is also a cultural dimension that most RAMS guides ignore. Operatives who were never consulted during the RAMS process will not follow a method statement they have never seen. Consultation is not a box-ticking exercise. It is how you find out that the roof hatch is also a fall risk, that the goods lift is out of service, or that the adjacent tenant has a gas supply running through the wall you planned to chase. That information changes the RA. It makes the MS accurate. And it means the document is actually used on site rather than filed in a van.

Deltafirst’s RAMS support for planned maintenance and compliance work

Deltafirst prepares task-specific RAMS for every planned preventative maintenance visit, reactive call-out, and refurbishment project we undertake across Essex, Suffolk, Cambridgeshire, Norfolk, and Greater London. Our directly employed engineers carry current competency records, and every RAMS pack submitted to a principal contractor or facilities team includes the risk assessment, method statement, operative certificates, and plant inspection records as a single, traceable submission.

Whether you manage a school, an NHS facility, a commercial office, or a retail site, Deltafirst can provide RAMS-compliant maintenance services with full documentation for your compliance records. Our approach covers electrical, mechanical, HVAC, and building fabric works, with a single point of contact and transparent reporting at every stage. Request a quotation or a planned maintenance survey today by contacting the Deltafirst team at Deltafirst.

Sources

The following authoritative sources support the guidance in this article and are the best starting point for verifying legal requirements and accessing official templates.

This article is general information, not a substitute for advice from a qualified lawyer. Consult a qualified legal professional about your own circumstances before acting on anything here.

RAMS for contractors: a practical task RAMS guide