Risk Assessments

Show the risk went down, and why

Assess each psychosocial risk before and after its controls. ReFresh records the exposure, the controls in place and the residual rating, so the reasoning is on record.

The ReFresh risk register with inherent and residual ratings for each risk

One register for every psychosocial risk

Each risk carries its team, its source, its inherent and residual rating, and a status from draft to monitoring.

A risk register with inherent and residual ratings and a status for each risk
A risk scenario from the library, mapped to the frameworks it relates to

Start from a written scenario

The risk scenario library holds pre-written psychosocial risks, each mapped to the frameworks it relates to. Adopt one, then adjust it to the team.

Inherent and residual, side by side

Rate likelihood and consequence before the controls and again after them. Two heatmaps show how far the controls brought the risk down.

Two heatmaps showing a risk moving from high before controls to low after them

Controls checked against the hierarchy

ReFresh shows where each risk’s controls sit on the hierarchy of controls, and warns when they sit below the recommended level.

Where a risk's controls sit on the hierarchy of controls, with a warning
An approved risk assessment with its treatment and a yearly review cadence

Approved, and back on time for review

Each assessment records its scope, the workers exposed, the treatment plan and who approved it, with a review cadence so it comes back when it should.

GOT QUESTIONS?

Frequently asked questions

What is the difference between inherent and residual risk?

Inherent risk is the rating before any controls are in place. Residual risk is the rating once your controls are working. ReFresh rates both on likelihood and consequence, so you can see how far the controls brought the risk down.

Do we have to write our risks from scratch?

No. The risk scenario library holds pre-written psychosocial risks, each mapped to the frameworks it relates to. Adopt one and adjust it to your team, or write a custom risk assessment.

How does ReFresh use the hierarchy of controls?

Each risk shows where its controls sit on the hierarchy of controls, and ReFresh warns when they sit below the recommended level.

How are risk assessments approved?

Each assessment goes through approval, and the approval sets a review cadence, such as yearly, so the risk comes back for review on time.

What does a risk assessment record?

Its scope and the workers exposed, the duration, frequency and severity of exposure, the inherent and residual ratings, the linked controls, the treatment plan and the approval.

How fast can we get set up?

Most organisations move through setup quickly:

  • Week 1: configure your organisational structure, activate compliance frameworks, and import existing documentation.

  • Weeks 2–4: full compliance mapping including risk scenarios, first survey, and control setup.

  • Ongoing: continuous monitoring, automated legislation updates, and board reporting from day one.

We also offer a hands-on onboarding service where the ReFresh team comes in (online or in person) and sets everything up with you, including HRIS integrations.

Book a demo