Growth changes a business in ways that are easy to celebrate and harder to see. A larger team, a second site, new equipment or a busier delivery schedule may all be signs of progress. They also change how people move through the workplace, who makes decisions, which contractors come on site and how quickly a small failure can affect customers or operations. A safety arrangement that worked when ten people shared one office may be too informal when the same company employs fifty people across several locations.

This does not mean that expanding organisations need layers of paperwork for its own sake. They need a system that makes important responsibilities visible and repeatable. The best systems tell people what to do, give managers useful evidence and prompt a review when the business changes. They connect risk assessment, training, maintenance, consultation and incident learning rather than treating each item as a separate annual exercise.

For London businesses, this discipline is particularly valuable. Premises can be compact, shared or frequently reconfigured; contractors may work outside normal hours; teams may combine office, site and mobile roles; and landlords or managing agents may control parts of the building. A practical safety system helps leaders understand these interfaces before an emergency, inspection or serious near miss exposes the gaps.

Growth Changes the Risk Picture

A growing company does not simply have more of the same risk. It develops new connections between people, places and processes. A new warehouse introduces vehicle movements and storage decisions. A refurbished office changes escape routes, electrical loads and workstation layouts. Longer opening hours create lone-working questions. A new product or service may bring unfamiliar substances, machinery or manual-handling tasks. Even rapid recruitment can weaken controls if experienced employees no longer have time to coach every new starter informally.

That is why risk reviews should be tied to business events, not only to a date in the calendar. Useful triggers include moving premises, changing a layout, buying equipment, introducing shift work, appointing a new contractor, acquiring another company, receiving repeated complaints or investigating a near miss. The review should ask what has changed, who could be affected and whether existing controls still work in practice. This event-led approach catches problems while there is still time to solve them calmly.

A Safety System Is More Than a Folder of Documents

Policies, assessments and training records matter, but possession of a document is not the same as control of a risk. A beautifully written procedure adds little if employees cannot find it, supervisors do not reinforce it or the workplace makes it impossible to follow. A credible system links written expectations to daily decisions. Someone owns each important action, deadlines are realistic, unresolved issues are escalated and managers check whether the control achieved the intended result.

A simple test is to follow one risk from beginning to end. If an inspection identifies a damaged fire door, for example, who records it? Who decides whether an interim measure is needed? Who arranges the repair, and how is completion verified? If the answer depends on one person remembering an email, the organisation has an action rather than a system. If the issue has an owner, priority, evidence and closure check, the business can demonstrate control and learn from delays.

The Health and Safety Executive describes management as an ongoing cycle rather than a one-off task. Its Plan, Do, Check, Act model is helpful because it prevents companies from stopping after a policy is approved. Planning sets the direction; doing puts controls into practice; checking tests performance; and acting turns findings into improvement. The cycle can be scaled to a small office, a property portfolio or a complex construction operation without becoming a bureaucratic project.

Make Responsibility Clear at Every Level

Safety becomes fragile when everyone is responsible in theory but no one is accountable in practice. Directors should set priorities and provide resources. Managers should understand the risks in their areas and make sure controls are followed. Supervisors need authority to stop unsafe work, while employees need clear instructions and a trusted route for raising concerns. Facilities teams, human resources, procurement and project managers also influence risk through maintenance, wellbeing support, purchasing and contractor selection.

Employers must also appoint a competent person or people to help them meet their duties. Competence is practical: the person needs the skills, knowledge and experience to recognise hazards and help the organisation put sensible controls in place. The role may be filled internally, externally or through a combination of both. External advice can strengthen a business, but it does not transfer the employer's responsibility. Leaders still need to understand the recommendations, decide priorities and ensure that agreed actions happen.

A concise responsibility map is often more useful than a long generic policy. For each major risk area, it can identify the accountable director, operational owner, competent adviser, people who must be consulted and evidence that will demonstrate completion. It should also cover absence and handover. A control that stops working when one manager is on leave is not sufficiently embedded for a growing organisation.

Keep Risk Assessments Close to Real Work

A suitable risk assessment begins with observation. Walk the space, watch the task, speak to the people who perform it and review relevant maintenance or incident records. Templates can provide prompts, but they cannot show how a delivery blocks a particular corridor, why an alarm cannot be heard in one room or how a worker improvises when equipment is unavailable. The assessment should reflect the workplace as it is actually used, including predictable non-routine activities such as cleaning, maintenance, events and emergency call-outs.

The standard risk-management sequence is straightforward: identify hazards, assess who may be harmed and how, control the risks, record significant findings and review the controls. Quality comes from the judgement within those steps. Controls should follow the hierarchy of control, favouring removal or reduction of the hazard before relying on instructions or personal protective equipment. The assessment should name the action owner and review trigger, not end with vague phrases such as 'staff to take care'.

Growing companies should also connect assessments. A refurbishment risk assessment may affect fire arrangements, access, manual handling, contractor management and business continuity at the same time. Reviewing these subjects in isolation can create contradictions. A short cross-functional meeting before work begins may reveal that a planned temporary storage area obstructs an escape route or that noisy work clashes with customer opening hours. Coordination is a control in its own right.

Turn Worker Consultation Into an Early-Warning System

Employees often notice weak signals before performance data does. They know which door sticks, which instruction causes confusion, where short cuts are taken under pressure and which task has become harder since a process changed. Effective consultation uses this knowledge without asking workers to carry management responsibility. It gives people several ways to contribute, explains what will happen next and closes the loop after a decision.

The HSE advises employers to consult employees and health and safety representatives when carrying out risk assessments. In practice, consultation can include brief team discussions, safety representatives, confidential reporting, site walks and focused questions during change projects. The method should suit the workforce. Night staff, mobile workers, temporary employees and people whose first language is not English may need different opportunities to be heard.

Trust depends on response. If people report the same issue repeatedly without seeing progress, reporting will fall and informal workarounds will grow. Even when an immediate fix is not possible, managers should acknowledge the concern, explain the interim control, name the owner and give a realistic update date. That visible feedback turns consultation from a meeting ritual into a practical source of risk intelligence.

Design Training Around Decisions, Not Attendance

Training is effective only when it changes what people can recognise or do. An attendance sheet proves that a session took place; it does not prove that someone can select the correct equipment, isolate a hazard or respond to an alarm. Start by defining the decision or behaviour the worker must demonstrate. Then choose the lightest method that builds that capability, such as supervised practice, a short briefing, a toolbox talk, a scenario exercise or formal instruction.

Induction should explain site-specific essentials before work begins: emergency arrangements, reporting routes, restricted areas, relevant controls and who can answer questions. Role-specific learning can then follow. Refresher timing should respond to risk and evidence rather than habit alone. A process change, observed unsafe practice, incident, long period away from a task or expiring competence may justify retraining. Managers should also check whether the workplace supports the trained behaviour; instruction cannot compensate for missing guards, unrealistic workloads or inaccessible equipment.

Control the Interfaces With Contractors and Shared Premises

Many London businesses depend on contractors for maintenance, security, cleaning, construction and specialist services. The risk often sits at the interface between the contractor's work and the client's operations. A contractor may be technically capable but unfamiliar with the building, customer movements, vulnerable occupants or local emergency arrangements. Conversely, the client may not understand the hazards introduced by the contractor's method, equipment or materials.

Good contractor control begins before price approval. The scope should define the work, competence required, relevant risk information, supervision, permits, isolation arrangements and completion checks. Induction needs to be proportionate and site-specific. Changes should be agreed rather than improvised. At the end, the person commissioning the work should verify that guards, alarms, routes and services have been restored and that any new information is passed to affected employees.

Shared buildings require the same clarity. Employers, landlords, managing agents and neighbouring occupiers may each control different parts of the premises. Fire alarms, lifts, loading areas, plant rooms and evacuation routes can cross those boundaries. Written coordination should identify who maintains shared systems, how faults are reported, who communicates changes and how emergency plans fit together. Assumption is the most common gap; a brief documented conversation can prevent it.

Treat Fire and Emergency Planning as Operational Work

Emergency plans need to work on the least convenient day, not only during a planned daytime drill. Consider visitors, contractors, lone workers, people with disabilities, new starters and anyone working in an unfamiliar area. Confirm that alarms can be detected, routes remain available, assembly and accountability arrangements are understood and key roles have deputies. Where a landlord controls part of the system, the business should know how tests, faults and changes will be communicated.

Drills are valuable when they test assumptions rather than merely produce a completion record. Observe delays, uncertainty and behaviour at doors or assembly points. Ask participants what confused them. Record actions, assign owners and check that improvements are complete. If the business changes layout, occupancy, shift pattern or the needs of an individual, revisit the plan. Emergency readiness is a living control, not a laminated notice.

Learn From Near Misses Before Harm Occurs

A near miss is useful evidence that the gap between hazard and harm was smaller than expected. Reporting should therefore be easy, proportionate and psychologically safe. If every report requires a long form or leads to blame, people will stay silent. A short initial record can capture what happened, where, who could have been affected and what immediate action was taken. More detailed investigation can be reserved for events with serious potential or recurring patterns.

Investigation should move beyond the last person's action. Ask what conditions shaped the decision: workload, design, maintenance, supervision, instruction, availability of equipment, communication or conflicting priorities. Correcting only the visible error allows the same underlying weakness to appear elsewhere. Share learning in a form people can use, protect personal information and check whether the agreed change reduced the risk. Closure should mean verified improvement, not simply that an action has disappeared from a spreadsheet.

Measure Whether Controls Work

Accident totals matter, but they are a late and incomplete measure. A period without reported injury can reflect good control, good luck or weak reporting. Growing businesses also need leading indicators that show whether the system is functioning. Useful measures might include overdue high-priority actions, completion of planned inspections, response time to reported hazards, maintenance backlog, competence checks, repeated findings and the percentage of changes reviewed before launch.

Choose a small set that supports decisions. Too many metrics create administrative noise and encourage teams to optimise the number rather than the outcome. Senior review should focus on exceptions, trends and barriers: which important actions are overdue, what keeps recurring, where resources are constrained and whether workers believe concerns are handled. A dashboard should lead to a decision, not replace one.

Leadership oversight is also part of legal and practical governance. HSE guidance on leadership duties summarises requirements that include assessing risks, organising and reviewing preventive measures, accessing competent advice and consulting employees. For organisations with five or more employees, a written health and safety policy is required. Directors do not need to manage every detail, but they should understand the significant risks, confirm that responsibilities are assigned and challenge evidence that controls are effective.

When External Advice Adds the Most Value

Internal teams usually know the operation, people and history better than an outsider. External advisers add value when they combine that knowledge with independent challenge, specialist competence or additional capacity. Common triggers include rapid expansion, unfamiliar legislation, construction or refurbishment, complex fire arrangements, a serious incident, enforcement contact, acquisition due diligence or repeated findings that the business has struggled to close.

The best health and safety consultants London businesses appoint should begin by understanding the work rather than selling a standard bundle. A useful adviser explains the scope, identifies assumptions, distinguishes legal requirements from recommendations and produces actions that managers can implement. They should also be willing to say when a proportionate internal solution is sufficient. Independence is most valuable when it improves judgement, not when it creates unnecessary dependence.

Organisations comparing support can review Ablemarsh as one example of a consultancy offering risk assessment, competent-person, occupational health and safety, training, accident investigation, fire-safety and construction-safety services. Whatever provider is considered, the final choice should reflect the organisation's sector, risk profile, locations and preferred level of ongoing support.

A Practical 90-Day Improvement Plan

In the first 30 days, establish the baseline. Confirm the accountable director and competent support, collect current policies and assessments, review significant incidents and overdue actions, and walk the main workplaces with employees who know the tasks. Identify immediate dangers first, then create a short priority list based on potential harm and the reliability of existing controls. Avoid trying to rewrite every document before the most important weaknesses are understood.

During days 31 to 60, strengthen the operating rhythm. Assign owners and deadlines, agree escalation thresholds, schedule proportionate inspections and create a simple route for workers to report concerns. Review induction, contractor arrangements and emergency plans against actual conditions. Select a handful of leading measures and decide who will review them. This is also the right stage to remove duplicate forms or meetings that do not influence a decision.

During days 61 to 90, test and close the loop. Sample completed actions and verify them at the workplace. Run a realistic emergency exercise, review one change project and analyse a near miss for underlying causes. Ask workers whether reporting and feedback have improved. Present senior leaders with the significant remaining risks, barriers, resources needed and next review dates. The aim at day 90 is not a perfect system; it is a functioning cycle that will continue to improve.

After that, integrate the cycle into normal management. Safety should appear in project approvals, procurement, maintenance planning, recruitment, performance reviews and board discussions in proportion to the risk. When the business opens another site or introduces new work, the review process should start automatically. That is the point at which safety stops being a separate compliance campaign and becomes part of how the company scales.

Questions to Ask a Prospective Adviser

A productive first conversation should clarify the adviser's relevant experience, proposed scope and working method. Ask how they will learn about real work, what information they need, how they prioritise findings and what a useful report will look like. Confirm who will perform site visits, what competence supports the assignment and how urgent questions are handled. If ongoing support is proposed, ask what is included, what is extra and how the service will adapt as the company changes.

Also ask how success will be judged. A long list of documents is not a result. Better outcomes might include reliable closure of significant actions, clearer responsibilities, stronger competence, improved reporting or evidence that a recurring hazard has been controlled. The adviser should be able to explain limitations and avoid promising that a certificate or policy makes an employer 'fully compliant' in every circumstance. Health and safety depends on continuing implementation and review.

Final Thoughts

Strong safety systems give growing businesses something more useful than reassurance: they create visibility. Leaders can see which risks matter, who owns the response and whether controls are working. Employees know how to work safely and how to raise a concern. Contractors receive the information they need, while changes trigger review before old assumptions become new hazards.

The most effective system is rarely the most elaborate. It is proportionate to the work, grounded in observation and kept alive through consultation, monitoring and learning. For a London business under pressure to expand, that consistency protects people while also supporting continuity, trust and better operational decisions. Growth will always introduce change; a mature safety system makes sure the organisation learns and adapts before the risk becomes an incident.

‍