A workplace risk assessment should not simply identify hazards and record existing controls. It should also show what needs to happen next when further action is required.
For learners completing the NEBOSH GIC2 practical assessment, this means thinking beyond the hazard itself and considering how recommended improvements can become realistic workplace actions. NEBOSH describes GIC2 under the 2025 specification as a practical assessment in which learners complete a workplace risk assessment and develop an action plan.
A strong action plan connects the identified risk to a practical improvement. It makes clear what should be done, who should take responsibility, how urgently it should be addressed, and how the action will help reduce the risk.
This article explains how to develop that thinking without providing a completed GIC2 report or copy-paste action plan.
What Is an Action Plan in a Risk Assessment?
An action plan turns identified improvements into specific tasks.
For example, a risk assessment might identify a pedestrian and forklift interaction in a warehouse. The assessment may conclude that existing controls do not sufficiently separate the two groups.
The action plan then needs to move from:
“Forklift and pedestrian risk identified.”
to a practical improvement such as reviewing the traffic arrangement and introducing an appropriate segregation measure.
The action plan should help management answer four basic questions:
- What needs to be done?
- Who is responsible?
- When should it be completed?
- Why is the action needed?
The Health and Safety Executive (HSE) similarly recommends recording who needs to act and when it is needed as part of the risk-management process.
Action Plan vs Risk Assessment
The two are closely connected, but they serve different purposes.
A risk assessment examines:
- What hazards are present?
- Who might be harmed?
- How could harm occur?
- What controls already exist?
- What is the level of risk?
- What additional controls may be required?
The action plan focuses on implementing those additional improvements.
For example:
Risk assessment finding:
Workers may be exposed to moving vehicles because pedestrians and forklifts use overlapping routes.
Further control:
Review the traffic layout and introduce suitable physical segregation where reasonably practicable.
Action plan thinking:
Identify the person responsible for implementing the change, assign an appropriate priority and set a realistic target date.
This is why a good action plan should not be created separately from the risk assessment. It should flow naturally from what the assessment has identified.
For a broader explanation of workplace risk assessment, see the NEBOSH Risk Assessment Practical Guide.
Start With the Further Control
Before deciding who should do something or when it should be completed, make sure the action itself is useful.
Ask:
What problem is this action actually solving?
Consider a workplace where workers regularly walk through an area containing moving forklifts.
A weak action might be:
Improve safety awareness.
This does not explain what should change.
A more specific action could involve reviewing pedestrian routes and introducing physical separation where appropriate.
The second approach is more useful because it connects the action directly to the identified exposure.
HSE guidance also emphasises putting practical controls into place rather than relying on paperwork alone.
Make the Action Specific
A strong NEBOSH GIC2 action plan should be understandable to someone who was not involved in writing the assessment.
Compare:
Generic:
Improve housekeeping.
More specific:
Introduce a designated waste collection point beside the stock-handling area and arrange routine removal of packaging from pedestrian routes.
The second action provides a clearer picture of what needs to happen.
Specificity can come from including:
- The workplace area
- The activity involved
- The equipment or process
- The control that should be introduced
- The intended safety improvement
You do not need to make every sentence complicated. In many cases, plain language is stronger than technical wording.
Connect the Action to Risk Reduction
One of the most important questions to ask is:
How will this action reduce the risk?
Suppose an assessment identifies a damaged floor surface in a busy corridor.
An action such as:
Repair or replace the damaged flooring.
has a clear connection to the hazard.
The reason is also straightforward: removing the damaged surface can reduce the potential for someone to trip.
Now consider:
Provide safety training.
Training may have value in many situations, but it does not directly repair the floor.
This simple test helps prevent unrelated or generic actions from entering the action plan.
Think About Existing Controls
Before proposing a new action, look at what is already happening.
For example, a workplace may already have:
- Safety signs
- Worker induction
- Routine inspections
- PPE
- Equipment training
- Written procedures
- Supervisor checks
If these controls already exist, simply repeating them as further actions may not add anything.
Instead, ask whether there is a weakness in the existing arrangement.
For example:
Workers already receive forklift training, but pedestrian routes still cross the vehicle operating area.
The further action should therefore address the remaining exposure rather than simply recommending more training.
This distinction between existing controls and further controls is central to useful risk assessment action planning.
Use the Hierarchy of Controls
When deciding what further action is appropriate, consider the hierarchy of controls.
A commonly used sequence is:
- Elimination
- Substitution
- Engineering controls
- Administrative controls
- PPE
The principle is to consider whether the risk can be controlled through measures that do not depend entirely on individual worker behaviour. The ILO’s occupational safety and health guidance describes prevention and control approaches that prioritise eliminating hazards and controlling risks at source.
For example, imagine a cleaning activity involving exposure to a hazardous substance.
A PPE-only action might be:
Provide appropriate gloves and eye protection.
But the assessment could also consider whether the substance can be substituted with a less hazardous alternative or whether the dispensing method can be changed to reduce exposure.
PPE may still have a role. The point is not to remove PPE from the action plan; it is to avoid treating PPE as the automatic solution to every hazard.
Prioritise the Actions
Not every action has the same urgency.
Imagine an assessment identifies:
- A serious vehicle-pedestrian interaction
- Damaged office flooring
- An opportunity to improve safety signage
- A minor storage improvement
It would make little sense to treat all four actions as equally urgent without considering the level and nature of risk.
Priority should reflect factors such as:
- Potential severity of harm
- Likelihood of harm
- Frequency of exposure
- Number of people exposed
- Effectiveness of existing controls
- Whether the hazard is already causing problems
- How quickly the risk can realistically be reduced
HSE guidance describes risk assessment as a process of identifying hazards, assessing risks and deciding what practical controls are needed. It also recommends establishing priorities and deadlines for intended actions.
The key is to base the priority on the risk, rather than simply labelling an action “high” because it sounds important.
Assign a Responsible Person
An action without ownership can easily become an action that nobody implements.
Consider the difference between:
Repair the damaged electrical equipment.
and:
Maintenance Manager to arrange inspection and repair or replacement of the damaged equipment.
The second version establishes ownership.
The responsible person should be someone with the appropriate authority, resources or influence to make the action happen.
Depending on the workplace, this could be:
- A facilities manager
- Maintenance manager
- Operations manager
- Warehouse manager
- Department supervisor
- Procurement manager
- A competent specialist
The appropriate person depends on the organisation.
You should not automatically assign every action to the safety officer simply because the safety officer identified the risk.
Set a Realistic Timescale
A target date should reflect the urgency of the risk and the practical work required.
For example, an action involving an immediate serious exposure may require urgent attention, while a larger engineering improvement may require planning, procurement and installation.
Think about:
- How serious is the risk?
- Can the action be completed immediately?
- Is specialist support required?
- Does equipment need to be purchased?
- Does work need to be scheduled?
- Are temporary controls required while waiting for the permanent solution?
The objective is not to invent an impressive-looking deadline. It is to establish a timeframe that makes sense for the workplace.
HSE guidance on risk management recommends identifying responsibilities for actions and when the action is needed, while its broader risk-management material also highlights expected completion dates and closing actions once implemented.
Consider Temporary Controls
Sometimes the final solution cannot be implemented immediately.
Suppose a machine requires an engineering modification, but the necessary component will take time to arrive.
The action plan should not simply accept the risk until the component arrives.
Consider whether an interim measure is needed to reduce exposure while the permanent control is being arranged.
Depending on the circumstances, this could involve:
- Restricting access
- Changing the work arrangement
- Increasing supervision
- Isolating equipment
- Temporarily stopping a particular activity
- Using another safe method of completing the task
The appropriate interim measure depends entirely on the hazard and workplace.
Make Actions Practical, Not Theoretical
A good action should be capable of being implemented.
Consider:
Eliminate all manual handling.
That may not be realistic in many workplaces.
A better approach is to examine the actual activity and identify a feasible way of reducing unnecessary manual handling.
For example:
Review the storage and material-handling arrangement and introduce suitable mechanical assistance for heavier loads where reasonably practicable.
The recommendation is still focused on reducing risk, but it recognises that controls must work in the real workplace.
HSE describes “reasonably practicable” controls as requiring consideration of the level of risk against the measures needed to control it, including factors such as time, money and effort.
Do Not Create an Action for the Sake of It
A common mistake in risk assessment work is assuming that every hazard needs a long list of actions.
That is not necessarily the case.
If existing controls are effective and the risk is adequately managed, there may be little or no additional action required beyond maintaining and reviewing those controls.
HSE guidance makes the same practical point: risk assessment is about controlling risks in practice, not simply producing paperwork.
The quality of an action plan comes from relevant actions, not the number of actions.
Examples of Action-Planning Thinking
The following examples are for learning purposes only. They demonstrate how an observation can be translated into an action without providing a ready-made GIC2 submission.
| Workplace issue | Weak action | Better action-planning approach |
| Pedestrians and forklifts share a loading area | Improve awareness | Review traffic routes and introduce physical pedestrian segregation where reasonably practicable |
| Damaged flooring in a busy corridor | Be careful when walking | Arrange repair or replacement of the damaged flooring |
| Boxes repeatedly lifted from floor level | Give manual handling training | Review storage arrangements to reduce repeated lifting from floor level and consider suitable handling equipment |
| Cleaning chemicals create splash exposure | Wear PPE | Review the chemical and dispensing method to determine whether exposure can be reduced at source |
| Packaging accumulates near a walkway | Improve housekeeping | Provide a suitable waste collection arrangement and establish routine removal from the pedestrian route |
| Poor visibility around a vehicle route | Put up more signs | Review lighting and the traffic arrangement to improve visibility and separation |
Notice the pattern.
The stronger actions generally:
identify the problem → propose a practical change → connect the change to risk reduction.
Think About Who, What, When and Why
Before finalising an action, use four simple questions:
What?
What exactly needs to change?
Who?
Who has the authority or competence to implement it?
When?
How quickly should it be addressed?
Why?
What risk will the action reduce?
If you cannot answer these questions, the action may still be too vague.
For example:
“Improve machine safety.”
does not provide enough information.
But after examining the workplace, you may determine that the actual issue is an accessible moving part.
The action could then focus specifically on introducing an appropriate physical guarding arrangement and assigning responsibility to the relevant manager or competent maintenance person.
The exact control must always be based on the workplace you are assessing.
Include Verification After Implementation
An action should not necessarily be considered finished simply because someone says it has been completed.
Consider what needs to be checked afterward.
For example:
- Has the new control actually been installed?
- Is it being used correctly?
- Does it remain in place?
- Has worker exposure been reduced?
- Does the control require maintenance?
- Has the action introduced another hazard?
- Does the risk assessment need updating?
HSE recommends reviewing controls to make sure they continue to work and reviewing assessments when circumstances change, or controls may no longer be effective.
This creates a useful cycle:
Identify → Assess → Control → Act → Check → Review
Common NEBOSH GIC2 Action-Plan Mistakes
Vague actions
Avoid statements such as:
Improve safety.
The person implementing the action would not know what is expected.
No clear ownership
An action needs someone who can realistically take responsibility for it.
Unrealistic deadlines
Do not select a timeframe simply because it looks organised. Consider the risk and practical implementation requirements.
Repeating existing controls
If something is already working, it should not automatically appear as a new action.
PPE as the automatic answer
Consider stronger controls before relying primarily on PPE.
Actions unrelated to the hazard
Every recommended action should have a logical connection to the identified risk.
Too many actions
A long action list is not automatically a strong action plan. Prioritise meaningful risk-reduction measures.
No follow-up
Consider how the organisation will verify that the action has been implemented and remains effective.
How to Practise Action Planning for GIC2
Instead of memorising controls from online examples, practise with real or realistic workplace observations.
Choose an activity and work through the following process:
1. Identify the hazard
What could cause harm?
2. Identify who may be harmed
Which workers or other people could be exposed?
3. Examine existing controls
What is already being done?
4. Identify the remaining problem
Why might the current arrangements be insufficient?
5. Propose further controls
What practical change could reduce the risk?
6. Consider the hierarchy of controls
Could the risk be controlled closer to its source?
7. Decide the priority
How urgently should the action be addressed?
8. Assign responsibility
Who can realistically implement it?
9. Set a timeframe
When should it reasonably be completed?
10. Consider verification
How will you know the control is working?
This method develops practical risk-assessment thinking rather than encouraging learners to memorise generic answers.
Keep the Action Plan Connected to Your Workplace
The strongest action plans are based on what was actually observed.
A warehouse, construction site, office, hotel, manufacturing facility and healthcare environment will not have the same hazards or control requirements.
For example, a warehouse assessment may need to consider vehicle movement and storage arrangements, while an office assessment may focus more heavily on issues such as electrical equipment, slips and trips, workstation arrangements and facility maintenance.
This is particularly important for GIC2 because the current NEBOSH assessment is workplace-based. NEBOSH states that learners completing GIC2 under the 2025 specification complete a risk assessment and develop an action plan for their workplace.
For related preparation, you can also review SFAST’s risk assessment template, risk assessment guide and hierarchy of controls guide.
Final Check Before You Move On
Before considering an action plan complete, review each proposed action and ask:
- Does it address a hazard identified in the assessment?
- Is it specific enough to understand?
- Does it describe a genuine improvement?
- Does it reduce or eliminate the risk?
- Have stronger controls been considered?
- Is the priority appropriate to the risk?
- Is the responsible person realistic?
- Is the timeframe practical?
- Can implementation be checked?
- Could the control introduce another hazard?
- Does the assessment need to be reviewed after the change?
If the answer to these questions is yes, your action-planning process is much more likely to be clear and logically connected to the risk assessment.
Final Thoughts
A strong NEBOSH GIC2 action plan is not about producing the longest list of recommendations.
It is about turning the findings of a workplace risk assessment into specific, realistic and prioritised actions.
Start with the hazard. Understand the existing controls. Identify what still needs improvement. Then consider the strongest practical control, who should implement it, how urgently it should happen, and how its effectiveness can be checked.
That approach keeps the action plan focused on its real purpose: reducing workplace risk through practical improvement.
If you are building your wider GIC2 preparation, use SFAST’s NEBOSH Risk Assessment Practical Guide as the broader reference point, then use the supporting risk-assessment resources to strengthen individual parts of your practical work.
Frequently Asked Questions
What should a NEBOSH GIC2 action plan include?
An action plan should translate identified further controls into practical actions. Key considerations include the action required, priority, responsible person and target timeframe, with appropriate follow-up to check implementation.
How do I prioritise actions in a GIC2 risk assessment?
Consider the level and nature of the risk, including potential severity, likelihood, exposure and the effectiveness of existing controls. Higher-risk issues generally require more urgent attention.
Should every GIC2 hazard have a further action?
Not necessarily. The number of actions should reflect the actual workplace findings. Where existing controls adequately manage a risk, unnecessary additional actions should not be invented.
Should I always recommend PPE in the action plan?
No. PPE can be appropriate, but consider whether elimination, substitution, engineering or administrative controls could provide stronger risk reduction.
Who should be responsible for a GIC2 action?
Responsibility should be assigned to a person or role that has the appropriate authority, resources, or competence to implement the action. The correct person depends on the organisation and the action required.
How specific should a GIC2 action be?
It should be clear enough for someone to understand what needs to change and, where appropriate, where or how the change should be implemented. Avoid vague phrases such as “improve safety” or “provide more awareness.”
Do I need to copy an action plan format from an example?
No. Examples can help you understand the principles of action planning, but your assessment should be based on your own workplace observations and circumstances. NEBOSH provides official guidance and assessment resources for GIC2 through its qualification resources.