The EN ISO 12100 methodology behind a compliant assessment
EN ISO 12100 sets out the recognised methodology for machinery risk assessment: identify the hazards a piece of equipment presents, estimate and evaluate the risk each hazard poses, then apply the hierarchy of risk reduction in a fixed order. That hierarchy starts with eliminating the hazard through design, then substituting or guarding against it, then informing users of residual risk, and only then relying on training or personal protective equipment. A risk assessment that starts by listing PPE requirements before considering whether the hazard could be guarded or eliminated has the hierarchy backwards, and an auditor or the Health and Safety Executive will treat that as a methodology failure, not a paperwork formality.
Why generic assessments produce inconsistent results
A generic, spreadsheet-based risk assessment template applied across different machine types is the most common source of inconsistency in a machinery safety programme. The same excavator, press or conveyor can receive entirely different risk ratings depending on who is completing the assessment, because a generic template does not specify what to look for on that particular machine. It relies on the assessor's own knowledge to fill the gap, which varies by experience and by day. A machine-specific assessment, built around the actual hazards documented for that equipment type, removes that variability by prompting the assessor with the checks relevant to the machine in front of them.
Set against each other, the difference shows up clearly:
| Assessment approach | Consistency across assessors | Audit readiness |
| Generic spreadsheet template | Varies by individual assessor's knowledge | Evidence quality depends on who completed it |
| Machine-specific software-driven assessment | Same prompts and checks regardless of assessor | Consistent, dated evidence linked to a competent person |
What to evaluate in machinery risk assessment software
An evaluation should confirm the following, rather than accept a digitised version of the same generic form:
- A machine-specific hazard and risk database, so the assessment reflects the actual equipment type rather than a one-size-fits-all checklist.
- An assessment structure that follows the EN ISO 12100 hierarchy of risk reduction in the correct order, rather than starting from PPE and working backwards.
- A defensible audit trail linking each completed assessment to the competent person who carried it out and the date it was done, satisfying PUWER's record-keeping expectations.
- Automatic flagging when PUWER, LOLER or the underlying Machinery Directive requirements change, so an assessment does not go stale against a superseded standard.
Who counts as a competent person under PUWER
PUWER does not define competence by job title. A competent person is someone with sufficient practical and theoretical knowledge of the specific machinery being assessed to identify defects and evaluate whether it is safe to continue operating, and that knowledge threshold is machine-specific rather than general. An experienced maintenance engineer may be entirely competent to assess a conveyor system and genuinely under-qualified to assess a piece of pressure equipment they have never worked on. Software that ties each assessment to a named competent person, and records the basis for that competence such as training or certification held, gives an inspector something concrete to review rather than an assumption that whoever signed the form was qualified to do so.
What happens when a machinery assessment fails to hold up
The Health and Safety Executive can issue an improvement notice where machinery risk assessment or maintenance is found inadequate, and a prohibition notice where the risk from continued use is judged serious enough to stop the equipment operating immediately. Where a machinery-related injury meets the threshold for a specified injury, over-seven-day incapacitation or a dangerous occurrence, it must also be reported under RIDDOR, and an inspector reviewing that report will look directly at the risk assessment history for the machine involved. A generic assessment that cannot show why a specific hazard was or was not considered leaves a manufacturer with very little to point to at that moment, regardless of how thorough the underlying safety culture actually was.
Where Ideagen Machine Safety fits
Ideagen Machine Safety is built specifically around this gap. Its risk database covers more than 120,000 equipment types, giving an assessor machine-specific hazard checks rather than a generic template, and its assessment structure applies EN ISO 12100 principles by design rather than leaving hierarchy order to the assessor's judgement. The platform maps its outputs directly to PUWER and LOLER record-keeping requirements, and its recognition as a G2 Leader in the category reflects the same problem this piece has described: manual, generic assessment produces inconsistent risk ratings for identical equipment, and a machine-specific database is what closes that gap.
Lifting equipment under LOLER, the Lifting Operations and Lifting Equipment Regulations 1998, carries its own thorough examination schedule on top of the general PUWER duty. The same principle applies: a machine-specific approach to that examination schedule produces a more defensible record than a generic maintenance log repurposed to cover it.
Consistency is the actual measure of a working programme
A completed risk assessment for every machine on the shop floor proves very little on its own if two assessors would have rated the same machine differently. The measure that actually matters is whether the assessment methodology and the evidence behind it would produce the same result regardless of who carried it out, which is what a machine-specific, EN ISO 12100-aligned system is built to guarantee and a generic spreadsheet is not.
Explore EHS solutions
Build better EHS processes, mitigate safety risks and protect employees with a unified solution for reporting incidents and managing safety.