Your risk assessment should include consideration of what in your business might cause harm and how and, the people who might be affected. It should take into account any controls which are already in place and identify what, if any, further controls are required.

You should be able to show from your assessment that:

a proper check was made;

all people who might be affected were considered;

all significant risks have been assessed;

the precautions are reasonable, and

the remaining risk is low.