What Does the NEBOSH IG2 Practical Assessment Require?

The NEBOSH IG2 requires candidates to conduct a real-world workplace health and safety assessment and produce a structured written report in three parts. These three components are assessed together and must all be present for the submission to be marked.

Component 1 — Workplace Observation. The candidate describes the workplace assessed: its industry sector, physical layout, workforce size, the activities carried out, and the significant hazards identified during the site visit. This is not a desk-based exercise — NEBOSH requires the student to physically visit the workplace, observe conditions, and document what they see. Photographs are permitted and recommended.

Component 2 — Risk Assessment. The candidate produces a formal risk assessment of the identified hazards, using a consistent risk rating system applied across all entries. NEBOSH's minimum expectation is five fully assessed hazard entries, but examiner guidance and marking criteria consistently indicate that eight to ten complete entries are required for distinction-level depth. Each hazard entry must include all mandatory fields — incomplete entries do not earn full marks even if the hazard is correctly identified.

Component 3 — Management Report. The candidate writes a prioritised set of recommendations for the workplace, explaining the rational for each recommendation and connecting it to the risk rating from the assessment. This is the component most often identified by examiners as the differentiator between pass and distinction. Generic recommendations not linked to specific risk data consistently score lower than SMART, justified, risk-score-referenced recommendations.

All three components must be submitted together. Students conduct the assessment in a real workplace — their own employer's site, a family member's or colleague's workplace, or a site accessible through a NEBOSH training provider.

NEBOSH IG2 Workplace Inspection: What to Observe and How to Record It

Systematic observation identifies the hazards that form the basis of the IG2 risk assessment. Candidates who approach the inspection without a structured methodology typically observe only the most obvious hazards and miss the breadth required for distinction-level submissions.

NEBOSH expects candidates to observe and record hazards across five recognised categories:

1. Physical hazards — working at height (unguarded mezzanine edges, fragile roofs, unsecured ladders), moving machinery (unguarded nip points, rotating parts), manual handling (heavy loads, awkward postures, repetitive tasks), slips and trips (contaminated floors, trailing cables, uneven surfaces), and vehicle movements (forklift traffic, delivery bay pedestrian/vehicle conflict).

2. Chemical hazards — substances regulated under COSHH (Control of Substances Hazardous to Health Regulations 2002), including cleaning products, lubricants, adhesives, process chemicals, and welding fumes. Each chemical hazard entry should note the substance, its COSHH classification, the route of entry (inhalation, skin contact, ingestion), and who is exposed.

3. Biological hazards — Legionella risk in water systems (cooling towers, hot water storage, spa baths), bloodborne pathogen risk in healthcare or first aid settings, and mould or organic dust exposure in food processing or agricultural environments.

4. Ergonomic hazards — workstation design (VDU workstations not assessed under DSE Regulations 1992 requirements, non-adjustable seating), repetitive strain risk from assembly tasks, and awkward posture risk from poorly positioned work surfaces or storage.

5. Psychological hazards — work-related stress indicators (excessive workload, lone working without adequate support, high-pressure shift environments), and bullying or harassment risk factors observable at the management level.

Documentation method. NEBOSH recommends a structured observation form — a systematic checklist that prompts the candidate to consider each hazard category in each area of the workplace. Record each observation with: area of workplace, activity observed, hazard identified, who is affected, and any existing controls already in place.

Photographs. Label each photograph with the hazard identified, the location in the workplace, and the number of people potentially affected. Photographs support the written observation and demonstrate that the candidate physically attended the site.

Examiner reports note that candidates who observe only one or two hazard categories — typically physical hazards only — receive lower marks than those who systematically cover all five categories.

See NEBOSH IGC assignment support for broader guidance on the full IGC qualification including IG1.

NEBOSH IG2 Risk Assessment Format: What Examiners Expect

The IG2 risk assessment is a formal document with required fields per hazard entry. A distinction-level risk assessment entry demonstrates all mandatory fields completed accurately, a consistent risk rating system applied, and controls referenced to the hierarchy of controls framework and relevant legislation.

Mandatory fields per hazard entry:

FieldWhat to Include
Hazard descriptionSpecific hazard, not a category (e.g., "unguarded trailing cable across pedestrian route to emergency exit" not "trip hazard")
Who is at riskNamed group from the workplace + estimated number
Existing controlsControls already in place at the time of inspection
Likelihood ratingScore 1–5 (1 = very unlikely; 5 = almost certain)
Severity ratingScore 1–5 (1 = negligible; 5 = catastrophic/fatal)
Risk scoreLikelihood × Severity = Risk Score (1–25)
Additional controls recommendedSpecific additional actions required
Residual risk scoreRisk score after recommended controls are implemented

The "suitable and sufficient" standard. Regulation 3 of the Management of Health and Safety at Work Regulations 1999 requires employers to undertake risk assessments that are suitable and sufficient — meaning they identify all significant risks relevant to the activities being carried out, not every conceivable hazard in existence. Examiners apply this standard: a risk assessment that misses significant hazards present in the described workplace is not suitable and sufficient.

Hierarchy of controls. Recommendations must follow the hierarchy: Elimination → Substitution → Engineering controls → Administrative controls → PPE. Recommendations that default to PPE without considering higher-order controls lose marks. Distinction-level entries name the specific legislation relevant to each hazard — for example, Working at Height Regulations 2005 Regulation 6 for height work, COSHH Regulations 2002 Regulation 7 for chemical hazards.

Justification depth. Examiner reports consistently note that students who list controls without justifying why each control reduces the specific risk identified score lower than those who connect each control to the mechanism of harm. "Install guardrails on the mezzanine edge" earns a mark; "Install guardrails at 1,100mm height and 500mm intermediate rail height on the mezzanine edge, as required by the Workplace (Health, Safety and Welfare) Regulations 1992 Regulation 13, to prevent falls from the 3.5m height differential — this reduces the severity score from 5 to 2 and the risk score from 20 to 8" earns multiple marks.

Hierarchy of controls pyramid with NEBOSH IG2 application notes Hierarchy of Controls — NEBOSH IG2 Application ELIMINATION SUBSTITUTION ENGINEERING CONTROLS ADMINISTRATIVE CONTROLS PPE — last resort only Most effective Least effective IG2 recommendations must follow this hierarchy — PPE-only recommendations lose marks
Hierarchy of controls pyramid — NEBOSH IG2 risk assessment recommendations must address controls in this order, from elimination down to PPE.

IG2 Management Report: How to Write Recommendations That Score Marks

The management report prioritises recommendations by risk score and justifies each one against the data from the risk assessment. This is the component of the IG2 where distinction is most reliably won or lost, because it tests the candidate's ability to think and communicate as a health and safety professional rather than simply completing a form.

Report structure:

  1. Executive summary — brief overview of the workplace assessed, the number of hazards identified, and the overall risk profile
  2. Prioritised recommendations — ordered from highest to lowest risk score, each recommendation accompanied by full justification
  3. Implementation timeline — realistic timeframe for each recommendation (SMART format)
  4. Resource implications — brief acknowledgement of the cost and resource required for each recommendation

SMART recommendation format. Examiners consistently reward recommendations framed with specificity, measurability, achievability, relevance, and time-bound implementation. The difference between a pass-level recommendation and a distinction-level recommendation is visible at the sentence level:

Pass-level: "Improve guarding on machinery."

Distinction-level: "Install fixed interlocked guarding conforming to BS EN ISO 14120:2015 on the unguarded nip point of the packaging line conveyor (Hazard 3, current risk score 20), to be completed by [date 30 days from inspection] by the maintenance supervisor. This control is required under PUWER 1998 Regulation 11 and will reduce the risk score from 20 to 6 by eliminating direct access to the dangerous part."

The distinction-level recommendation names the specific hazard (cross-referenced to the risk assessment), names the responsible person, gives a timeframe, names the relevant legislation, and states the quantified risk reduction.

Cost-benefit framing. Distinction-level management reports acknowledge the cost of implementing each recommendation and justify it against the potential cost of harm. The HSE publishes average injury cost data — an average non-fatal workplace injury costs employers approximately £8,700 in lost production, investigation time, and absence management. A recommendation to install £400 of guardrailing to prevent a risk-score-20 falls hazard is readily justified on cost-benefit grounds and examiners reward this level of financial reasoning.

Linking recommendations to legislation. Each recommendation should reference the legal duty that requires or supports it. This demonstrates to the examiner that the candidate understands not just what good practice looks like but why it is a legal requirement — the distinction between describing what should be done and explaining why it is required.

How Does the NEBOSH IG2 Connect Workplace Hazard Identification to Health and Safety Management Principles?

The IG2 is not a compliance checklist exercise. It tests whether the candidate understands why systematic hazard identification and risk control matters within a management system context. NEBOSH's management system framework — drawing on HSG65 and the Plan-Do-Check-Act cycle — expects that a competent health and safety professional approaches a workplace inspection with an organised methodology, identifies hazards systematically across all categories, assesses risk using a consistent and defensible system, and recommends controls that address the risk in order of effectiveness.

Students who treat the IG2 as a form-filling exercise — identifying only obvious hazards, applying risk ratings without consistent criteria, and writing generic recommendations — consistently score in the pass to merit range. Students who approach the IG2 as the demonstration of professional competency it is designed to test — systematically covering all five hazard categories, applying a consistent Likelihood × Severity matrix, and writing SMART management recommendations with legislation references and risk score justification — consistently score at distinction level.