However, this is not a generic risk assessment. Every business is different. To satisfy the law you must identify and assess the hazards your business poses, think through the controls required to provide effective protection to people who may be affected by them, and record the significant findings from your risk assessment of your business.