A business travel risk assessment is the process of identifying what could harm someone on a work trip, judging how likely and serious each risk is, and deciding what you will do about it before they travel.
In the UK it is part of an employer’s duty of care under the Health and Safety at Work etc. Act 1974, which extends to staff working away from the office, including abroad. That last point catches people out. The duty to keep your people safe does not stop at the office door, and it does not stop at the UK border.
If you send someone on a trip, you are responsible for the foreseeable risks of that trip. A risk assessment is how you show you took those risks seriously and acted on them. This guide explains what to assess, who is responsible, and how to run the process without turning it into a paperwork exercise nobody reads.
It sits alongside our wider guide to duty of care in business travel.
Why a travel risk assessment matters
The legal reason is straightforward. The Health and Safety at Work etc. Act 1974 requires employers to ensure, so far as is reasonably practicable, the health and safety of their employees.
The Management of Health and Safety at Work Regulations 1999 make the risk assessment itself a legal requirement.
Working away from your premises does not exempt you. If anything, it raises the bar, because the traveller is somewhere you do not control.
The practical reason matters just as much. Most travel disruption is not bad luck. It is a foreseeable problem that nobody assessed.
A traveller sent to a region with a known security situation, a lone worker with no check-in plan, a trip booked without anyone knowing the local medical setup.
When something goes wrong, the question is always the same: did you think about this beforehand, and what did you do? A risk assessment is your answer.
What to assess
A good travel risk assessment looks at the trip, the destination, and the traveller. Skip any of the three and you have a gap.
The destination covers political stability, crime, terrorism, civil unrest, natural hazards, road safety, and the standard of local healthcare.
The UK government’s FCDO travel advice is the baseline source here, and you should check it close to the travel date, not just at the point of booking.
Health risks cover required and recommended vaccinations, access to medication, food and water safety, and any pre-existing conditions the traveller has.
Transport risks cover the journey itself: flights, transfers, hire cars, and local driving conditions, which are a leading cause of serious incidents abroad.
Then the human factors. A lone traveller carries more risk than a group. A first-time visitor to a country carries more than a regular.
Junior or younger staff, anyone with a disability or medical condition, and anyone travelling to a higher-risk destination all warrant a closer look.
The same trip is not equally risky for everyone you might send on it.
Who is responsible
The employer holds the legal duty. It cannot be delegated away, and it cannot be signed over to the traveller with a waiver. That said, the work in practice is shared.
The employer sets the policy and signs off the approach. A travel manager, office manager, or HR lead usually runs the assessments day to day.
The traveller has a part to play too, declaring medical needs, following the plan, and checking in as agreed.
And a travel management company can carry a large share of the load, which we come back to below. Responsibility sits at the top. The work spreads out from there.
How to do a travel risk assessment: step by step
You do not need specialist software to start. A clear, repeatable process matters more than a fancy tool.
- Identify the hazards. List what could realistically go wrong on this specific trip, across destination, health, transport, and traveller factors.
- Decide who could be harmed and how. Usually the traveller, but consider anyone travelling with them or meeting them locally.
- Rate each risk. Judge likelihood against severity. A simple low, medium, high grading is enough for most trips and keeps the assessment usable.
- Decide on controls. For each significant risk, set out what you will do to reduce it: a pre-trip briefing, a check-in schedule, approved transport, medical cover, an evacuation plan for higher-risk destinations.
- Record it and brief the traveller. Write it down, share it, and make sure the traveller actually reads it. An assessment nobody sees protects nobody.
- Review before travel. Conditions change. Re-check the destination advice close to departure and update the plan if the situation has shifted.
Match the depth to the risk. A day trip to Birmingham does not need the same scrutiny as a fortnight in a high-risk region.
A tiered approach, where low-risk trips clear a short standard check and higher-risk trips get a full assessment, keeps the process proportionate and stops it from being ignored.
Where a TMC fits
This is where a travel management company earns its place. Running risk assessments well, for every trip, every time, is hard for a small in-house team to sustain.
It tends to slip when people are busy, which is exactly when risk goes up.
A TMC builds the assessment into the booking.
At Good Business Travel, that means real-time traveller tracking so you always know where your people are, risk alerts tied to destinations, and a 24/7 team that can rebook and reroute when a situation changes mid-trip.
The routine checks are handled by the system. The judgement calls reach a person who has handled them before.
That is the point of duty of care: it should run quietly in the background, not depend on someone remembering. See how we approach duty of care travel management.
Your risk assessment process should also line up with your wider corporate travel policy, so that approvals, booking rules, and risk grading all point the same way.
If you are weighing up support more broadly, our guide to choosing a UK travel management company covers what to look for.
Frequently asked questions
Is a business travel risk assessment a legal requirement in the UK?
Yes. The Management of Health and Safety at Work Regulations 1999 require employers to assess risks to employees, and the Health and Safety at Work etc.
Act 1974 duty of care extends to staff working away from your premises, including overseas. A travel risk assessment is how you meet that duty for trips.
What should a travel risk assessment cover?
The destination (security, health, transport, natural hazards), the trip itself (journeys, accommodation, activities), and the traveller (lone working, medical needs, experience, and any added vulnerability).
Assess all three, rate each risk by likelihood and severity, and decide what controls reduce it.
How often should a travel risk assessment be reviewed?
Before each trip, and again close to departure if the destination carries any meaningful risk, because conditions change.
For ongoing or repeat travel to the same place, review whenever the situation shifts or at least annually. Treat it as a live document, not a one-off form.
Who is responsible for travel risk assessments?
The employer holds the legal duty and cannot delegate it away.
In practice a travel manager, HR, or office lead runs the assessments, the traveller follows the plan and declares any needs, and a travel management company can handle the day-to-day checks and monitoring.
A travel risk assessment is not a form you complete to cover yourself. It is the thinking you do so a trip goes the way you planned it, and so you know what happens when it does not. Get the process right and most problems are dealt with before anyone leaves.
Talk to us about building travel risk management into how your business books.