vaayaa Inclusive Education
Hospitality risk assessment

Eco, Wellness and Retreat Resort Management Risk Assessment: Guest Safety, Supply, Booking and Reputation Controls

A worked example of how a small eco wellness retreat finds, scores and controls risks to guest safety, food, bookings, data, supplies and its sustainability promises.

Updated November 2026 8 hazards assessed Review every 6 months Highest risk: Critical to Medium
See the Eco, Wellness and Retreat Resort Management course

Executive summary

This assessment shows how a small eco wellness retreat can find, rate and control the risks that matter most to guests, staff and its reputation. Eight risks were chosen because they are plausible in everyday retreat work, from food allergens and water safety to booking failures, guest data, supplier disruption and sustainability claims. Reputational harm from unsupported eco claims or access barriers carries the highest inherent score, while fire and food risks carry the most serious harm. Each risk is scored before controls and again after existing and additional controls. Most residual scores fall to Medium or Low, but supplier disruption and reputation stay at Medium because the external pressures remain. The first actions are an allergen matrix, a supervised water and activity policy, a tested fallback booking sheet and an accessibility checklist. The resort is a teaching example, so every score illustrates method rather than a real business.

Focus area
Eco, wellness and retreat resort operations
Setting
Eco-focused wellness retreat resort offering rooms, spa treatments, plant-based meals and guided activities in a rural setting
Method
Five by five likelihood and impact risk register

Scope

This assessment covers a small eco-focused wellness retreat resort, from bookings and arrival to meals, spa treatments, pools and saunas, guided walks, staff rostering and sustainability commitments. It looks at risks to guest and employee safety, service quality, payments, personal data, supplies and reputation. Assumptions are labelled in the assumptions list, including the jurisdiction, which is not specified, and the site size, which is invented for teaching.

Context

The resort has about 40 guest rooms in several buildings on a wooded site with a lake, a heated pool, a sauna, treatment rooms, a restaurant using local produce and a kitchen garden. A core team of managers, chefs, therapists, housekeeping and maintenance staff is supplemented by seasonal workers. Bookings come through an online reservation system linked to an outsourced card payment provider. Water and power come from shared local supply with a backup generator, and the only access is a single unpaved road. Each risk is scored before controls to show its natural level, then again after existing controls and the additional controls proposed here.

Objectives, assets and stakeholders

The objective is to keep guests and staff safe, deliver the promised retreat experience, take payments accurately, protect personal and health data, and keep the trust of guests, staff, neighbors and investors. The assets in scope are guest rooms and wellness facilities, the kitchen and food stock, the reservation and payment systems, guest health and personal records, the water and power supply, and the sustainability commitments on which the brand depends. Stakeholders include guests, employees and seasonal workers, the owners, local suppliers and growers, the local community, and the licensing and health authorities. Clear roles matter: every risk has one owner role, and the general manager keeps the register current and reports to owners each quarter.

Risk matrix: before and after controls

Each cell shows hazard numbers placed by likelihood and impact. Compare the two grids to see how controls move each hazard.

Before controls

Inherent risk

Risk before controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant
2
Minor
3
Moderate
4
Major
5
Catastrophic
5 Almost certain Likelihood 5, impact 4, score 20, critical: H08
4 Likely Likelihood 4, impact 3, score 12, high: H04 Likelihood 4, impact 4, score 16, high: H05 H07
3 Possible Likelihood 3, impact 4, score 12, high: H06 Likelihood 3, impact 5, score 15, high: H01
2 Unlikely Likelihood 2, impact 5, score 10, high: H02 H03
1 Rare

After controls

Residual risk

Risk after controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant
2
Minor
3
Moderate
4
Major
5
Catastrophic
5 Almost certain
4 Likely
3 Possible Likelihood 3, impact 2, score 6, medium: H04 Likelihood 3, impact 3, score 9, medium: H07 H08
2 Unlikely Likelihood 2, impact 3, score 6, medium: H01 H03 H05 H06
1 Rare Likelihood 1, impact 4, score 4, low: H02
  • Low 1 to 4
  • Medium 5 to 9
  • High 10 to 16
  • Critical 17 to 25

Hazard register

A summary first, then the detail for each hazard.

Summary of hazards with scores before and after controls
No.HazardBeforeAfterOwner
H01 Food hygiene and allergen incident 15 High 6 Medium Head chef
H02 Guest injury in pools, saunas and activities 10 High 4 Low Spa and activities manager
H03 Fire, boiler and equipment failure 10 High 6 Medium Maintenance manager
H04 Staffing shortage and fatigue 12 High 6 Medium Operations manager
H05 Booking and payment system failure or fraud 16 High 6 Medium Reservations manager
H06 Guest health and personal data breach 12 High 6 Medium General manager
H07 Supplier and utility disruption 16 High 9 Medium Procurement and facilities lead
H08 Eco claim, accessibility or service failure harming reputation 20 Critical 9 Medium General manager
H01

Food hygiene and allergen incident

Safety Before 15 After 6

Undercooked food, cross contact in the kitchen or a missed allergen on a plant-based menu makes guests ill or causes a severe allergic reaction during a retreat stay.

Who or what is affected: Guests with allergies, kitchen staff and day visitors

Causes

Busy service, changing menus and reliance on verbal diet requests passed by phone.

Consequences

Illness, allergic reaction, closure notice and loss of guest trust.

Existing controls

  • Kitchen team completes basic food hygiene training.
  • Menu cards list the main allergens for each dish.

Control gaps

Diet changes made by phone are not always passed to the kitchen before service.

Additional controls

  • Prevent: Keep a dated allergen matrix and check every special diet request at booking and again at service.
  • Detect: Run temperature and cleaning checks at each service and record any failure on a shared log.
Likelihood 3 x impact 5 before; 2 x 3 after Owner: Head chef Target: Within 30 days Early warning: A special diet request that does not appear on the kitchen allergy matrix.
H02

Guest injury in pools, saunas and activities

Safety Before 10 After 4

Slips on wet decks, collapse in the sauna, falls on lake paths and injury during yoga or guided walks cause serious harm when supervision or signage is weak.

Who or what is affected: Guests, instructors and staff on duty at water and activity areas

Causes

Wet floors, heat, unfamiliar exercise and unsupervised guests at dusk.

Consequences

Injury, claims, closure of facilities and damage to reputation.

Existing controls

  • Pool depth and no running signs are posted.
  • A first aid kit is kept at reception and by the spa.

Control gaps

Lake access and evening walks are not supervised, and signage is not checked each week.

Additional controls

  • Prevent: Set limits on sauna time and lake swimming, and require a health questionnaire before each activity.
  • Respond: Keep a trained first aider on site during water and walking sessions with a written emergency call procedure.
Likelihood 2 x impact 5 before; 1 x 4 after Owner: Spa and activities manager Target: Within 30 days Early warning: An incident or near miss in a water or activity area not recorded within 24 hours.
H03

Fire, boiler and equipment failure

Safety Before 10 After 6

A fire in the kitchen, sauna heater, boiler or laundry, or a faulty electrical fitting, spreads to guest rooms while guests are asleep or away from their rooms.

Who or what is affected: Guests, staff and neighboring land owners

Causes

Ageing wiring, heavy cooking loads, dry timber and equipment used beyond its service interval.

Consequences

Injury or death, building damage, closure and insurance disputes.

Existing controls

  • Smoke alarms and extinguishers are fitted in main buildings.
  • Boiler and sauna heaters are serviced once a year.

Control gaps

Equipment checks are annual only and evacuation drills are not recorded.

Additional controls

  • Prevent: Arrange a specialist check of electrical and heating equipment and remove unsafe extension leads.
  • Recover: Keep a tested evacuation plan and a roll call list for each night, reviewed with staff each season.
Likelihood 2 x impact 5 before; 2 x 3 after Owner: Maintenance manager Target: Within 30 days Early warning: A fault report for a heater, socket or fire alarm left open for more than 48 hours.
H04

Staffing shortage and fatigue

People Before 12 After 6

Remote location and seasonal demand leave shifts short, so staff work long hours, make errors and feel unable to speak up about unsafe work.

Who or what is affected: Employees, guests and managers

Causes

Seasonal peaks, limited local housing and high turnover among seasonal workers.

Consequences

Service failures, workplace injuries, errors in food and treatments, and resignations.

Existing controls

  • Rotas are set two weeks ahead.
  • Staff receive a rest day after a set number of shifts.

Control gaps

Fatigue is not measured and fill-in staff are not inducted before their first shift.

Additional controls

  • Prevent: Set maximum consecutive shifts and a minimum rest period, and track overtime each week.
  • Respond: Keep a bank of trained cover staff and a plan to close non-essential services at short notice.
Likelihood 4 x impact 3 before; 3 x 2 after Owner: Operations manager Target: Within 60 days Early warning: Any employee working beyond the agreed shift pattern for two weeks running.
H05

Booking and payment system failure or fraud

Financial Before 16 After 6

The reservation system or card terminal fails, double bookings occur or payment details are misused, so guests are turned away, charged wrongly or lose deposits.

Who or what is affected: Guests, finance staff and owners

Causes

Dependence on one system, power outages, busy check in periods and shared staff logins.

Consequences

Lost revenue, overcharged guests, chargebacks and disputes.

Existing controls

  • Card payments go through an outsourced provider with its own security.
  • Daily cash and card totals are reconciled by the finance lead.

Control gaps

The paper fallback sheet is not kept up to date and overrides are not reviewed.

Additional controls

  • Prevent: Use a single reservation calendar with a paper fallback sheet and avoid storing card numbers on site.
  • Detect: Review refunds, manual overrides and deposit changes each day and flag any that look unusual.
Likelihood 4 x impact 4 before; 2 x 3 after Owner: Reservations manager Target: Within 30 days Early warning: Refunds or manual overrides above the agreed daily count.
H06

Guest health and personal data breach

Technology and data Before 12 After 6

Wellness intake forms, health notes and dietary details are kept on shared computers, emailed or left in treatment rooms, where people who should not see them can read them.

Who or what is affected: Guests, therapists and reception staff

Causes

Paper forms, shared logins and staff who take notes home.

Consequences

Loss of trust, complaints, possible legal action and harm to guests.

Existing controls

  • Intake forms are kept in a locked cabinet.
  • Staff sign a confidentiality clause when they join.

Control gaps

Access to health notes is not reviewed and the breach plan has never been tested.

Additional controls

  • Prevent: Move intake to an access controlled system and limit health notes to therapists who need them for treatment.
  • Respond: Write a breach response plan with timed notice steps and a named contact for data questions.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: General manager Target: Within 60 days Early warning: Guest health notes found in a shared area or sent by unprotected email.
H07

Supplier and utility disruption

Supplier Before 16 After 9

Local produce, water deliveries, power or the single access road fail, so meals are cut, showers stop or guests cannot arrive or leave as planned.

Who or what is affected: Guests, kitchen staff and local growers

Causes

Weather, a single access road, shared water supply and reliance on a few growers.

Consequences

Cancelled services, guests stranded, refunds and damaged supplier relationships.

Existing controls

  • Two local growers and one wholesaler supply produce.
  • A backup generator powers key systems.

Control gaps

Alternative suppliers are not tested and generator load is not checked against demand.

Additional controls

  • Respond: Hold a list of alternative suppliers and a menu that can be cut back at short notice.
  • Recover: Test the generator monthly and agree a water storage level with the local supply provider.
Likelihood 4 x impact 4 before; 3 x 3 after Owner: Procurement and facilities lead Target: Within 60 days Early warning: A supplier shortfall or a utility interruption lasting more than a few hours.
H08

Eco claim, accessibility or service failure harming reputation

Reputational Before 20 After 9

Sustainability claims that cannot be evidenced, rooms or paths that are hard to access, or poor service are shared online and damage bookings and trust.

Who or what is affected: Guests, staff, the local community and investors

Causes

Marketing pressure, untested green claims and buildings not designed for easy access.

Consequences

Lost bookings, complaints, regulator interest and lasting harm to the brand.

Existing controls

  • Guest feedback is collected at check out.
  • Sustainability statements are reviewed by the general manager.

Control gaps

Claims are not linked to evidence and access needs are not asked for at booking.

Additional controls

  • Prevent: Publish an accessibility statement and check rooms and paths against a written access checklist.
  • Detect: Check each eco claim against written evidence and respond to online reviews within two days.
Likelihood 5 x impact 4 before; 3 x 3 after Owner: General manager Target: Within 90 days Early warning: A guest review or complaint that mentions an unsupported claim or an access barrier.

Rating method and evaluation

Each risk is rated on two five-point scales. Likelihood runs from Rare to Almost certain, and impact runs from Insignificant to Catastrophic. Multiplying the two gives a score from 1 to 25, which falls into one of four bands: Low from 1 to 4, Medium from 5 to 9, High from 10 to 16 and Critical from 17 to 25. The score guides the order of work and is not a precise measurement. Inherent risk is the score before any controls. Residual risk is the score after existing and additional controls are in place, and it must never be higher than the inherent score. Impact includes harm to people first, then money, closure, legal exposure and reputation, and a risk is never rated down only because it has not yet happened. Critical and High risks need senior attention and a dated plan, Medium risks need routine controls with a named owner, and Low risks are accepted and watched. Ratings should be challenged by the staff who do the work, such as chefs, therapists and reception, and reviewed whenever an indicator reaches its threshold or a serious incident occurs.

Likelihood, impact and rating bands

Likelihood

  • 5 Almost certain: Expected to happen in most circumstances.
  • 4 Likely: Will probably happen in many circumstances.
  • 3 Possible: Could happen at some time.
  • 2 Unlikely: Not expected, but it could happen.
  • 1 Rare: Only in exceptional circumstances.

Impact

  • 1 Insignificant: No lasting effect. Handled within routine work.
  • 2 Minor: Small effect that is quickly corrected.
  • 3 Moderate: Noticeable effect that needs managed effort to correct.
  • 4 Major: Serious effect on people, delivery or reputation.
  • 5 Catastrophic: Severe or lasting effect that threatens the whole activity.

Bands (likelihood x impact)

  • Low (1 to 4): Accept and monitor.
  • Medium (5 to 9): Manage with routine controls.
  • High (10 to 16): Senior attention and a treatment plan.
  • Critical (17 to 25): Act first. Do not proceed until reduced.

Monitoring, escalation and review

Review this assessment every 6 months, and sooner when an indicator below reaches its threshold.

Early-warning indicators and escalation thresholds
Indicator to watchEscalate when
Special diet requests not shown on the kitchen allergy matrix at the start of each service.Escalate to the head chef at once when any request is missing, and to the general manager if two occur in one week.
Water, sauna or activity incidents and near misses not recorded within 24 hours.Escalate to the spa and activities manager the same day, and to the general manager if any injury needs medical care.
Staff working beyond the agreed shift pattern for two weeks or more.Escalate to the operations manager when a person reaches the limit, and to the owners if cover is still short after 14 days.
Refunds, manual overrides or deposit changes above the agreed daily count.Escalate to the reservations manager at once, and to the finance lead if any change cannot be explained within two days.
Guest reviews or complaints that mention unsupported eco claims or access barriers.Escalate to the general manager within two days, and review the claim or the room layout before the next booking period.

Contingency arrangements

If a serious event occurs, such as a guest injury, a suspected food poisoning, a fire or a data breach, the general manager stops the affected service, makes the area safe and calls the emergency services where needed. The first aider records the facts, staff keep guests informed, and the maintenance manager isolates any faulty equipment. Records are preserved, and regulators and insurers are contacted through the general manager as the jurisdiction requires. If the road or power fails, guests are moved to the generator-supported areas and a reduced menu is served from the backup supplier list.

Prioritized action plan

  1. Introduce a dated allergen matrix and special diet check at booking and service, owner head chef, within 30 days.
  2. Restrict sauna and lake use, require health questionnaires and keep a first aider on duty, owner spa and activities manager, within 30 days.
  3. Arrange a specialist check of electrical and heating equipment and test the evacuation plan, owner maintenance manager, within 30 days.
  4. Publish an accessibility statement and check every eco claim against written evidence, owner general manager, within 90 days.
  5. Hold a fallback booking sheet and test the generator and alternative suppliers, owner reservations manager and procurement lead, within 60 days.

Conclusion

Safe and memorable retreats depend on steady habits: an allergen matrix that is checked at every service, supervised water and activity sessions, equipment checks that are recorded, rest rules for staff, a tested fallback booking sheet, protected health records and evidence behind every eco claim. The highest scores sit with reputation, food safety and fire, and each has actions that bring the residual score down. Treat this register as a living record, review it on the stated cycle and seek qualified advice for any real food, fire, health, privacy or legal question.

Assumptions and limitations

Assumptions

  • Jurisdiction is not specified, so licensing, food, fire, privacy and accessibility duties are described in general terms only.
  • Staff are trained for their roles, but first aid and water rescue certification levels are assumed rather than confirmed.
  • The resort is a teaching model, so its size, suppliers and guest numbers are invented for illustration.

Limitations

  • The scores are examples for learning and do not describe any real retreat or its legal duties.
  • Food, water, spa treatment and fire rules differ by place and change over time, so specialist review is needed.
  • This educational content does not replace a formal site-specific assessment or licensed professional advice.

Related frameworks to study

  • Hierarchy of controls
  • Three lines model of risk ownership
  • Plan, do, check, act review cycle

Hospitality Risk Assessment

China, India, United States, Indonesia, Pakistan, Nigeria, Brazil, Bangladesh, Russia, Japan, Mexico, Philippines, Vietnam, Egypt, Turkey, Germany, United Kingdom, France, Italy, Canada, South Korea, Australia, Spain.

For Learning Reference Only: This assessment demonstrates how risk assessment principles are applied in a practical setting, providing a useful reference for learning and understanding. Actual assessments may be adapted to suit specific site conditions and circumstances.

Keep learning

Study the subject behind this assessment.

More Hospitality risk assessments

Hourly Active: 35,661 Learners