vaayaa Inclusive Education
Hospitality risk assessment

Hospitality Staff and Team Leadership Risk Assessment: Service, Safety and Team Controls

A worked example of how a hospitality team leader finds, scores and controls risks in food service, guest information, staffing, shift handovers and incident escalation, with inherent and residual ratings for each.

Updated November 2026 8 hazards assessed Review every 6 months Highest risk: Critical to Medium
See the Hospitality Staff and Team Leadership course

Executive summary

This assessment shows how a hospitality team leader can find, rate and control the risks that matter most to guests, colleagues and the venue. Eight risks were chosen because they are plausible in everyday food service, front desk work, staffing and escalation. Food safety and allergen risks carry the highest inherent scores because harm to a guest can be serious and quick. Guest data, understaffing and handover gaps are more likely but have smaller impacts. Each risk is scored before controls and again after existing and additional controls. Most risks fall to Medium or Low once the added controls are in place, but food safety and incident escalation stay at Medium because the impact remains serious. The first actions are a written exclusion rule for ill staff, an allergy check at the pass, a standard handover template and an escalation ladder with time limits. The venue is a teaching example, so every score illustrates method rather than describing a real business.

Focus area
Hospitality staff and team leadership
Setting
Front of house and kitchen team in a mid-sized hotel with a restaurant, bar and banqueting rooms
Method
Five by five likelihood and impact risk register

Scope

This assessment covers the daily work of a hospitality team led by a supervisor or manager, including guest service, food and beverage handling, housekeeping, front desk work, staffing, shift handovers, incident escalation and the handling of guest information. It does not cover building structure, financial audit or any real venue. Jurisdiction, venue size, food service model and staffing levels are assumptions made for teaching.

Context

The venue has a general manager, a food and beverage manager, a front office manager, an operations manager, a facilities manager and a human resources lead. Shift supervisors run each service period. Kitchen and bar teams use paper tickets and a shared digital system for orders and allergy notes. Guest bookings and payment details are held in a booking system run by a third party provider. A written handover book, an incident form at each desk and a weekly staffing forecast support daily work. Each risk is scored before controls to show its natural level, then again after the existing controls and the additional controls that should be added. The scores are used to decide where leaders spend time first.

Objectives, assets and stakeholders

The objective is to deliver safe, consistent and respectful service, protect guest information and the wellbeing of the team, and keep the venue meeting its own standards and applicable duties. The assets in scope are food and stock, guest records and payment data, the booking and ordering systems, kitchen and housekeeping equipment, shift records and the reputation of the team. Stakeholders include guests, team members at every level, the general manager and senior leaders, suppliers, maintenance contractors, the payment provider and the authorities that regulate food, alcohol and data handling. Clear roles matter. Every risk has one owner role, and the operations manager keeps the register current and reports to the general manager each quarter.

Risk matrix: before and after controls

Each cell shows hazard numbers placed by likelihood and impact. Compare the two grids to see how controls move each hazard.

Before controls

Inherent risk

Risk before controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely Likelihood 4, impact 2, score 8, medium: H06 Likelihood 4, impact 3, score 12, high: H03 H05 Likelihood 4, impact 5, score 20, critical: H02
3 Possible Likelihood 3, impact 3, score 9, medium: H04 Likelihood 3, impact 5, score 15, high: H01
2 Unlikely Likelihood 2, impact 4, score 8, medium: H08 Likelihood 2, impact 5, score 10, high: H07
1 Rare

After controls

Residual risk

Risk after controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely
3 Possible Likelihood 3, impact 2, score 6, medium: H05
2 Unlikely Likelihood 2, impact 2, score 4, low: H04 H06 Likelihood 2, impact 3, score 6, medium: H03 H07 Likelihood 2, impact 4, score 8, medium: H01 H02
1 Rare Likelihood 1, impact 4, score 4, low: H08
  • Low 1 to 4
  • Medium 5 to 9
  • High 10 to 16
  • Critical 17 to 25

Hazard register

A summary first, then the detail for each hazard.

Summary of hazards with scores before and after controls
No.HazardBeforeAfterOwner
H01 Allergen cross contact during food service 15 High 8 Medium Executive chef
H02 Foodborne illness from temperature control and ill staff 20 Critical 8 Medium Food and beverage manager
H03 Loss or misuse of guest personal and payment data 12 High 6 Medium Front office manager
H04 Equipment failure during service or housekeeping 9 Medium 4 Low Facilities manager
H05 Understaffing and untrained cover on shift 12 High 6 Medium Operations manager
H06 Incomplete shift handover and lost guest information 8 Medium 4 Low Shift supervisor
H07 Delayed escalation of injury, intoxication or harassment 10 High 6 Medium General manager
H08 Team leader conduct, bullying and unfair treatment 8 Medium 4 Low Human resources lead
H01

Allergen cross contact during food service

Safety Before 15 After 8

A dish containing a listed allergen is prepared on shared boards, fryers or utensils, plated with the wrong garnish or served to the wrong table, so a guest with a known allergy is exposed to the allergen.

Who or what is affected: Guests with allergies, kitchen and service staff

Causes

Shared fryers and boards, rushed peak service and allergy information written by hand or passed on verbally.

Consequences

Allergic reaction, emergency response, legal claim and loss of guest trust.

Existing controls

  • Allergy information is recorded on the order ticket.
  • Kitchen staff complete a briefing at the start of each service.

Control gaps

Allergy checks depend on memory during peak service, and no one confirms that the ticket is updated after a change.

Additional controls

  • Prevent: Use colour coded boards and separate utensils for listed allergens during preparation.
  • Detect: Check each allergy ticket against the plate at the pass before it leaves the kitchen.
  • Respond: Stop service of the affected dish and follow the venue allergy procedure at once.
Likelihood 3 x impact 5 before; 2 x 4 after Owner: Executive chef Target: Within 30 days Early warning: Allergy tickets that are changed or reprinted during a shift without a manager sign off.
H02

Foodborne illness from temperature control and ill staff

Safety Before 20 After 8

Chilled food is held above a safe temperature, or a team member with a stomach illness handles ready to eat food, so harmful bacteria can grow and spread to guests and colleagues.

Who or what is affected: Guests, kitchen and front of house staff, venue reputation

Causes

Equipment running warm, busy service that leads to missed checks, and staff who come to work unwell.

Consequences

Guest illness, closure of service areas, enforcement action and serious damage to reputation.

Existing controls

  • Fridge and hot hold temperatures are logged twice a day.
  • Staff wash hands before food handling and wear clean uniforms.

Control gaps

Temperature logs are completed after the shift rather than at the time, and sickness reports are not followed up.

Additional controls

  • Prevent: Adopt a written exclusion rule so anyone with sickness or diarrhea does not handle food for the agreed period.
  • Detect: Check probe temperatures at set times and act on any reading outside the safe range.
  • Recover: Withdraw affected food, clean the area and record what was done and who approved it.
Likelihood 4 x impact 5 before; 2 x 4 after Owner: Food and beverage manager Target: Within 14 days Early warning: Temperature log entries that are missing or repeated without a reading for any unit.
H03

Loss or misuse of guest personal and payment data

Technology and data Before 12 After 6

Guest names, room numbers, contact details and card details are written on paper, left on screens or sent by unencrypted messages, so personal information can be read, copied or lost.

Who or what is affected: Guests, team members, the venue and its payment provider

Causes

Paper notes at the desk, shared log in details and pressure to answer calls quickly.

Consequences

Identity theft risk for guests, penalties under applicable data rules, lost bookings and reputational harm.

Existing controls

  • Card payments are taken only on approved terminals.
  • Screens lock after a short period of inactivity.

Control gaps

Staff are not trained to spot phishing, and shared accounts are still used at the reception desk.

Additional controls

  • Prevent: Remove written card numbers and keep guest data only for the period the venue needs it.
  • Detect: Review access to the booking system each month and flag unusual searches.
  • Respond: Report any suspected loss to the data lead and follow the venue breach procedure.
Likelihood 4 x impact 3 before; 2 x 3 after Owner: Front office manager Target: Within 30 days Early warning: Guest records opened by a user who is not on the shift roster.
H04

Equipment failure during service or housekeeping

Operational Before 9 After 4

A refrigerator, dishwasher, lift, door lock or cleaning machine stops working during a busy period, so food is wasted, rooms are not ready and guests wait longer than expected.

Who or what is affected: Guests, kitchen and housekeeping staff, maintenance team

Causes

Ageing equipment, missed services and overuse during peak periods.

Consequences

Food loss, service delays, lost revenue and guest complaints.

Existing controls

  • Equipment is serviced on a set schedule.
  • A list of reporting contacts is posted in each work area.

Control gaps

Faults are reported verbally, and the manual plan has not been rehearsed with the team.

Additional controls

  • Prevent: Record each piece of equipment with a named owner and next service date in one register.
  • Detect: Use alarm settings on cold rooms and report faults in the same shift.
  • Recover: Keep a tested manual plan for moving stock and rebooking rooms.
Likelihood 3 x impact 3 before; 2 x 2 after Owner: Facilities manager Target: Within 60 days Early warning: Repeated faults on the same unit within one week.
H05

Understaffing and untrained cover on shift

People Before 12 After 6

Sickness, leave or poor rostering leaves shifts short, and staff without proper training are asked to cover roles such as cash handling, alcohol service or food preparation, which increases errors.

Who or what is affected: Guests, rostered staff, team leaders

Causes

Unpredictable absence, turnover that leaves gaps in skills, and bookings that exceed the forecast.

Consequences

Service failures, injuries from rushed work, guest complaints and staff burnout.

Existing controls

  • The rota is published two weeks ahead.
  • The manager keeps a list of staff who can cover roles at short notice.

Control gaps

The trained cover list is out of date, and training records are kept on paper.

Additional controls

  • Prevent: Match each role on the rota to a trained person and limit cover by untrained staff.
  • Detect: Check staffing against the forecast at the start of each shift and record any gap.
  • Respond: Call on the agreed bank of trained cover, or reduce services, when a minimum is not met.
Likelihood 4 x impact 3 before; 3 x 2 after Owner: Operations manager Target: Within 45 days Early warning: Shifts that start with fewer trained staff than the agreed minimum.
H06

Incomplete shift handover and lost guest information

Operational Before 8 After 4

Notes on special requests, unresolved complaints, maintenance faults and allergy changes are not passed to the next shift, so the new team repeats errors or misses a known risk.

Who or what is affected: Guests, incoming shift staff, maintenance team

Causes

Rush at the end of a shift, handwriting that is hard to read and no defined template.

Consequences

Repeated guest complaints, missed allergy warnings and delays in repairs.

Existing controls

  • A written handover book is completed at the end of each shift.
  • Shift leaders hold a short briefing at the start of service.

Control gaps

Handover entries are not signed, so no one is accountable for an open item.

Additional controls

  • Prevent: Use a standard handover template with fields for allergies, faults and open complaints.
  • Detect: Spot check the handover book each week against guest feedback and fault logs.
Likelihood 4 x impact 2 before; 2 x 2 after Owner: Shift supervisor Target: Within 14 days Early warning: Open items in the handover book that are older than one shift.
H07

Delayed escalation of injury, intoxication or harassment

Safety Before 10 After 6

A guest falls, becomes unwell after drinking, or a staff member reports harassment, but the team does not escalate to the duty manager or emergency services quickly enough for the situation.

Who or what is affected: Guests, team members, duty manager and venue owners

Causes

Unclear thresholds for escalation, reluctance to call the manager and staff who lack training in first response.

Consequences

Worsened injury, legal claims, staff distress and regulatory scrutiny of alcohol service.

Existing controls

  • An incident form is kept at each desk and bar.
  • Staff are told to call the duty manager for any injury.

Control gaps

Incident forms are not reviewed, and no one checks that escalation happened on time.

Additional controls

  • Prevent: Train all leaders on the escalation ladder with clear time limits for each level.
  • Respond: Call emergency services when a life may be at risk and secure the area at once.
  • Recover: Review each incident within 48 hours and update the procedure where it failed.
Likelihood 2 x impact 5 before; 2 x 3 after Owner: General manager Target: Within 30 days Early warning: Incident forms completed more than one hour after the event.
H08

Team leader conduct, bullying and unfair treatment

People Before 8 After 4

A leader shouts at staff, shows favoritism in rotas or tip sharing, or ignores a complaint about harassment, so team members feel unsafe and may leave or raise a formal claim.

Who or what is affected: Team members, leaders, human resources team

Causes

Leaders without training in people management, pressure to meet targets and informal favoritism.

Consequences

Staff turnover, grievance claims, lost trust and damage to the venue's reputation.

Existing controls

  • A written code of conduct is shared at induction.
  • Staff can raise concerns with the human resources lead.

Control gaps

Complaints are sometimes handled by the leader's own line manager, and outcomes are rarely shared with the team.

Additional controls

  • Prevent: Apply transparent rules for rotas and tip sharing and publish them to all staff.
  • Detect: Hold a confidential pulse check with each team every quarter.
  • Respond: Investigate complaints promptly using an independent manager and record the outcome.
Likelihood 2 x impact 4 before; 1 x 4 after Owner: Human resources lead Target: Within 60 days Early warning: Two or more complaints about the same leader within one quarter.

Rating method and evaluation

Each risk is rated on two five-point scales. Likelihood runs from Rare to Almost certain, and impact runs from Minor to Severe. Multiplying the two gives a score from 1 to 25, which falls into one of four bands: Low from 1 to 4, Medium from 5 to 9, High from 10 to 16 and Critical from 17 to 25. The score guides the order of work and is not a precise measurement. Inherent risk is the score before any controls. Residual risk is the score after the existing and additional controls are in place. Impact is judged on harm to guests and staff, cost, time to recover, legal exposure and damage to trust. A risk is never rated down only because it has not yet happened. Any residual score in the High band needs senior attention and a dated plan, any Medium needs routine controls with a named owner, and any Low is accepted and watched. Team members who do the work should challenge the ratings at each review, and any risk is reviewed sooner when its early warning indicator reaches the escalation threshold.

Likelihood, impact and rating bands

Likelihood

  • 5 Almost certain: Expected to happen in most circumstances.
  • 4 Likely: Will probably happen in many circumstances.
  • 3 Possible: Could happen at some time.
  • 2 Unlikely: Not expected, but it could happen.
  • 1 Rare: Only in exceptional circumstances.

Impact

  • 1 Insignificant: No lasting effect. Handled within routine work.
  • 2 Minor: Small effect that is quickly corrected.
  • 3 Moderate: Noticeable effect that needs managed effort to correct.
  • 4 Major: Serious effect on people, delivery or reputation.
  • 5 Catastrophic: Severe or lasting effect that threatens the whole activity.

Bands (likelihood x impact)

  • Low (1 to 4): Accept and monitor.
  • Medium (5 to 9): Manage with routine controls.
  • High (10 to 16): Senior attention and a treatment plan.
  • Critical (17 to 25): Act first. Do not proceed until reduced.

Monitoring, escalation and review

Review this assessment every 6 months, and sooner when an indicator below reaches its threshold.

Early-warning indicators and escalation thresholds
Indicator to watchEscalate when
Temperature log entries that are missing or repeated without a reading for any unit.Escalate to the food and beverage manager at once for any missing entry, and to the general manager if a unit reads outside the safe range twice in one day.
Allergy tickets changed or reprinted during a shift without a manager sign off.Escalate to the executive chef at once, and hold the affected dish until the ticket is confirmed at the pass.
Guest records opened by a user who is not on the shift roster.Escalate to the front office manager within one hour, and suspend the account until the access is explained.
Shifts that start with fewer trained staff than the agreed minimum.Escalate to the operations manager when a shift is short, and to the general manager if the gap is not filled within two hours.
Two or more complaints about the same leader within one quarter.Escalate to the human resources lead for an independent review within five working days, and to the general manager if the complaints concern harassment.

Contingency arrangements

If a serious event occurs, such as a guest allergic reaction, a suspected food poisoning cluster, a data breach or a sudden loss of kitchen power, the duty manager takes control, secures the area and calls emergency services where a life may be at risk. The food and beverage manager stops the affected service and preserves food and records for review. The front office manager isolates affected booking accounts and reports any data loss to the data lead. Staff are told what they need to know early and plainly, and the general manager decides on contact with regulators, insurers and the authorities in the relevant jurisdiction.

Prioritized action plan

  1. Adopt a written exclusion rule for staff with illness and a dated temperature log at the time of checking, owner food and beverage manager, within 14 days.
  2. Introduce allergy checks at the pass and colour coded equipment for listed allergens, owner executive chef, within 30 days.
  3. Replace the handover book with a standard template signed at each shift change, owner shift supervisor, within 14 days.
  4. Publish an escalation ladder with time limits for injury, intoxication and harassment, owner general manager, within 30 days.
  5. Maintain a trained cover list and check staffing against the forecast at each shift start, owner operations manager, within 45 days.

Conclusion

Safe hospitality depends on a few steady habits: clear allergy checks, timed temperature logs, trained cover for every role, signed handovers, defined escalation and respectful leadership. The highest scores sit with food safety and allergens, and each has actions that lower the residual score. Treat the register as a living record, review it on the stated cycle and seek qualified advice for any real food safety, data protection, alcohol service or employment question.

Assumptions and limitations

Assumptions

  • The venue is a mid-sized hotel with a restaurant, bar and banqueting rooms, and the jurisdiction is not specified, so legal duties are described in general terms only.
  • Team leaders have completed basic induction and food safety training, and rotas and handover records are kept on a shared system.
  • Guest information includes names, contact details and card payment data held by a third party provider under a written agreement.

Limitations

  • The scores are examples for learning and do not describe any real venue, team or incident.
  • Food safety, data protection, alcohol service and employment rules vary by place and change over time, so specialist review is needed.
  • This is educational content and does not replace a formal site-specific assessment or licensed legal, health or safety advice.

Related frameworks to study

  • Hazard analysis and critical control point approach to food safety
  • Hierarchy of controls
  • Three lines model of risk ownership
  • Structured shift handover briefing model
  • Incident escalation matrix with time limits

Hospitality Risk Assessment

China, India, United States, Indonesia, Pakistan, Nigeria, Brazil, Bangladesh, Russia, Japan, Mexico, Philippines, Vietnam, Egypt, Turkey, Germany, United Kingdom, France, Italy, Canada, South Korea, Australia, Spain.

For Learning Reference Only: This assessment demonstrates how risk assessment principles are applied in a practical setting, providing a useful reference for learning and understanding. Actual assessments may be adapted to suit specific site conditions and circumstances.

Keep learning

Study the subject behind this assessment.

Hospitality Staff and Team Leadership course Read the best practices for this course

More Hospitality risk assessments

Hourly Active: 35,661 Learners