vaayaa Inclusive Education
Hospitality risk assessment

Restaurant and Food Service Operations Risk Assessment: Food Safety, Guest Safety and Service Controls

A worked example of how a restaurant team finds, scores and controls the risks that threaten guests, staff, food quality, cash and reputation during daily service.

Updated November 2026 8 hazards assessed Review every 3 months Highest risk: Critical to Medium
See the Restaurant and Food Service Operations course

Executive summary

This assessment shows how a restaurant team can find, rate and control the risks that matter most during daily service. Eight risks were chosen because they are plausible in everyday kitchen, dining room and office work. Allergen cross contact is the most serious, scoring Critical before controls, because a single error can harm a guest. Food temperature failures, kitchen fire, staffing fatigue and service failures also score High before controls. After existing and added controls, most risks fall to Medium or Low, but allergen and fire risks stay Medium because their impact remains serious. The first actions are a dedicated allergen process, a probe check at delivery, a scheduled extraction inspection and a rota with rest rules. The restaurant is a teaching example, so every score illustrates method, not a real business.

Focus area
Restaurant and food service operations
Setting
Independent full-service restaurant with a commercial kitchen, dining room, bar counter, online booking and a small pickup window
Method
Five by five likelihood and impact risk register with inherent and residual scoring

Scope

This assessment covers daily restaurant operations from delivery of stock to close of service, including food preparation, allergen handling, the dining room, bar, cash and card payments, online bookings and staff rotas. It covers guest and employee safety, fire and equipment, supplier disruption, privacy of booking data and service reputation. The jurisdiction, premises age, menu and systems are not specified, so they are treated as assumptions for teaching. Food safety, fire and accessibility duties are described in general terms only and need specialist review for any real site.

Context

The restaurant seats around ninety guests across two floors and employs a head chef, sous chef, line cooks, front of house staff, a bar lead and a manager on duty each shift. Food is prepared in a commercial kitchen with walk in refrigeration, deep fryers, a gas range and a dishwasher. Bookings are taken through an online service and by phone, and payments are made by card terminal and a point of sale system. Fresh produce and proteins are delivered several times a week by a small group of suppliers. Each risk is scored before controls to show its natural level, then again after existing controls and the additional controls that should be added.

Objectives, assets and stakeholders

The objective is to serve safe, accurate and enjoyable meals, protect guests and staff from harm, keep cash and booking records accurate, and meet food safety, fire and accessibility duties. The assets in scope are the kitchen equipment, stock, the dining room, cash and card takings, booking and guest records, and the reputation of the restaurant. Stakeholders include guests, especially those with allergies or access needs, kitchen and front of house staff, the general manager and owners, suppliers, the booking provider and the local authorities that inspect food and premises. Clear roles matter: every risk has one owner role, and the general manager reports the register to owners each quarter.

Risk matrix: before and after controls

Each cell shows hazard numbers placed by likelihood and impact. Compare the two grids to see how controls move each hazard.

Before controls

Inherent risk

Risk before controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant
2
Minor
3
Moderate
4
Major
5
Catastrophic
5 Almost certain
4 Likely Likelihood 4, impact 3, score 12, high: H04 H05 H08 Likelihood 4, impact 4, score 16, high: H01 Likelihood 4, impact 5, score 20, critical: H02
3 Possible Likelihood 3, impact 3, score 9, medium: H06 H07
2 Unlikely Likelihood 2, impact 5, score 10, high: H03
1 Rare

After controls

Residual risk

Risk after controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant
2
Minor
3
Moderate
4
Major
5
Catastrophic
5 Almost certain
4 Likely
3 Possible Likelihood 3, impact 2, score 6, medium: H04 H05
2 Unlikely Likelihood 2, impact 2, score 4, low: H06 Likelihood 2, impact 3, score 6, medium: H07 H08 Likelihood 2, impact 4, score 8, medium: H01 H02
1 Rare Likelihood 1, impact 5, score 5, medium: H03
  • Low 1 to 4
  • Medium 5 to 9
  • High 10 to 16
  • Critical 17 to 25

Hazard register

A summary first, then the detail for each hazard.

Summary of hazards with scores before and after controls
No.HazardBeforeAfterOwner
H01 Foodborne illness from temperature and hygiene failures 16 High 8 Medium Head chef
H02 Allergen cross contact in preparation and service 20 Critical 8 Medium Head chef
H03 Kitchen fire from cooking equipment 10 High 5 Medium Facilities manager
H04 Slips, trips, falls and burns in busy areas 12 High 6 Medium Front of house manager
H05 Staffing shortage and fatigue during peak service 12 High 6 Medium General manager
H06 Cash handling and payment system failure 9 Medium 4 Low Restaurant manager
H07 Supplier disruption for perishable stock 9 Medium 6 Medium Purchasing lead
H08 Service failures, booking data and reputation 12 High 6 Medium General manager
H01

Foodborne illness from temperature and hygiene failures

Safety Before 16 After 8

Refrigeration, hot holding or cooking temperatures drift out of range, or hands and surfaces are not cleaned properly, so bacteria can grow in food served to guests and some may become unwell.

Who or what is affected: Guests, kitchen staff and the restaurant reputation

Causes

Busy service, equipment that is not checked, and handling by staff who have not refreshed their training.

Consequences

Guest illness, service closure, complaints and loss of trust in the kitchen.

Existing controls

  • Fridge and hot hold temperatures are logged at opening and closing.
  • Staff wash hands at set points and the kitchen is cleaned to a daily checklist.

Control gaps

Logs are completed but not reviewed, and probe checks are not done at every delivery.

Additional controls

  • Prevent: Use a probe check at each delivery and reject stock that arrives outside the safe range.
  • Detect: Review temperature logs each day and walk the line during service for unlabeled food.
  • Respond: Quarantine any food found out of temperature and record the decision in the log.
Likelihood 4 x impact 4 before; 2 x 4 after Owner: Head chef Target: Within 30 days Early warning: A walk in fridge or hot hold reading outside the set range on two checks in one shift.
H02

Allergen cross contact in preparation and service

Safety Before 20 After 8

An allergen is carried into a dish meant to be free of it through shared boards, utensils, fryer oil or a missed allergy note, so a guest with a known allergy is exposed to it.

Who or what is affected: Guests with allergies, kitchen and front of house staff

Causes

Shared equipment, rushed tickets and allergy information that is not passed to the line.

Consequences

Severe allergic reaction, emergency response, legal claims and lasting damage to reputation.

Existing controls

  • Allergy notes are written on the order ticket and read back to the guest.
  • An allergen matrix is kept for each dish and reviewed when the menu changes.

Control gaps

Allergy notes are not always marked on the kitchen board before cooking starts.

Additional controls

  • Prevent: Use dedicated boards, utensils and fryer oil for the most common allergens where the menu allows.
  • Respond: Stop service of a dish when cross contact is suspected and inform the guest at once.
Likelihood 4 x impact 5 before; 2 x 4 after Owner: Head chef Target: Within 14 days Early warning: A ticket with an allergy note that is not marked on the kitchen board before cooking starts.
H03

Kitchen fire from cooking equipment

Safety Before 10 After 5

Grease builds up in extraction systems, a fryer thermostat fails or a gas connection leaks, so a fire starts in the kitchen and spreads to the dining room or staff.

Who or what is affected: Guests, staff, neighbouring premises and the building

Causes

Grease build up, equipment that is not serviced and staff who leave cooking unattended.

Consequences

Injury, building damage, closure and a regulator inquiry.

Existing controls

  • Extraction hood and filters are cleaned on a set schedule.
  • A fire blanket and extinguishers are placed in the kitchen.

Control gaps

Service records are kept by the supplier and not checked against the restaurant's own schedule.

Additional controls

  • Prevent: Arrange a qualified inspection of the extraction system and gas connections, with specialist review.
  • Recover: Rehearse the evacuation plan and the shutdown of gas and power each quarter.
Likelihood 2 x impact 5 before; 1 x 5 after Owner: Facilities manager Target: Within 30 days Early warning: Grease build up or a faulty thermostat reported on a fryer or extraction hood.
H04

Slips, trips, falls and burns in busy areas

Safety Before 12 After 6

Wet floors, cables, crowded aisles and hot pans in a busy kitchen and dining room cause falls, cuts and burns to guests and staff.

Who or what is affected: Guests, kitchen and front of house staff

Causes

Spills during service, crowded walkways and cables left across floors.

Consequences

Injuries, insurance claims, lost time and a tense service.

Existing controls

  • Floors are mopped with signs during cleaning.
  • Kitchen staff wear heat resistant gloves and closed shoes.

Control gaps

Near misses are not always recorded, so repeated hazards are not seen.

Additional controls

  • Prevent: Use non slip matting at the pass, dish station and kitchen entrance.
  • Detect: Review the accident and near miss log at each weekly meeting.
Likelihood 4 x impact 3 before; 3 x 2 after Owner: Front of house manager Target: Within 45 days Early warning: A slip or near miss on the floor or kitchen entrance recorded in one week.
H05

Staffing shortage and fatigue during peak service

People Before 12 After 6

Sickness, resignations or long shifts leave the restaurant short of trained cooks and servers, so tired staff make errors in food safety, cash and guest care.

Who or what is affected: Staff, guests and the general manager

Causes

Seasonal demand, poor retention and rotas built without rest rules.

Consequences

Slow service, errors, guest complaints and higher staff turnover.

Existing controls

  • Rotas are published two weeks ahead.
  • Staff are asked to report sickness before the shift starts.

Control gaps

Hours worked are not totaled each week, so fatigue builds up unseen.

Additional controls

  • Prevent: Set a maximum shift length and a minimum rest gap between shifts in the rota rules.
  • Respond: Keep an on call list of trained staff who can cover peak service at short notice.
Likelihood 4 x impact 3 before; 3 x 2 after Owner: General manager Target: Within 60 days Early warning: Two or more unplanned absences in a week or shifts longer than the agreed maximum.
H06

Cash handling and payment system failure

Financial Before 9 After 4

Cash is miscounted or taken without record, or the card terminal and point of sale system fail, so takings cannot be reconciled and payments are lost or disputed.

Who or what is affected: Restaurant owners, staff and guests paying by card

Causes

Busy tills, a single terminal, and reconciliation that is done weekly instead of daily.

Consequences

Unexplained losses, payment disputes and tax reporting errors.

Existing controls

  • Two staff count the cash drawer at the end of each shift.
  • The card terminal is linked to the point of sale system and receipts are kept.

Control gaps

The fallback process is not written down and staff have not practised it.

Additional controls

  • Detect: Compare daily card takings with the bank settlement and investigate any gap within two days.
  • Recover: Keep a paper fallback process for card payments and test it monthly.
Likelihood 3 x impact 3 before; 2 x 2 after Owner: Restaurant manager Target: Within 30 days Early warning: Till or card terminal reconciliation that is off by more than the agreed float at the end of a shift.
H07

Supplier disruption for perishable stock

Supplier Before 9 After 6

A key supplier misses a delivery, sends short or substituted goods, or fails, so the menu cannot be served as planned and food is wasted or rushed.

Who or what is affected: Guests, the head chef and the purchasing lead

Causes

Single source dependence, weather, transport problems and small order volumes.

Consequences

Menu changes, lost sales, food waste and cost increases.

Existing controls

  • Two approved suppliers are listed for the main proteins.
  • Delivery notes are checked against the order before they are signed.

Control gaps

Substitutions are accepted without a check against the menu allergen matrix.

Additional controls

  • Prevent: Agree a backup supplier and a minimum weekly stock level for the main lines.
  • Respond: Adjust the menu for the day and tell guests about any change before they arrive.
Likelihood 3 x impact 3 before; 2 x 3 after Owner: Purchasing lead Target: Within 60 days Early warning: Two deliveries missed or short in one month from the same supplier.
H08

Service failures, booking data and reputation

Reputational Before 12 After 6

Slow service, wrong orders, double booked tables or a breach of guest booking data are posted online, so the restaurant loses bookings and trust.

Who or what is affected: Guests, staff and the general manager

Causes

Overbooking, poor handover between shifts and weak controls on guest records.

Consequences

Lost bookings, negative reviews, data complaints and staff morale problems.

Existing controls

  • Guest complaints are logged and answered within two days.
  • Booking data is held by the booking provider behind a password protected login.

Control gaps

Review themes are not grouped, so the same service failure repeats without action.

Additional controls

  • Prevent: Limit staff access to guest records and delete old booking notes on a set schedule.
  • Respond: Reply to public reviews with a plain apology and a named contact for follow up.
Likelihood 4 x impact 3 before; 2 x 3 after Owner: General manager Target: Within 45 days Early warning: Two or more negative reviews in a week that mention the same service failure.

Rating method and evaluation

Each risk is rated on two five-point scales. Likelihood runs from Rare to Almost certain, and impact runs from Insignificant to Catastrophic. Multiplying the two gives a score from 1 to 25, which falls into one of four bands: Low from 1 to 4, Medium from 5 to 9, High from 10 to 16 and Critical from 17 to 25. The score is a guide for ordering work, not a precise measurement. Inherent risk is the score before any controls. Residual risk is the score after existing and added controls, and it must never be higher than the inherent score. Impact is judged on harm to people first, then on cost, closure, legal exposure and reputation. A safety risk is never rated down only because it has not yet happened. Anything still High needs senior attention and a dated plan, anything Medium needs routine controls with a named owner, and anything Low is accepted and watched. Kitchen staff and front of house staff should challenge the ratings, and each rating is reviewed when an indicator reaches its threshold.

Likelihood, impact and rating bands

Likelihood

  • 5 Almost certain: Expected to happen in most circumstances.
  • 4 Likely: Will probably happen in many circumstances.
  • 3 Possible: Could happen at some time.
  • 2 Unlikely: Not expected, but it could happen.
  • 1 Rare: Only in exceptional circumstances.

Impact

  • 1 Insignificant: No lasting effect. Handled within routine work.
  • 2 Minor: Small effect that is quickly corrected.
  • 3 Moderate: Noticeable effect that needs managed effort to correct.
  • 4 Major: Serious effect on people, delivery or reputation.
  • 5 Catastrophic: Severe or lasting effect that threatens the whole activity.

Bands (likelihood x impact)

  • Low (1 to 4): Accept and monitor.
  • Medium (5 to 9): Manage with routine controls.
  • High (10 to 16): Senior attention and a treatment plan.
  • Critical (17 to 25): Act first. Do not proceed until reduced.

Monitoring, escalation and review

Review this assessment every 3 months, and sooner when an indicator below reaches its threshold.

Early-warning indicators and escalation thresholds
Indicator to watchEscalate when
Allergy tickets not marked on the kitchen board before cooking starts.Escalate to the head chef at once when any ticket is missed, and to the general manager if two occur in one week.
Fridge or hot hold readings outside the safe range at any check.Escalate to the head chef immediately, quarantine the food, and inform the general manager if the fault is not fixed within the shift.
Shifts longer than the agreed maximum or less than the agreed rest gap.Escalate to the general manager when any rule is broken, and review the rota before the next week is published.
Card takings differing from bank settlement by more than the agreed float.Escalate to the restaurant manager within two days, and to the owners if the gap is not explained within a week.
Two or more negative reviews in a week that mention the same failure.Escalate to the general manager for a review of the service process within five working days, and to owners if the theme continues for a month.

Contingency arrangements

If a serious event occurs, such as a guest allergic reaction, a kitchen fire or a confirmed payment loss, the manager on duty stops service of the affected area and calls emergency services where needed. Staff follow the evacuation and first aid plan, and records are preserved. The general manager informs owners and, through the agreed contact, the relevant local authority, and informs the guest or family in plain terms. Replacement staff and a short menu are used to keep the restaurant running safely.

Prioritized action plan

  1. Introduce a dedicated allergen process with marked boards and a stop service rule, owner head chef, within 14 days.
  2. Arrange a qualified inspection of the extraction system and gas connections, owner facilities manager, within 30 days.
  3. Start a probe check at every delivery and a daily review of temperature logs, owner head chef, within 30 days.
  4. Set maximum shift lengths and rest gaps in the rota rules and keep an on call cover list, owner general manager, within 60 days.
  5. Agree a backup supplier and a written card payment fallback that is tested monthly, owner purchasing lead and restaurant manager, within 60 days.

Conclusion

Safe and dependable service depends on a few steady habits: allergen checks at every ticket, temperature logs read each day, a maintained extraction system, rotas with rest rules, daily cash and card reconciliation and honest handling of reviews. The highest scores sit with allergens, fire and food temperature, and each has actions that bring the residual score down. Treat the register as a living record, review it on the stated cycle, and seek qualified advice for any real food safety, fire, legal or employment question.

Assumptions and limitations

Assumptions

  • The premises hold the permits normally required for food service, and the kitchen layout was approved before operation.
  • Staff have basic food hygiene training, but training records and refresher dates are not shown here.
  • Card payments and bookings use third party providers that hold the card data and the booking records.

Limitations

  • The scores are examples for learning and do not describe any real restaurant, inspection or incident.
  • Food safety, fire, alcohol and accessibility rules vary by place and change over time, so specialist review is needed.
  • This is educational content and is not legal, health, fire safety or employment advice.

Related frameworks to study

  • Hazard analysis and critical control points approach to food safety
  • Hierarchy of controls
  • Plan, do, check, act cycle for incident learning
  • Three lines model of risk ownership

Hospitality Risk Assessment

China, India, United States, Indonesia, Pakistan, Nigeria, Brazil, Bangladesh, Russia, Japan, Mexico, Philippines, Vietnam, Egypt, Turkey, Germany, United Kingdom, France, Italy, Canada, South Korea, Australia, Spain.

For Learning Reference Only: This assessment demonstrates how risk assessment principles are applied in a practical setting, providing a useful reference for learning and understanding. Actual assessments may be adapted to suit specific site conditions and circumstances.

Keep learning

Study the subject behind this assessment.

More Hospitality risk assessments

Hourly Active: 35,661 Learners