Under the Management of Health and Safety at Work Regulations 1999, employers must identify the hazards in their workplace, assess who could be harmed, and control the risk. The risk assessment is how that duty gets discharged and evidenced.
Your consultant identifies the hazards present on site and determines which assessments the property needs. Each one is judged against Vantify's own control standards, using three sources of evidence: physical observation, a review of your safety documentation, and discussions with the people who run the building. Where controls are inadequate, you get risk improvement advice and photographs. Likelihood and severity are then scored and multiplied to give a risk rating, so spend goes where the risk actually is.
The action plan is prioritised on the likelihood of enforcement action, not on how easy something is to fix. Items are ranked by whether the failure would lead to prosecution or a prohibition notice, an improvement notice, a warning letter, or advice. That ordering tells you what to do first.
Control standards applied consistently, so a portfolio gets the same judgement whichever consultant attends and whichever region the property sits in.