Office risk assessment: patterns, obligations and pitfalls 2026

Section 5 of the Occupational Safety and Health Act (ArbSchG) has required every employer in Germany since 1996 to assess the risks associated with work and to derive the necessary measures. The ArbStättV of 2004, amended in 2016, supplements this obligation for the workplace, including computer workstations, and defines the specific requirements for office workstations in Annex 6. In addition, since 2013 there has been an obligation to include psychological stress in the risk assessment. A pure PDF template from 2018 is neither legally nor practically sufficient in 2026 because neither home office realities nor hybrid forms of work are depicted and the supervisory authorities are precisely checking these gaps in samples.

This article shows which risks in the office workplace must be assessed in a binding manner in 2026, where typical patterns and templates are silent, how psychological stress is methodically integrated and how the SiFa role and the company doctor share responsibility wear. CIVAC operates a Compliance Platform and Officer-as-a-Service: Licence the workspace for your internal representatives, or have our representatives order it. Both models end with the same document: appointment certificate, signed, filed, verifiable to the supervisory authority in the district.

The risk assessment in the office workplace is based on three legal pillars. The first pillar is Section 5 of the Occupational Safety and Health Act, which obliges the employer to identify and assess the risks associated with the work and to derive measures. Section 6 ArbSchG adds a documentation requirement: The assessment, the measures derived and the result of the effectiveness control must be documented in writing or electronically. The second pillar is the ArbStättV from 2004, amended in 2016. Annex 6 lists the requirements for VDU workstations and, according to Section 1 ArbStättV, also expressly applies to teleworkstations.

The third pillar is the DGUV regulation 2 (company doctors and occupational safety specialists) from 2011, which specifies the operating times and tasks of company doctors and occupational safety specialists (SiFa) regulates. In addition, the rules of the Technical Rules for Workplaces (ASR) and the recommendations of DGUV Information 215-410 for VDU workstations as well as the recommendations for assessing psychological stress apply. Those who properly address these three pillars can concentrate on the operational assessment. CIVAC links the legal basis with a practical risk assessment template and provides the ordering of the associated roles. An external occupational safety specialist will be appointed within 2 working days, as will the company medical support. This means that the basic framework of the three pillars is resilient from day 1.

The risk assessment in the office workplace covers seven subject areas, most of which are either incomplete or outdated in most generic models. Firstly, the physical working environment: room climate according to ASR A3.5, lighting according to ASR A3.4, noise and acoustics in open-plan offices according to ASR A3.7. Secondly, the workplace design: desk, chair, screen, keyboard, mouse, ergonomic requirements according to Annex 6 ArbStättV. Thirdly, the work equipment: screen requirements, ergonomic input devices, telephone and headset equipment. These three fields can still be pressed into classic PDF templates.

It gets more difficult with the four remaining fields. Fourth, the organisation of work: task changes, break regulations, work volumes and interruptions. Fifthly, the psychological stress according to Section 5 Paragraph 3 No. 6 ArbSchG, which has been expressly a compulsory part since 2013 and cannot be dealt with in a single question. Sixth, fire and emergency safety in the office workplace, including escape routes and first aid equipment. Seventh, home office and mobile working, which has become normal after the pandemic and is treated as a teleworking place in the ArbStättV, provided it is set up regularly. Anyone who works with a 2018 model systematically overlooks the home office and produces findings in the supervisory process that come back as organisational negligence. CIVAC provides an updated template that queries all seven fields in a structured manner and links them to measures. Audit-proof, documented, § 5-firm.

Psychological stress has been an expressly mandatory part of the risk assessment since the 2013 amendment to the ArbSchG. It differs fundamentally from the physical hazard fields because it cannot be detected with a lux measuring device or a sound level meter. The methodology is based on the GDA guidelines (Joint German Occupational Safety Strategy) and distinguishes between four areas of stress: work content and work task, work organisation, social relationships in the workplace and work environment. Within each field, specific characteristics such as work volumes, scope for action, support from superiors or social climate aspects are collected.

The survey typically takes place in three steps: employee surveys with standardised items, moderated workshops in the departments and, if necessary, individual interviews in the event of critical findings. The result is anchored in an action plan with owner, deadline and effectiveness control. According to Section 87 BetrVG, the participation of employees and interest groups is subject to co-determination if a works council exists. CIVAC bundles the survey templates, the workshop minutes and the action plan in the workspace and ensures that the effectiveness control is not forgotten after 12 months. Anyone who only deals with psychological stress in a single question risks being criticized by the supervisory authority because the GDA guidelines expressly require a differentiated survey. The deadline begins when the relevant information is known. The auditor calls, the evidence is ready.

Appendix 6 of the ArbStättV describes the specific requirements for computer workstations. The requirements are specified in five points. Screens must be flicker-free, sufficiently bright and high-contrast, with adjustable tilt and rotation. The character display must be sharp and easy to read, and the screen must be set up with low reflection. The keyboard and mouse must be freely movable and tiltable, and the worktop must be of sufficient size and have a low-reflection surface. The chair must be ergonomically designed in accordance with DIN EN 1335, and the screen must be positioned at eye level.

There are also requirements for the working environment: lighting intensity of 500 lux in the workplace in accordance with ASR A3.4, room temperature between 20 and 26 degrees, sufficient humidity and acoustic conditions that allow concentrated work. The obligation to provide occupational health care according to ArbMedVV must also be observed, in particular the provision G 37 for screen work. The SiFa and the company doctor must be involved in writing; their statement is part of the risk assessment. CIVAC links the VDU workstation checklist with the participation of the roles and logs the statements in an audit-proof manner in the workspace so that the supervisor finds complete evidence in the audit. Others run compliance like a filing cabinet. We run it like software., with clearly assigned owners and a history of every change in the workplace.

The pandemic has made working from home the norm for many office workplaces. Legally, the ArbStättV differentiates between mobile working (occasional, not set up) and teleworking (regular, set up, contractually agreed). The requirements of the ArbStättV, including Annex 6, apply mutatis mutandis to teleworking positions, but with limited access by the employer. The obligation to carry out a risk assessment remains, but the methodology must be based on self-reports and ergonomic checklists, as physical inspections are often unreasonable.

The typical gap in old models is the lack of differentiation between mobile work and telework as well as the lack of equipment regulations. Anyone who regularly allows an employee to work from home must ensure the minimum ergonomic equipment or clearly communicate that there is no teleworking. Both ways are legally viable, but must be documented. CIVAC provides a differentiated template that separates mobile work and telework, provides a self-disclosure checklist for the employee and formally records SiFa's participation. Licence the workspace for your internal representatives, or have our representatives order it. Anyone who runs a home office without a documented risk assessment risks a liability discussion in the event of an incident, which in the supervisory process is regularly at the employer's expense and could easily have been avoided with proper documentation.

The risk assessment is not a solo exercise by the occupational safety representative. Section 3 ASiG obliges the employer to involve the SiFa and the company doctor when assessing the working conditions. DGUV regulation 2 specifies the working times and tasks in Appendix 2. In office workplaces the working times are lower than in manufacturing companies, but participation is formally required. The statements must be documented in writing and are part of the risk assessment, which is the first thing checked in the audit.

Employee participation is regulated by Section 17 of the ArbSchG: Employees are entitled to submit suggestions to the employer regarding occupational safety. When it comes to psychological stress, participation is methodologically mandatory because no valid assessment is possible without employee impressions. According to Section 87 BetrVG, a works council has a right of co-determination in the design of the risk assessment. CIVAC documents each of these forms of participation in the workspace and provides a template for the written statement from the SiFa, the company doctor and the works council. This means that formal participation does not become a burdensome obligation, but rather a structured part of the assessment. The auditor calls, the evidence is ready., and the attachments for the assessment contain the signatures of the roles involved and the site's interest group.

The risk assessment does not end with the first survey. Section 3 Paragraph 1 ArbSchG requires regular review and updating. In practice, this means an annual effectiveness check of the derived measures as well as an update of the risk assessment in the event of significant changes: moving, new work equipment, reorganization, new forms of work such as home office or job sharing. Anyone who continues the risk assessment from 2019 until 2026 without updating it runs the risk of being criticized for violating the obligation to update and also gives the impression of a dormant compliance function.

The effectiveness control checks whether the derived measures have actually reduced the identified risks. It can be carried out through inspections, surveys, evaluation of accident numbers or medical statistics. The result is noted in the action plan and, if necessary, improvements lead to new measures. CIVAC bundles effectiveness monitoring and updates in the workspace and logs the annual routine in an audit-proof manner. This means that the obligation to update does not have to be a search in the file folder, but rather a task in the dashboard with an owner and deadline. The appointment certificate, signed, filed, verifiable, remains the operational guideline for the update itself, because every change is documented and versioned, without SiFa having to maintain separate files in parallel.

The trade supervisory authorities and professional associations have noticeably increased their inspection of office workplaces in 2025. The most common complaints were typical and avoidable. Firstly, the written documentation of the risk assessment itself was often missing because it was only available as an Excel spreadsheet without a signature. Secondly, psychological stress was not included because the sample used came from 2017 and did not reflect the GDA guidelines. Thirdly, the participation of the SiFa and the company doctor in a written statement was missing.

Fourthly, a differentiated view of home office was missing, although 30 to 60% of the workforce regularly worked from home. Fifthly, there was no effectiveness control, which was provided for in the action plan but was not carried out or documented. Sixth, there was a lack of updating after significant changes, such as a move or reorganization. The consequences range from formal orders to fines and liability issues in the event of damage. CIVAC addresses each of these six findings directly in the workspace: the documentation is audit-proof, the psychological stress is integrated with the GDA guidelines, the participation of the roles is formally mapped, the home office is treated differently, the effectiveness control is scheduled and the update is versioned. This means that the supervisory authority's most common line of complaint disappears from its own evidence before it can even arise.

A template is helpful, but not a replacement for a reliable risk assessment. The routine is only created through a platform that structures the seven subject areas, integrates the psychological stress with a survey workflow, formally depicts the involvement of the SiFa, the company doctor and, if necessary, the works council and automatically schedules the effectiveness review after 12 months. CIVAC offers this routine as a compliance platform and officer-as-a-service with 490 ready-to-use audit templates and an external SiFa order within 2 working days.

If you now want to convert your office's risk assessment into an auditable routine, write to info@civac.de or use the contact form on civac.de. Turn reading into an assignment. The initial discussions typically last 30 minutes, the onboarding takes 2 working days and ends with a signed appointment certificate from SiFa or activation of the workspace licence for your internal SiFa. In the workspace you will find the current risk assessment template, the computer workstation checklist, the home office module, the psychological stress survey and the effectiveness control routine from day 1. This turns the PDF template into a reliable routine with clear responsible parties and evidence that supports the supervisory process and effectively protects management in the event of damage without putting a strain on operations.