The short version
- Most workplace incidents are preceded by a visibility gap, not a missing policy. The paperwork existed. Nobody could see the live picture.
- The four gaps that matter: who is on site right now, evacuation accountability, contractor compliance status, and a usable audit trail.
- Hybrid working made every one of these harder. Attendance swings from near 60% midweek to the mid 30s on Fridays, so a static register is wrong most days.
- Close the gaps with live occupancy data, digital mustering lists, pre-arrival contractor checks and automatic logging. Then test them, because an untested muster list is a guess.
Workplace risk visibility is your ability to answer four questions at any moment: who is in the building, where they are, whether they should be there, and what happened the last time something went wrong. If you can answer all four from live data, you have visibility. If you need to ring reception, check a spreadsheet and hope, you have a gap. Gaps do not stay quiet. They surface during a fire alarm, an insurance claim or an audit, which is the worst possible time to discover them.
I have run workplace operations through fire evacuations, contractor near-misses and two external audits, and the pattern is always the same. The policy was fine. The workplace risk assessment was signed. What failed was visibility: the paper sign-in book that visitors skipped, the muster list that included people working from home, the contractor whose insurance had lapsed three weeks earlier. This article walks through the four visibility gaps that turn into incidents, and the practical way to reduce workplace risk by closing each one before it costs you.
Gap one: who is actually on site
Ten years ago this question had an easy answer. Everyone with a desk was in, plus whoever signed the visitor book. Hybrid working broke that assumption completely. Across HybridHero platform benchmarks drawn from 1,500+ workplace teams, midweek attendance peaks near 60% while Fridays sit in the mid 30s. Your building population nearly halves across a single week. A static staff register is therefore wrong on almost every day it is consulted.
The fix is to make presence data a by-product of things people already do. Desk bookings, room bookings, visitor check-ins and parking reservations each generate a live record of who intends to be on site, and check-in confirms who actually arrived. When those signals flow into one system, “who is in the building” becomes a report you open, not an investigation you launch.
Watch for the silent failure mode here: bookings without check-ins. If people book desks and never confirm arrival, your live picture drifts back towards fiction. The same benchmarks show meeting room no-shows running at 25 to 35%, which tells you how often intent and reality diverge when nothing confirms attendance. Treat check-in discipline as a safety control, not an admin nicety.
Gap two: evacuation accountability
Evacuation is where visibility gaps become dangerous rather than merely embarrassing. During an alarm, the fire warden needs a list of everyone on site, and that list needs to be accurate at that minute. A printed register from HR fails this test twice over: it includes people at home and it misses visitors and contractors entirely.
Modern emergency mustering flips the model. The muster list is generated from live check-in data, wardens work from a phone or tablet at the assembly point, and each person is marked safe as they appear. Anyone unaccounted for is flagged immediately, with their last known location, so the conversation with the fire service is specific rather than speculative.
Test the list, not just the alarm. Most organisations drill the evacuation but never audit the muster list itself. At your next drill, compare the digital roll call against a physical headcount at the assembly point. Any mismatch is a visibility gap you have just found for free, in daylight, with no smoke involved.
Gap three: contractor compliance
Contractors carry a disproportionate share of workplace risk. They do the hot works, the working at height and the electrical isolation, often in parts of the building your own staff never enter. Yet in many organisations their compliance records live in an email thread: an insurance certificate attached in January, a RAMS document from the last job, a vague memory that inductions were done.
Proper contractor compliance means checks happen before arrival, not after an incident. Insurance, method statements, permits and induction status are verified against the visit itself, and a contractor whose documents have expired simply cannot check in until they are renewed. That single gate removes the most common failure: the lapsed certificate nobody noticed because nobody was looking on the right day.
It also changes the tone with your contractors. Requirements are visible to them in advance, expiry reminders arrive automatically, and the site team stops being the bad guy at the door. Compliance becomes a condition of entry rather than an argument at reception.
Gap four: the audit trail
The first three gaps hurt you during an incident. This one hurts you afterwards. When an insurer, regulator or internal auditor asks what happened, “we think” is not an answer. You need timestamped records: who was on site, who signed in, which inductions were completed, when the muster completed and who authorised the contractor’s permit.
If those records live in a sign-in book, a spreadsheet and three inboxes, reconstructing a single afternoon can take days and still leave holes. If every entry, booking, check-in and compliance check is logged automatically in one platform, the audit trail writes itself as a side effect of normal operations. On a platform that is ISO 27001 certified and GDPR ready, that trail also stands up to scrutiny about how the data itself is held, which auditors increasingly ask about.
Measuring visibility: the numbers to watch
Visibility is not a feeling, it is a set of metrics you can trend. Start with the gap between booked and actual attendance, your check-in rate, muster completion time from your last drill, and the percentage of contractor visits with complete documentation before arrival. The benchmarks below show why static assumptions fail: average utilisation runs at 54% against a typical 60 to 70% target, and attendance swings hard across the week.
Why a static register is wrong most days
Midweek attendance peak60%
Friday attendance35%
Source: HybridHero Workplace Visibility Report benchmarks.
Review these weekly, not annually. A falling check-in rate or a slowing muster time is an early warning you can act on for pennies. The same numbers that drive safety also drive space decisions, so route them through your reporting and analytics rather than a one-off export, and put the trend in front of whoever owns the building risk register.
How the approaches compare
| Requirement | Paper and spreadsheets | Separate point tools | Integrated workplace platform |
|---|
| Who is on site now | Guesswork, often days out of date | Partial, split across systems | Live, from bookings and check-ins |
| Evacuation roll call | Printed list, includes absentees | Depends on manual cross-checking | Digital muster from live presence data |
| Contractor records | Email threads and filing cabinets | Held separately from site access | Verified as a condition of check-in |
| Audit trail | Reconstructed by hand after the event | Fragmented across each tool | Logged automatically in one place |
| Effort to maintain | High and constant | Moderate, plus integration overhead | Low once workflows are embedded |
Closing the gaps: a practical order of attack
- Instrument presence first. Get desk, room, visitor and parking activity flowing into one system with check-in enforced. Everything else builds on this.
- Digitise mustering second. Point your evacuation process at the live presence data and run a drill within the month to prove it.
- Gate contractors third. Move document checks to pre-arrival and make check-in conditional on compliance.
- Then let the audit trail accumulate. Once the workflows above are live, the records write themselves. Your job shifts from collecting evidence to reviewing trends.
None of this requires a transformation programme. Teams typically stand up the presence layer in weeks, and the safety payoff arrives at the very next drill. The organisations that struggle are the ones that try to fix the audit trail first, without fixing the live data underneath it. Visibility flows downstream. Start where the people are.
Sources and further reading