If you employ more than 5 members of staff you are legally required to document your Risk Assessment findings, however we recommend it as good practice for all businesses regardless of their size to do so.
In any event, all controls identified should be implemented, and all staff informed of what they need to do to minimise the risk.