Treat the NEBOSH National General Certificate as two connected skills: writing answers whose depth matches the command word, and justifying control measures through the hierarchy of control rather than listing them. Unit GNC1 tests this in a scenario-based open book examination with a closing interview; unit GNC2 tests it in a practical risk assessment and action plan for a real workplace. Practise both skills on paper scenarios weekly, and draft your GNC2 assessment early so feedback can improve it before submission.
How the two units divide 'what you know' from 'what you can do'
GNC1 is a scenario-based open book examination covering all eleven syllabus elements, with a closing interview about your submission. GNC2 is a practical risk assessment plus action plan for your own workplace. You must pass both units.
The syllabus splits into management content (elements covering reasons for managing health and safety, management systems, risk and people, and monitoring) and hazard content (physical and psychological health, musculoskeletal health, chemical and biological agents, workplace issues, work equipment, fire, and electricity). Under the 2025 specification, elements 1.1, 1.2, 1.4, 2 and 3 are assessed in both units, so management knowledge is examined twice.
This split changes how you should allocate study time. The practical unit is not a form-filling afterthought: it re-tests risk assessment principles, contractor management, and management systems in your own environment. Because the qualification grade is drawn from the GNC1 question paper while GNC2 is marked pass or refer, treating GNC2 as low priority delays the parchment, since no qualification can be issued until both units are passed. The practical also demands workplace evidence and observation that you need time on site to gather, so start collecting it early.
Command words set answer depth, so calibrate before you write
Each command word signals how much detail earns marks. 'Identify' wants names only; 'outline' wants brief features; 'describe' wants detailed characteristics; 'explain' wants reasons or mechanisms; 'justify' wants evidence supporting a decision. Match length to the word.
A productive drill is to answer the same prompt at three depths. Take 'control measures for a noisy compressor': an identify answer names enclosures, reduced-exposure time, and hearing protection; an explain answer states why each works, for example that an enclosure reduces noise at source before it reaches anyone. Writing explain-depth content for an identify question wastes examination time you will want later in the open book window.
The reverse error costs marks directly. When asked to explain or justify, a bare list gives the examiner nothing to reward, because the marks sit in the reasoning. In the closing interview you may be asked about your submission, so answers you cannot expand on will show. Rehearse converting every list you write into one sentence of reasoning per point; that habit alone reshapes the quality of an open book submission.
| Command word | What it asks for | Typical answer shape |
|---|---|---|
| Identify | Name or select the item, no elaboration | Short list, one line each |
| Outline | Give the main features briefly | One to two lines per point |
| Describe | Set out characteristics in detail | Fuller sentences, no reasons required |
| Explain | Give reasons, mechanisms, or how something works | Each point paired with a because-statement |
| Justify | Give evidence that a choice or action is worthwhile | Argument tied to scenario consequences |
Turning moral, financial, and legal arguments into scenario-specific ones
Questions on why health and safety should be managed reward arguments anchored in the scenario. Name the category, then attach it to specific people, costs, or duties appearing in the paper rather than reciting the three headings.
The distinction to internalise is between insured and uninsured financial consequences. Insurance may cover some compensation, but sick pay, replacement staffing, damaged equipment and materials, production delays, investigation time, and reputational loss with clients typically fall outside cover. A scenario mentioning a client audit or a key contract gives you material for that argument; a generic sentence about 'costs to business' does not use it.
Practise the conversion with a rewrite exercise. Write three generic sentences: workers deserve protection; accidents cost money; employers have duties. Then rewrite each against a paper scenario, for example a warehouse where a racking strike injured an agency worker: the moral argument cites the injured person's exposure and the foreseeable severity; the financial argument cites agency cover and lost throughput; the legal argument cites employers' general duties owed to employees and to non-employees affected by the work. Expected observation: your rewritten versions are twice as long and twice as specific as the originals.
- Moral: who was exposed, how badly, and why it was foreseeable in this workplace.
- Financial: uninsured costs such as sick pay, cover staffing, damaged stock, lost production, and investigation time.
- Legal: the general duties owed to employees and others affected by the work, expressed in your own words.
From hazard named to control justified: hierarchy of control in answers
Control questions reward measures ordered by reliability: elimination first, then engineering controls, then administrative arrangements, with personal protective equipment last. Pair each measure with a reason drawn from the scenario rather than presenting an unordered pile of options.
Worked scenario: a paper question describes warehouse staff hand-lifting sacks from pallets onto chest-height shelving, with two recent strain reports. A weak answer lists 'manual handling training, gloves, and supervision'. It fails because gloves and training sit low in the hierarchy and nothing justifies them against the scenario evidence. A stronger answer leads with a powered lift table or vacuum lifter to eliminate the strain from the lift, notes reducing storage height as a redesign option, then job rotation and training to limit exposure, and only then personal protective equipment such as gloves for residual contact risks, each measure tied to the strain reports.
Why the ordering matters: lower-order controls depend on continuous human compliance, so an answer that starts with them reads as accepting the hazard rather than managing it. Practise the reasoning chain out loud: name the hazard's mechanism, ask what removes that mechanism entirely, then what isolates people from it, then what reduces exposure, then what protects the individual. If you can run that chain for musculoskeletal, noise, dust, and electrical scenarios from the hazard elements, you have a transferable examination method.
GNC2: what a suitable and sufficient risk assessment actually requires
The practical unit asks for a five-step risk assessment of a real workplace plus an action plan. Suitability comes from specificity: particular hazards, who could be harmed and how, evaluation of existing controls, and prioritised further actions with timescales.
Worked scenario: a learner drafts 'slips, trips and falls' as one line for a small office unit, lists 'good housekeeping' as the control, and moves on. The line is too broad to act on. A better version separates a trailing cable across a walkway, a wet entrance mat on rainy days, and stacked boxes beside a fire exit. For the cable it notes who is at risk (office staff and cleaners), records the existing partial control (a cable cover in one area only), rates residual risk, and proposes rerouting the cable with a one-week timescale.
That precision matters twice. It makes the risk rating defensible, because severity and likelihood describe one identifiable event rather than a category, and it makes the action plan usable, since each action has an owner-level task and a realistic date. Before drafting, check the official GNC2 guidance and submission template your Learning Partner provides, because presentation requirements and the marking standard for this unit are set out there rather than in the main syllabus guide.
- Describe hazards specifically enough that a stranger could find them on site.
- State who might be harmed and the plausible injury or illness, not just 'staff'.
- Evaluate existing controls honestly, then judge whether residual risk is tolerable.
- Make further actions specific, prioritised, and dated in an action plan.
Legal duties and management systems: apply the frameworks, do not recite them
Know what the Health and Safety at Work etc. Act 1974 and the Management of Health and Safety at Work Regulations 1999 require in outline, and how ISO 45001 and HSG65 structure a management system. Questions test application to scenarios, not quotation.
Hold the two legal instruments apart by function. The 1974 Act sets the overarching duties: employers must protect the health, safety, and welfare of employees so far as is reasonably practicable, and must also protect people who are not employees but are affected by the work, while employees have duties of their own. The 1999 Regulations build the operational layer on top, most prominently the requirement to carry out suitable and sufficient risk assessments. A scenario about an agency worker or a visiting contractor is usually testing whether you reach for both the employee and non-employee duties.
For management systems, learn the components so you can diagnose a scenario organisation rather than recite a diagram. ISO 45001 and HSG65 give you lenses for questions like 'what is missing from this company's arrangements': a stated policy, defined responsibilities, planned risk controls, active monitoring, and review after incidents or change. Similarly, contractor questions follow a lifecycle of selection, planning, monitoring, and checking on completion, and change questions ask you to trace how a modification, such as new equipment or a shifted layout, disturbs existing assessments and procedures.
A preparation sequence and readiness checks you can self-mark
Build preparation in phases: management elements first, hazard elements linked to your own workplace, a timed open book mock, then a full GNC2 draft. Finish with readiness checks against the rubric below, treating scores as learning milestones rather than predictions.
A realistic sequence: spend the first phase on elements one to four, writing short scenario answers daily and grading yourself strictly on command words. Second, for each hazard element, walk your own workplace and record two real hazards with existing controls; this doubles as GNC2 reconnaissance. Third, complete a full timed mock under open book conditions to practise navigation and pacing. Fourth, draft the GNC2 risk assessment in your workplace and leave time to revise it against the practical guidance before submission.
Readiness checks before you book assessments: first, take any hazard from the syllabus and produce a hierarchy-ordered control set with a reason per measure in under five minutes. Second, write moral, financial, and legal arguments for an unfamiliar scenario with nothing generic in them. Third, mark your GNC2 draft against this rubric: ten identifiable hazards (2 points), affected persons named for each (2), existing controls evaluated (2), further actions prioritised with timescales (2), action plan coherent with findings (2). Eight or more suggests you are close to submission-ready; anything lower tells you which section to rework. For administrative details such as registration and assessment windows, rely on NEBOSH's own pages rather than second-hand summaries.
- Phase 1: management elements plus daily command-word drills on paper scenarios.
- Phase 2: hazard elements mapped onto two real hazards in your own workplace.
- Phase 3: a timed open book mock covering the full syllabus spread.
- Phase 4: full GNC2 draft, reviewed against the practical guidance, then revised.
References and further reading
Use these references to explore the concepts and check the latest information from the relevant organizations.