Employers are ultimately responsible for ensuring risk assessments are conducted, though they may delegate the task to qualified safety professionals or external consultants.