The Fleet Risk Management Manual 2026

Driver Vetting, Training, Debriefs and Downtime — A Working Manual for UK Fleet Operators

An Apex Insurance Brokers publication — 2026 Edition


Foreword from Apex

Most fleet claim cost is concentrated in a small number of drivers. The data is consistent across every fleet we work with: the top decile of drivers, ranked by incident frequency, accounts for somewhere between 40% and 70% of total claim cost. The bottom decile contributes almost nothing.

The implication for the fleet operator is straightforward and operationally awkward. The biggest return on safety investment does not come from training the drivers who already drive well. It comes from identifying, supporting, retraining (where possible) and — where necessary and proportionate — exiting the drivers who consistently generate incident frequency that the rest of the operation has to absorb.

This manual is the third in our 2026 fleet series. It sits alongside the Renewal Toolkit (the annual buying cycle) and the Claims Defensibility Guide (the response when something happens). The Risk Management Manual covers the year-round operational disciplines: who you let drive, how you keep them current, how you respond when something goes wrong, how you mitigate the downtime cost when a vehicle is off the road, and the regulatory and standards framework the whole thing sits inside.

The bar for “good” fleet risk management has moved over the past five years. ISO 39001 (Road Traffic Safety Management Systems) is now a meaningful reference standard, work-related road risk under HSE INDG382 sits inside the Health and Safety at Work Act framework, the Sentencing Council guidelines on corporate manslaughter have produced eight-figure fines for organisations whose road risk management was found inadequate after a fatal incident, and the regulatory landscape around mobile phones, driver hours, EV transition and licence categories continues to move.

This manual is general information. It is not legal, regulatory or HR advice. For specific guidance on employment decisions, ISO certification, or any matter following a serious incident, take specialist advice.

— The team at Apex Insurance Brokers, Bristol


Chapter 1 — Driver Vetting: The Baseline Discipline

Why this chapter matters. Most underwriting models price driver quality more heavily than vehicle type. Your vetting process is what the underwriter is actually buying.

The DVLA share-code workflow

Since the paper counterpart was abolished in 2015, the only authoritative way to check a UK driving licence is through the DVLA’s View Driving Licence service at gov.uk/check-driving-licence. The workflow:

  1. The driver logs in at gov.uk/view-driving-licence with their driving licence number, National Insurance number and postcode
  2. The driver generates a share code — a temporary, 8-character code valid for 21 days
  3. The fleet operator (or designated checking party) enters the share code at gov.uk/check-driving-licence with the driver’s licence number
  4. The service returns a current, dated record showing entitlement, endorsements, restrictions and disqualifications
  5. The fleet operator saves a record of the check — typically a dated PDF or screenshot — to the driver’s file

The cadence we recommend, and which most underwriters now expect:

Larger fleets typically automate this through a managed licence-checking service — Licence Bureau, Licence Check, DriverCheck, Pepper, AdminBureau and others — which holds standing driver authority and re-pulls the DVLA record on a scheduled basis. For fleets above thirty drivers, this is usually cheaper and more reliable than manual share-code workflow.

[Chart: DVLA share-code workflow step diagram, with annotated screen examples for each step.]

Endorsement codes that matter to underwriters

The DVLA endorsement code list is long. The ones underwriters consistently treat as material:

A driver with one CD10 in the last three years on a clean previous record is typically insurable on standard terms. A driver with two CD-series endorsements, or a single DR/DG-series endorsement, is typically excluded from cover or requires individual underwriting referral.

[Chart: endorsement codes that matter to underwriters — quick-reference card with the codes above, their meaning, retention period and typical underwriting impact.]

The 3-year vs 4-year retention question

DVLA endorsement retention varies by offence. The general rule:

The 3-year vs 4-year question that confuses fleets is the difference between the insurance disclosure period and the DVLA retention period. Most motor insurance proposal forms ask for offences in the last five years; the DVLA licence record shows different lookback windows by offence type.

Operationally:

[Common mistake call-out — “Relying solely on the DVLA record for older offences. A drink-driving conviction from 2019 will still be on the licence; a careless driving conviction from 2021 may have dropped off. Self-declaration plus DVLA check, not one or the other.”]

Employee right-to-drive

Beyond the licence itself, the fleet operator has a duty to satisfy itself that the driver is entitled and fit to drive. This means:

For HGV / PSV operators, the additional requirements are CPC qualification (covered in Chapter 4) and Driver Hours / WTD compliance (the Working Time Directive as transposed in UK regulations).

Agency drivers — the weakest link

Agency drivers are statistically over-represented in incident data across the industry. The reasons are operational rather than personal — less continuity with the vehicle and route, less familiarity with the operator’s procedures, less ownership of the longer-term driver-operator relationship.

The minimum standard for agency-driver vetting:

Some agencies push back on operator-side share-code checks as duplicative. They are not — the operator carries the liability, the operator carries the insurance cost, the operator needs the evidence.

Foreign licences — post-Brexit reality

Drivers holding licences from outside Great Britain fall into several categories:

For HGV / PSV categories (C and D and derivatives), the rules are more restrictive. Most non-GB HGV licences cannot simply be exchanged; UK testing is required.

The operational rule for fleets: any non-GB licence holder requires individual review, with confirmation in writing from a competent source (the operator’s HR function, an immigration lawyer, or DVLA Customer Enquiries) before being authorised to drive.

[Chart: foreign licence — what is recognised in GB — decision flowchart by country of origin, category required, length of intended UK driving.]

Pre-employment medical declaration

A medical self-declaration at recruitment, signed by the driver, covering DVLA notifiable conditions (epilepsy, diabetes requiring insulin, certain heart conditions, vision restrictions, sleep apnoea, mental health conditions affecting driving capability), is standard practice. For HGV / PSV drivers, a Group 2 medical examination by an approved doctor is mandatory under the regulations governing those entitlements.

The declaration should be revisited:

The operator should have a confidential route for drivers to raise emerging health concerns without the immediate consequence of removal from driving duties. Drivers who fear losing income for raising a concern do not raise it — and end up driving when they should not.


Chapter 2 — Driver Training: Beyond the Test

Why this chapter matters. The driving test is the floor, not the ceiling. The training gap between “qualified” and “competent on a 7.5-tonne in city traffic” is real, and is where most operator value sits.

Defensive driving — what it actually means

Defensive driving is a structured approach to anticipating and avoiding incidents. The UK programmes most often referenced:

For most commercial fleets, a structured rotation works best: every new driver completes an induction defensive driving course in the first three months, every driver completes refresher training every two to three years, and drivers identified through telematics scoring or post-incident review receive targeted intervention.

CPC — the HGV / PSV framework

Drivers operating vehicles over 3.5 tonnes for hire and reward, or carrying passengers for hire and reward, are required to hold a Driver Certificate of Professional Competence under the Vocational Drivers (Driver Certificate of Professional Competence) Regulations.

The framework:

The 2024 reforms to Driver CPC introduced National Vocational Training (NVT) flexibility, allowing some training to be split into shorter modules (3.5 hours minimum) and delivered partly online, alongside the maintained 35-hour 5-year total. The reforms also introduced a re-entry route for previously-qualified drivers re-entering the profession.

DCPC tracking — the operator’s discipline

The operator’s record-keeping should cover, per driver:

Drivers approaching expiry need 90 days’ notice from the operator — DCPC renewal is administratively straightforward but cannot be left to the day before.

[Chart: driver training pathways — defensive driving programmes, Driver CPC modules, in-house operator training — comparison panel showing audience, duration, frequency, cost order-of-magnitude, regulatory weight.]

[Broker’s view sidebar — “Training is often the line that gets cut first when budgets tighten. The data does not support that. We have seen fleet operators reduce overall cost — premium, claim, downtime — through training programmes that paid back within the policy year. Cutting training to save £15,000 frequently costs £40,000 in the next renewal.”]


Chapter 3 — Post-Incident Debriefs: The No-Blame Discipline

Why this chapter matters. Repeat incidents are concentrated in drivers and operations that did not properly debrief earlier ones. The debrief is the cheapest safety intervention you can run.

Why debriefs matter — the data

Across the fleet operators we work with, three patterns appear consistently:

This is not surprising. Behavioural change requires reflection, structured input and supported alternative behaviour. None of those happen by themselves.

The structure

A defensible post-incident debrief structure:

Within 48 hours:

Within 14 days:

Within 30 days:

The no-blame principle

The debrief is for learning. Disciplinary process — where warranted — is a separate track, run by HR, with its own documentation and procedural protections. Conflating the two contaminates both: drivers stop being honest in debriefs if every conversation might end in a written warning, and disciplinary processes get muddied by debrief notes taken in a different context.

A useful structural rule: the fleet manager runs the debrief; HR runs disciplinary; if both are needed, they are sequential and separate, with the debrief first.

Recording learning vs disciplining

Some patterns require disciplinary response — repeat preventable incidents within a short window, evidence of dishonesty in incident reporting, breach of operator policy (mobile phone use, hours violations, intoxication). These belong in the disciplinary track, with appropriate procedural protection for the driver.

Most incidents do not require disciplinary response. They require structured debrief, supported retraining where helpful, and operational improvement so the same incident is less likely next time. The fleet operator who defaults to disciplinary for every incident generates a culture of concealment; the fleet operator who never disciplines for anything generates a culture of permissive recurrence. Neither is right.

[Chart: post-incident debrief structure template — 48-hour / 14-day / 30-day checklist with handoff points to disciplinary track marked separately.]

[Common mistake call-out — “Combining the debrief and the disciplinary hearing in one meeting to ‘save time’. It saves no time, contaminates both processes, and is one of the most common reasons fleet operators end up with employment tribunal exposure on safety-related dismissals.”]


Chapter 4 — Downtime Mitigation

Why this chapter matters. The insured cost of an incident is rarely the largest cost. Downtime — lost revenue, lost contract performance, replacement scrambling — frequently exceeds it.

The cover types — and what each does

Several distinct cover types address downtime:

Own-damage cover — Your insurer pays for repair (or write-off) of your vehicle following a fault incident. Indemnifies the asset; does nothing for the operational gap.

Courtesy / replacement vehicle clauses — Most fleet motor policies include some level of courtesy vehicle entitlement following a covered incident. The specifics vary widely:

For most fleets, the standard policy courtesy vehicle clause is enough for car / light van but insufficient for specialist or HGV.

Credit hire — When your driver is at fault for damage to a third party’s vehicle, that third party may claim credit hire from your insurer. When you are not at fault, you can claim credit hire from the other party’s insurer. We cover the mechanism, the Stevens v Equity methodology, and the inflation effect in the Claims Defensibility Guide. Credit hire is not normally first-line downtime cover for your own fleet — it is a route through the third-party claim.

Key-vehicle sub-limits — Some specialist policies include uplifts for key operational vehicles whose loss would disproportionately affect the operation. Worth specifying for fleets with one or two units that drive a significant share of revenue.

Dealer-loan arrangements — Some operators negotiate standing arrangements with their main vehicle supplier for short-notice replacement vehicles. This sits outside the insurance policy but is a useful operational backstop.

GAP cover — Guaranteed Asset Protection covers the gap between the insurance settlement value (current market value or invoice value) and the outstanding finance balance on a written-off vehicle. For fleets running newer vehicles on PCP or finance, GAP is often material — modern vehicle depreciation curves mean the market value can be well below the finance settlement figure within the first 18 months.

[Chart: downtime mitigation — own damage vs courtesy vs credit hire — what each covers, what each does not, where each fits in the operational toolkit.]

Designing your downtime resilience

A pragmatic approach for most fleets:

  1. Standard policy courtesy vehicle for cars and light vans — typically sufficient
  2. Specialist replacement arrangements for any vehicle whose loss would meaningfully affect operations — negotiate with insurer, with vehicle supplier, or via standby rental
  3. GAP cover for any vehicle on finance where the market value could drop below the finance balance during the cover term
  4. Operational contingency — driver-vehicle re-allocation plans, sub-contract arrangements, customer communication protocols
  5. Key-vehicle review at renewal — identify which units carry disproportionate operational weight and check the policy treats them accordingly

[Broker’s view sidebar — “We routinely audit fleet operators who have ‘comprehensive cover’ but no thinking about the operational gap. A 7-day courtesy car for a 26-tonne refuse vehicle is a meaningless concept. Match the cover to what the operation actually needs.”]


Chapter 5 — The Standards Framework: ISO 39001 and Work-Related Road Risk

Why this chapter matters. The regulatory and standards framework around fleet safety has matured. Knowing where your operation sits within it changes how you build the safety case.

ISO 39001 — Road Traffic Safety Management Systems

ISO 39001:2012 is the international standard for road traffic safety (RTS) management systems. It sets out a Plan-Do-Check-Act framework specifically designed for organisations whose activities involve road traffic — fleet operators, employers of mobile workers, transport providers and others. The standard covers:

Certification to ISO 39001 is not legally required and is not common in the UK fleet sector — though it is more established in some European markets. The value of the framework is structural even where formal certification is not pursued: it gives the operator a coherent reference architecture for road safety management that maps cleanly onto ISO 9001 and ISO 45001 (occupational health and safety) where those are already in place.

The Health and Safety at Work Act framework

The Health and Safety at Work etc. Act 1974 imposes general duties on employers to protect the health, safety and welfare of employees so far as reasonably practicable. Section 2 covers employees; section 3 covers others affected by the operation (the public, third parties, contractors).

HSE guidance INDG382 (“Driving at work: managing work-related road safety”) applies these general duties to employees who drive for work — including those driving their own vehicles on company business (the “grey fleet”). The guidance covers:

INDG382 is not law; the HSWA is. INDG382 is the guidance HSE uses to assess whether an operator has met its HSWA duties in relation to work-related road risk.

Corporate manslaughter — the serious consequence

The Corporate Manslaughter and Corporate Homicide Act 2007 created the offence of corporate manslaughter, applicable where an organisation’s activities cause a person’s death and amount to a gross breach of a relevant duty of care, with senior management contribution.

The Sentencing Council’s Corporate Manslaughter Definitive Guideline sets out the sentencing framework. Fines for organisations convicted of corporate manslaughter following a fatal incident on the road have reached eight figures in published cases. Beyond the fine, the reputational and operational consequences — particularly for organisations dependent on public-sector tenders or regulated procurement — can be terminal.

The defensive position is structural: documented risk assessment, evidenced training, working safety management, monitoring of compliance, response to identified shortcomings. The investigation will examine all of these following a fatality.

[Chart: ISO 39001 and the H&S framework — relationship diagram showing how ISO 39001, ISO 45001, HSWA, INDG382, and CM&CHA 2007 fit together for a fleet operator.]

[Broker’s view sidebar — “A useful exercise after any near-miss in your fleet is to ask: ‘if this had been a fatality instead, would our documentation, training records, vehicle maintenance, journey planning, and management response stand up to HSE investigation?’ If the honest answer is ‘no’, the answer is what needs fixing — not the documentation, the gap.”]


Chapter 6 — Mobile Phone Law

Why this chapter matters. The 2022 tightening of mobile phone law caught fleets by surprise and continues to drive endorsement frequency.

The current position

Section 41D of the Road Traffic Act 1988 (introduced by the Road Traffic (Use of Hand-held Mobile Telephones) Regulations) and the subsequent 2022 amendment to the Construction and Use Regulations create the current offence framework.

Since 25 March 2022, it is an offence to use a hand-held mobile phone or similar device while driving, in nearly all circumstances. The 2022 tightening closed previous loopholes by:

Limited exceptions exist — contactless payments at a drive-through while stationary, genuine emergencies dialling 999 or 112 where it is unsafe or impracticable to stop, hands-free use through Bluetooth integration where the device itself is not held.

The penalty: 6 points and a £200 fixed penalty notice; potentially a court summons with a fine up to £1,000 (£2,500 for HGV / PSV).

For commercial drivers, the consequences extend beyond the immediate penalty:

Operator response

The defensible operator position:


Chapter 7 — The EV and PHEV Transition

Why this chapter matters. The shift to electric and hybrid fleet vehicles introduces new risks the operator needs to think about — and resolves some old ones.

Vehicle weight and licence category creep

Electric vehicles are heavier than their internal-combustion equivalents — primarily because of the battery pack. A standard 3.5-tonne LCV in diesel form may exceed 3.5-tonne gross vehicle weight when re-engineered as an EV. The Department for Transport has provided some regulatory accommodation through the alternatively-fuelled vehicle weight derogation — allowing drivers with category B licences to operate alternatively-fuelled vehicles up to 4.25 tonnes for goods carriage in certain circumstances — but the position is constrained and operators should not assume universal application.

Operational consequence: when ordering EV vans, confirm the licence category required and whether existing drivers can lawfully operate the vehicle. Drivers who passed their test after 1997 generally hold category B, valid for vehicles up to 3.5 tonnes MAM — and may need additional entitlement for heavier EV equivalents.

Charging infrastructure as employer duty

Where the operator provides EV vehicles for employee use — including home-charging arrangements, depot charging, and public-network use — several duties arise:

[Chart: EV / PHEV fleet — what changes — before-and-after panel showing licence category, weight, charging, training, insurance considerations.]

Other EV / PHEV considerations


Chapter 8 — A Risk Management Calendar

Why this chapter matters. A printable annual rhythm for the fleet’s risk management — the disciplines that, run consistently, materially change the loss ratio and the renewal price.

Monthly

Quarterly

Annually

On occurrence


About Apex Insurance Brokers

Apex Insurance Brokers Ltd is a UK insurance broker, Bristol-based. We work with commercial fleet operators across England and Wales — small service fleets through to multi-depot haulage and PSV operations. We are an independent firm authorised by the Financial Conduct Authority since 2014.

Contact us: - Telephone: 0117 325 0027 - Email: info@apexinsurancebrokers.co.uk - Web: apexinsurancebrokers.co.uk

Trading address: QCS, 53 Queen Charlotte Street, Bristol BS1 4HQ Registered office: c/o Westcan, 5 Anglo Office Park, Bristol BS15 1NT

This manual was reviewed by Matt Bartlett, Director.


Useful Resources

Regulators, standards and reference

Companion Apex publications


Important regulatory information

General guidance only — not regulated advice. Always consult your broker on your specific cover and circumstances. Apex Insurance Brokers Limited, FCA FRN 724952, Companies House 07014570.

This manual is published by Apex Insurance Brokers Ltd, Companies House registration 07014570, authorised and regulated by the Financial Conduct Authority under firm reference 724952. You can verify our regulatory status on the FCA register at register.fca.org.uk.

This manual is general information based on our experience as an insurance broker. It is not legal, regulatory, HR or compliance advice, and it is not a personal recommendation as to any specific insurance product or risk management programme. Any decisions on employment, training, ISO certification or response to a serious incident should be taken having regard to your operation’s specific circumstances and with appropriate professional advice. We do not undertake to update this manual to reflect changes in regulation, market practice or case law after the version date above. Examples and figures are illustrative.

Apex Insurance Brokers Ltd accepts no liability for any loss arising from reliance on the contents of this manual.

Last reviewed: June 2026

— End of manual —

Talk to a specialist broker

Apex Insurance Brokers serves UK professional services firms and commercial businesses. Call 0117 325 0027, email hello@apexinsurancebrokers.co.uk, or request a quotation.

Get a quote
Our service promise. We acknowledge every quote request the same working day. For straightforward risks, indicative terms typically follow within five working days. Complex risks — higher-risk buildings, cladding, mid-term proposals requiring fresh underwriting — may take longer; we’ll send you a progress note by the end of the fifth working day in those cases.
★ 4.0 on Trustpilot (verified)|Listed on the ARB PI broker list|FCA FRN 724952