The law says that every business must have a policy for managing health and safety. A health and safety policy sets out your general approach to health and safety. It explains how you, as an employer, will manage health and safety in your business. It should clearly say who does what, when and how. If you have five or more employees, you must write your policy down.