u/Financial-Source8012

In the uk. Private company up 60 employees currently.

They have a fairly good risk management. However I don’t understand the approval process. Currently they have risk assessments for working at height. And similar areas.
They tell me that the process is as follows.

Employee A writes them.
Employee B reviews and approves with the authority of Person C (company director).

Employee B is just signing person C’s name in cloud based software. Is this process ok? How is this auditable should investigation take place?