By law, you are required to carry out a risk assessment regardless of how many employees you have. If you have 5 or more employees, you are required to write the assessment. Less than five doesn't need to be written.