The employer would need to risk asses the work being carried out to see if safety footwear is required or not. The Personal Protective Equipment at Work Regulations 1992 demands that personal protective equipment is to be supplied and used at work wherever there are risks to health and safety that cannot be adequately controlled in other ways.

If safety shoes are deemed necessary, further risk assessments would be required to assess the effectiveness.

This would include properly assessing the type of safety shoe to be supplied before use to ensure it is suitable, ensuring good maintenance and storage, checking that employees are trained in the correct use and auditing to check they are being used correctly by all relevant employees.

To determine if safety shoes are required, carefully consider the different hazards
in the workplace. This will enable you to assess who requires safety footwear and which types are suitable to protect against the hazard and for the job to be done.

If safety footwear is required, the employer must provide it and cannot charge employees for supplying it.

Again, the relevant regulations are the Personal Protective Equipment at Work Regulations 1992.

Regulation 4 states:
Every employer shall ensure that suitable personal protective equipment is provided to his employees who may be exposed to a risk to their health or safety while at work except where and to the extent that such risk has been adequately controlled by other means which are equally or more effective.

By virtue of Section 9 of the Health and Safety at Work etc Act 1974, no charge can be made to the worker for the provision of PPE which is used only at work. Section 9 of the Health and Safety at Work etc. Act 1974 states: "No employer shall levy or permit to be levied on any employee of his any charge in respect of anything done or provided in pursuance of any specific requirement of the relevant statutory provisions". Section 9 applies to these Regulations because they impose a 'specific requirement' - i.e. to provide PPE.

Here’s a nice little leaflet from the Health and Safety Executive saying just that http://www.hse.gov.uk/pubns/indg174.pdf

You should be able to find the relevant Acts if you Google for them

Yes.

you have to risk asses everything