WHS Management System Guide: Mandatory Content Under Section 19 and ISO 45001 Alignment

Section 19 of the WHS Act imposes a primary duty on every person conducting a business or undertaking to ensure, so far as is reasonably practicable, the health and safety of workers and other persons who may be affected by the work. This duty is not satisfied by good intentions or informal practices. It requires a systematic approach to identifying hazards, assessing risks, implementing controls, monitoring effectiveness, and continuously improving outcomes. A WHS management system is the documented framework through which a PCBU discharges this duty. While the WHS Act does not prescribe a specific management system structure, the regulator and the courts assess compliance against what a reasonable PCBU in the same position would have done. In practice, this means having documented policies, procedures, risk registers, training records, inspection schedules, incident investigation processes, and management review mechanisms. The absence of a management system is not merely a gap in paperwork. It is evidence that the PCBU has failed to take a systematic approach to managing risks, which is the essence of the Section 19 duty.

The WHS Regulation 2025 specifies particular obligations that must be addressed within the management system. These include hazard identification and risk assessment processes under Part 3.1, specific controls for hazardous chemicals under Part 7.1, health monitoring obligations under Part 7.2, workplace exposure monitoring and compliance with workplace exposure limits, management of plant risks under Part 5.1, management of falls under Part 4.4, management of confined spaces under Part 4.3, management of electrical risks under Part 4.7, emergency planning under Part 3.2, first aid arrangements, provision and maintenance of personal protective equipment, and consultation with workers under Part 2. Each of these obligations generates documentation requirements including registers, procedures, monitoring records, and review schedules. The management system must integrate these requirements into a coherent framework rather than treating each as a standalone compliance task. The system must also address the specific obligations that arise from the WHS Regulation 2025 amendments including Regulation 55C and 55D for psychosocial hazards, the Section 26A approved codes of practice framework, and the transition to workplace exposure limits by December 2026.

ISO 45001:2018 provides an internationally recognised framework for occupational health and safety management systems. It follows the high-level structure common to all ISO management system standards, with clauses covering context of the organisation, leadership, planning, support, operation, performance evaluation, and improvement. Aligning your WHS management system with ISO 45001 is not a legal requirement in Australia but it provides several practical benefits. The structure ensures that no critical management system element is overlooked. It facilitates integration with other management systems such as ISO 9001 for quality and ISO 14001 for environment. It provides a framework for external audit and certification that demonstrates due diligence to regulators, clients, and insurers. The key distinction between ISO 45001 and a purely compliance-driven management system is the emphasis on leadership commitment, worker participation, and continual improvement through the Plan-Do-Check-Act cycle. Many principal contractors and major clients now require ISO 45001 certification as a prequalification condition, making alignment a commercial necessity as well as a safety benefit.

Begin with a WHS policy signed by the most senior officer in the organisation. The policy must commit to compliance with applicable WHS legislation, consultation with workers, and continual improvement. Define the scope of the management system including all workplaces, activities, and workers covered. Establish a hazard identification and risk assessment procedure that specifies how hazards are identified, who conducts risk assessments, what methodology is used, how controls are selected and implemented, and how often assessments are reviewed. Create a legal register that lists every applicable WHS Act provision, regulation, and approved code of practice. Build a training needs analysis and training matrix that identifies the competency requirements for each role and tracks completion of required training. Establish an incident reporting, investigation, and corrective action procedure. Define inspection and audit schedules for workplace inspections, plant inspections, chemical storage audits, and management system audits. Create a management review procedure that brings WHS performance data to senior management at defined intervals, typically quarterly, for review and resource allocation decisions.

A management system is only effective if it is implemented, monitored, and improved. Audit readiness means that at any point a regulator, client auditor, or certification body could request evidence of compliance and your system would produce it. This requires maintaining current records including completed risk assessments, training records with dates and signatures, inspection reports with corrective actions tracked to closure, incident investigation reports with root cause analysis and preventive actions, health monitoring records, exposure monitoring results, emergency drill records, and management review minutes. Implement leading indicators alongside lagging indicators. Leading indicators include the number of workplace inspections completed against schedule, the percentage of corrective actions closed on time, the percentage of workers who have completed mandatory training, and the number of hazard reports submitted by workers. Lagging indicators include lost time injury frequency rate, total recordable injury frequency rate, workers compensation claims, and regulatory notices received. Review these indicators monthly at the operational level and quarterly at the executive level. Use the data to identify trends, allocate resources to high-risk areas, and demonstrate continual improvement.