How to Write a SWMS: 10-Step Guide for Construction

A compliant SWMS under the WHS Regulation 2025 must achieve four things: identify the high-risk construction work, assess the risks, set out control measures, and be prepared in consultation with workers. That's it. The Regulation doesn't prescribe a specific format, a specific template, or a specific number of pages. It prescribes outcomes.

But here's where tradies get stuck. The Regulation says 'identify hazards and assess risks' — but it doesn't tell you how. It says 'set out control measures' — but it doesn't say what level of detail is required. It says 'consult workers' — but it doesn't define what consultation looks like. So subbies end up downloading a template from the internet, filling in the blanks with generic information, and hoping it's good enough.

It's usually not good enough. SafeWork NSW estimates that over 60% of SWMS reviewed during site inspections are inadequate — generic hazards, vague controls, no risk ratings, no evidence of worker consultation. These SWMS create a false sense of compliance. They exist on paper, but they don't protect anyone.

This guide walks you through 10 steps to write a SWMS that's genuinely compliant, genuinely useful, and genuinely protective. Each step includes practical examples, common mistakes, and the 'wrong way vs right way' comparison that shows you exactly what inspectors are looking for. Or you can skip all 10 steps and use SafeSWMS — the builder walks you through every one automatically.

The first question: does this work require a SWMS at all? A SWMS is only legally required for high-risk construction work (HRCW) — the 19 specific categories listed in WHS Regulation 2025, Schedule 3.

Common HRCW categories in construction: Category 1 — Work where there is a risk of falling more than 2 metres Category 2 — Work on or adjacent to a road or traffic corridor Category 4 — Work in or near a confined space Category 6 — Work in or near a trench or shaft deeper than 1.5 metres Category 10 — Work on or near energised electrical installations Category 12 — Demolition of a structure Category 15 — Work involving asbestos removal Category 18 — Work using powered mobile plant on a construction site

Most jobs trigger more than one category. An electrician working in a ceiling void above 2 metres triggers both Category 1 (heights) and Category 10 (electrical). A demolition job involving asbestos triggers Category 12 (demolition), Category 15 (asbestos), and potentially Category 1 (heights) and Category 18 (powered mobile plant).

Wrong way: Ticking only one HRCW category when multiple apply. This leads to missing hazards because each category brings its own hazard set. Right way: Review all 19 categories against the specific scope of work. Tick every category that applies. If in doubt, tick it — over-inclusion is always safer than under-inclusion.

SafeSWMS prompts you to select your trade and activities, then automatically identifies the applicable HRCW categories based on your selections. It catches the categories you might miss.

You cannot write a site-specific SWMS from your office. You need to visit the actual site, walk the actual work area, and observe the actual conditions. A desktop SWMS based on drawings and assumptions will miss the hazards that only become visible when you're standing on the ground.

What to look for during the site walk:

Overhead hazards — powerlines, crane operations, overhead structures, trees, fragile roofing. Note distances, voltages (check with the asset owner), and any safe approach distance requirements.

Ground conditions — slopes, soft ground, excavations, penetrations, uneven surfaces, trip hazards. Note the ground type (concrete, gravel, fill, natural) because it affects plant operation and outrigger requirements.

Adjacent work — what other trades are working nearby? Demolition creating dust? Crane swinging loads overhead? Excavation undermining your work area? Your SWMS must account for hazards created by others, not just your own work.

Access and egress — how do workers get to the work area? Is the access route safe? Are there emergency egress routes? Can an ambulance reach the work area?

Services — where are the electrical, gas, water, and telecommunications services? Check Dial Before You Dig results. Look for service markers, pits, and meters.

Wrong way: Writing the SWMS in the office based on project drawings and specifications. Right way: Visit the site. Take photos. Note the specific conditions. Reference what you observed in the SWMS. 'Overhead 11kV powerline running east-west, 5 metres south of scaffold location — safe approach distance 3 metres per AS 7000' demonstrates a genuine site assessment.

Step 3: Consult your workers. The WHS Act 2011, Section 49, requires you to consult workers who are or are likely to be directly affected by a WHS matter. SWMS preparation is a WHS matter. That means the workers who will carry out the HRCW must be involved in preparing the SWMS — not just informed of it after the fact.

Practical consultation looks like this: gather the crew, walk through the planned work method, ask 'what could go wrong?' and listen to the answers. Your experienced workers have seen hazards you haven't. Your apprentices might spot things that veterans have become desensitised to. Record who was consulted, when, and what they contributed.

Wrong way: SWMS prepared entirely by the safety manager in the office, emailed to workers for signature. Right way: Workers' names listed in the consultation section with the date of consultation and their contributions noted.

Step 4: List hazards specific to THIS job. Not generic hazards from a template. Not 'slip, trip, fall' as a catch-all. Specific hazards that exist on this site, for this scope of work, in these conditions.

Wrong way: 'Manual handling' as a hazard. Right way: 'Manual handling of 20 kg concrete blocks from ground level to scaffold platform at 3 metres — repetitive lifting for 6-hour duration, no mechanical aid available at scaffold level.'

Step 5: Score risks using the 5×5 matrix. Every hazard gets two risk scores — one before controls are applied (inherent risk) and one after controls (residual risk). Use the 5×5 matrix with likelihood (1 Rare to 5 Almost Certain) and consequence (1 Insignificant to 5 Catastrophic).

Wrong way: All hazards rated as 'Low' after controls. This looks like you've manipulated the numbers. Right way: Honest scoring that shows some hazards remaining as Medium after controls. A fall from 6 metres is still Catastrophic even with edge protection — the likelihood drops, but the consequence stays the same.

Step 6: Write control measures that are specific, not generic. This is where most SWMS fail. The control measures section is the most important part of the document — it's the bridge between the hazard and the safe work method. Vague controls provide no protection.

The hierarchy of controls guides the order: Elimination first, then Substitution, then Engineering controls, then Administrative controls, then PPE last. Tag each control with its hierarchy level so inspectors can see you've applied the hierarchy properly.

Wrong way: 'Use appropriate PPE.' 'Maintain safe work practices.' 'Follow site rules.' 'Exercise caution.' These are meaningless phrases that appear in thousands of SWMS and protect nobody.

Right way: '[Engineering] Edge protection installed on all open sides of scaffold per AS/NZS 4994 — mid-rail, top-rail, and toe board. Inspected and tagged by competent person before each shift.' '[Administrative] Permit to work — confined space entry permit completed including gas test (LEL, O2, CO, H2S) within 15 minutes of entry, standby person stationed at entry point with rescue equipment.' '[PPE] Full body harness (AS/NZS 1891) with dual lanyard, connected to certified anchor point rated to 15kN, for work beyond 2 metres from edge protection.'

Step 7: Score residual risk. After controls are applied, re-score each hazard using the same 5×5 matrix. The residual risk should be lower than the inherent risk — that's the whole point of controls. But be honest. If a control reduces likelihood but not consequence, show that. If the residual risk is still Medium, that's acceptable with ongoing monitoring.

Wrong way: Every residual risk rated as 'Low' regardless of the hazard severity. Right way: 'Fall from scaffold at 6 metres — inherent risk L4 × C5 = 20 (Extreme). After controls (edge protection, harness, inspection): L1 × C5 = 5 (Medium). Residual risk Medium — consequence remains Catastrophic because a fall from 6 metres is still potentially fatal, but likelihood is reduced to Rare with edge protection and harness in place.'

Step 8: Assign responsibilities to named roles. Every control measure must have a responsible person — not 'all workers' for everything. Assigning specific responsibilities creates accountability and ensures that critical controls don't fall through the cracks because 'everyone' assumed someone else was doing it.

Wrong way: 'All workers responsible for all controls.' Right way: 'Edge protection — erected and inspected by scaffold supervisor (Dave M). Gas testing — performed by permit holder (site foreman). RCD testing — performed by electrician before each shift. Exclusion zone — maintained by spotter (dogger).'

Step 9: Get everyone to sign. Every worker who will carry out the HRCW must sign the SWMS before work begins. The sign-on confirms they have read (or been briefed on) the hazards and controls, they understand their responsibilities, and they agree to follow the SWMS.

Sign-on can be physical (wet signature on paper) or digital (electronic signature, QR code scan). The key is a traceable record that links the worker to the SWMS with a date and time. SafeSWMS provides QR code sign-on — workers scan the code on their phone, confirm their identity, and the sign-on is recorded with a timestamp and GPS location.

Wrong way: Workers sign the SWMS three weeks after work has started (or not at all). Right way: Workers sign before HRCW commences. The toolbox talk covers the key hazards and controls. Questions are answered. Then everyone signs. If a new worker joins the crew mid-job, they're briefed and signed on before they start HRCW.

Step 10: Keep the SWMS on site and review it. The SWMS must be readily accessible to all workers on the site. 'Back at the office' is not accessible. 'In the site supervisor's locked ute' is not accessible. Pin it to the site office wall, keep a copy in the lunch room, or — better yet — make it available digitally via a QR code link.

Review the SWMS whenever conditions change (weather, scope, personnel), after any incident or near-miss, when a worker raises a concern, or at regular intervals for ongoing work. Document the review and get fresh sign-on from workers if the hazards or controls have changed.

Here are the most frequent mistakes inspectors find in SWMS, with the fix for each one.

Mistake 1: Generic site description. Wrong: 'Various construction sites in the Sydney metropolitan area.' Right: 'Residential renovation — 14 Banksia Avenue, Epping NSW 2121. Single-storey brick veneer, tiled roof, constructed 1978 (potential asbestos-containing materials). Work duration: 3 weeks commencing 15 April 2026.'

Mistake 2: Copy-paste hazard lists. Wrong: Same 10 hazards on every SWMS regardless of the job — 'noise, dust, manual handling, slips/trips/falls, sun, fatigue, electrical, traffic, excavation, heights.' Right: Hazards derived from the site walk and worker consultation, specific to the actual work. If you're not excavating, don't list excavation. If you're indoors, don't list sun exposure.

Mistake 3: No hierarchy of controls. Wrong: Controls jump straight to PPE — 'hard hat, safety glasses, steel caps, hi-vis, gloves.' Right: Controls work through the hierarchy — elimination and substitution considered first (documented even if not practicable), then engineering controls, then administrative controls, then PPE as the last resort.

Mistake 4: No consultation evidence. Wrong: Consultation section left blank or filled in with 'N/A.' Right: 'Consulted with: John B (leading hand, 15 years experience in demolition), Sarah K (excavator operator, verified DBYD results), Mike R (apprentice, identified concern about dust from adjacent demolition work). Consultation date: 12 April 2026.'

Mistake 5: SWMS never reviewed. Wrong: SWMS prepared on day one and never updated, even though conditions have changed multiple times. Right: 'Review 1 — 18 April 2026: Rain overnight created pooling in excavation zone. Controls updated: dewatering pump deployed before entry, additional shoring check by supervisor. Workers re-briefed and signed on to amended SWMS.'

How long should a SWMS be? NT WorkSafe recommends a maximum of 6 pages. In practice, a good SWMS for a single-trade job is 3-5 pages. Multi-trade or complex jobs may run to 8-10 pages. If your SWMS is over 10 pages, consider whether it covers too many activities — split it into separate SWMS for each distinct piece of HRCW.

Can I use a template? Yes, as a starting point. But a template is just a structure — you must fill it with site-specific content. A template with generic hazards and boilerplate controls is not a compliant SWMS. SafeSWMS provides a guided builder rather than a blank template — it prompts you for site-specific information and populates trade-specific hazards, but you still review and customise everything for your job.

Who must prepare the SWMS? The PCBU performing the HRCW. In practice, that's the subcontractor for their own work. The principal contractor doesn't prepare the subbie's SWMS — they review it. A safety consultant can assist with preparation, but the legal responsibility remains with the PCBU.

Do I need a separate SWMS for each trade? Generally yes. Each subcontractor prepares a SWMS for their own HRCW. An electrician prepares an electrical SWMS. A scaffolder prepares a scaffolding SWMS. A demolition contractor prepares a demolition SWMS. The PC reviews and holds all of them.

Can I write a SWMS on my phone? Yes. SafeSWMS is mobile-responsive — you can build a SWMS on your phone at the site gate. The builder walks you through each section, pre-loads hazards for your trade, auto-calculates the risk matrix, and generates a QR code for worker sign-on. It takes about 5 minutes for a single-trade job.

What if conditions change after the SWMS is signed? Stop work. Review the SWMS. Amend it to address the new conditions. Brief the crew on the changes. Get fresh sign-on. Then resume work. SafeSWMS has a Quick Amend feature — update the SWMS, push the amendment to all signed-on workers, and get re-acknowledgement via the app.