OFSC SWMS Requirements — What the Federal Safety Commissioner Expects

The Australian Government Building and Construction WHS Accreditation Scheme was established under the Building and Construction Industry Improvement Act 2005 and is now administered under the Building and Construction Industry (Improving Productivity) Act 2016. The scheme requires that head contractors tendering for, or working on, federally-funded building and construction projects hold accreditation certifying that their WHS management system meets the Scheme Criteria published by the OFSC.

The financial thresholds that trigger accreditation are set by the Commonwealth and are periodically adjusted. The core threshold is that the Commonwealth funding contribution to the project must exceed $4 million including GST, provided the total project value exceeds $6 million. Certain specific categories of work — primarily large defence and infrastructure projects — have lower thresholds. If any of the triggers apply, the head contractor must be accredited at the time they enter into the head contract.

Accreditation is issued on a rolling basis and must be maintained through ongoing audits, corrective action, and renewal. The OFSC maintains a public register of accredited companies that is searchable via the OFSC website. Principal contractors working without accreditation on a scheme-applicable project are in breach of their contract with the Commonwealth and face contract termination, liquidated damages, and reputational consequences. The scheme is not a voluntary quality mark — it is a mandatory precondition for accessing Commonwealth construction funding.

For subcontractors, the scheme operates indirectly. Subcontractors do not need to hold OFSC accreditation themselves, but the accredited head contractor must demonstrate that their subcontractor management system meets the Scheme Criteria. In practice, this means subcontractors are contractually required to produce SWMS, WHS Management Plans, worker inductions, and incident reporting that aligns with the head contractor's accredited system. A subcontractor whose SWMS does not meet the head contractor's requirements will be refused site access.

The OFSC Scheme Criteria are the published set of WHS management system requirements that accredited companies must meet. The criteria cover leadership and commitment, risk management, SWMS and Job Safety Analysis, subcontractor management, incident investigation, training and competency, and continual improvement. SWMS are addressed specifically under the risk management and subcontractor management criteria.

The criteria require the head contractor to have a documented process for identifying high-risk construction work (HRCW), obtaining SWMS from the relevant subcontractor, reviewing the SWMS for adequacy before work commences, making the SWMS available to workers, monitoring compliance with the SWMS during the work, and reviewing the SWMS when conditions change or after incidents. Each of these steps must be auditable — that is, there must be documented evidence that the process was followed for each SWMS on the project.

The OFSC does not prescribe a particular SWMS template, but accredited head contractors overwhelmingly require their subcontractors to use a standardised format. The typical format includes a 5x5 risk matrix with pre-control and post-control ratings, explicit reference to the 18 HRCW categories in WHS Regulation 2025 Schedule 1, named responsibility columns showing who will implement each control, monitoring arrangements, review triggers, a consultation record, and a worker acknowledgement section. A SWMS that omits any of these elements will typically be rejected at the review stage and returned to the subcontractor for revision.

The criteria also require the head contractor to flow their requirements down to subcontractors through the contract, the WHS Management Plan, and site inductions. The OFSC audit process checks the contract terms, the WHS Management Plan content, the induction records, and the SWMS register as a coherent system. A gap in any of these documents can generate a non-conformance finding even if the individual SWMS documents are adequate.

OFSC audits are conducted by OFSC Federal Safety Officers (FSOs), who may be OFSC staff or contracted auditors. Audits can be scheduled or unannounced, and typically involve a site visit combined with an examination of documentation at the head contractor's office. The FSO begins by reviewing the project's WHS Management Plan, then examines the SWMS register to see which subcontractors have submitted SWMS for which HRCW activities, then moves to sampling individual SWMS for adequacy against the Scheme Criteria.

On the site portion of the audit, the FSO observes actual work in progress and cross-references it against the current SWMS. If the SWMS specifies scaffolding with a double handrail and midrail, the FSO checks that the scaffolding on site matches the specification. If the SWMS specifies lock-out tag-out for energy isolation, the FSO checks that workers are carrying locks and tags. If the SWMS specifies a spotter for plant-pedestrian interaction, the FSO looks for the spotter. A gap between the document and the actual site is one of the most common sources of non-conformance findings.

The FSO then interviews workers on site. The Scheme Criteria and the WHS Act both require that workers be consulted in the preparation of SWMS and be made aware of the content. A worker who cannot describe the hazards or the controls for the work they are performing is evidence that consultation and induction were inadequate, regardless of what the paperwork says. This is why digital sign-on with auditable timestamps is increasingly expected — it demonstrates that induction occurred at a specific time before the worker commenced HRCW.

Audit findings are classified as minor non-conformance, major non-conformance, or critical non-conformance. Minor findings trigger corrective action requests that must be closed out within a specified timeframe. Major findings can result in conditional accreditation or suspension. Critical findings — typically involving imminent risk of serious injury or fatality — can result in immediate work stoppage and the issue of a notice to SafeWork NSW, WorkSafe Victoria, or whichever state regulator has jurisdiction over the site. Revocation of accreditation means the head contractor cannot continue work on any federally-funded project until the issues are resolved and accreditation is reinstated.

Subcontractors working on an OFSC-accredited project receive their SWMS requirements through the head contractor's contract, WHS Management Plan, and site induction. The specific requirements vary by head contractor and by project, but several patterns recur across the industry. Subcontractors should expect all of the following as a minimum.

First, the head contractor will require a documented SWMS to be submitted before any HRCW commences on the site. The submission deadline is typically 48 to 72 hours before the planned start of work, to give the head contractor's WHS team time to review and return comments. Subcontractors who show up on day one with a SWMS drafted that morning will be told to stand down until the document is reviewed.

Second, the SWMS must use the head contractor's template or meet their minimum content requirements. Most accredited head contractors publish a SWMS template — often as a PDF form or an editable document — and require subcontractors to use it. Where the subcontractor uses their own template, the head contractor will map the content against their minimum requirements checklist. Any gap triggers a revision request.

Third, all workers must be signed on to the SWMS before commencing the relevant HRCW. Sign-on records must identify each worker by name, include the date and time of sign-on, and cross-reference the specific version of the SWMS that was acknowledged. Paper sign-on sheets with illegible signatures are the most common source of audit findings; digital sign-on via QR code or an inducted-worker database is increasingly the expected standard.

Fourth, amendments to the SWMS must be documented, re-acknowledged by workers, and reported to the head contractor within a defined timeframe. Silent amendments — where the subcontractor changes the document without telling anyone — defeat the entire SWMS system and are treated as a serious compliance failure. The change must flow through the review, acknowledgement, and register update process before work continues.

Fifth, the subcontractor must participate in the head contractor's incident reporting and investigation system. After any incident, near-miss, or dangerous occurrence related to HRCW, the SWMS must be reviewed and — if necessary — amended. The review must be documented and reported to the head contractor, who aggregates subcontractor incident data for the OFSC audit record.

The OFSC Scheme Criteria impose requirements that exceed the bare minimum of WHS Regulation 2025. The regulation requires a SWMS to identify the work, specify hazards and risks, describe controls, and describe implementation, monitoring, and review (section 299). The OFSC criteria require all of this plus the evidentiary wrapping — documented processes, auditable sign-on, verifiable consultation, and a working register.

One practical difference is risk assessment format. WHS Regulation 2025 does not mandate a particular risk matrix or require both pre-control and post-control ratings. The OFSC does not prescribe a matrix either, but accredited head contractors almost universally require a 5x5 matrix with pre-control and post-control ratings because it provides the quantitative evidence of control effectiveness that auditors want to see. A subcontractor submitting a SWMS with only a narrative description of controls, and no quantified residual risk rating, will usually be asked to add the matrix.

Another difference is consultation. The WHS Act section 47 requires consultation with workers and HSRs in preparing the SWMS, but the regulation does not prescribe how the consultation must be documented. The OFSC criteria require documented evidence of consultation — typically a section in the SWMS listing the workers consulted, the dates of consultation, and any feedback that was incorporated into the document. A SWMS without a consultation record will be rejected as evidentially incomplete.

A third difference is responsibility assignment. The regulation requires the PCBU to ensure controls are implemented but does not require individual responsibility to be named in the SWMS. The OFSC criteria effectively require it, because without named responsibility the auditor cannot verify that a specific person is accountable for each control. The practical convention is to include a 'responsible person' column in the SWMS that names the supervisor, leading hand, or trade-specific role accountable for each control measure.

Industrial manslaughter is now a criminal offence in every Australian state, territory, and at the Commonwealth level. The offence applies where a PCBU or an officer of a PCBU causes the death of a worker through reckless or negligent conduct. Maximum penalties vary by jurisdiction but extend up to 20 years imprisonment for individuals (with some jurisdictions allowing life imprisonment) and corporate fines exceeding $18 million in several jurisdictions.

OFSC projects are not insulated from industrial manslaughter prosecution. The head contractor's accreditation does not provide any defence against charges arising from a workplace death, and in fact the documented SWMS system can become central evidence in an industrial manslaughter prosecution. Investigators and prosecutors examine the SWMS that was in force at the time of the incident, the worker sign-on records, the amendment log, and the consultation evidence to build a picture of whether the control measures in the SWMS were adequate and whether they were actually implemented on site.

The worst outcome for a head contractor is a SWMS that specifies a control which was not in place — for example, a SWMS that specifies edge protection to AS/NZS 4994 when the edge protection on site had been removed for other work and never reinstated. This gap between document and reality is treated as strong evidence of reckless or negligent conduct. The SWMS system's value is only realised when the controls it specifies are actually implemented, monitored, and maintained through the life of the work.

For subcontractors, the exposure is that industrial manslaughter charges against the head contractor can generate parallel charges against the subcontractor where the death occurred in the subcontractor's work. Accredited head contractors frequently pursue cross-claims against subcontractors whose non-compliant SWMS contributed to the incident. A subcontractor who submitted a generic template SWMS that did not address the actual site conditions can find themselves as a co-defendant in the criminal proceedings and a primary defendant in the civil claim.

A SWMS management system that satisfies OFSC auditors has several characteristics in common, regardless of whether it is operated manually or through a software platform. First, there is a single authoritative register of SWMS on the project — the current version, the active status, the sign-on count, and the next review date are all visible in one place. Second, there is a documented review process showing who reviewed each SWMS, when, and what the outcome was. Third, sign-on records are auditable, timestamped, and cross-referenced to specific versions of the document. Fourth, amendments are tracked with version numbers, amendment logs, and re-acknowledgement records.

Manual systems can meet these requirements, but the overhead is significant. A head contractor managing 40 subcontractor SWMS manually — across different templates, with paper sign-on sheets, in folders in the site office — will spend hours each week keeping the register current. Audit preparation takes days. Lost documents and illegible signatures are routine. When the OFSC FSO arrives for a surprise audit, the head contractor is often discovered scrambling to find documents that should be at arm's reach.

Software platforms reduce this overhead by enforcing structure. Every SWMS submitted through the platform follows the same format. Sign-on is captured via QR code with auto-timestamps. Amendments are versioned automatically. The register is a dashboard view that updates in real time. Review reminders are issued automatically when documents approach their review date. This does not eliminate the head contractor's responsibility to actually read the SWMS and enforce compliance, but it removes the clerical burden and creates an audit-ready record with minimal manual work.

When selecting a platform for an OFSC project, verify that the platform supports the specific OFSC requirements: auditable sign-on records, documented consultation, named responsibility, monitoring arrangements, review triggers, and permanent historic records. A platform that produces only a PDF is not sufficient — the system must retain the evidentiary wrapping that auditors will examine.

Recurring OFSC audit findings reveal the patterns of SWMS failure that accredited head contractors need to avoid. The single most common finding is absence — a SWMS was not prepared for HRCW that actually occurred on site. This happens when subcontractors start work before the SWMS is submitted and reviewed, or when a task is reclassified mid-work and a SWMS is not prepared for the new activity. The fix is a robust pre-start review where no HRCW commences without a current, reviewed SWMS.

The second most common finding is inadequacy — a SWMS exists but does not meet the Scheme Criteria. Typical inadequacies include missing risk matrices, missing named responsibility, missing monitoring arrangements, missing review triggers, and missing consultation records. The fix is a pre-review checklist that the head contractor's WHS team applies to every submitted SWMS before it is accepted. Documents that do not pass the checklist are returned with specific feedback.

The third most common finding is gap — the SWMS exists and meets the criteria on paper, but the controls specified in the document are not present on site. A scaffolding SWMS that specifies a double handrail and midrail on every working platform is contradicted by a working platform that has no midrail in place. The fix is active monitoring — the head contractor's WHS team must inspect the site regularly and verify that SWMS controls are actually in place, not just assume they are.

The fourth most common finding is sign-on failure — a SWMS exists and the controls are in place, but workers performing the HRCW have not been signed on to the current version. Paper sign-on sheets are particularly prone to this failure because they are easily lost, illegible, or partially completed. The fix is digital sign-on with auditable timestamps that cannot be retroactively faked.

The fifth most common finding is stale documents — a SWMS was prepared at the start of the project and never reviewed, even when site conditions changed or incidents occurred. The fix is scheduled reviews, event-triggered reviews (after incidents or near-misses), and an automated reminder system that prompts review before the SWMS expires.

A SWMS that will pass OFSC scrutiny is built from a structured template rather than a blank page. The template should have every mandatory section pre-populated with placeholder content: work description, HRCW identification, hazard register, risk matrix, control measures, implementation arrangements, monitoring arrangements, review triggers, consultation record, training and licensing requirements, PPE requirements, plant and equipment register, emergency procedures, and worker acknowledgement.

The work description should be specific to the task, not generic. Instead of 'electrical work', specify 'installation of a new 200 amp three-phase subboard in a live commercial switchroom, including isolation of the upstream main switch, installation of new busbars, termination of feed cables, and re-energisation and testing.' Instead of 'excavation', specify 'excavation of a 2.3 metre deep trench for gas main installation, 45 metres long, in clay soil adjacent to an existing footpath, with BYDA plans identifying no conflicting services in the tolerance zone.'

The hazard register should identify every hazard that is reasonably foreseeable for the specific task, not a generic list copied from a template. A live switchroom task needs electrical hazards (contact, arc flash, induction, residual capacitance), as well as manual handling for heavy equipment, confined workspaces within the switchroom, and potential fire hazards from the hot work involved in termination. A trench task needs collapse hazards, underground service strikes, atmospheric hazards in deeper sections, plant-pedestrian interaction, and the hazards of adjacent infrastructure (the footpath).

The control measures should be documented in the order of the hierarchy of controls, not randomly. Elimination and substitution controls appear first (can the task be redesigned to avoid the hazard?), then isolation (can the hazard be physically separated from the worker?), then engineering controls (guardrails, shoring, RCDs, interlocks), then administrative controls (permits, training, SWMS, toolbox talks), then PPE (fall-arrest harnesses, arc-rated clothing, respirators, hearing protection). A SWMS that lists PPE first, with higher-order controls as secondary considerations or omitted entirely, will be criticised as not reflecting the regulatory requirement to eliminate risks so far as is reasonably practicable.

The implementation, monitoring, and review arrangements should be specific. Instead of 'monitor as required', specify 'site supervisor conducts visual inspection of fall-arrest anchor points at the start of each shift and after any weather event with wind gusts above 40 km/h; findings recorded in the daily pre-start log; any damaged anchor takes the affected work area out of service until repair or replacement.' Specificity is the evidentiary currency of an OFSC audit.