WHS Management System Manual
Ready-to-implement WHS management system manual for a small or medium business, structured to ISO 45001:2018: policy, responsibilities and officer due diligence, consultation and issue resolution, risk management procedure, legal register, objectives, training and induction, document control, thirteen operational procedures, incident management, inspections, internal audit, management review and corrective action, with fourteen registers and forms.
SWMS variants reference your stateβs WHS legislation. Instant download after payment.
The WHS Act does not require a document called a management system, but it requires what a system produces: a business must ensure health and safety so far as is reasonably practicable (WHS Act 2011 (NSW) s19), and its officers must exercise due diligence, which includes ensuring there are processes to manage risk and verifying that they are used (s27). This manual is that system in writing, ready to implement in a small or medium business. It follows the clause structure of ISO 45001:2018, which is the structure client prequalification questionnaires follow, and covers the policy, named responsibilities and an officer due diligence table, consultation and issue resolution, the risk management procedure, the legal register, objectives, training and induction, document control, thirteen operational procedures, incident management, inspections, internal audit, management review and corrective action. Fourteen registers and forms are included, with a cross-reference to each ISO 45001 clause. It is a manual for the whole business. It is not a project WHS management plan and it is not a SWMS.
Hazards identified
10 hazards covered, sorted by priority.
Prosecution of the business and its officers with no evidence of due diligence
Known risks left uncontrolled until someone is hurt
Injury in the first weeks of work, when risk is highest
A separate offence on top of the incident itself
Equipment failure, unlicensed operation and uninsured loss
Psychological injury claims and a breach of the psychosocial risk provisions
Controls that no longer match the work
The same incident repeating
A paper system that fails a client audit and offers no defence
Loss of work with principal contractors and government clients
Control measures
Hierarchy-of-controls order: elimination β substitution β isolation β engineering β administrative β PPE.
- 1Legal requirements table mapping the duties in the Act and Regulation to the sections of the manual
- 2Signed health and safety policy with the commitments ISO 45001 requires
- 3Responsibilities table for the director, coordinator, supervisors, workers, health and safety representative and contractors
- 4Officer due diligence table: the six due diligence steps, how each is carried out and the evidence kept
- 5Consultation procedure, including health and safety representatives, committees and a five-step issue resolution procedure
- 6Hazard identification and risk management procedure with a risk matrix, required actions and review triggers
- 7Legal register procedure and annual objectives and targets
- 8Competence, induction and training procedure with a training matrix
- 9Communication table and document and record control, with a retention schedule
- 10Thirteen operational procedures: safe work procedures and SWMS, plant, contractors, purchasing, hazardous chemicals, manual tasks, facilities, PPE, fitness for work, psychosocial hazards, remote work, management of change, and emergency and first aid
- 11Incident management: reporting, notifiable incidents, investigation and return to work
- 12Monitoring schedule, health monitoring, internal audit and management review procedures
- 13Nonconformity and corrective action procedure
- 14Fourteen appendices: hazard register, legal register, objectives, training matrix, induction checklist, contractor, plant and chemical registers, incident report, corrective action register, inspection checklist, audit checklist, management review minutes and the ISO 45001 cross-reference
Applicable Codes of Practice
The risk management procedure at the centre of the system.
The consultation and issue resolution arrangements.
Identification and control of psychosocial hazards.
Facilities, the work environment and emergency plans.
The first aid needs assessment, kits and first aiders.
Who this is for
- βSmall and medium businesses that have safety procedures in people's heads and nothing written as a system
- βContractors asked for a WHS management system in a tender or prequalification questionnaire
- βBusinesses preparing for ISO 45001 certification that need the documented structure to build on
- βDirectors and owners who want written evidence of due diligence
- βBusinesses replacing a manual written to AS/NZS 4801, which can no longer be certified to
What you receive
- βFully editable Microsoft Word (DOCX) management system manual, about 5,900 words, with bracketed fields for your business, people and dates
- βTen sections following the ISO 45001:2018 clause structure
- βA legal requirements table for the state you choose, citing its own Act, regulation and regulator
- βA health and safety policy ready to sign
- βOfficer due diligence table
- βRisk management procedure with a risk matrix
- βThirteen operational procedures to adopt or expand
- βRecord retention schedule
- βFourteen appendices of registers and forms, including a 23-question internal audit checklist and a management review agenda
- βCross-reference from each ISO 45001 clause to the section of the manual that addresses it
Worked example
A 25-person fabrication business was asked for its WHS management system in a prequalification questionnaire for a principal contractor. It had toolbox talks, a first aid kit and good habits, and no policy, no hazard register and no record of training. The questionnaire scored it at 31 percent and the work went elsewhere. With the manual completed, the owner had a signed policy, a hazard register built with the workshop staff, a training matrix that showed two expired forklift licences, and after three months an internal audit and a set of management review minutes to attach to the next questionnaire.
Related legislation
- Work Health and Safety Act 2011 (NSW) β s19 primary duty of care; s27 duty of officers; s28 duties of workers
- Work Health and Safety Act 2011 (NSW) β ss38 and 39 notifiable incidents; s46 consultation between duty holders; ss47 to 49 consultation with workers
- Work Health and Safety Act 2011 (NSW) β Part 5 health and safety representatives, committees and issue resolution
- Work Health and Safety Regulation 2025 (NSW) β ss34 to 38 identifying hazards, hierarchy of control, maintaining and reviewing controls
- Work Health and Safety Regulation 2025 (NSW) β s39 information, training and instruction; ss40 to 48 facilities, first aid, emergency plans, PPE and remote or isolated work
- Victoria: Occupational Health and Safety Act 2004 (Vic) β ss21 to 25, 35 to 39 and 144 (the Victorian edition is written against these as an OHS management system manual)
Frequently asked questions
Is a WHS management system a legal requirement?
Not by name. The WHS Act requires a business to ensure health and safety so far as is reasonably practicable and requires officers to exercise due diligence. A working system is how those duties are met and shown. A system is required outright for ISO 45001 certification, for accreditation under the Australian Government building and construction WHS Accreditation Scheme, and wherever a client requires one.
Does this manual make my business ISO 45001 certified?
No. The manual follows the ISO 45001:2018 clause structure and includes a cross-reference to each clause, which is what most prequalification questionnaires test. Certification requires the system to be implemented and then audited by an accredited certification body.
Is it specific to my industry?
The manual is written for any small or medium business. The hazard register includes examples and is completed with your own hazards, and the operational procedures are short so that you can expand the ones that matter in your work. If you want a plan written for your industry with the hazard register and procedures already in place, OH Consultant writes WHS management plans to order.
How is this different from a WHS management plan?
The management system belongs to the business and is permanent. A WHS management plan belongs to one project or site; on a construction project of $250,000 or more the principal contractor must prepare one. A builder has one system and a plan for each project.
Which state versions are available?
All eight: NSW, VIC, QLD, SA, WA, TAS, NT and ACT. Each cites that jurisdiction's Act, regulation and regulator. The Victorian edition is an OHS management system manual written against the Occupational Health and Safety Act 2004, with employer duties and Victorian consultation arrangements.
How long does it take to implement?
Completing the manual and registers takes most businesses a few days of work spread over two to three weeks, most of it on the hazard register with workers. The system is then run for about three months before the first internal audit and management review, which is when it can be shown to be working.
Document details
Related SWMS templates
β£οΈAsbestos Management Plan Template SWMS
Ready-to-complete written asbestos management plan for a workplace where asbestos has been identified or is asβ¦
ποΈSite Safety Management Plan Template SWMS
Ready-to-complete site safety management plan for construction work below the value at which a principal contrβ¦
πͺ¨Silica Risk Control Plan SWMS
Overarching crystalline silica risk control plan for PCBUs carrying out high-risk processing of a crystalline β¦
π€Lone Worker Healthcare SWMS
Community nursing, after-hours solo clinical shifts, rural outreach, and home-visit healthcare settings. Coverβ¦
π¨Anaesthetic Gas SWMS
Waste anaesthetic gas (WAG) management in operating theatres, recovery rooms, procedure suites, and dental surβ¦
π₯NDIS Support Worker SWMS
WHS management for NDIS and in-home disability support workers β in-home risk assessment, manual handling, cliβ¦