Guide · Safety

WHS management system for small business

Every business that employs or directs people has work health and safety duties. A WHS management system is how you meet them consistently — and prove it when a client, tender or regulator asks. Here's what one contains, how it relates to ISO 45001, and how to build a lean version that a small team will actually use.

What a WHS management system is

A WHS management system (WHSMS) is a structured, documented way of managing safety across your business. It turns "we try to be safe" into a system you can point to: how you identify and control risks, train your people, consult with them, respond when something goes wrong, and improve over time. It exists to help you meet your duties under WHS law — and, increasingly, to satisfy the head contractors and government buyers who won't engage you without one.

The core elements

• WHS policy — a signed statement of your commitment and how safety is managed.
• Risk & hazard management — a risk register and the process for identifying hazards and controlling them through the hierarchy of control.
• Safe work procedures & SWMS — how high-risk tasks are done safely.
• Training & competence — a matrix of who's competent for what, with tickets and inductions tracked.
• Consultation & communication — toolbox talks, and how workers raise and hear about safety issues.
• Incident reporting & investigation — capturing hazards and incidents, investigating, and closing corrective actions.
• Emergency preparedness — response plans and drills.
• Monitoring & review — inspections, audits and management review to keep improving.

Is it a legal requirement?

WHS law doesn't demand a specific "system", but it does require you — as a PCBU (person conducting a business or undertaking) — to manage health and safety risks so far as is reasonably practicable, to consult your workers, to provide information, training and supervision, and to respond to incidents. A management system is simply how businesses meet those duties reliably and demonstrate they've done so. And plenty of clients and tenders require one outright.

How it relates to ISO 45001

ISO 45001 is the international standard for an occupational health & safety management system. You don't need to be certified to have a WHS management system — but building yours to align with ISO 45001 gives you a recognised framework and the option of third-party certification, which is often what wins the tender. Because ISO 45001 shares its backbone with ISO 9001 and 14001, it also slots neatly into an integrated system if you run quality and environment too.

Building one that's actually used

1. Right-size it to your work and risks — a small crew doesn't need a corporate manual.
2. Put it where the work happens — on phones, not in a folder in the office.
3. Make reporting frictionless — if logging a hazard is hard, nobody does it.
4. Close the loop — every incident and inspection finding tracked to a corrective action.
5. Review and improve — inspections, audits and a management review keep it alive.

Frequently asked questions

Related guides

General information about WHS management systems, not legal advice. Confirm your duties under the WHS legislation in your state, territory or country.