Quick answer: A WHS management system is the set of policies, processes, roles and records a business uses to plan, carry out, check and improve how it manages health and safety. Queensland WHS legislation does not generally require every business to maintain a formal WHS management system in a prescribed format. However, businesses must have effective arrangements in place to manage work health and safety risks and meet their legal obligations. A structured WHS management system can help businesses manage these responsibilities consistently and demonstrate how risks are being controlled. Principal contractors on construction projects of $250,000 or more must also prepare a written WHS management plan.
Most businesses have some safety documents. Fewer have a system. The difference shows up when something goes wrong, when a client asks for evidence, or when the business grows past the point where the owner can see every job. This article explains what a WHS management system is, whether you need one, and how to build one that suits your size.
What a WHS management system is
A WHS management system is not a folder of policies. It is how safety actually gets managed in your business, written down so it is consistent and can be checked. It follows a simple cycle: plan what you'll do, do it, check it worked, and improve it.
Most systems cover these elements:
- A WHS policy and clear commitment from leadership
- Roles and responsibilities, including who does what on site
- Consultation with workers
- Hazard identification and risk management
- Safe work procedures, and SWMS for high-risk construction work
- Training, competency and supervision
- Contractor management
- Incident reporting and investigation
- Inspections, audits and corrective actions
- Management review, document control and records
If you want the document side in more detail, our guide to which WHS documents a Queensland business needs lists the core records.
Is a WHS management system a legal requirement?
The Work Health and Safety Act 2011 (Qld) does not generally prescribe a particular WHS management system format for businesses.
However, under section 19, a person conducting a business or undertaking (PCBU) must ensure, so far as is reasonably practicable, the health and safety of workers and other persons who may be affected by the work carried out.
This requires businesses to implement appropriate arrangements for identifying hazards, assessing and controlling risks, consulting with workers and monitoring workplace safety.
The level of documentation and complexity of these arrangements should reflect the nature, size and risks of the business. A small, low-risk business may require relatively straightforward processes, while a larger or higher-risk operation will generally need more comprehensive arrangements.
Officers, such as directors, also have a duty to exercise due diligence (section 27). That includes taking reasonable steps to make sure the business has and uses appropriate resources and processes to manage risks, has processes for receiving and responding to information about incidents and hazards, and to verify those resources and processes are actually in place. In practice, that is very difficult to do without a system. Our article on officer due diligence in Queensland explains those duties in more detail.
There is one specific written requirement worth knowing. Under the Work Health and Safety Regulation 2011 (Qld), a construction project is construction work costing $250,000 or more, and the principal contractor must prepare a written WHS management plan before work on the project starts (sections 292 and 309).
A system, a plan and ISO 45001: what's the difference?
| What it is | Who needs it | |
|---|---|---|
| WHS management system | How the whole business manages health and safety, day to day | Any business, sized to its risks |
| WHS management plan | A written plan for one construction project | Principal contractors on construction projects of $250,000 or more |
| ISO 45001 | An international standard for an occupational health and safety management system, which can be independently certified | Businesses that want or need certification, often for tenders |
Signs you need one, or need to fix yours
- Your business has grown and safety still lives in one person's head
- You have more than one site, or crews working away from base
- You engage contractors or labour hire regularly
- A client, principal contractor or tender is asking for evidence of your system
- An incident or near miss showed that procedures weren't followed
- Your documents came from a template pack and don't match how you work
Sizing it to your business
A WHS management system should be proportionate to the business's activities, hazards and risks.
For example, a small electrical contracting business might have a concise WHS policy, risk management processes, relevant safe work procedures, SWMS for high-risk construction work, worker induction and competency records, inspection arrangements and incident reporting processes.
However, the actual controls required will depend on the work undertaken, including electrical risks, working at heights, construction activities and any other applicable hazards.
A larger manufacturing business operating multiple shifts, complex plant and contractor arrangements will generally require more structured processes, including defined management responsibilities, training and competency systems, contractor management, planned inspections, internal audits and management reviews.
The objective is not to produce more documentation than necessary. It is to establish practical arrangements that effectively manage risks and can be consistently implemented and verified.
Bigger is not better. A system people don't use gives you paperwork without protection, and can count against you after an incident if it shows procedures that were never followed.
How to build one
- Start with a gap assessment of what you already do and what is missing.
- Prioritise your highest risks, so the effort goes where harm is most likely.
- Write down what you actually do, then improve it, rather than copying someone else's system.
- Consult your workers and train them in the parts that affect their work.
- Check it works through inspections, audits and incident reviews.
- Review it regularly, and after any significant change or incident.
An effective WHS management system can provide a strong foundation for ISO 45001 certification. However, additional work may be required to address the standard's requirements for leadership, worker consultation and participation, operational planning, performance evaluation, internal auditing and management review.
Businesses considering certification should undertake a gap assessment against ISO 45001 before commencing the certification process. See our ISO certification services for how that works.
Is your WHS management system working for your business?
Having WHS policies and procedures is one thing. Knowing whether they are suitable, implemented and effective is another.
Overwatch Safety Solutions helps Queensland businesses review, develop and improve their WHS management systems.
Whether you're starting from scratch, updating outdated documentation or responding to client and tender requirements, we focus on practical systems suited to your operations and risks.
Contact Overwatch Safety Solutions to arrange a WHS management system gap assessment.
We'll identify what is working, highlight gaps and recommend practical improvements without unnecessarily replacing your existing arrangements.
Frequently asked questions
Do small businesses need a WHS management system?
Small businesses must comply with their applicable WHS duties, but Queensland legislation does not generally require every business to maintain a formally documented WHS management system.
The arrangements needed will depend on the nature of the work, the hazards involved and the level of risk. For many small businesses, a practical combination of policies, risk assessments, safe work procedures, training records and routine safety checks may be appropriate, provided these arrangements effectively manage the relevant risks.
Is a WHS management plan the same as a WHS management system?
No. A WHS management plan is a written plan for a specific construction project, required from the principal contractor when the work costs $250,000 or more. A WHS management system covers how the whole business manages safety.
Do we need ISO 45001 certification?
Not by law. Certification is voluntary, but some clients and tenders ask for it. A WHS management system can be built to align with ISO 45001 and certified later if you need it.
Sources: Work Health and Safety Act 2011 (Qld), sections 19 and 27; Work Health and Safety Regulation 2011 (Qld), sections 292 and 309; WorkSafe Queensland, Principal contractors ($250,000 construction project threshold).
Last reviewed: November 2026.