Collaborative risk management: involving workers in safety

Collaborative risk management means the people who do the work help find hazards, judge how serious they are and choose the controls, rather than one manager doing it alone from an office. It's how the WHS laws are meant to work in practice. The business must consult the workers it affects, and the people on the floor usually know where the real risks are.

This guide explains what collaborative risk management looks like, how to set it up with workers, supervisors and contractors, and how to keep it going.

What it means

Under the WHS Act, the business that controls a risk must manage it. That's the PCBU, and it can't hand the job to a single person and forget about it. Collaborative risk management spreads the work in a structured way:

• Workers report hazards, describe how the work is really done and test whether a control works.
• Supervisors pass on what they see, make sure controls are followed and act on reports.
• Managers and safety advisers set the process, approve the controls and track the results.
• Contractors and suppliers share what they know about their own work and the site they enter.

The key shift is from a manager writing a risk assessment in isolation to a group that agrees on what the risks are and what will be done about them.

Why it works

Workers see things managers miss. A forklift driver knows which aisle is always blocked at shift change. A tradie knows the cable tray is in the way of the lift. When people closest to the work are part of the process, hazards are found earlier, controls are more realistic, and people are more likely to follow them.

It also builds trust. When a report leads to a visible change, people report more. When it goes nowhere, they stop. Collaboration is as much about closing the loop as it is about asking.

How to set it up

1. Use the consultation arrangements you already have

Under section 47 of the WHS Act, the business must consult workers who are, or are likely to be, affected by a work health or safety matter. That includes hazard identification, risk assessment, decisions about controls and changes to the workplace. Use your health and safety representatives, safety committee and toolbox talks as the formal channels. If you have none, start with the regular team meeting.

2. Ask the people doing the work

Walk the job with the crew, not just the plan. Ask:

• What's the hardest part of this task?
• Where do you feel you have to rush, work around something or skip a step?
• What's changed since the last time we looked at this?
• What would you do differently if you could?

Write down the answers. Then check them against the risk assessment, and update the assessment where the answers point to a gap.

3. Share the hazard list with contractors and suppliers

On shared sites, one party's hazard can become another party's injury. A principal contractor needs the risks from every trade on the site. A transport operator needs to know about the loading dock, and the warehouse needs to know about the truck's load restraints. Ask everyone to bring their own hazards and controls to the same table.

The chain of responsibility principle applies in transport, and it makes shared risk even more important. Each party in the supply chain has a duty to manage the risks it can control.

4. Make reporting easy

People report what's easy to report. Keep a simple form or app, a clear way to raise a concern in the moment, and a named person who follows it up. The hazard report form gives a starting point. Our guide to how to report a hazard in the workplace covers the steps workers can take.

5. Agree on controls together

Once you've identified a risk, work out the control as a group. Use the hierarchy of controls: remove the hazard first, then engineer it out, then use procedures and training. A control the team helped design is more likely to be used. Ask: will this work at 3am in the rain? What happens if the person who usually does it is off sick?

6. Close the loop

Tell the person who reported the hazard what was done, and why. Post the outcome where the crew can see it. If you decide not to act on a report, explain why, and what would change that decision. If a control doesn't work, say so and fix it.

An example from a multi-trade site

This example is a composite, to show how the steps fit together. A builder on a multi-trade site finds that the excavation for a drainage line is close to a live gas main. The site supervisor brings the concrete crew, the plant operator and the civil contractor together. The plant operator explains that the spoil pile has been blocking the view of the marker tape. The crew suggests a physical barrier and a spotter. The group agrees on a stand-off distance, a hand-dig zone near the main, and a shared sign-off before the work starts each day. The method goes into the job's SWMS, and each trade signs it.

A week later, the crew reports that the barrier is hard to move when they need access. The team changes the barrier to a hinged gate. The change is recorded, and the plan is updated.

When to review the controls

A review is needed when a control isn't working, before a change at the workplace, when a new hazard is found, when consultation shows a review is needed, or when a health and safety representative requests one. These triggers come from regulation 38 of the WHS Regulations. Collaboration makes these reviews easier, because the people affected are already involved. For a deeper look at reviews, see reviewing risk controls: why it matters and how to do it.

Keep a record

A shared risk register keeps the process visible. For each risk, record:

• what the hazard is and where it happens
• who was involved in identifying it and in choosing the control
• the control, who owns it and when it will be checked
• the result of each review

The risk register template gives you the columns. Record the consultation too. A worker consultation record shows who was asked, what they said and what changed as a result.

Common questions

Who is responsible for risk management if everyone is involved? The PCBU is still responsible. Collaboration spreads the work and the knowledge, but it doesn't move the duty. The business must make sure the process happens and that the controls are in place.

Do we need a formal committee? Not always. The law requires consultation, not a particular structure. A small business may only need a regular team meeting and a clear way to raise hazards. A larger site may need committees and designated health and safety representatives.

What if workers don't want to speak up? Make it safe to do so. Accept reports without blame, respond quickly, and be open about what you've changed. Staff are more likely to speak up when they see that it leads to action.

How often should we review the process? Set a schedule for reviewing the risk register, and review again whenever a trigger occurs. Higher-risk work needs more frequent checks than low-risk work, so base the schedule on the risk rather than a fixed calendar.

---

This guide is general information, not legal advice. Check the current law with your WHS regulator.