What is a safety management system (SMS) and why use one?

A safety management system (SMS) is the set of policies, procedures, records and reviews your business uses to find hazards, control risks and improve safety over time. Australian WHS law doesn't ask for an SMS by name. It requires you to manage risks to workers and others, and an SMS is the practical way to do that consistently and to show you have done it. Whether you run a three-person crew or a large site, an SMS turns safety from a set of habits into a system that works when people change jobs or the work changes.

What an SMS includes

An SMS doesn't have to be a single document. It is a set of connected parts that answer the same questions: what are the hazards, what are we doing about them, who is responsible, and how do we know it's working?

The most common mistake is writing the documents and then not using them. An SMS only works when the policy is what people do on site and the records show it.

The core parts, in more detail

Policy and leadership

Start with a written WHS policy. It should say what you are committed to, such as keeping workers and contractors safe and sending everyone home unhurt. It is only useful if managers and owners act on it. When leaders attend inspections, stop work when there is a risk, and ask about safety first, the rest of the team follows.

Hazard identification and risk control

Identify hazards for each task and each area. Use pre-start checks, workplace inspections, incident reports and worker feedback to find them. Then assess how likely and how serious each one is, and choose a control.

Use the hierarchy of controls to pick controls. Remove the hazard if you can. Substitute, isolate or engineer it if you can't. Use administrative controls and personal protective equipment only as the last layer, not the first.

Training and competency

Your SMS should say who needs what training before they start work, what training is needed for high-risk tasks, and how refresher training is recorded. Keep a training register so you can show who was trained and when. Check competency before you assign a task, not after an incident.

Consultation

Under section 47 of the WHS Act, you must consult workers on health and safety matters. In practice that means regular toolbox talks, safety meetings and a simple way for anyone to raise a concern. Record what was raised and what you did about it.

Incident reporting and investigation

Make it easy to report incidents, injuries and near misses. Investigate them to find the root cause, not to find someone to blame. Then update the controls or training that failed. A near miss is a warning that a hazard is not yet controlled, so treat it as useful information.

Review and improvement

Set a schedule for reviews, and keep it. Review controls when a task changes, when something goes wrong, when new equipment arrives, or when a health and safety representative asks. Under regulation 38 of the WHS Regulations, a control must be reviewed in those circumstances, so your SMS should make the trigger obvious.

What an SMS does for your business

It helps you meet your duties. The WHS Act makes the business that controls the work responsible for keeping people safe, so far as is reasonably practicable. Officers must exercise due diligence to make sure the business has the processes to do that (section 27). A documented SMS is the simplest way to show those processes exist. It does not, on its own, make you compliant.

It finds problems earlier. Hazards are easier to fix before they hurt someone. Regular inspections and near-miss reporting give you a chance to act before an incident happens.

It keeps work consistent. When the same steps are followed on every site, a new starter or a relief supervisor can do the job safely. Confusion and rework drop.

It supports your insurance and tender bids. Insurers and principal contractors often ask for evidence of your safety system. A well-kept SMS makes that easier to provide. Don't assume it will lower your premium; ask your insurer what they look for.

It builds trust. Workers are more likely to speak up when they see that reports lead to action. Clients and regulators also take a business more seriously when its systems are visible and maintained.

How SafetyDocs helps

SafetyDocs has over 1,250 expert-written templates, including WHS policies, risk registers, safe work method statements, training registers and incident forms, so you don't start from a blank page. The job, client and site details fill themselves in. Workers sign on any phone from a text, link or QR code, with no app or account. When a document changes, everyone who signed is asked to sign the new version, and each job keeps a dated activity log of who read and signed what.

Those records are part of the system, not an extra job. They show that the policy was issued, the training was done and the controls were reviewed. They help you meet your duties, but the work on site still has to match what is written.

How to start an SMS

You don't need to build the whole system at once. A practical order:

1. Write a short WHS policy and have the owner or senior manager sign it.
2. List your main tasks and hazards in a risk register. Start with the high-risk work.
3. Write procedures for the top risks, such as a safe work method statement for high-risk construction work or an SOP for a piece of plant.
4. Set up training and records: induction, task training and a training register.
5. Put a reporting process in place for incidents, near misses and hazards.
6. Schedule reviews: a monthly walk-through, a quarterly review of the register and an annual review of the whole system.

Many businesses use templates to start. Adapt each one to your site, then use it. The SMS templates in our library cover policy, plans and procedures.

SMS and other standards

Some businesses also align their SMS with AS/NZS ISO 45001:2018, the international standard for occupational health and safety management. You don't have to certify to it to use its structure, and it works well alongside a quality system. If you already run an ISO quality system, you can often share the document control and audit schedule.

Common questions

Do I have to have a safety management system?

Australian WHS law doesn't use the phrase, but it does require you to manage risks, consult workers, keep training records and review controls. An SMS is the usual way to do all of that in one place.

Is an SMS the same as a safety plan?

Not quite. A safety plan is usually for one project or site. An SMS is the system for the whole business, and the site plan sits inside it.

How big does my SMS need to be?

As big as your risks require. A small business with low-risk work can have a short policy, a risk register and a training record. A business with high-risk work needs more detail in its procedures and reviews.

Can I use software to run it?

Yes. Software helps with templates, reminders and records, especially across several sites. It doesn't replace the thinking. Someone still has to identify the hazards and decide the controls.

This is general information, not legal advice. Check the current law with your WHS regulator.