Where to start — and how the pieces fit together
A health and safety system is simply how you actually meet your HSWA duties day to day — your policy, your hazard and risk process, your procedures, training, records and review, all working together. You don't need a fancy framework to start: lead from the top, find and control your real risks, bring your workers with you, and keep reviewing. This guide is the map — each step links to the detailed how-to. A standard like ISO 45001 is optional; it's the law, not a certificate, that sets what you must do.
A system isn't a folder on a shelf — it's the set of policies, processes, records and habits you use to keep people safe and to show you are meeting your duties under the Health and Safety at Work Act 2015. The Act requires you to identify hazards, manage risks so far as is reasonably practicable, engage your workers, keep records and demonstrate due diligence. A good system makes all of that routine. Adopting the AS/NZS ISO 45001 standard is voluntary and, on its own, does not mean you comply with the law — the legislation sets your obligations, not the standard.
| Step | What to put in place |
|---|---|
| 1. Lead & commit | Set your health & safety policy and make leadership's commitment visible. Officers must do their due diligence. |
| 2. Find & assess risks | Build a hazard register and risk assessment, and write safe operating procedures for the risky tasks. |
| 3. Control & resource | Put controls in place using the hierarchy, provide the right PPE, and manage things like hazardous substances. |
| 4. Train & engage | Run inductions and training, hold toolbox talks, and build real worker engagement. |
| 5. Respond, record & review | Be ready with first aid, an emergency plan and incident investigation; keep records; and audit and improve. |
Don't try to do everything at once. Start with the risks most likely to seriously harm someone — your critical risks — and get solid controls and records around those first, then widen out. A simple system your team actually uses beats a perfect one that sits untouched. For a small business, that might be a clear policy, a live hazard register, a handful of procedures, induction and toolbox talks, and an incident process — then grow from there. See small business health & safety.
A system earns its keep only if it stays current. Review it regularly and after any incident or change, track whether controls are working with lead and lag indicators, and keep the records that prove your due diligence. The cycle — plan, do, check, improve — never really stops. When you're ready to decide how to run all this in practice, see what to look for in a health & safety system.
Get a complete, HSWA-ready system in one place. Book a demo and we'll show you how it works — free 30-day trial included.
It is how you actually meet your HSWA duties day to day — your policy, hazard and risk process, procedures, training, records and review working together. It's not a folder on a shelf; it's the habits and records that keep people safe and show you are meeting your obligations.
Start with leadership and a clear policy, then find and assess your risks, put controls in place, train and engage your workers, and set up how you'll respond, record and review. Tackle your most serious risks first rather than trying to do everything at once.
No. AS/NZS ISO 45001 is a voluntary standard, and adopting it does not by itself mean you comply with the law. The Health and Safety at Work Act 2015 sets your duties; a standard is just one optional framework for organising your system.
Match it to your business. A small, low-risk business needs a clear policy, a live hazard register, a few procedures, induction and toolbox talks, and an incident process. A larger or higher-risk operation needs more depth. A simple system you actually use beats a complex one nobody touches.
Regularly, and whenever something changes or an incident occurs. A health and safety system is a continuous cycle — plan, do, check, improve — not a one-off setup, and your records should show that ongoing review.
