Safety and Risk Consulting

The distinction matters when findings are reviewed by a regulator, tested in proceedings, or relied upon to demonstrate corrective action to a client or insurer.

The characteristics of a defensible investigation finding:

The finding is supported by documented evidence, not inference. Conclusions drawn from interviews alone, without corroborating physical evidence, site observations, or documentary records, are vulnerable to challenge.

The investigation method is identifiable. Using an established methodology — ICAM, Taproot, or another recognised framework — provides a transparent basis for how the analysis was conducted. An investigation without a discernible methodology is difficult to defend.

Contributing factors and systemic causes are identified alongside the immediate cause. A finding that stops at the proximate cause addresses what happened, not why — and a 'why' that extends only to the last person in the chain of events is rarely the complete picture.

The investigator has appropriate independence. An investigation conducted entirely by personnel within the work group where the incident occurred has an inherent conflict of interest that an external reviewer will identify.

These are not complex requirements. But they require deliberate process — and that process is easier to establish before an investigation is needed than during one.

www.safetyandriskconsulting.com.au

Due diligence under the Act requires officers to: acquire and keep up-to-date knowledge of WHS matters; understand the nature of the business's operations and the associated hazards and risks; ensure the business has appropriate resources and processes to manage WHS; ensure processes exist to receive and respond to information about incidents and hazards; and verify that resources and processes are actually being used.

The last point is often where exposure sits. Signing off on a WHS system's existence is not the same as verifying that it is operating as intended.

For senior leaders at mid-tier construction contractors, the question worth asking is not whether a WHS system exists — it's whether you have the information you need to be satisfied that it is working.

www.safetyandriskconsulting.com.au

Queensland operates under the harmonised Work Health and Safety Act 2011 and Work Health and Safety Regulation 2011. Most Queensland contractors understand their obligations under this framework reasonably well.

Victoria operates under the Occupational Health and Safety Act 2004 — a different legislative instrument, with a different duty holder structure and a different enforcement agency.

The practical differences that affect a Queensland contractor mobilising into Victoria:

The duty structure. Victoria uses 'employer' as the primary duty holder, not the PCBU framework of the harmonised model. This affects how duties are framed and who holds them, particularly on multi-employer sites.

Designer and manufacturer duties. The harmonised model imposes specific upstream duties on designers and manufacturers. Victoria's OHS Act structures these differently — contractors who are also designers need to understand the distinction.

The enforcement agency. WorkSafe Victoria has its own enforcement posture, guidance materials, and audit focus areas. Codes of practice that apply in Queensland may not be the applicable reference in Victoria, or may be structured differently.

Incident reporting. Notification timeframes and categories of notifiable incidents differ between jurisdictions in ways that matter when something goes wrong.

Operating under your Queensland WHS system in Victoria doesn't mean you're compliant in Victoria. A jurisdiction-specific review before mobilisation identifies the gaps. It's a straightforward exercise when done proactively — considerably less so when done in response to a regulatory inquiry.

www.safetyandriskconsulting.com.au

The recurring gaps in pre-certification audits:

Context of the organisation. Section 4 requires the business to identify internal and external issues relevant to its WHS purpose, along with the needs and expectations of interested parties. Most systems have a clause referencing this; few have the documented analysis the standard actually requires.

Operational planning and control. The standard requires that operational controls are determined and implemented — not just documented. Auditors look for evidence that controls are applied consistently across projects, not just described in a procedure.

Performance evaluation. Section 9 requires monitoring, measurement, analysis, and performance evaluation against defined objectives. In practice, this means more than recording lag indicators. It means demonstrating that data is being used to inform decisions.

Worker participation and consultation. Section 5.4 is often under-evidenced. Worker consultation in hazard identification and risk assessment needs to be documented, not asserted.

Certification auditors are looking for evidence of implementation, not documentation of intent. The distinction matters when preparing a system for third-party scrutiny.

www.safetyandriskconsulting.com.au

The Workplace Health and Safety (Crystalline Silica) Amendment Regulation 2024 introduced specific obligations for businesses in construction around exposure monitoring, health monitoring, and silica-specific training.

These are not new considerations for most HSE Managers — engineered stone has been the focus of attention for several years. But the construction-specific obligations are worth reviewing against your current system.

The common gaps in what I'm seeing: exposure monitoring programs that haven't been updated to reflect the current hierarchy of controls; SWMS that reference water suppression as a primary control without adequately addressing ventilation and RPE requirements; and health monitoring arrangements that exist in policy but haven't been operationalised.

If your system has been in place since before the 2024 amendments, a targeted review of your silica controls is a straightforward exercise.

www.safetyandriskconsulting.com.au

LPP protects communications between a lawyer and client, and documents created for the dominant purpose of obtaining legal advice or for use in anticipated litigation, from compelled disclosure. In a WHS context, this means an investigation report prepared in anticipation of regulatory proceedings — and under appropriate legal instruction — may attract privilege.

What LPP is not: a blanket protection that applies because a lawyer is engaged somewhere in the process. The privilege attaches to specific documents prepared for the specific purpose of litigation or legal advice. An investigation conducted primarily to understand what happened and prevent recurrence, with a lawyer added for appearance, is unlikely to attract LPP in a way that would withstand challenge.

The practical question is one of dominant purpose. If an investigation is initiated after a notifiable incident where regulatory scrutiny is foreseeable — and it almost always is — the decision about whether to structure the investigation under LPP should be made before the investigation begins, not after the findings are drafted.

That decision requires legal advice, and it requires an investigator who understands the distinction and can conduct the investigation accordingly.

A report that does not attract LPP can be accessed by a regulator and used in proceedings. This is worth understanding before commissioning an investigation, not after.

www.safetyandriskconsulting.com.au

How the notification was made. The WHS Act requires notification of notifiable incidents as soon as practicable after a person in management becomes aware. Late notifications — and the explanations for them — tell an investigator something about how the business manages its obligations under pressure.

Who is present when the investigator arrives and what authority they have. A site visit met with a site supervisor who cannot answer questions and has no authority to make decisions suggests that the business's response has not been coordinated at the right level.

The state of the incident scene. Whether the scene has been appropriately preserved, and if not, the explanation for why, is something investigators examine carefully. It is not automatically evidence of intent — but it does affect what can be established.

None of this is presented as a checklist for managing an investigation. It's shared because the decisions made in the first hours after a notifiable incident often shape what follows — and most businesses make those decisions without a clear picture of what an investigator is looking for.

www.safetyandriskconsulting.com.au

Victoria operates under the Occupational Health and Safety Act 2004. Western Australia's Work Health and Safety Act 2020 came into effect in 2022, but with material differences from the model Act.

The differences are not administrative. They affect how duties are structured, who holds them, how consultation obligations apply, and in Victoria's case, the enforcement posture of WorkSafe.

A Queensland contractor awarded a project in Melbourne or Perth and operating under their Queensland WHS system is not necessarily operating in compliance with the applicable jurisdiction.

A jurisdiction-specific gap analysis before mobilisation is significantly less disruptive than identifying the gaps after a WorkSafe Victoria inspector arrives on site.

www.safetyandriskconsulting.com.au

What I typically find:

A psychosocial hazard register that identifies hazards at a generic level — workload, interpersonal conflict, remote work — without the specificity required to demonstrate adequate risk management. A risk register is not the same as a risk management system.

Control measures that exist on paper but haven't been embedded in supervisor training, site inductions, or performance management processes. Identifying a psychosocial hazard without meaningful controls doesn't satisfy the obligation to manage it.

No mechanism for monitoring or reviewing whether controls are working. The regulations impose an ongoing obligation — not a one-time compliance exercise.

The enforcement pattern for psychosocial hazard obligations is still developing in Queensland, but the legislative obligation is clear and has been in place long enough that 'we're working on it' is no longer a credible position.

If your system hasn't been reviewed against the psychosocial hazard obligations in the last 12 months, the gap analysis is worth doing before someone else does it for you.

www.safetyandriskconsulting.com.au

An investigation that identifies the immediate cause of an incident without analysing contributing factors and systemic failures addresses the symptom, not the problem. A regulator reviewing that investigation will notice the gap.

More importantly, an investigation that is not conducted with appropriate independence, or whose findings are not legally defensible, may not attract Legal Professional Privilege — meaning the findings can potentially be accessed by a regulator or used in proceedings.

The practical questions worth considering before an incident occurs: Who conducts your investigations? Do they have the independence, technical expertise, and investigative methodology to produce findings that will withstand external scrutiny? Is there a process in place to assess whether LPP should apply?

These are not questions that should be answered for the first time after something has gone wrong.

www.safetyandriskconsulting.com.au