bizSAFE Expired or Failed the Audit? What to Do
How fast you can get Level 3 back, what the auditor's findings mean, and what to tell the client waiting for your certificate.
By Nachi Leong, Principal Consultant6 min readTwo situations bring companies here. The Level 3 certificate expired and a tender or main contractor just noticed. Or the RM audit came back with findings. Both have a clear recovery process.
On this page
Key takeaways
- Expired Level 3 means a fresh RM audit. If your RM Leader's Level 2 certificate is still valid, you do not restart from Level 1.
- Realistic recovery: 3 to 5 weeks, if your side moves fast.
- A failed audit lists findings. Fix them, and the auditor verifies them.
- Most findings are the same five things. See the table below.
- Tell your client the recovery plan and the audit date.
If your Level 3 expired
When Level 3 lapses, WSH Council removes you from the bizSAFE listing. A tender evaluator or a main contractor's safety officer checks and sees nothing. That is the problem. There is no fine for the lapse itself.
To get it back:
- 01Check your RM Leader.
If the person has left or the Level 2 certificate is not valid, book the two-day course first. This is the most common delay.
- 02Update the Risk Management plan.
Your old plan is a start, not a finished product. Every risk assessment must match current activities, staff and sites.
- 03Restart your records.
Toolbox briefings, RA communication, inspections, incidents. Start now so there is a trail by audit day.
- 04Fresh RM audit
Fresh RM audit by an MOM-approved WSH auditor. Report submitted to WSH Council. You are back on the listing at Level 3.
How fast
3 to 5 weeks is realistic if you respond the same day. Add the Level 2 course if your RM Leader needs training. The biggest factor is auditor availability. We book the audit date the week we start, not when the documents are ready.
Normal renewal steps and cost are in our renewal guide. After a lapse the process is the same. Only the urgency is different.
If you failed the RM audit
The auditor records findings where you fall short of the Level 3 requirements. If the findings are significant, the report cannot go forward until they are closed.
- You receive the audit report listing each finding.
- You fix each one and collect evidence: the revised RA, the briefing record, a photo of the control in place.
- The auditor verifies. By document review or a return visit, depending on the finding.
- The report is finalised and submitted to WSH Council.
The five findings we see most
| Finding | Cause | Fix |
|---|---|---|
| Risk assessments do not match the work | Old plan, or written without seeing the site | Walk the site, rewrite the RAs for what people actually do |
| Workers not briefed | Plan exists on paper only | Run briefings, keep signed records, keep doing it |
| Controls not in place | RA says "guard fitted", machine has no guard | Fit the control, or change the RA to what you really do |
| No records | Inspections, incidents, RA reviews not documented | Simple forms, filled in, filed |
| RM Leader gap | Certificate not valid, or the person left | Appoint and train, update the appointment record |
All five come from a plan that does not match the business. See our Risk Management plan guide.
What to tell your client
Contracts are lost because the buyer heard nothing. Send a short, specific message:
- Acknowledge the lapse or the audit outcome.
- Give the plan: who is doing the work, and the audit date booked.
- Give a date for the certificate, with a small buffer.
- Offer interim evidence: current risk assessments and briefing records for their project.
Most main contractors want to know risks on their site are controlled today and the paperwork is on its way. Show both.
Frequently asked questions
Is there a penalty for letting bizSAFE expire?
No fine from WSH Council. You drop off the bizSAFE listing and lose eligibility for tenders and vendor lists that require it until you are recognised again.
Do I redo Level 1 and 2 after a lapse?
Not if your top management attendance and your RM Leader's Level 2 certificate are still valid. If the RM Leader has left, a new one must attend the Level 2 course before the audit.
How long does a failed audit take to fix?
Usually 1 to 3 weeks, depending on the findings and whether the auditor needs a return visit. Document findings close fastest.
Does failing the audit go on record?
The audit is between you, the auditor and WSH Council. Clients see your bizSAFE status, not your audit history.
Can I use my old Risk Management plan?
As a starting point. Not as the plan you audit with, until it is updated to current activities, people and sites. An unchanged three-year-old plan is itself a finding.
Can a consultant guarantee I pass the re-audit?
No. The auditor is independent. What we do is close every finding properly, run a mock audit, and make sure the same issues do not come back.
My certificate expires next month. Too late?
No. Start today. If the audit happens before expiry you renew without a gap. If it slips past, you recertify as above. Same work either way, and the early start avoids the listing gap.
One consultant. From start to finish. The consultant you meet is the consultant who stays with your project.
About Nachi