Risk Management Plan for bizSAFE: How to Pass the Audit

Your Risk Management plan must reflect the hazards, controls and records in your actual operations. The auditor reviews the plan and how you apply it.

Talk to a consultant

What the auditor is actually looking for

bizSAFE Level 3 is where an MOM-approved bizSAFE auditing organisation checks your Risk Management plan. You clear Level 1, the top management workshop, and Level 2, the RM course, first. Then your plan and its implementation are audited.

Auditors want evidence that controls are actually used at work. That means toolbox meetings, signed records, checklists, and corrective actions. A neat folder of documents is not enough if nothing on the ground matches it.

What goes in the plan

A solid RM plan has a clear set of parts. Build them in this order.

1. 01RM policy and objectives.

   A short statement of your safety commitment, signed by top management, with clear safety goals.

2. 02Roles and responsibilities.

   Name who does what. Who leads risk assessment, who approves controls, who keeps records.

3. 03Hazard identification and risk assessment.

   List the hazards for each work activity. Do a risk assessment for every activity, based on how your team really works.

4. 04Risk evaluation and controls.

   Rate each risk, then set controls using the hierarchy of control: eliminate, substitute, engineering, administrative, then PPE last.

5. 05Safe work procedures.

   Write clear steps for high-risk tasks so staff know the safe way to do the job.

6. 06Implementation and communication.

   Roll out the controls. Brief workers. Run toolbox meetings so everyone knows the risks and the rules.

7. 07Monitoring, review and records.

   Check controls are working, review the plan when things change, and keep records of all of it.

Why plans fail the audit

These gaps can lead to audit findings:

• A generic or template risk assessment that does not match real operations.
• No evidence the controls are actually used, only the paperwork.
• Outdated documents that no longer reflect current work or equipment.
• No worker involvement, so the plan misses real hazards on the ground.
• Controls that lean on PPE alone instead of the full hierarchy of control.

Fix these before the audit and you remove the main reasons auditors raise findings.

Build the evidence trail

The plan is half the job. The other half is showing it lives in your workplace. Keep simple records as you go:

• Toolbox meeting and safety briefing records, with names and dates.
• Signed safe work procedures and checklists from real shifts.
• Photos of controls in use, such as guarding or signage.
• Corrective action records showing you fixed issues when they came up.
• Training records for the staff doing high-risk work.

For a fuller picture of the certification path, see our bizSAFE Level 3 requirements checklist, and to see how the audit day runs, read what happens during an audit.

Frequently asked questions

Nachi LeongPrincipal Consultant, ZES Consulting

One consultant. From start to finish. The consultant you meet is the consultant who stays with your project.

About Nachi