What is a safety management system?

    Short answer

    A safety management system (SMS) is the organised set of policies, responsibilities, processes and records a business uses to find hazards, control risk and prevent injury. It works as a continuous cycle of plan, do, check and improve, and is led by management but run by the people doing the work.

    Last updated · TeamAssurance

    What are the elements of a safety management system?

    Most frameworks, including ISO 45001 and the Australian WHS laws, describe the same core elements:

    ElementWhat it covers
    Leadership and policyA written safety policy, clear accountabilities, visible management commitment
    ConsultationWorkers and health and safety representatives involved in decisions
    Hazard identification and risk assessmentFinding hazards, rating risk, choosing controls
    Controls and proceduresSafe work procedures, permits, training, PPE and emergency plans
    Incident reporting and investigationCapturing near misses and injuries, finding root causes
    Monitoring and auditInspections, safety observations, internal audits, performance measures
    Review and improvementManagement review, corrective actions closed out and checked

    How does a safety management system work?

    An SMS runs as a loop, not a one-off document set:

    1. Plan: set the policy and objectives, then identify hazards and assess risk.
    2. Do: put controls in place, using the hierarchy of control, and train people to use them.
    3. Check: inspect, audit and track near misses, observations and incidents.
    4. Improve: investigate, fix root causes and review the system with management.

    Safety management system vs a safety manual

    A manual describes what should happen. A system shows that it is happening: hazards reported this week, actions closed on time, inspections done and findings fixed. Auditors and regulators ask for those records, and a thick binder with no live data fails that test.

    Who needs one?

    Under model WHS laws, a business must manage risks to health and safety so far as is reasonably practicable. A documented SMS is the usual way to prove it, and customers in mining, construction, food and manufacturing often require one from suppliers. Size changes the format, not the need: a small site can run a lean SMS of a policy, a hazard register, a few checklists and a monthly review.

    How TeamAssurance helps

    In TeamAssurance, anyone can report a hazard, near miss or safety observation from a phone, each one becomes an action with an owner and due date, scheduled safety checks and audits run as checklists, and open safety actions are reviewed on the tier boards every day and escalated when they stall.

    Frequently asked questions

    What is the difference between a safety management system and ISO 45001?

    An SMS is the system a business builds to manage safety. ISO 45001 is an international standard that sets out the requirements for an occupational health and safety management system, so an SMS can be built to meet it and, if the business chooses, certified against it.

    Is a safety management system a legal requirement?

    Australian WHS laws require businesses to manage health and safety risks so far as is reasonably practicable and to consult workers, but they do not prescribe one format. Some industries, such as rail, aviation and major hazard facilities, have specific safety management system obligations.

    How do you measure whether a safety management system works?

    Track leading indicators such as hazards and near misses reported, safety observations and inspections completed, and the share of safety actions closed on time, alongside lagging measures such as injury rates. A rising report rate with falling repeat hazards is a good sign.