
Critical risks are not your everyday slips, trips, and minor strains. In a New Zealand context, they are events that can lead to life-altering injuries or fatalities, such as falls from height or being struck by a moving plant. When something goes wrong with a critical risk there is often no second chance, which is why a basic hazard register and generic forms are no longer enough.
Traditional health and safety systems tend to list every hazard in one place and treat them in a similar way. That approach might work for low-level hazards, but it does not give the right level of focus to the small number of events that can kill or permanently disable someone. Higher risk sectors like construction, infrastructure and heavy industry need a sharper lens on the activities that really matter.
The upcoming HSWA Amendment Bill is set to tighten expectations around how officers oversee health and safety, especially in relation to critical risks. Recent court findings on officer due diligence have confirmed that the bar is already high, and that directors and senior leaders are expected to be actively engaged. Our new Critical Risk Management Procedure has been created as a practical response to that legal trend, so businesses can move ahead of the bill rather than scramble after it passes.
Understanding the New HSWA Amendment Bill Landscape
The HSWA amendment bill is aimed at strengthening how New Zealand businesses manage serious health and safety harm. While the detail will continue to develop, the direction of travel is clear: stronger governance expectations, clearer accountability for officers and a sharper focus on serious risk, not just paperwork.
In practice, officers will be expected to do more than sign off an annual report. Due diligence around critical risks is likely to include:
• Knowing which work activities have fatal or serious harm potential
• Understanding what controls are relied on to prevent those events
• Checking that those controls are actually in place and effective
• Ensuring there are adequate people, resources and health and safety documentation services to support the system
Good governance means having targeted reporting, not just generic safety dashboards. That might include:
• Regular briefings on critical risks and control performance
• Clear incident and near-miss reporting that highlights potential for serious harm
• Field visits or leadership walks to see how critical controls work in practice
By linking officer responsibilities to these practical activities, the bill is reinforcing that health and safety is a boardroom topic and a site-level reality at the same time.
What an Effective Critical Risk Management Procedure Looks Like
An effective Critical Risk Management Procedure starts by identifying the tasks that can realistically lead to fatal or life-changing harm, then builds a clear control framework around those tasks. It is not about creating more forms, but about sharpening focus.
Key components usually include:
• Identifying critical tasks and scenarios with serious harm potential
• Assessing how those events could occur, including triggers and weak points
• Selecting critical controls that must not fail under any circumstances
• Setting clear escalation thresholds when controls are missing or not working
It is important to distinguish between general hazards and true critical risks. For example:
• Working at height compared with using a small step ladder in an office
• Operating mobile plant in a busy yard compared with pushing a trolley
• Crane lifts over people or live assets compared with basic manual handling
• Confined space entry compared with working in a well-ventilated room
• Energy isolation for machinery compared with switching off small tools
These activities need a different level of planning, supervision and verification. Clear documentation, such as task-specific procedures, permits, checklists and role descriptions, creates a defensible position if something goes wrong. It shows officers have taken reasonable steps to understand and control their critical risks. This is where specialist health and safety documentation services can help by standardising formats, aligning documents across sites and making sure nothing important is missed.
Best Practices for Implementing Critical Controls on Site
Even the best procedure will fail if it lives only in a folder. The real test is how critical controls show up in day-to-day work. We see the strongest results when businesses build critical risk thinking into existing site routines rather than bolting it on.
Useful practices include:
• Integrating critical risk checks into pre-starts and daily briefings
• Using permits to work for tasks like confined space, hot work and energy isolation
• Requiring supervisor or manager sign-off before high-risk tasks begin
• Keeping toolbox talks focused on specific critical risks and recent learnings
• Involving workers in reviewing and improving critical controls
A key concept is critical control verification. This means proving that the control is present and working every time it is needed, not just assuming it is fine because a box was ticked last month. Verification activities can include:
• Planned observations of high-risk tasks
• Targeted audits of specific controls such as anchor points or exclusion zones
• Field leadership walks where managers and officers ask questions about controls
Contractors and subcontractors add another layer. PCBU-to-PCBU relationships need clear expectations so everyone is aligned on which controls are non-negotiable. That may involve:
• Sharing and aligning critical risk procedures before work starts
• Agreeing who is responsible for each control and for verification
• Checking that subcontractor documentation actually reflects site requirements
Leveraging Documentation and Data for Due Diligence
Good documentation turns critical risk management into something visible and measurable rather than informal and assumed. When forms and procedures are well designed, they guide frontline behaviours and give officers clear evidence of what is happening in the field.
Useful documents and tools might include:
• Simple, targeted checklists for each critical task
• Permit forms that focus on the controls which matter most
• Supervisor sign-off sheets that confirm verification, not just completion
• Clear procedures that define roles, responsibilities and escalation points
Incident investigations and near-miss reports are also valuable. For critical risks, the focus should be on learning whether the controls worked as intended or if there were gaps. Trend analysis can help identify repeating issues, such as:
• Controls that exist on paper but are often bypassed
• Tasks where workers regularly improvise because procedures are impractical
• Equipment issues that undermine safety systems
Partnering with health and safety documentation services can support businesses to standardise templates across projects, move records into digital formats and adjust procedures as legal expectations and industry guidance evolve. This kind of system improvement shows officers are taking active steps to meet their ongoing due diligence obligations.
How Safe Space Supports NZ Businesses to Lift the Bar
At Safe Space in Auckland, we work with businesses that want their approach to critical risk to stand up not only to WorkSafe review but also to their own values as employers. Our team has developed a Critical Risk Management Procedure that reflects current case law on officer due diligence and tracks the direction of the HSWA amendment bill.
Because we provide auditing, documentation support, training, incident investigation and prequalification services, we can help build a joined-up approach rather than a stand-alone document. That can include:
• Reviewing your existing risk registers and identifying critical risks
• Developing or refining critical control procedures and permits
• Training supervisors and workers on how to apply the procedure on site
• Using audits and investigations to check that controls are working as intended
By combining practical field experience with structured health and safety documentation services, we aim to give officers and managers confidence that their critical risk system is both workable and defensible.
Turning Critical Risk Management Into a Leadership Advantage
Critical risk management works best when leaders treat it as part of how they run the business, not just a legal requirement. When officers and managers ask clear questions about serious risks, show up on site and support people to do the job safely, it sends a strong signal about what really matters.
A useful starting point is to:
• Review your current hazard and risk registers and pull out the true critical risks
• List the controls that absolutely must not fail for each of those tasks
• Check how you currently verify those controls in the field
• Compare your approach with a structured Critical Risk Management Procedure
From there, you can identify gaps, simplify what is overly complex and strengthen the things that actually prevent harm. Done well, critical risk management protects workers, supports officer due diligence and helps build a culture where people can speak up if something is not right.
Streamline Your Safety Compliance With Expert Documentation Support
If you are ready to get your systems in order, our specialised health and safety documentation services make it straightforward to stay compliant and protect your team. At Safe Space, we work with you to create practical, tailored documents that suit how your business actually operates. Reach out to our team to discuss your current setup and identify any gaps, or contact us today to book a time that suits you.