The current content on this page will change significantly due to changes to the Heavy Vehicle National Law and Regulations that commence on 1 August 2026 and will no longer be accurate after that date. For more information, please see HVNL reform implementation.

Introduction

What is a Safety Management System (SMS) in the heavy vehicle industry?

A Safety Management System (SMS) is a practical way for heavy vehicle operators - of any size -to manage safety risks and demonstrate compliance with obligations under the Heavy Vehicle National Law (HVNL).

In the heavy vehicle industry, an SMS is a structured framework for managing the primary safety risks associated with road transport operations, including driver behaviour, fatigue, vehicle condition, loading practices, scheduling pressures and interactions with the public.

Putting an SMS in place is an important first step, but it shouldn’t be seen as something that is “finished” or set aside once documented. An effective SMS is not a standalone manual or folder of documents — it is how safety is managed as part of everyday work.

In practice, an SMS is a combination of policies, procedures, tools and ways of working that are actively used in day to day operations. This includes how decisions are made, how risks are identified and controlled, how work is planned and supervised, and how issues are raised and addressed.

Over time, your SMS should continue to evolve. This means regularly reviewing performance, learning from incidents, audits and feedback, and making improvements where needed. As your operations, risks, workforce or environment change, your SMS should be updated to reflect those changes.

A strong SMS is one that is:

  • Embedded – used consistently in daily activities, not just referenced when needed
  • Understood – people know their role and how to apply it in practice
  • Maintained – documentation reflects what actually happens
  • Improved – learnings are captured and applied to strengthen the system

Treating your SMS as a living system, rather than a static document, helps ensure it continues to support safe, consistent and compliant operations over time.

An effective SMS is designed to ensure the safe movement of freight and passengers by ensuring key hazards such as fatigue, speed, loading, vehicle maintenance, and scheduling pressures are proactively identified, assessed, and controlled. 

An SMS should be proportionate to the size, nature, risk and complexity of the organisation, and aligned with broader business objectives.

Why implement an SMS?

An SMS helps businesses manage safety risks in a structured and practical way, supporting safer transport operations, stronger compliance with HVNL and Chain of Responsibility obligations, and better management of fatigue, vehicle condition and day to day risks. By embedding clear responsibilities, consistent processes and informed decision making into everyday work, an SMS supports more reliable operations and enables early identification and control of issues before they lead to incidents. This reduces the risk of harm, operational disruptions and legal exposure, while strengthening safety culture and building confidence with regulators, customers and insurers.

Present, Suitable, Operating, and Effective (PSOE)

The Present, Suitable, Operating, and Effective (PSOE) audit methodology provides a clear, evidence-based way to assess whether a Safety Management System is Present (documented and in place), Suitable (appropriate for the size, nature, complexity, and risk profile of the operation), Operating (implemented and consistently used in day-to-day activities), and Effective (achieving the intended safety outcomes and driving continual improvement).

This is known as the PSOE audit methodology. This methodology is prescribed in the ministerially approved National Audit Standard (NAS) and applies to all audits conducted within a period of accreditation. This includes the:

  • entry audit
  • initial compliance audit
  • compliance audit

PSOE is a practical way to test each SMS component by moving from “does it exist?” to “does it work?”. For each topic area, an auditor will gather objective evidence and record findings against the four elements below.

Present

Is the requirement clearly defined and available?

  • Documented policies, procedures, work instructions and forms (current version controlled copies).
  • Defined roles, responsibilities and delegations (e.g., org chart, position descriptions).
  • Risk registers/hazard identification outputs relevant to the operation.
  • Training/induction materials and communication artefacts (toolbox talks, notices, briefings).

Suitable

Is it appropriate for the risks, scale and complexity of the operation?

  • Controls match the key transport risks (fatigue, speed, maintenance, loading/restraint, scheduling, driver competence, contractor management).
  • Requirements are tailored to the fleet, routes, operating hours, commodities and customer interfaces.
  • Performance measures and frequencies are realistic (e.g., inspection intervals, audit schedules, review cycles).
  • Interfaces with other systems are addressed (e.g., HR, maintenance providers, schedulers, subcontractors, the general public).

Operating

Is it implemented and consistently followed in practice?

  • Records demonstrate use (e.g., pre-starts, maintenance work orders, load restraint checks, fatigue work diaries/records, training sign-offs).
  • Staff can explain the process and show how it is applied (drivers, schedulers, supervisors, managers).
  • Evidence of supervision and verification (spot checks, internal audits, ride-alongs, checks of subcontractors).
  • Non-conformances are identified and managed (incident reports, corrective actions, coaching, disciplinary processes where needed).

Effective

Is it achieving intended outcomes and improving safety performance?

  • Trends show improvement or control (e.g., incident/near miss rates, defect re-occurrence, fatigue breaches, overloading events, speeding exceptions).
  • Corrective actions are closed out and verified for effectiveness (not just completed).
  • Management review decisions lead to positive changes (updated controls, resourcing, training, scheduling practices).
  • Lessons learned are communicated and embedded (updates to procedures, briefings, shared learnings across depots/contractors).

Audit Summary using PSOE

A PSOE summary is typically written in plain language to explain what was observed and what it indicates. It will reference the key evidence sources (e.g., documents/records reviewed, conversations held, observations made) and describe what they indicate for each PSOE element: Present (is it there), Suitable (is it appropriate), Operating (is it used), and Effective (is it working). Where gaps are identified, summaries generally describe the likely impact (risk, consistency, confidence in controls) and opportunities to strengthen the system. Common signals looked for include outdated or conflicting information in use, controls that don’t match how work is actually done, activity recorded but not evident in practice, and repeated issues without learning, follow up or improvement.

In each of the SMS framework components, the Present and Suitable section contains information to assist with what should be in place. This includes the policies, processes and arrangements that should exist, and how they should be designed so they are appropriate for the size, nature and risks of your transport operation.

The Operating and Effective section contains information about how these arrangements should be used in practice. It explains what it looks like when the SMS is being followed day to day, and how to tell whether the arrangements are actually working to manage safety risks. The Continuous Improvement section explains how you monitor, review and improve safety over time.

Step 3 - Hazard and incident reporting

A hazard and incident reporting process is integral to an effective SMS. Put simply, it helps identify where things could go or have gone wrong and a concerning safety issue has or may arise. The reporting and subsequent identification of safety hazards and incidents in your business helps continually inform a range of other vital SMS components. These include risk assessments and risk registers, incident investigations, and continuous improvement. Most importantly, it is the initial timely process that helps determine steps to prevent safety incidents reoccurring.

Developing an Incident Reporting process that can be easily understood and utilised by all staff is a great first step for this component of your SMS. It allows seamless staff involvement, and the business can be made aware of incidents, including ‘near miss’ events in a very timely fashion. Recorded incident details can also be utilised at a later stage if required, for a safety investigation to identify the incident causes and areas for improvement.

The Incident Reporting - Quick Guide describes the type of information staff and managers should be encouraged to report, such as who was involved, what task was being done, where and when the incident happened and any other information about the event.

You can utilise or modify the Incident Report Form - Template within your own SMS to record safety incidents and possible treatment options.

The Incident Report - Worked Example utilising the template is a useful reference around how a typical populated report may look.

Focus on developing and implementing your formal approach to reporting safety incidents, including regular education and reinforcement to all staff over a period of time. This helps cement a positive reporting culture between staff and management and provides a great avenue for employees to be actively involved in improving safety within the business.

Consider focussing on Hazard Reporting to improve on your suite of SMS tools after you are confident Incident Reporting is working as you expect in the business.

Once Incident Reporting processes are formalised within the business and are being embraced and utilised by all staff and managers, you should expand your SMS to include Hazard Reporting.

Hazard Reporting enables the business to assess the risks - such as a driver crashing a truck, of identified heavy vehicle safety hazards – such as a fatigued driver, and to develop controls or further treatments to help mitigate those risks – such as appropriate driver rostering.

You will recognise that identifying and better understanding where those hazards exist as part of your business, feeds directly into the risk management components of your SMS. Staff and managers are a great resource within the business to help with the identification process, provided there is some form of Hazard Reporting mechanism in place.

The Hazard Reporting - Quick Guide describes how staff and others can easily identify and report to management where they believe your heavy vehicle transport hazards exist.

You can easily adopt and utilise the Hazard Report Form - Template within your own SMS. Encouraging staff to utilise this will not only help identify hazards that inform the wider risk management process but demonstrates you also value the views and involvement of employees in improving safety outcomes and culture.

Documented hazard and incident reporting processes within an SMS will not be effective unless staff and management actively embrace and utilise them. To drive a good reporting culture – critical in continuously improving your safety management and performance, staff must be actively encouraged to use those systemic processes and management must follow-up and provide feedback on reported incidents and hazards.

The Reporting Safety Hazards and Incidents – Toolbox Talk is an excellent way for managers and supervisors to locally discuss with staff how incidents and hazards are reported internally, why it is important, and reinforce that management will not penalise but actually encourage reporting.

Your business should also consider providing similar advice and hazard and incident reporting requirements if necessary, to third parties that you engage to undertake heavy vehicle transport activities for you.

The Risk Management - Identify Hazards Video can also be presented to managers and staff. It highlights the importance of hazard and incident reporting including how it can have a positive impact on safety outcomes and performance.

Step 4 - Management commitment and documentation

A visible and demonstrated commitment to safety by management always underpins an effective SMS and positive safety culture. It illustrates to all staff, customers and third parties how seriously safety is taken by your business and should be reflected in the way the organisation operates on a day-to-day basis.

Whilst most parties in the heavy vehicle Chain of Responsibility take safety seriously and have good safety risk controls in place, many companies do not take the extra step of actually documenting them.

All key functions of your SMS, including key risk controls, should be documented to help lock in and reinforce critical safety processes, to educate and train staff, formally record incidents and other safety information, assist the executive in meeting their HVNL due diligence requirements, and should it be required – help demonstrate that you are effectively managing your heavy vehicle safety risks, so far as is reasonably practicable.

Developing a Safety Policy is a good way to demonstrate and explain the importance and commitment that management places on safety for employees and others that interact with the business.

The Management Commitment and Responsibilities - Quick Guide provides information on what you should consider including in a safety policy. It describes how to set clear direction from management around its commitment to safety and what it will do to help fulfil that commitment. It also describes the importance of defining the roles and responsibilities for managing safety risks, and how to best engage and empower employees who are often tasked with implementing safety critical tasks.

You can utilise and adapt the Safety Policy and Responsibilities - Template within your own SMS. It sets out a wide choice of safety policy aspects that management could commit to, along with a choice of probable or potential safety responsibilities for executives, management, employees and third parties, dependent on the size, complexity, and nature of your business. You can just delete, add to, or modify the policy and responsibility points within the template to suit. The Safety Policy and Responsibilities - Worked example utilises the template and shows what a safety policy could look like.

At this point of your journey, you should primarily focus on formally documenting the key products recommended to be developed and populated so far (such as a Risk Register, an Incident Reporting form, or a Safety Policy) and any other products suggested in the remaining "Starting Out" steps. Don’t be afraid to copy and utilise any of the provided templates within the 9 Step SMS Roadmap and adapt them to suit your own business if desired.

Regardless of the size or complexity of a business, it is important to have a visible Safety Policy and formally documented responsibilities that are communicated and understood across the business.

Consider printing and framing the organisation’s Safety Policy and placing it in several prominent positions in the workplace. This demonstrates to staff and third parties that safety is a high priority within the business, with management committed to it via provision of resourcing, training, systems, and equipment.

Once you have documented and populated all of the SMS products recommended within the 9 Step SMS Roadmap so far (such as Risk Assessments and Hazard Reporting forms), it is important to progress formalisation of your safety risk controls.

Documented procedures that explain the safety process and related risk controls in more detail support employees in meeting their safety responsibilities when performing specific tasks. These procedures help reduce the likelihood of safety incidents occurring by documenting how specific tasks can be performed safely in a step-by-step fashion. They are also vital in helping train and educate new staff to correctly perform those tasks.

The Developing Procedures - Quick Guide describes the best way to document a safety task and what should be included within a procedure.

A good way to start developing a procedure is to work with staff to write down the steps that are already being performed to complete a task. Including images in a documented procedure may also be useful to help staff understand key steps. Check the procedure by observing employees undertaking the task to ensure that all the steps are included and are followed.

It is important that the procedure describes the purpose of the steps and how they control the safety risks. Make sure that employees know where to find the relevant procedures for their tasks, are trained in the procedure, and have the competency to perform the steps.

You can utilise the Procedures - Template to document any number of procedures within your own business, as part of your wider SMS.

SMS related procedures can come in all sizes and complexity however this Procedures - Worked example utilising the template provides a useful reference if required.

Whether you have recently developed a Safety Policy or plan to review the current version, genuinely engaging staff in the process really demonstrates to them that management is interested in their views and opinions, particularly in keeping them safe. Ensure your review processes brings staff or their representatives on early allowing them time to seek colleagues’ feedback where needed.

You should also regularly raise your Safety Policy and Responsibilities document (and its important contents and intent) with staff. This again helps reinforce management commitment and sets a safe platform for staff to raise safety issues or possible improvement solutions. The Our Safety Policy - Toolbox Talk is an easy mechanism for managers and supervisors to use to discuss the Safety Policy in this way.

Once you believe you have formally documented all of your SMS procedures, forms, templates, and other products, consider combining them all safely in an easy to access SMS Manual. This will ensure that all documents are in a single place, either in hard copy or electronically. Most importantly, you want your SMS, or vital components at least to be accessible for easy use by staff. Seeking regular feedback from staff on how user-friendly they think different documented components of the SMS are will also provide valuable feedback on the system’s usability.

Step 5 - Internal safety investigations

Once a business has a working Incident Reporting process in place, the next logical step for your SMS is enabling you to investigate safety incidents.

Investigating reported incidents helps establish how and why it occurred. This helps reduce the likelihood of similar events recurring by identifying the causes and contributing factors and exploring opportunities for safety improvements.

When initially building an SMS, your main focus for investigating safety incidents is twofold.

Firstly, once the incident is reported, reinforce with staff that there is to be no apportioned blame. You may have already stated as much within your Safety Policy. Communicate to staff that the organisation just wants to understand what caused the event and what it can do to help prevent it from happening again.

Secondly, because you are still building your SMS capability, undertake a simple shopfloor investigation into the incident. This involves stopping work at the depot or workplace for a short period - say half an hour to an hour. Then with the affected staff members or team and their supervisor/manager, have an informal and open discussion about what they think caused the incident; it’s important not to direct blame at anyone. Once the group agrees generally on what caused the event and what the team or business should do to prevent it happening again, record those action details. You can utilise this Continuous Improvement Register - Template (DOCX, 44KB) to record any improvement action details including who will undertake them and when they will be completed by.

Should an incident occur that results in a serious injury to staff or others, and you don’t yet have the systems or capability to investigate it within the business, consider engaging a specialist investigator to undertake the task. They will generally utilise and follow well recognised professional safety investigation systems and methodologies to help you determine what caused the serious incident.

As your documented SMS and its implementation matures, so too will your organisation’s capability to undertake more complex safety related tasks. With some simple systemic guidance, templates, examples and practice, most managers or supervisors will be able to undertake more comprehensive safety investigations. This capability can also be supplemented by commercially available safety incident investigation training.

A good starting point for managers or those looking to increase their investigation capability is to utilise the Incident Investigation - Quick Guide. It provides useful and structured guidance in developing and undertaking a safety investigation and related processes.

A timely and structured process will help someone conducting the investigation to build a complete picture of how and why an incident occurred. Working with staff involved in the safety incident also assists in more formally reconstructing the event and gathering the information for the investigation and report.

You may want to consider adopting the Incident Investigation Report - Template within your own organisation’s SMS to record the information collected as part of investigating an incident and to analyse the risk controls that were in place.

This Incident Investigation Report - Worked example illustrates the type of information that an investigation may record, including key risks controls, related findings and required improvement actions.

Investigating a concerning safety incident should not just be the role of a manager or supervisor. Including affected staff member/s often provides more rounded input to an investigation with a range of contributing viewpoints. Involving staff in the investigation also helps reinforce that your organisation does not apportion blame when safety is involved.

You should consider managers and supervisors utilising the Safety Investigations – Toolbox Talk with staff at regular intervals, depending on the size of your business. It reinforces why reported safety incidents need to be investigated, how an investigation is conducted, how staff can be involved, and progressing any improvement activities.

Finally, consider how an investigation’s outcomes can be communicated to all staff including agreed improvement processes. Consider whether these safety communications should also be given to external parties including sub-contractors and customers.

Step 6 - Safety training and communication

Almost every business in some way provides education, advice, or training to staff to help ensure they remain safe at work, and don’t contribute to causing some form of safety incident. Having a greater and more planned focus on the critical safety training requirements in your business will further strengthen and complement the controls in place to reduce the impact of your heavy vehicle safety risks.

Planned and structured communications to staff about the organisation’s SMS, its key components, and the safety role of management and staff will result in greater workplace engagement and system effectiveness.

Targeted and scheduled safety training and communication are important practices that can assist you in developing and supporting a positive safety culture and sustaining safety in the business.

Training and communication involves sharing information that explains the importance of safety and how safety risks can be managed through appropriate skills, behaviour and knowledge.

In "Starting Out" your SMS journey, focus on discussing with managers and supervisors what they believe is the key safety training that staff will require over a 12-month period. The risk controls identified within your populated Risk Register will help inform those considerations – such as training drivers around fatigue management or training staff to effectively restrain vehicle loads.

You can utilise this simple Safety Training Calendar - Template as part of your own SMS to record each staff members’ or teams required and completed safety training.

It’s also good to communicate directly with staff the importance of having an SMS in place and how they can contribute. Familiarise yourself and management with the principles and recommended approaches in the SMS Awareness Training - Quick Guide.

The Safety Promotion and Communication - Quick Guide also provides detailed examples on the various ways you can promote safety practices within the business. You can consider them all or just a few, depending on the size and complexity of your business. It also contains a checklist to help you determine the most effective safety communication methods for your organisation.

Safety training and communication can directly help improve safety performance by communicating lessons learned, safety principles and broader safety information.

It may also be used to support staff in understanding business policies, procedures, and processes, by providing a focus on safety efforts and how seriously safety is taken. Providing training and communication can be as simple as speaking to staff, such as through toolbox talks, or may be formalised through a training program.

The How to Run a Toolbox Talk - Quick Guide provides information, hints and tips on preparing, delivering and recording the safety information being provided to staff.

This structured Toolbox Talk and Attendance Form - Template can be adapted and utilised as part of your own SMS. The template can be populated and used to keep staff informed and up to date about safety matters in the business. It also provides a shop floor method to keep a simple record of where and when specific safety advice, education, training, communication, or support has been provided to staff.

The NHVR has developed several populated toolbox talks as part of the 9 Step SMS Roadmap guidance to industry. The Safety Training – Toolbox Talk is a good example of how you may populate your own, using the Toolbox Talk and Attendance Form - Template.

There are times when an important safety message or communication needs to be promoted to staff in an urgent or timely manner. Such communications, which may also be required to be delivered to your engaged third parties, can often follow a significant or concerning safety incident within the business. An investigation of the incident could lead to the need for amended risk controls in the workplace with those changes communicated via a Safety Alert. You can utilise this Safety Alerts - Template (DOCX, 154KB) within your own SMS, particularly to communicate the need quickly or urgently for new safety actions to be put in place.

The Safety Bulletins - Template (DOCX, 148KB) is also a useful addition to your SMS to deliver more general safety messages via a documented process. Whilst sometimes not as effective as face-to-face toolbox talks or briefings, Safety Alerts and Safety Bulletins are both relatively simple and positive ways to communicate more widely in the business and to other third parties.

In a mature SMS, planned, positive and targeted safety promotion can be the difference between having an effective SMS and having an SMS manual that just sits on a shelf.

Effective training and communication require the involvement of all staff to share attitudes, values, and beliefs to influence a positive safety culture.

The Positive Safety Culture - Quick Guide provides advice around a more proactive approach to developing a positive safety culture including ways to encourage staff involvement. The described components of a positive safety culture include building a culture of trust, being informed, embedded behaviour of reporting hazards, risk, incidents, near misses and safety concerns, as well as a willingness to learn and change.

Step 9 - Continuous improvement and change management

Continuous improvement and change management are important ongoing processes that can assist in managing current and emerging safety risks in the business. It is often considered the difference between managing safety and leading safety.

It is challenging for a business to consider where it can improve on its safety management and performance, if it has only recently developed and implemented the core or platform elements of its SMS.

The important focus at this stage of your journey is to ensure that all recommended processes and products described in the preceding steps of "Starting Out" (such as a populated Risk Register or Safety Training Calendar) have been embraced, developed, and implemented.

As previously described, you should ensure that any improvement actions associated with your current system and processes (such as need improvements arising from reported and investigated incidents) are documented and followed up via a Continuous Improvement Register - Template.

A stronger focus on continuous improvement starts with exercising safety leadership and integrating your SMS into normal business activities, rather than treating safety as a separate function. When a problem or incident occurs, it as an opportunity to learn and improve processes to prevent it happening again.

Continuous improvement contributes to the ongoing identification and management of safety risks through the review of products, services and transport activities.

The Continuous Improvement - Quick Guide contains greater detail on how to approach continuous improvement within your business. It contains a phased implementation schedule to guide continuous improvement across all elements of your SMS.

It is important to encourage staff involvement in your continuous improvement planning and actions. Staff and line managers can help to identify and solve safety issues and possible improvements with their own or collective ideas and suggestions. This promotes and builds upon a positive safety culture; a precursor to improved safety performance.

All businesses can experience change at different times but being prepared and ready for change can make the difference. Change may be in response to business needs and opportunities, or as a result of continuous improvement.

As part of your business processes, consider any parts of the intended change that may result in some form of safety risk. For example, an expansion of the business to now also transport livestock will create new safety risks to your transport task, which will require related planning and risk management.

At this stage, your Risk Register should be updated to reflect what new risks may be introduced to the business as part of the intended change, as well as any required new risk controls or future treatments.

Once your SMS has been fully developed and is maturing in its implementation and performance, it will require ongoing or more targeted processes to provide continuous improvement and effective safety change management.

Continuous improvement at this level involves planning and undertaking more holistic audits or assessments of your SMS and its effectiveness. This is more than just determining if staff are following key safety risk controls – such as a safety procedure but looks more widely at critical parts of the SMS to determine if they are indeed working as designed. Required improvements to these SMS areas can then be agreed, recorded, and implemented.

You should also consider adopting the Continuous Improvement – Toolbox Talk as part of your own SMS. It is a useful reference for managers to discuss with staff the organisation’s approach to continuous improvement, why it is important, and how they can become involved.

It is important to understand that there can be a link between your planned operational changes and the safety of operations. The Change Management - Quick Guide explains this process in more detail.

Keeping all parties informed can help any change transition occur more smoothly and help minimise any safety impacts to transport activities as part of the change. This includes regular and genuine communications to staff, line management and affected third parties.