Senior leaders require confidence that work health and safety (WHS) systems are not only compliant on paper, but are operating effectively in practice. A WHS Gap Analysis and Governance Review (WHS Review) provides independent, evidence-based insight into how WHS systems perform against legal duties, operational realities, and organisational governance expectations.
A WHS Review takes a holistic, governance-led approach to independent assurance. It examines system design, leadership oversight, decision-making processes, and outcomes to identify risks that matter to governance, legal defensibility, and organisational performance.
Our approach is flexible and responsive to organisational context. Each WHS Review is tailored to the nature of the business, work environments, workforce profile, risk exposure, governance arrangements, and relevant third parties. This ensures findings and recommendations reflect how work is actually conducted, rather than how systems are intended to operate on paper.
Where required to meet the organisation’s assurance needs, relevant elements of ISO 45001 Occupational Health and Safety Management Systems and ISO 45003 Occupational Health and Safety Management, Psychological Health and Safety at Work (Guidelines) may be incorporated into the WHS Review. This allows targeted consideration of ISO alignment within a broader assessment of legal compliance, governance design, and system effectiveness.
Where independent confirmation against ISO requirements alone is required, ISO internal auditing is offered as a separate, targeted assurance service.

A WHS Review provides a structured, point-in-time assessment of the effectiveness of governance across WHS arrangements, including documentation, operational practices, and oversight mechanisms. The focus is on identifying strengths, areas of legal and governance exposure, and opportunities to improve system performance where it matters most to leadership accountability.
Organisations typically engage a WHS Review at key governance or risk inflection points. This may include preparation for regulatory scrutiny, following incidents or emerging concerns, responding to board or audit committee requests, or seeking independent confirmation that existing WHS arrangements remain fit for purpose as the organisation evolves.
Findings are translated into clear, practical, and prioritised recommendations, supporting leaders to understand where attention is required, what action is proportionate, and how due diligence can be demonstrated in practice.
Many organisations encounter challenges such as:

Organisations may choose between different levels of WHS assurance depending on the level of insight required. Some organisations seek an initial snapshot overview of key WHS documentation, while others require a broader desktop assessment or a more detailed WHS Gap Analysis and Governance Review.
Organisational Risk Consulting offers structured review models tailored to the organisation’s context, designed to identify governance concerns and areas for further consideration.
The three review models outlined below differ in scope, depth of analysis, and the level of assurance provided.
A brief desk-top review designed to provide an initial overview of key WHS documentation and identify areas that may warrant further attention.
The Snapshot includes:
This Snapshot is suitable for organisations seeking an initial overview of key WHS documentation before considering a broader review.
A detailed desk-top review designed to assess WHS documentation in greater depth and identify system issues that may warrant further attention.
The Review includes:
This Review is based solely on the documented information provided and does not include operational observations, workforce consultation, or verification of how documented arrangements are implemented in practice.
This Review is suitable for organisations seeking a more detailed documentation-based assessment before considering a broader WHS Gap Analysis and Governance Review.
A detailed review designed to assess WHS documentation, governance arrangements, and how WHS systems operate in practice.
The Detailed Review includes:
This Detailed Review is suitable for organisations seeking a broader understanding of how WHS systems function in practice and where governance attention may be required.
Organisations considering these WHS review models may request a service overview that outlines all three options for comparison, including:

A WHS Review provides senior leaders with assurance that extends beyond documentation and checklist-based compliance, focusing on how WHS systems support effective governance and risk oversight in practice.
The WHS Review provides:
Many organisations seek confidence not only in their overall WHS approach, but in how their systems may be interpreted under legal or regulatory scrutiny.
A WHS Review can place particular emphasis on risk management and legal compliance, including:
This approach draws on our combined WHS, investigative, and legal expertise to identify areas of exposure and strengthen organisational readiness under scrutiny.
Organisational Risk Consulting offers a unique combination of expertise that strengthens confidence in every WHS Review:
The WHS Gap Analysis and Governance Review follows a structured, proportionate process focused on leadership priorities, governance outcomes, and practical risk oversight.
All reviews are conducted in accordance with the disciplined assurance principles set out in the ISO 19011:2018 Guidelines for Auditing Management Systems. These principles support integrity, independence, and evidence-based outcomes across our work.
Our process includes:
1. Scoping Discussions
Confirm organisational context, governance arrangements, leadership objectives, and areas of focus so the review addresses matters most relevant to due diligence and oversight responsibilities.
2. Information Gathering
Work with the organisation to collect information aligned with the project scope, including WHS documentation, governance arrangements, and operational practices.
This may include desk-top reviews and operational observations. Operational observations may involve discussions with personnel, review of photographs or recorded video, live video walkthroughs of work areas, or in-person observation where required.
These flexible observation methods can reduce disruption and travel costs for the organisation while still providing meaningful operational insight.
3. Analysis of Information
Assess the available information against applicable WHS obligations and, where relevant, selected ISO elements. The analysis is evidence-based and applies professional judgement to identify areas of strength, gaps, and potential exposure.
4. Reporting Findings and Practical Recommendations
Prepare a WHS Review report that documents verified findings, including positive attributes, areas of legal or governance risk, and opportunities for improvement.
Recommended actions are practical, proportionate, and prioritised according to risk and potential impact on leadership accountability. Sourced information and reporting remain confidential.
5. Optional Further Engagement
Further engagement may be considered where this aligns with organisational needs. This may include targeted assistance on priority findings, support relevant to the organisation’s next steps, or a subsequent review.
“I engaged Andrea of Organisational Risk Consulting to perform a safety audit of our safety systems, including our policies, work processes, and implementation, as part of a comprehensive review by one of our clients....Andrea provided a detailed analysis of all risks and realistic solutions to improve our safety culture, providing practical and immediate solutions to increase safety adherence within our team.”
— Raymond Bowring, CEO, Battery Services Australia
“I engaged Andrea to provide a comprehensive review of the organisation's OHS strategy, policies, application, implementation, and most importantly, its safety culture. Andrea provided a detailed analysis of each and provided an in-depth plan on how to achieve and exceed legislative requirements, as well as embarking on the journey of best practice. Andrea did not just produce a report; she assisted and guided the organisation to actually implement it. Andrea is a consummate pragmatic professional that I highly recommend.”
— Andrew James, Executive General Manager
"Andrea [of Organisational Risk Consulting] recently conducted a comprehensive review of our operations, and her expertise was evident from the outset. She approached the project with a high level of professionalism, ensuring that every aspect of the review was thorough and detailed. Andrea not only identified areas of improvement but also provided clear, practical recommendations that have added real value to our business. Her ability to balance technical knowledge with clear communication made the process both efficient and constructive." — Terry Wode, Chief Operating Officer
"I worked with Andrea from Organisational Risk Consulting as she conducted our WHS Management System Gap Analysis, and she was outstanding to work with. Professional yet approachable, she was an excellent sounding board and delivered thorough, high-quality work with practical, valuable insights. I highly recommend her expertise." - Mathew McAllister, Safety and Wellbeing Manager
Our WHS Gap Analysis and Governance Review will provide your organisation with clearer visibility of its WHS position, highlight opportunities to strengthen due diligence, and support preparation for regulatory or client scrutiny. We deliver practical recommendations your team can act on with confidence.

Organisational Risk Consulting is not a law firm and does not provide legal advice. Our services are informed by extensive WHS and legal experience, offering strategic insights to support risk management, governance, and compliance. Clients should seek independent legal advice for matters requiring formal legal interpretation or representation.
We use cookies to analyse website traffic and optimise your website experience. By accepting our use of cookies, your data will be aggregated with all other user data.