The PCBU should record its psychosocial risk management process and outcomes, including consultation, so it can show it has met its duties and can monitor and review hazards and controls. Records may cover the outcomes of consultation, hazards identified, how risks were assessed, controls implemented and training provided. A risk register such as the one in the how to manage risks code or in Appendix C may be used, and a record of how issues were investigated and resolved is useful. Where confidentiality is a concern, high-level information can go in the general register. An inspector may ask to see these records, and without a written record the PCBU must show by other means that it met its duties.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.