Section 27 of the WHS Act requires officers, company directors among them, to exercise due diligence so that the PCBU complies with its duties. In practice that means taking reasonable steps to stay current on work health and safety matters; to understand the operations and the hazards and risks they carry, biological hazards included; to see that the PCBU has suitable resources and processes for managing those risks; to see that it has ways of receiving, weighing and acting promptly on information about incidents, hazards and risks; to see that it has processes for complying with the WHS Act and Regulations; and to check that those resources and processes exist and are actually used. The Code's aquatic centre example shows an officer doing exactly that: after a cryptosporidium outbreak she rereads the last risk assessment, finds controls that are not being applied (pre-swim showering, swim nappies for infants, signage excluding people recently ill with diarrhoea or vomiting), checks water testing frequency, and before reopening arranges extra staff training, more signage, a compliance audit and a review of filtration and disinfection.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.