Australia Model Code of Practice Managing the Risks of Biological Hazards at Work 9: Record the risk management process and outcomes in a form suited to the business: hazards, assessment and controls (such as a risk register), policies and procedures, training, consultation, inspection and maintenance, air monitoring, compliance audits, first aid and incident reports, exposure investigations and notifiable incident records, and where relevant respirator fit testing, confidential vaccination records, microbiological testing, rosters and an injury and event log

What does 9 require?

Records of the risk management process and its results let the PCBU show how it has met its duties and help when hazards and controls come up for monitoring or review; an inspector may ask to see them, and without written records the PCBU has to prove compliance some other way. The form of record is the PCBU's choice. Worth keeping: the risk assessment itself, with the hazards found, how the risks were judged and the controls adopted (a risk register such as the one in the Code of Practice on managing WHS risks serves); policies and procedures; training records; consultation records; inspection and maintenance records; air monitoring results; compliance audits; first aid records; and reports of injury, illness and dangerous incidents. It is also useful to record how any exposure or possible exposure was investigated, including cases where a worker caught an infection from a known exposure, and the record-keeping that the notifiable incident rules require must be met. Depending on the work, further records may be needed: respirator fit testing, checks and maintenance; vaccination status, held in confidence and never disclosed or reported without the worker's express written consent; microbiological testing such as Legionella sampling; staff rosters and allocations; and a log of injuries and events noting where and how each happened.