OHS & Security Management Plan (OHSSMP) Template
A 10-section structure covering hazard assessment, daily controls, PPE, incident classification and reporting, emergency preparedness, occupational health programmes, traffic and road safety, and security personnel arrangements.
10 sections · worker and community exposure · with the standard reference behind each
The plan is read after something has happened
An OHS plan is written during mobilisation and read, properly, once — in the days after a serious incident, by people establishing what the project had committed to and whether it did it. Write it for that reading. Every clause that says a control "will be considered" or "as appropriate" is a clause that will be quoted back with the question of who considered it and when.
The corollary is that the plan's value is in its records, not its prose. Toolbox talks, daily risk assessments, PPE issue, drills, inspections: each section of this template names the artefact that evidences it, because a control with no artefact cannot be distinguished afterwards from a control that was never applied.
Community exposure is not a subset of worker safety
The people most likely to be killed by a large civil works project in a populated corridor are not its workers. They are pedestrians, cyclists and schoolchildren on a route the project's haulage now uses forty times a day. Worker safety is measured, reported and incentivised; third-party road risk frequently is not measured at all.
Two sections here address it directly — traffic and road safety, and emergency preparedness with off-site medical routes — and both ask for the community figure, not the workforce figure. If the project's incident statistics contain no third-party denominator, that is the finding.
Security, and the question nobody asks at procurement
Security guards on a project site are, to an affected community, part of the project. Their conduct is attributed to it, their use of force becomes its liability, and their interaction with public security forces is the highest-consequence safeguard risk most projects carry without assessing.
The plan should state how personnel are screened, what training in proportionate force they receive, that they are bound by the same code of conduct as the workforce, and what happens if public security becomes involved. If the answer to any of those is "that is the security provider's matter", the project has outsourced a risk it cannot outsource.
Questions
- Why are occupational health, safety and security in one plan?
- Because on a construction project they share a workforce, a site boundary and a set of controls, and separating them tends to orphan security. Occupational health and safety usually has an owner and a budget; security arrangements — guards, use of force, the interface with public security — often sit with a procurement decision nobody reviewed against a safeguard standard. Keeping them in one document forces the second question to be asked.
- What counts as a 'major' incident requiring 24-hour notification?
- Whatever the plan says, written before the first incident. Fatalities, life-changing injuries, incidents involving community members, and security incidents involving use of force are the usual floor. The failure mode is having no written definition, because severity is then decided after the fact by the party who has to do the reporting — and it is always decided downwards.
- Does this plan cover community safety or only workers?
- Both, and the community half is the one more often missing. Project traffic through settlements, exposure to excavations and materials, and the conduct of security personnel toward non-workers are community health and safety matters that live in this plan. A project that assesses road-safety risk only for its own drivers has assessed the wrong population.
- How often should emergency drills be run?
- On a stated cycle, with the record kept — and re-run when the workforce turns over. A drill held once at mobilisation certifies a workforce that has since been replaced. The more useful test is whether an unannounced check would find current first aiders on shift and a route to a hospital that can actually receive trauma cases.
- What is the security requirement most projects miss?
- Vetting and training obligations flowed down to the security subcontractor. Security is usually procured as a service, and the contract commonly specifies headcount and hours without a word about screening, proportionate use of force, or the code of conduct that binds the rest of the workforce.
The software behind this
SmartLARMS keeps this as a live record, not a spreadsheet
A template is a starting point. The version that survives a completion audit is one where every change is attributed to a person and a date, and where the numbers reconcile to what was actually paid.