Written by: Marietjie du Plessis
Many organisations assume that the existence of health and safety policies, procedures, and safety files is sufficient to demonstrate legal compliance. In reality, compliance extends far beyond documentation. During legal compliance audits, auditors assess not only whether the required documents are in place, but also whether health and safety systems are effectively implemented, regularly monitored, and consistently maintained in practice. The Occupational Health and Safety Act, 1993 (Act No. 85 of 1993), places a legal obligation on employers to provide and maintain a working environment that is safe and without risk to the health of employees, as far as is reasonably practicable. This means that organisations must be able to provide objective evidence that their safety management systems are functioning as intended. In this first article of a three-part series, we examine what legal compliance truly entails and what auditors typically evaluate during a compliance audit.
In Part II of the three Part serious, we will explore the three pillars that help organisations successfully demonstrate compliance during legal compliance audits.
When organisations undergo legal compliance audits, many believe that having safety files and policies in place will demonstrate compliance.
In reality, auditors look far deeper.
They assess whether safety systems are implemented in practice, supported by records, and integrated into daily operations.
Organisations that successfully demonstrate compliance typically have three critical elements in place. Without them, even well-written procedures may fail to demonstrate compliance during an audit.
In this second post of the series, we explore the three pillars that form the foundation of demonstrable compliance.
Demonstrating Compliance: The Three Pillars Organisations Should Focus On
In Part 1, we discussed how legal compliance audits assess whether organisations can demonstrate implementation of health and safety requirements. For companies preparing for such audits, three fundamental pillars play a critical role in demonstrating compliance.
The Three Pillars of Demonstrating Compliance
Organisations that successfully demonstrate compliance during audits typically have three elements in place.
1. Documented Systems
A structured set of documents forms the foundation of compliance. These may include:
- Health and safety policies
- Safe work procedures
- Risk assessments
- Standard operating procedures
- Emergency response procedures
These documents provide the framework for managing health and safety risks within the organisation.
2. Implementation in Practice
Having procedures in place is only the starting point. Auditors will assess whether these procedures are actually followed in the workplace.
For example, this may involve observing:
- Employees using the required personal protective equipment (PPE)
- Safe work procedures being followed during operations
- Supervisors conducting inspections
- Hazard controls being implemented as indicated in risk assessments
Practical implementation is often where the difference between paper compliance and real compliance becomes evident.
3. Records and Evidence
Records are essential because they demonstrate that safety activities are consistently carried out.
Examples of important records include:
- Training attendance registers
- Equipment inspection checklists
- Maintenance records
- Certificates of Compliance
- SHE committee meeting minutes
- Incident investigation reports
- Medical surveillance records and
- Occupational Hygiene Surveys (where required)
Without proper records, organisations may struggle to prove that compliance activities have taken place.
Need help managing your legal compliance?
Ariscu‘s compliance management system serves as a comprehensive resource for all your health, safety, environment, and quality (HSEQ) needs. With our intelligent reporting module, our software actively communicates with you to ensure your business remains safe and compliant. Contact us today to learn how we can support your organization.





