Managing to the Rule or Managing to the Risk? The Question That's Dividing Australia's Safety Leaders

Fatalities are down 24% — but serious injuries are up a third. The data is telling us something uncomfortable about how we've been doing safety.

A senior leader asked me a question recently that I haven't been able to shake.

"Are people managing to compliance — or managing risks as they see them?"

It's a deceptively simple question. And honestly? The answer for many organisations right now is... both. And neither. And that's the problem.

The Paradox in the Data

Here's what's keeping me up at night.

Australia's workplace fatality rate has dropped 24% over the past decade — down to 1.3 deaths per 100,000 workers in 2024. That's real progress. Lives saved. Systems working.

BUT in the same period, serious workers' compensation claims have risen by more than a third — 146,700 claims in 2023–24, each involving at least a week off work. Serious mental health claims? Up 43.3%. The median time lost for a psychological injury is 37 weeks, with median compensation of $65,400.

So we're getting better at preventing people from dying. But we haven't really shifted the needle when it comes to preventing people from being harmed.

That gap — between fatal risk reduction and total harm reduction — is the compliance-culture gap. And it's growing.

The Compliance Trap

Having worked across many industries, I've seen the same thing over and over,a particular pattern that's just dawned on me is this: organisations confuse documentation with protection.

Checklists get completed. Audits get passed. Procedures get signed off. And everyone sleeps well at night because the system says we're "compliant."

But compliance with documented policies does not guarantee practical risk control. WHS Acts asks PCBUs to eliminate or minimise risks "so far as is reasonably practicable" — that's a risk judgement standard, not a paperwork standard. It demands thinking, not just ticking.

The research backs this up. Unsafe behaviours contribute to roughly 80% of workplace incidents. Unsafe conditions? Just 20%. Which means the things we're best at controlling through compliance — physical hazards, engineering controls, documented procedures — only address a fraction of what's actually hurting people.

Let's Not Throw the Baby Out

Here's where I'll push back on the "culture over compliance" narrative that's become fashionable in our profession.

Compliance is not the enemy. It's the foundation.

In my experience, having managed safety globally, the data consistently showed that organisations with weak compliance foundations couldn't sustain strong safety cultures. You need the structure. You need the guardrails. You need the non-negotiables.

The problem isn't compliance itself — it's when compliance becomes the ceiling instead of the floor.

When leaders treat the procedure as the destination rather than the starting point, you get what I call "performative safety" — the appearance of control without the substance of it. And that's where normalisation of deviance creeps in. Risk tolerance drifts upward. And everyone's surprised when something goes wrong.

317 WHS prosecutions were recorded nationally in 2024, with 97% resulting in financial penalties. Enforcement is intensifying even as organisations invest more in compliance infrastructure. That tells you something.

The Regulators Are Already Moving

Great to see that regulators are signalling exactly this shift.

WorkSafe QLD's Proactive Compliance Program (2024–2027) explicitly moves away from reactive, post-incident enforcement toward proactive, culture-focused interventions. Victoria's new Psychological Health Regulations — effective December 2025 — go even further. They constrain PCBUs from relying predominantly on information, instruction, and training as psychosocial risk controls.

Read that again. The regulator is essentially saying: "You can't train your way out of a toxic culture."

That's a direct challenge to the tick-box mindset. And it's overdue.

So What Does "Managing to the Risk" Actually Look Like?

It looks like leaders who ask questions before they ask for reports.

It looks like frontline workers who feel safe enough to say "this doesn't feel right" — even when the procedure says it's fine.

It looks like organisations that measure leading indicators of culture — engagement, psychological safety, near-miss reporting quality — not just lagging indicators of compliance.

One of the things I continue to learn, is that the hardest part isn't the strategy — it's creating the conditions where people trust the system enough to be honest about what's actually happening on the ground.

That trust is culture. And you can't audit it into existence.

The Real Question

If eliminating work-related injuries and illnesses would grow Australia's economy by $28.6 billion annually and create 185,500 new jobs, then safety culture isn't a cost centre. It's a strategic lever.

So the question isn't really "compliance or culture?" — that's a false choice.

The question is: are your leaders using compliance as a launchpad for genuine risk ownership? Or are they hiding behind it?

The data suggests most of us already know the answer. The harder part is doing something about it.

Excited to see more organisations — and more regulators — having this conversation honestly. The Australian WHS Strategy 2023–2033 frames the next decade around data intelligence, cultural maturity, and systemic leadership. That's the right direction.

Now we need leaders brave enough to walk it.