Quality and compliance across Australian energy assets, contractors and documents, from WHS duties to audit evidence

An auditor who picks one transformer, turbine or pipeline segment and asks for its last work order, the crew that performed it and the procedure revision in force that day can wait days for an answer, because the three records sit in different systems. Quality and compliance management for Australian energy companies comes down to making those records answer one question together, under duties set by the WHS Act 2011, state electricity safety schemes and offshore safety case rules.

Operators on Victorian electricity networks work to an accepted safety management scheme. Offshore facilities operate under a NOPSEMA safety case. Generators, retailers and contractors onshore work under the WHS laws of their state or territory. Each regime asks for the same proof: the asset was maintained, competent people did the work and the procedure in use was current.

How WHS duties and network safety schemes shape the evidence operators keep

Under the WHS Act 2011 a PCBU keeps its primary duty when contractors perform the work

Section 19 of the model WHS Act requires a PCBU to ensure, so far as is reasonably practicable, the health and safety of workers it engages and of workers whose activities it influences or directs. That covers contractor crews on an operator's sites. Safe Work Australia states that a PCBU cannot contract out of its responsibility and that a duty cannot be transferred to another person. An operator therefore needs its own evidence that contractor work was controlled, whatever the contract says.

Section 46 requires duty holders to consult, cooperate and coordinate on shared work so far as reasonably practicable

Where more than one PCBU holds a duty for the same matter, such as an asset owner, a maintenance contractor and an equipment supplier, each must consult, cooperate and coordinate activities with the others. Safe Work Australia guidance describes coordination as making sure each party's control measures complement the others so that no gaps remain between duty holders. Operators evidence this through shared work plans, interface agreements and permit records. The section numbers here come from the model Act. Each state and territory legislates its own version, and Western Australia's WHS Act 2020 carries the same section 46 duty.

Victorian major electricity companies must hold and follow an accepted safety management scheme for each supply network

Under the Electricity Safety Act 1998 (Vic), a major electricity company must submit an electricity safety management scheme to Energy Safe Victoria for each supply network. It must wait for acceptance or provisional acceptance before commissioning or operating the network, and it must comply with the accepted scheme (sections 99 and 106). Energy Safe Victoria's safety performance report states that major electricity companies resubmit schemes every five years or after significant changes to regulations or company practices, and that the regulator audits compliance with each accepted scheme. A scheme works as a quality document with legal force, so every revision, owner and approval date becomes evidence.

Offshore operators need a safety case in force for each stage of a facility's life

NOPSEMA states that a facility cannot be constructed, installed, operated, modified or decommissioned without a safety case in force for that stage. Its guidance on the Offshore Petroleum and Greenhouse Gas Storage (Safety) Regulations 2024 says the safety case must specify the Australian and international standards applied to the facility and plant, and the regulations include arrangements for record keeping. An offshore operator's quality system and its safety case describe the same work, so a mismatch between them shows up in assessment.

Where asset records and maintenance history meet ISO 55001 and ISO 9001

Asset integrity records link each inspection, defect and repair to a named asset and procedure revision

Quality teams reach asset records through defects and non-conformances. A defect raised against a protection relay should open a corrective action, cite the inspection procedure revision that found it and close with evidence attached to the same asset identifier. When the defect sits in a maintenance system and the corrective action sits in a quality system, the link depends on someone retyping an identifier, and typing errors break the trace. Asset integrity records earn their value when an auditor can start from the asset and reach the inspection, the defect, the repair and the change history in one pass.

ISO 55001 sets requirements for an asset management system, and the organization decides which assets it covers

ISO describes ISO 55001 as specifying requirements for an asset management system that any organization can use, with the organization determining which of its assets fall in scope. The standard names internal and external parties who assess an organization's ability to meet legal, regulatory and contractual requirements among its intended users. A workable scope starts with the assets whose failure carries the highest consequence, such as substations, generation units and pipelines, and applies ISO 9001 document control, corrective action and internal audit to the work that maintains them.

Offshore safety cases name the control measures critical to safety, so their maintenance records need the fastest retrieval route

NOPSEMA's guidance on the 2024 regulations adds a requirement that safety cases identify which technical and other control measures are critical to safety. It describes control measures broadly, from physical equipment to maintenance procedures and key personnel, and expects the safety case to demonstrate that equipment is fit for its function. Onshore operators can borrow the logic: tag critical controls in the asset register and give their maintenance evidence the fastest route to retrieval.

What to check when contractors work on energy assets across several sites

Contractor compliance evidence expires, so teams record licenses, inductions and competency against a review date

A contractor record that was complete at onboarding can lapse before the next work order is issued. Licenses, inductions, insurance certificates and task competencies each carry their own expiry or review date, so store each one with that date and check it again when a work order is released. Contractor compliance evidence then reflects the day of the work, which is the day an investigator or auditor will ask about.

Permits and work orders tie a named contractor to a specific asset, task and procedure revision

A permit or work order that names the firm, the individuals, the asset and the procedure revision lets one record answer four questions. Records for permits, inductions and competency can sit in a single workflow, as described for digital permit-to-work, induction and competency verification on remote energy sites. Table 1 shows where evidence usually sits at each contractor stage and where it tends to break.

Table 1. Contractor lifecycle stages, owners, evidence and failure points

Stage	Typical owner	Evidence an auditor asks for	Common failure point
Prequalification	Procurement or contracts	Licenses, insurance certificates, safety performance history, quality system certificates	Credentials stored with no expiry date
Induction and competency	Site or HSE lead	Induction record, task competency, supervisor sign-off	Competency recorded for the company with no task level detail
Permit and work order	Maintenance planner or operations	Permit, work order and isolation record linked to the asset identifier	Work order names the firm with no named individuals
Work execution	Contract supervisor	Procedure revision used, inspection results, deviations	Field records entered weeks after the job
Close-out and review	Quality or contract manager	Completion evidence, defects raised, performance rating	Ratings held in a spreadsheet that nobody reviews

Owners vary by operator, and the stage list adapts to each contractor program.

Performance review feeds supplier evaluation, and ISO 9001 clause 8.4 expects records of monitoring and verification results

Clause 8.4 of ISO 9001 covers externally provided processes, products and services, which places a maintenance or inspection contractor inside the quality system. Commentary on the clause describes an expectation to record supplier monitoring results and verification activities in addition to selection criteria. For a contractor, that means each job closes with a recorded rating and a list of defects raised, and the next prequalification review reads from those results.

How document control holds up when energy sector audits ask for evidence

Each controlled procedure in an energy operation needs one owner, one live revision and a dated review history

Ownership decides whether a revision history stays reliable. Name one owner per controlled document, record the current revision and keep the review date visible, so an inspector can see within seconds who approved what and when. Version locking, approval tracking and full audit trails in controlled document workflows support that discipline, and the same rule applies to the spreadsheets and PDFs that quietly act as procedures. Document control is tested through the questions an auditor asks next.

Auditors ask for the procedure revision in force on the day of the work, so retrieval speed matters

Work happens on one day and an audit happens months later. The auditor selects a job, asks for the procedure revision in force on the date of the work and then asks who approved that revision. Teams that store superseded revisions with effective dates answer in minutes. Teams that overwrite old files reconstruct the answer from email. The same logic applies to plant records, as risk assessments, safe work method statements, interlock certification and maintenance logs matched to document owners show for machinery in Australia.

Regulator audits of a safety scheme test whether operators follow every commitment in the accepted document

Energy Safe Victoria audits major electricity companies against their accepted schemes, so the scheme text becomes the audit checklist. Every commitment in it, such as inspection frequencies or training controls, needs a procedure, an owner and a record that shows it happened. A change to the scheme or to company practice triggers resubmission, which gives the change history of each procedure regulatory weight. Table 2 maps each obligation to the record an auditor requests and a gap to check for.

Table 2. Obligations, the records auditors request and gaps to check for

Obligation	Record the auditor requests	Gap to check for
WHS Act 2011 section 19 (primary duty of care)	Risk assessments, safe work procedures, training and supervision records for contractor workers	Records held per firm with no link to the asset worked on
WHS Act 2011 section 46 (consult, cooperate and coordinate)	Shared work plans, interface agreements and permit records	Agreements filed with no reference from the work order
Electricity Safety Act 1998 (Vic) section 106	Accepted safety management scheme, revision history and evidence for each commitment	Operating procedures that drift from scheme commitments after a revision
Offshore safety case regulations (NOPSEMA)	Safety case, control measures critical to safety, applicable standards and record keeping arrangements	Maintenance records for critical controls held outside the safety management system
ISO 9001 clause 8.4	Supplier selection criteria, monitoring results and verification activities	Criteria recorded with no results

How the four-link trace exposes gaps between assets, contractors and procedures

The trace starts from one asset and follows its work order, crew, competency and procedure revision

The four-link trace is a sampling test that follows one asset through four records: its latest work order, the people who performed the work, their competency on that date and the procedure revision in force. Run it in four steps.

• Select an asset at random from a critical class, such as a substation transformer or a gas turbine.
• Retrieve its latest work order and open defects.
• Identify the named individuals who did the work and the competency evidence valid on that date.
• Retrieve the procedure revision in force on that date and its approval record.

Time each step. Any answer that takes longer than a few minutes marks a link worth repairing.

A break at each link points to a named owner in asset management, contracts, HSE or quality

A break at link one points to asset management. A break at link two points to contracts or procurement. A break at link three points to the HSE or training function. A break at link four points to the quality or engineering owners of the procedure. Recording which link failed turns a general finding of poor traceability into an action with a named owner.

Sampling a few assets per site each quarter keeps the trace current between external audits

Log each result against the four links, track repairs to closure through the corrective action process and review the pattern at management review under ISO 9001. Repeat failures at one link signal a process fault. Scattered failures across links signal individual record errors that a reminder or a template change can fix.

What a single asset record tells an auditor about the whole operation

An auditor who follows one asset back through its work order, its crew and its procedure revision tests the whole quality system at once. The WHS duties, the Victorian safety schemes and the NOPSEMA safety case regime each end in the same request for linked proof, and ISO 9001 and ISO 55001 supply the structure that makes the proof repeatable. Teams that run the four-link trace before the auditor does find the broken link while there is still time to fix the owner, the record or the procedure. For a quality manager in Australian energy, the practical meaning is one test, run every quarter, on assets chosen at random.