Compliance, GRC & HR Blog

Quick Answer: The compliance risks in Australia that changed in 2026 are led by two that both commenced on 1 July 2026: Payday Super, which requires employers to pay superannuation at the same time as salary and wages, and AML/CTF Tranche 2, which brings lawyers, accountants, conveyancers, real estate professionals and precious metals dealers under […]

Quick Answer: To mitigate the risk of non-compliance, work through seven steps: recognise where your real exposure sits, accept that the law applies regardless of your size or location, build training and policies as your reasonable steps defence, apply the ‘your honour’ test to decisions, make sure people can identify, report and resolve incidents, hold […]

Quick Answer: Managing work health and safety risks as a supervisor means working through four steps: identify the hazards, assess the risks, control the risks, and review the controls. What changes for a supervisor is not the method but the position. Supervisors are almost never officers under the work health and safety laws, so they […]

Quick Answer: The risks when working alone fall into four groups: an injury or medical event with nobody to help, violence or aggression with no backup, environmental and travel hazards away from a fixed site, and psychosocial harm from isolation itself. The fourth is the one most often missed, and it carries the same work […]

Quick Answer: A working alone risk assessment identifies where a worker could be left without help, and what you have put in place so they can get it. Australian employers have a specific duty here: regulation 48 of the model work health and safety regulations requires a person conducting a business or undertaking to manage […]

Quick Answer: Occupational violence and aggression covers any incident where a worker is abused, threatened or assaulted in circumstances arising from their work, including from clients, patients, customers and members of the public. It is a psychosocial hazard, which means it carries the same duty as a physical one and the hierarchy of control applies. […]

Quick Answer: Continuous risk monitoring means watching your risks and controls between formal reviews, so that a change is detected when it happens rather than at the next assessment. It is not the same as continuous risk assessment, which re-rates the risk. Monitoring watches for the trigger. For Australian organisations it is also a legal […]

Quick Answer: Workplace harassment creates four separate exposures for an Australian employer, and most organisations only manage one of them. There is the positive duty under the Sex Discrimination Act, which requires proactive measures rather than a response to complaints. There is the work health and safety duty, because harassment is a psychosocial hazard. There […]

Quick Answer: An effective risk management strategy is the set of decisions that governs how your organisation handles risk: what you are protecting, what level of risk you will accept, who owns what, and which treatment you apply when something is rated. It is not the same as the risk management process, which is the […]

Quick Answer: The five governance risk and compliance challenges that persist in Australian organisations are unclear ownership of the GRC process, no single framework, keeping pace with regulatory change, manual processes that cannot produce evidence, and a gap between stated culture and actual behaviour. None is a technology problem at root. Each is a decision […]