Risk Management Plan Template for New Zealand

Generate a bespoke document

What is a Risk Management Plan?

A Risk Management Plan is your organization's roadmap for identifying, analyzing, and addressing potential threats before they cause harm. It outlines specific steps to protect your business, employees, and assets while meeting your obligations under New Zealand's Health and Safety at Work Act 2015.

The plan typically includes risk assessment methods, control measures, emergency procedures, and staff training requirements. For Kiwi businesses, it's particularly important to address unique local risks like seismic activity and severe weather events, while also covering standard workplace hazards. Regular updates and reviews keep the plan current and compliant with WorkSafe NZ guidelines.

Frequently Asked Questions

When should you use a Risk Management Plan?

Your business needs a Risk Management Plan when starting new projects, entering unfamiliar markets, or expanding operations. It's especially crucial for activities covered by the Health and Safety at Work Act 2015, like construction projects, manufacturing operations, or any work involving significant hazards.

Create or update your plan when facing major operational changes, after workplace incidents, or when WorkSafe NZ updates its guidelines. Many Kiwi organizations develop their plans before annual compliance reviews, insurance renewals, or when bidding on government contracts. The plan becomes your essential tool for protecting staff, meeting legal obligations, and maintaining business continuity through challenges.

What are the different types of Risk Management Plan?

Who should typically use a Risk Management Plan?

  • Business Owners and Directors: Hold ultimate responsibility for risk management strategy and legal compliance under the Companies Act
  • Health and Safety Managers: Draft and maintain the plans, ensure WorkSafe NZ compliance, and coordinate implementation
  • Department Managers: Contribute specific risk assessments and oversee control measures in their areas
  • External Consultants: Provide specialist input for complex risks or industry-specific requirements
  • Staff and Contractors: Follow procedures, report risks, and participate in risk management activities
  • Insurance Providers: Review plans when setting premiums and assessing coverage requirements

How do you write a Risk Management Plan?

  • Gather Key Information: List your business activities, locations, staff numbers, and major assets
  • Review Regulations: Check WorkSafe NZ guidelines and industry-specific requirements that apply to your operations
  • Document Hazards: Record all identified risks, their likelihood, and potential impact on your business
  • Control Measures: Detail existing safety procedures and planned improvements
  • Emergency Procedures: Include response plans for different scenarios, from natural disasters to workplace accidents
  • Training Requirements: Outline staff training needs and documentation processes
  • Review Schedule: Set dates for regular plan updates and compliance checks

What should be included in a Risk Management Plan?

  • Risk Assessment Framework: Clear methodology for identifying and evaluating risks under Health and Safety at Work Act 2015
  • Control Measures: Specific steps to eliminate or minimize identified risks, aligned with WorkSafe NZ guidelines
  • Roles and Responsibilities: Detailed breakdown of who manages each aspect of risk control
  • Emergency Procedures: Step-by-step response protocols for various risk scenarios
  • Review Schedule: Timeframes for regular assessment updates and compliance checks
  • Documentation Requirements: Record-keeping procedures for incidents, training, and assessments
  • Communication Plan: Methods for sharing risk information with staff and stakeholders

What's the difference between a Risk Management Plan and an Enterprise Risk Management Framework?

A Risk Management Plan differs significantly from an Enterprise Risk Management Framework. While both deal with organizational risks, they serve distinct purposes and operate at different levels.

  • Scope and Detail: Risk Management Plans are specific, action-oriented documents focusing on particular projects, departments, or risks. Enterprise Risk Management Frameworks provide broader, organization-wide guidelines and principles.
  • Implementation Level: Plans contain detailed control measures and immediate action steps. Frameworks establish the overall approach and governance structure.
  • Time Horizon: Plans typically cover specific periods or project phases, while Frameworks remain relatively constant, requiring updates only when major organizational changes occur.
  • Legal Requirements: Under NZ law, specific industries must maintain detailed Risk Management Plans, but Frameworks are often voluntary governance tools.

Reviewed by

Swetha Meenal

Legal Engineer, GenieAI

Swetha Meenal profile photo

A lawyer, legal researcher and legal tech founder, Swetha has built AI products deployed inside Tier 1 firms and enterprises. She ensures GenieAI's alignment with the latest regulation and executes testing on the legal robustness of Genie output.

Reviewed by

Imad Mohammed Nazar

Legal Engineer, GenieAI

Imad Mohammed Nazar profile photo

A Skadden-trained M&A lawyer, Imad advised on cross-border transactions and contractual risk before moving into legal AI. He reviews GenieAI's output for compliance and enforceability across our 150+ supported jurisdictions, as well as facilitating external benchmarking.

Jurisdiction

New Zealand

Publisher

GenieAI

Category

Plans

Cost

Free to use

Last updated

About the Risk Management Plan

  • Gather Key Information: List your business activities, locations, staff numbers, and major assets
  • Review Regulations: Check WorkSafe NZ guidelines and industry-specific requirements that apply to your operations
  • Document Hazards: Record all identified risks, their likelihood, and potential impact on your business
  • Control Measures: Detail existing safety procedures and planned improvements
  • Emergency Procedures: Include response plans for different scenarios, from natural disasters to workplace accidents
  • Training Requirements: Outline staff training needs and documentation processes
  • Review Schedule: Set dates for regular plan updates and compliance checks

Genie's Security Promise

Genie is the safest place to draft. Here's how we prioritise your privacy and security.

Your data is private:

We do not train on your data; Genie's AI improves independently

All data stored on Genie is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

We are ISO27001 certified, so your data is secure

Organizational security:

You retain IP ownership of your documents and their information

You have full control over your data and who gets to see it