HSG65 Explained: 9 Things About HSE's Management Guidance
HSG65 comes up in tenders, audits, board papers and consultancy proposals, usually as a reference rather than an explanation. People cite it with confidence and fewer have read it.
That is a shame, because it is one of the more useful documents HSE publishes, it is free, and it answers a question that organisations of every size struggle with: not what the individual duties are, but how to run health and safety as a management activity rather than a series of compliance tasks.
Nine things worth knowing.
1. What HSG65 actually is
HSG65 is HSE's guidance publication on managing health and safety, titled Managing for health and safety. The current edition dates from 2013 and replaced earlier versions built around a different model.
It is written primarily for leaders, owners and managers rather than for safety professionals, which is a deliberate choice. Its purpose is to describe what effective management of health and safety looks like, and to help organisations judge whether they have it.
2. It is guidance, not law
The point that most affects how it should be used.
HSG65 is not a statute, a regulation or an Approved Code of Practice. Following it is not compulsory, and departing from it is not in itself a breach.
What gives it weight is that it describes how HSE understands good management, and HSE is the regulator. Where an organisation's arrangements are examined, the question of whether they amount to effective management is likely to be asked in terms recognisably similar to those HSG65 uses. So the practical position is that it is optional and influential.
3. It gives effect to duties that are law
Need Expert H&S Guidance?
Our qualified consultants can help you implement the right health & safety measures for your business.
The connection that makes the guidance matter.
Regulation 5 of the Management of Health and Safety at Work Regulations 1999 requires every employer to make and give effect to appropriate arrangements for the effective planning, organisation, control, monitoring and review of preventive and protective measures. Regulation 3 requires a suitable and sufficient assessment of risk.
Those are the legal duties. HSG65 describes one well-established way of meeting them. An organisation that has never read it still has the regulation 5 duty, and HSG65 is a reasonable account of what discharging it involves.
4. The structure is plan, do, check, act
The framework HSG65 adopts, which aligns it with other management systems.
Plan covers determining policy and planning for implementation. Do covers profiling risks, organising for health and safety and implementing the plan. Check covers measuring performance and investigating incidents. Act covers reviewing performance and acting on lessons learned.
Our material on the plan, do, check, act framework covers the cycle in detail. The point to note here is the choice of model: it is the same structure used by other management system standards, which is why HSG65 sits comfortably alongside quality and information security arrangements an organisation already has. HSE's overview of managing health and safety summarises it.
5. How it compares with ISO 45001
The question most often asked, and the answer is that they are compatible rather than competing.
ISO 45001 is an international standard for occupational health and safety management systems, against which organisations can be certified. HSG65 is regulator guidance, against which nobody is certified.
Three differences matter in practice.
Certification. ISO 45001 produces a certificate an organisation can show to customers. HSG65 produces nothing external.
Formality. ISO 45001 specifies requirements in a form suitable for audit. HSG65 is written in plainer language and is more explicitly concerned with leadership behaviour and proportionality.
Scope of use. An organisation can follow HSG65 without ISO 45001, and an organisation certified to ISO 45001 will generally satisfy most of what HSG65 describes.
The sensible position for most office-based organisations is that HSG65 describes what good looks like, and ISO 45001 is a choice made when customers or tenders ask for certification. Our coverage of ISO 45001 covers the standard.
6. It puts leadership first, and means it
The emphasis that distinguishes it from a procedures manual.
HSG65 is clear that effective management depends on leadership: people at the top understanding the risks, setting direction, providing resources and demonstrating commitment through what they actually do. It treats health and safety as part of how the organisation is run rather than as a specialist function operating alongside it.
That framing connects directly to the personal liability of directors under section 37 of the Health and Safety at Work Act, and to the verification duties officers carry in other jurisdictions. A board that reads HSG65 will have a clearer idea of what it is supposed to be doing.
7. Where organisations typically fall short against it
The practical diagnostic, and it is consistent across sizes.
Plan without do. A policy exists and describes arrangements that are not operating.
Do without check. Arrangements operate and nobody measures whether they work, so the organisation cannot tell the difference between good performance and good luck.
Check without act. Incidents are investigated and audits produce findings, and the actions stay open.
Lagging measures only. Performance is judged by incident counts, which in a low-risk environment say almost nothing and in a poor reporting culture say less.
Risk profiling missing. The organisation has assessments of individual activities and no view of where its significant risks actually concentrate, which is the gap a risk register is meant to fill.
8. How it is used in practice
Three settings where it appears.
Audits and gap analyses. HSG65's structure is a natural framework for reviewing an organisation's arrangements, because it asks management questions rather than compliance ones. Independent health and safety audits frequently use it as a reference model.
Tenders and supplier questionnaires. Buyers ask whether a supplier's arrangements follow recognised guidance, and HSG65 is the obvious British reference.
Board reporting. Its emphasis on leadership and performance measurement gives a board a way to ask better questions than "how many accidents did we have".
9. It travels as a model, not as a requirement
The international point.
HSG65 is a British document written for a British framework. Outside Great Britain it has no status, and other jurisdictions covered in this series specify their own management requirements: Thailand's safety management system regulation, Indonesia's audited SMK3, Colombia's scored management system and Peru's formal system under Law 29783 all prescribe structures an organisation must follow.
What travels is the model. Plan, do, check, act, led from the top and measured honestly, is a sound way to run health and safety anywhere, and it maps readily onto whatever national structure applies. What does not travel is the idea that following HSG65 satisfies a foreign regulator.
Holding one management model across a group while each entity meets its own national requirements is where health and safety consultants and software are worth more together than either alone.
The nine, in short
| Point | Position |
|---|---|
| What it is | HSE guidance: Managing for health and safety |
| Status | Guidance, not law or an Approved Code of Practice |
| Link to law | Describes how to meet regulations 3 and 5 |
| Structure | Plan, do, check, act |
| ISO 45001 | Compatible; ISO certifies, HSG65 does not |
| Leadership | Placed first, deliberately |
| Common gaps | Plan without do, do without check, check without act |
| Uses | Audits, tenders, board reporting |
| Internationally | A model that travels, not a requirement that does |
The seventh row is the one to test your own organisation against. Most have a plan, fewer can show it operating, and fewer still close the loop.
Where Arinite fits
Arinite uses the management model HSG65 describes, applied proportionately to office-based organisations and extended across the jurisdictions where they operate. We support 1,500+ businesses across 50+ countries and protect 100,000+ employees, with 95%+ client retention over 15+ years. Our health and safety consultants work extensively with legal, finance and banking and IT and software organisations.
Where entities sit in several countries, our global health and safety consultants map the model onto each national framework, and our international health and safety consultants keep that current.
If your organisation cites HSG65 in its tenders and could not show where its plan, do, check, act loop actually closes, a free gap analysis is the right place to start.
Related Articles
Written by
Arinite Health & Safety Consultants
Health & Safety Expert at Arinite
