Chartered Risk Review for Chain of Responsibility Gaps: A Practical Guide for Australian Operators

What is a chartered risk review for Chain of Responsibility gaps?

A chartered risk review for Chain of Responsibility (CoR) gaps is a structured, evidence-based assessment of an Australian transport operator's compliance with the Heavy Vehicle National Law (HVNL). It identifies weaknesses in a business's Safety Management System (SMS), exposes duty holders to potential liability, and outlines practical steps to achieve NHVAS accreditation readiness. MAEZ helps operators stop losing sleep over fines, accreditation risk, and scattered evidence by delivering expert advisory, training, and a SaaS SMS platform.

Key takeaways

• A chartered risk review assesses your operation against HVNL primary duty obligations under Part 1A.2, identifying actionable gaps before the NHVR does.
• The Heavy Vehicle National Law extends responsibility beyond the driver to all parties in the Chain of Responsibilities, including consignors, packers, loaders, and operators.
• Maintaining a documented Safety Management System (SMS) is a core requirement for NHVAS accreditation and managing fatigue, mass, and loading risks.
• CoR training at cortraining.com.au and the CoRGuard SaaS SMS platform provide the documentation and evidence needed to demonstrate compliance.
• MAEZ translates legislative requirements into practical controls, closing the gap between what the law expects and what your business actually does.

How does the HVNL define Chain of Responsibilities and primary duty?

The Heavy Vehicle National Law (HVNL) is the legislative foundation for CoR in participating Australian jurisdictions (Queensland, NSW, Victoria, Tasmania, South Australia, and the ACT). Part 1A.1 of the HVNL establishes the principle of shared responsibility (Section 26A). Part 1A.2 outlines the nature of the primary duty.

The primary duty (Section 26C) requires each party in the Chain of Responsibilities to ensure, so far as is reasonably practicable, the safety of the transport operation. This includes eliminating or minimising public health and safety risks, and preventing drivers from being impaired by fatigue.

Duty holders are explicitly named in the law and include:

• Consignors
• Consignees
• Packers
• Loaders
• Drivers
• Operators
• Schedulers

If any of these parties makes a prohibited request or contract (Section 26E) that causes a driver to breach mass, dimension, or fatigue requirements, they are legally liable. A chartered risk review tests whether your contracts, work instructions, and daily practices comply with these duties.

Why is a Safety Management System (SMS) essential for NHVAS accreditation?

A Safety Management System (SMS) is the documented framework an operator uses to manage safety risks. For businesses seeking NHVAS accreditation, an SMS is not just best practice—it is a mandatory requirement. The NHVAS Master Code requires businesses to have systems in place for managing fatigue, mass, and vehicle maintenance.

When the NHVR assesses your NHVAS accreditation application, they look for evidence that your SMS is actively used, not just a document on a shelf. An effective SMS includes:

• Safety policies and procedures
• Risk identification and mitigation processes
• Training records
• Incident reporting mechanisms
• Internal review schedules

MAEZ's chartered risk review evaluates your current SMS against the NHVAS Master Code, identifying missing elements and advising on how to structure your documentation for successful accreditation or re-accreditation. The SMS must clearly define who is responsible for what, how risks are monitored, and what actions are taken when a breach is identified.

What does a chartered risk review look for operationally?

The HVNL outlines specific operational requirements where duty holders frequently fail to maintain evidence. During a chartered risk review, MAEZ advisors examine your operational records against these legislative benchmarks.

For example, Chapter 6 of the HVNL details vehicle operations and driver fatigue. Section 293 requires drivers of fatigue-regulated heavy vehicles to carry a work diary. A chartered risk review will check whether your business is monitoring driver diaries, verifying work and rest hours, and keeping records of this monitoring. (Note: Electronic Work Diaries are not live yet; current capability relies on fatigue and driver diary checks).

Similarly, Part 4.2 deals with mass requirements, and Part 4.4 deals with loading requirements. The review will check if your loaders and operators are recording container weight declarations (Section 187) and ensuring transport documentation is not false or misleading (Section 186). If your business cannot produce these records, the review will flag this as a critical gap.

Managing transport documentation and container weight declarations

A significant portion of CoR risk lies in documentation. Division 3 of Chapter 5 of the HVNL deals with transport documentation. Section 186 makes it an offence to provide false or misleading transport documentation for goods. Section 187 specifically addresses false or misleading information in container weight declarations.

A chartered risk review examines your documentation processes to ensure all parties—consignors, packers, and loaders—are providing accurate information. This includes verifying that container weight declarations are compliant under Section 189 and that the responsible entity (Section 190) is fulfilling their duty. Proper documentation is a key defence against CoR liability.

How does MAEZ conduct a CoR gap review?

MAEZ follows a structured, evidence-based approach to close CoR gaps:

1. Document Review: We examine your existing SMS, contracts, and operational procedures to see if they address HVNL primary duties.
2. Operational Interview: We speak with your schedulers, drivers, and loaders to understand how policies are applied in reality.
3. Gap Identification: We map the findings against the HVNL and NHVAS Master Code requirements, highlighting areas of non-compliance or missing evidence.
4. Risk Prioritisation: We categorise gaps based on the severity of the risk they pose, focusing on areas that could trigger Category 1 or 2 offences.
5. Action Plan: We provide a practical, step-by-step plan to close the gaps, including documentation templates and process changes.

This process ensures that your business is not just told what is wrong, but exactly how to fix it.

What are the consequences of ignoring CoR gaps?

Failing to address CoR gaps can lead to severe legal and financial consequences. The HVNL categorises offences into three tiers. Category 1 offences (Section 26F) are the most serious, involving recklessness or gross negligence. Category 2 offences (Section 26G) involve a failure to comply with a duty. Penalties can include substantial fines for both individuals and corporations, and in some cases, imprisonment for executives under Section 26D (Duty of executive of legal entity).

Beyond legal penalties, a CoR breach can damage your business's reputation, result in the loss of NHVAS accreditation, and increase insurance premiums. A chartered risk review is a proactive measure to avoid these outcomes.

HVNL updates and future readiness

The current HVNL material is active, but operators must be aware of upcoming changes. HVNL updates due 1 August 2026 are future-effective until that date. WHS 2025 material is jurisdiction-sensitive and not fully implemented across all states. A chartered risk review prepares your business not just for current compliance but for these future legislative shifts. By building a flexible SMS and ensuring your team understands the principles of shared responsibility, your business will be better positioned to adapt when the new provisions take effect.

Closing CoR gaps with training and CoRGuard SaaS SMS platform

Once a chartered risk review identifies gaps, MAEZ provides the tools to close them.

For human and procedural gaps, Chain of Responsibility training is essential. Training at cortraining.com.au educates your team on their specific duties as consignors, packers, loaders, and schedulers, ensuring they understand the law and their role in maintaining safety.

For evidence and documentation gaps, CoRGuard is the SaaS SMS platform. CoRGuard at chainresponsibility.au allows operators to digitise their safety management system, making it easy to store evidence, manage risk registers, and produce documentation during an NHVR audit. While software does not guarantee compliance or remove liability, CoRGuard provides the infrastructure to maintain the records required to demonstrate that reasonably practicable steps were taken.

By combining expert Chain of Responsibility Consulting with targeted training and a robust SMS platform, MAEZ helps operators stop losing sleep over fines, accreditation risk, and scattered evidence.

Practical next steps to get ready

If you are preparing for NHVAS accreditation or simply want to ensure your business is protected against CoR liability, the first step is a chartered risk review.

1. Contact MAEZ to schedule an initial consultation.
2. Provide access to your current policies, contracts, and operational records.
3. Allow MAEZ to conduct the review and present the findings.
4. Implement the recommended controls using Chain of Responsibility training and the CoRGuard platform.

For more insights on transport compliance, visit the MAEZ Insights page or read our About Chain of Responsibility guide.

Frequently Asked Questions

What is the primary duty under the Chain of Responsibility? Under Part 1A.2 of the HVNL (Section 26C), the primary duty requires each party in the Chain of responsibility to ensure, so far as is reasonably practicable, the safety of the transport operation. This means actively eliminating or minimising public health and safety risks, including fatigue, speed, mass, dimension, and loading risks. The duty applies to all parties, not just the driver, and requires evidence that reasonably practicable steps were taken.

Who is considered a duty holder in the Chain of Responsibilities? The HVNL identifies multiple duty holders, including consignors, consignees, packers, loaders, drivers, operators, and schedulers. Any party whose actions or inactions can influence the safety of a heavy vehicle on the road is considered part of the chain and holds a legal duty. If a consignor demands a load be delivered in an unrealistic timeframe, causing a driver to speed, the consignor is legally liable.

Why do I need a Safety Management System for NHVAS accreditation? The NHVAS Master Code requires businesses to have a documented and active Safety Management System (SMS) to manage risks like fatigue, mass, and vehicle standards. An SMS provides the structured evidence the NHVR needs to see that you are meeting your primary duty obligations. Without a functional SMS, your NHVAS accreditation application will fail, and your business will be exposed to unmanaged CoR risks.

Does using CoRGuard software guarantee compliance? No. CoRGuard is a SaaS SMS platform that helps you digitise and organise your safety documentation and evidence. While it makes it easier to demonstrate that you have taken reasonably practicable steps, it does not guarantee compliance or remove legal liability under the HVNL. The software is a tool to manage the system, but the business must still actively manage the risks.

Where can I find Chain of Responsibility training for my team? MAEZ provides practical CoR training tailored to Australian transport operators at cortraining.com.au. This training covers the specific duties of executives, managers, and operational staff under the HVNL, ensuring everyone in the chain understands their legal obligations and how to fulfil them in their daily tasks.

What happens if my business has a gap in its CoR evidence? If the NHVR audits your business and finds you cannot prove you took reasonably practicable steps to manage safety risks, you may be liable for a Category 1 or Category 2 offence. Penalties include severe fines and potential imprisonment for executives. A chartered risk review helps you find and close these gaps before an audit or incident occurs.

Are Electronic Work Diaries (EWDs) mandatory for managing fatigue? No. While the HVNL outlines provisions for EWDs, Electronic Work Diaries are not live yet for general use in all contexts, and current capability relies on fatigue and driver diary checks. Operators must ensure drivers are accurately filling out their written work diaries under Section 293, and schedulers must monitor these records to prevent fatigue breaches.