The assessment matched the activity. The log proves it.
Risk and hazard assessments rolled out across every site and every activity, with staff trained in their own staff room and assurance logs live for a full term. Stage 2, everywhere.
Responding to WHS obligations is EthosOne's programme for rolling risk and hazard assessments out across a school's
Staff and assurance activities, so the assessment exists before the activity and the record shows it.
What we keep hearing
The assessment for the camp is excellent. The one for the woodwork room, in the same folder, is a photocopy from another school. After the incident the first request was for the assessment and the second was for proof the staff involved had seen it, and both landed on a morning that already had a parent, a contractor and a staffing gap in it.
The lead can write a good assessment; what nobody can do alone is get it to every site, keep it current, and show the record when asked.
The programme takes every site to Stage 2 and holds it there for a full term, because a WHS question is always answered with a date on it.
Foundation
Everything the school runs today is inventoried, mapped and loaded once. Staff sign in with the account they already have and every named owner has a role.
You cannot go back when the incumbent is read-only, every owner has signed in and the access matrix is signed.
Calendar
Core and Regulatory Readiness. The strategic plan is on the dashboard with owners, the calendar carries the jurisdiction's dates, and the next submission is assembled with evidence linked per standard.
You cannot go back when an executive meeting is run from the dashboard and the next submission is assembled in EthosOne.
- This engagement lands here
Risk
Risk and Compliance and Personnel. Appetite is set once and approved by the board, the register is real, assurance logs run for a full term, and the first expiry is caught by the system before the date.
You cannot go back when the first Risk and Audit Committee pack is produced from EthosOne and calendar tasks are closed on time.
Board
PolicyAI and Board Engagement. The policy review cycle runs through PolicyAI, the first legislative change is actioned, and the board pack is generated from the record for two consecutive meetings with directors logging in directly.
You cannot go back when two board packs in a row have come from EthosOne and resolutions and actions are tracked in the system.
Group
Group Management over every module. Each entity closes its own calendar, the group board pack is produced from the roll-up, and the group lead reads the portfolio view weekly.
You cannot go back when the group board pack comes from the roll-up and every entity is closing its own calendar.
Six weeks per site, cohorted across a group, with a gate that is the same at every campus: the log has run for a term and the committee has read from it.
- Week 0
The activity inventory
Every activity the school actually runs, from excursions and camps to equipment, classrooms and workplace tasks, listed per site with who runs it. Audit reports, insurer and WHS requirements parsed to assurance activities.
- Weeks 1 to 2
The library and the forms
The hazard and activity library loaded and shared. Incident, hazard and complaint forms routed to the right person and tested. Routine activities and assurance logs configured: what is checked, how often, by whom.
Gate. Forms tested. Logs live.
- Weeks 3 to 4
Assessments, site by site
Assessments drafted with the helper from a description of the activity, reviewed and signed by the assessor, with a bow-tie for the hazards that matter. Staff trained in their own staff room, recorded once.
Gate. Every high-risk activity has an approved assessment with a version and a date.
- Weeks 5 to 6
The committee reads from it
The first Risk and Audit Committee pack from the record. For an enforceable undertaking, the commitments mapped to obligations, owners and evidence and reported on the cadence the undertaking sets.
Gate. Assurance logs live for a full term. Calendar tasks closed on time.
- Each term
Keep it current
The quarterly risk review, facilitated. The termly calendar health check. Corrective actions from any incident recorded with owners and dates while the memory is fresh.

The staff room, at every site.
- Staff learn where the assessment for their activity lives and how to complete the form from a phone at the gate.
- The WHS lead owns the standard and the sign-off; we bring the library, the configuration and the training.
- After an incident, the room assembles what was in place, drafts what was missing, and records the corrective actions the same week.
The staff room, the session recorded once, everyone knowing where the form lives.
What you leave with
An assessment for every activity
Cause, consequence, a matrix rating, the response and a responsible owner on every hazard, approved with a version and a date, and a bow-tie report from any assessment.
Proof the staff had seen it
Training recorded per person, forms completed at the activity, and assurance logs that preserve who recorded what and when.
A record the regulator can read
For an undertaking, every commitment a tracked obligation with a named owner, evidence captured as it happens, and progress reported over the life of the undertaking with the school's legal adviser in the loop.
Three reasons to respond
Get in front of it. Or it's just happened. Or it happened, and it's now formal. Wherever you are on that line, we can come in and help.
Get in front of it.Preventative mitigation
The work that keeps a school out of court is unglamorous, and almost all of it is documentation. Risk assessments that exist before the excursion, not after it. Venue assessments that have actually been done. Controls with a name beside them and a due date. A board that sees the same picture every month.
We put the routines and the structured audits in place, so "reasonably practicable" is something you can show, not something you have to reconstruct under pressure.
It's just happened.Critical incident response
An incident has occurred and the regulator isn't involved yet. This is the window where a school demonstrates it can act on its own: what happened, what's changed, who owns it, and by when.
We work alongside your leadership team to stabilise the response, close the gaps that caused it, and record the lot, so the improvement to staff and student safety is real, and it's evidenced.
It happened, and it's now formal.WHS enforceable undertakings
Where a prosecution has been brought, a court may accept an enforceable undertaking in place of a fine: a binding commitment to lift safety at staff, student, sector and organisational level. The money goes into something that works, rather than disappearing.
We help you scope the commitment, build the systems it requires, and report against it for as long as it runs. And there's nothing better than installing something that stops it happening again.
AI-supported risk mitigation
The helper drafts hazards, controls and the bow-tie from a description of the activity; the assurance logs and forms capture the record; the register stays distinct from the assessments. Risk and Compliance · Assurance logs.
- Stored in AustraliaAWS Sydney and Melbourne, one database per school
- AI stays in the country tooAmazon Bedrock; never trained on your content
- Published, not describedTrust Centre · ISMS policy · How we handle your data
“School governance and risk is a complex area without a clear solution, a time-poor disconnect with governance and risk management that relies on Frankenstein models of electronic and paper-based reporting and measuring.”
David RuggieroPrincipal, Blackfriars Priory SchoolThe five we are asked every time.
Still weighing something up? Thirty minutes with us, on your own registers, answers the rest.
Book your school a demo01What is the difference between a risk register and a risk assessment?
The register is the board's view of exposure: strategic risks with appetite, controls, treatments and owners, reviewed on a cadence. The assessment is the operational control: a specific activity, its hazards, safeguards and sign-off, reviewed when conditions change. EthosOne keeps them distinct and linked.
02Can this run across a group?
Yes. The library, the standard and the forms are shared across every campus, each site assesses its own activities, and the group sees which assessments are approved and where the gaps are.
03Can it support an enforceable undertaking?
It provides the system that evidences an undertaking's commitments over time: each commitment tracked as an obligation with an owner, evidence captured as it happens, and progress reported on the undertaking's cadence. We do not give legal advice; the school's legal adviser stays in the loop on what the undertaking requires.
04How is it priced?
Scoped with you. After a first conversation with the WHS lead we set out the library, the sites, the training and the reporting in a short written scope with a fixed price. Nothing begins until you have agreed it.
05Responding to WHS obligations, in full: what does it cover?
It suits three situations: a group-wide roll-out where every campus needs the same standard; incident response, where a school must show what it had in place and act on what it did not; and an enforceable undertaking or regulator engagement following a WHS incident, where the undertaking's commitments need a system that evidences them over time. It runs the Risk stage of the ladder at every site: the hazard and activity library loaded with the activities the school actually runs, assessments drafted with the embedded helper and signed off by the assessor, forms completed from a phone at the activity, assurance logs that preserve who recorded what and when, and reporting to the executive, the committee and where required the regulator.
What are the AI paragraphs you are currently missing from your policies? Watch how we do it.
Free, under ten minutes, and yours to keep whether or not you talk to us.
“It meets all of the real frustrations of business directors in one place.”

“School governance and risk is a complex area without a clear solution.”


Tell us the sites and the activities,and we would be glad to scope it with your WHS lead.
WHS programme: risk and hazard assessments rolled out across staff and assurance, for roll-outs, incidents and undertakings.











