<aside> ⚡

With Hubfleet's Risk Controls Library you can:

• Manage every safeguard in your operation in one place — physical, procedural and people-based
• Link each control to the hazards it addresses, the training that operationalises it, and the policies and procedures that mandate it
• Capture how each control performs in real life via Incidents, NCRs and Field-reported Hazards
• Demonstrate a defensible bow-tie audit trail under HVNL2 PSOE assessment </aside>

Step 2 A) Build the SMS foundation — start here. Risk Controls sit at the centre of the bow-tie; every other module in Step 2 (Roles, Training, Hazards, Policies & Procedures, Fit for Duty) links back to a control. Configure the controls first so the rest of the foundation has something to attach to.

Hubfleet maintains a curated Risk Controls Library of NHVR-aligned control templates in our public help centre — covering Fatigue, Maintenance, Mass and Dimension, and Safety across six industry sectors. To populate Hubfleet, browse the library, copy the templates that apply to your operation, and customise from there. This article shows you how.

<aside> 📚

Two paired template libraries on the Hubfleet help centre:

• Risk Controls Library — NHVR-aligned controls, tagged by Safety Category, Hierarchy of Control, Industry Sector, SMS Standard, and NHVR Activity (1–45)
• Policy & Procedure Templates — companion P&Ps that each Risk Control links to as Preventive support

Neither library is pre-populated inside Hubfleet — copy what applies into your workspace and customise from there. The full P&P workflow lives in Creating and Managing Policies and Procedures.

</aside>

<aside> ℹ️

Operational vs conceptual. This page is the how — reviewing, creating, linking and reviewing controls in Hubfleet. For the why — what Risk Controls are and why they sit at the centre of the SMS — see Understanding Risk Controls in Hubfleet. For how Hubfleet's controls map to NHVR Master Code Activities, see Using the NHVR Master Code of Practice with Hubfleet.

</aside>

How this fits into your SMS

Risk Controls are Step 2 A in your SMS build — the first thing you do after the governance layer is in place. Because every other Step 2 module (Roles, Training, Hazards, Policies & Procedures, Fit for Duty) attaches to a control, you want the library populated and extended before you build them out. Get the controls right and the rest of Step 2 becomes link-and-go.

Prerequisites

• Safety Manager or Admin permissions
• Setting Up Your Safety Org Chart configured — controls have an owner per Safety Category
• Configuring the 5×5 Risk Matrix configured — so the hazards your controls address can be risk-rated

Overview

Building your Risk Controls library is a one-time setup followed by ongoing operation:

1. Browse the template library and identify the controls that apply to your operation
2. Create each control in Hubfleet by copying the template's Name, Description and classification (Section C)
3. Customise the wording so it reflects how your operation runs the control
4. Set ownership and review cadence — Primary Owner, Review Frequency, Next Review Date
5. Link Preventive items — the Policies, Procedures, Training types and Hazards this control connects to
6. Add bespoke controls for any hazard in your operation not covered by a template