When a DOSH (Department of Occupational Safety and Health) officer visits your workplace in Malaysia, they are not there to read your files. They are there to compare your files against your site.
That distinction matters more than most employers realise.
The documents — your HIRARC, your Emergency Response Plan, your chemical registers, your Safe Work Procedures — tell the DOSH officer where to look. What they see when they look is what the inspection is actually about.
How a DOSH Site Inspection Works
Under the Occupational Safety and Health Act 1994 (OSHA 1994) and the subsequent 2022 amendment, DOSH inspectors are empowered to enter any workplace, inspect conditions, examine records, and interview persons. The inspection may be planned or unannounced.
A DOSH officer arriving at your site will typically follow a structured process:
1. They will request documentary evidence — HIRARC documents, training records, chemical registers, equipment inspection records, incident reports.
2. They will conduct a physical site walkthrough.
3. They will compare what the documents say against what they observe on the ground.
Step 3 is where most inspections produce findings. Not because the documents are wrong, but because the documents and the site have diverged — and nobody noticed, or nobody acted on it.
The Three Most Common DOSH Inspection Findings
Based on patterns in Malaysian workplace inspections, three findings appear consistently:
Finding 1: Controls documented but not implemented
Your HIRARC identifies working at height as a hazard and lists the control as: scaffold with double guardrail, tied platform, and permit-to-work. The DOSH officer walks to the work area. There is no double guardrail. There is no permit on display.
The HIRARC now functions as evidence against you. It proves that you identified the requirement. It proves you knew what was needed. And the inspection finding records that you chose — or failed — to implement it.
This is why having a HIRARC is not the same as managing the risk. The document describes the intended control system. The site shows whether that system exists.
Finding 2: Competency records that do not match site practice
Training records show that all operators are certified for the task. The DOSH officer asks an operator to explain the energy isolation procedure. The operator’s explanation does not match the procedure in the safe work document.
Or: the task requires competency in the use of respiratory protective equipment. The training record says competency was assessed. On site, the operator is not wearing the equipment correctly and cannot demonstrate the donning procedure.
Paper competency and demonstrated competency are not the same thing. DOSH inspections expose this gap.
Finding 3: Emergency response plans that have not been rehearsed
The emergency response plan is in a binder in the safety manager’s office. It specifies a muster point, an assembly procedure, and roles for floor wardens.
The DOSH officer asks three workers: “Where is the muster point?” The three workers give different answers. One points to the front car park. One points to the canteen. One is not sure.
An emergency plan that exists only in a document does not exist on site. A drill is not a formality — it is the mechanism by which the plan moves from paper to practice.
What This Means for Your Compliance Approach
The lesson from consistent DOSH inspection findings is not that documentation is unimportant. It is that documentation is necessary but not sufficient.
Documentation is the starting point. The control described in the document must actually exist and function on the ground. The competency claimed in the training record must actually be present in the person. The plan described in the emergency response document must actually be known by the people who need to follow it.
The practical question for every employer is: if DOSH arrived today, unannounced, and walked directly to your highest-risk work areas — what would they see?
If the controls in your HIRARC are in place. If the workers in those areas can describe their hazards and their controls. If the emergency response drill was conducted recently enough that three random workers know where to go — you are inspection-ready.
If not, the gap between your documents and your site is your highest-priority compliance risk.
The Self-Check Question
Walk your highest-risk area. Pick any three controls listed in your HIRARC for that area. Confirm, physically, that each one is present and functional. Ask two workers in that area what the major hazards are and what the controls are.
If the answers match your HIRARC, you are prepared.
If they don’t, you have identified a compliance gap before DOSH does.
Need to ensure your management team understands OSH obligations under OSHA 2022? Cikgu Barrier’s OSH Obligations for Management program covers employer duties, director liability, DOSH inspection readiness, and what the 2022 amendment changed. Available as a half-day or full-day in-person session across Malaysia.