whs risk management and legal responsibilities