A Practical Guide to Psychosocial Risk Assessment for Australian Employers

Most guides describe what a psychosocial risk assessment is. This one lets you run one right now.

If you landed in the Moderate or High risk tier — you are not the exception. The majority of Australian employers in high-risk industries are not yet running a validated psychosocial risk assessment program. That is the reality, and this guide explains why it persists and what to do about it.

What is a psychosocial risk assessment?

A psychosocial risk assessment identifies the conditions in a workplace that create psychological harm. Same logic as a noise assessment — which identifies the conditions that create hearing damage. Same legal obligation. Substantially less uptake.

It is not a mental health check-in. It is not an employee satisfaction survey. It is not a wellbeing pulse tool.

Those instruments measure how individuals are feeling. A psychosocial risk assessment measures what in the work environment is causing them to feel that way. Hazards. Not outcomes. The distinction matters because you cannot control a feeling, but you can control a hazard. Work demands, role clarity, supervisor support, autonomy, psychological safety — these are measurable, modifiable conditions.

If you have ever run a noise survey, you understand the framework. You measure exposure levels against validated thresholds. You identify who is above the action level. You implement controls. You verify the controls worked. A psychosocial risk assessment follows the same logic — just applied to the cognitive and emotional demands of work rather than the acoustic ones.

The legal hook is equally clear. Under the model WHS Act and the psychosocial hazards regulations adopted across most Australian jurisdictions, employers have a duty to identify, assess, and control psychosocial hazards. ISO 45003:2021 is the internationally recognised framework for meeting that duty.

What the law requires

Australian work health and safety regulations require employers to manage psychosocial hazards with the same rigour as physical hazards. The Safe Work Australia Code of Practice (2024) names 17 specific psychosocial hazard categories, including:

The WHS regulations require that these hazards are identified, assessed, controlled, and reviewed — the same four-step process that applies to physical hazard management.

ISO 45003:2021 is the internationally recognised standard for doing this. It is not legally mandated in Australia, but it is the framework regulators and procurement processes increasingly reference.

See our ISO 45003 compliance guide →

The four-step process

ISO 45003 organises psychosocial risk management into four continuous steps. Here is what each step requires in practice:

Choosing a validated instrument

The three instruments most commonly used in Australian workplaces for psychosocial hazard assessment are COPSOQ III, PSC-12, and (until October 2026) People at Work.

COPSOQ III is the most comprehensive. It covers 14–15 of the 17 SWA hazard categories across 26 validated scales. Australian benchmarks are available from Rahimi et al. (2025). It is the direct replacement for People at Work and is the instrument OccuSpan uses as its primary psychosocial risk assessment tool.

PSC-12 (Psychosocial Safety Climate scale) measures organisational safety climate — leadership commitment to psychological health. It is a useful supplement but covers only 2–3 of the 17 SWA hazard categories. It is not a standalone hazard identification instrument.

K10 is not a psychosocial hazard assessment tool. It measures individual psychological distress. It covers zero of the 17 SWA hazard categories.

Anonymity and minimum respondent thresholds

Anonymity protection is not optional — it is a precondition for valid results. Workers who do not trust that their individual responses are confidential will not answer honestly.

The minimum respondent threshold (the minimum number of workers who must complete the survey before group results are shown) is the technical mechanism that protects anonymity. The default threshold in OccuSpan is 7. Below that threshold, no group scores are displayed to managers. Individual responses remain confidential to the OHS team only.

Line managers never see individual scores. This is a hard rule — not a configurable setting.

What to do with the results

A benchmarked set of group COPSOQ III scores tells you three things:

1. 1.Which domains are in the unfavourable band — scoring worse than the majority of Australian workers in your industry sector
2. 2.Which of those domains are root-cause hazards (Work Organisation & Leadership scales: Role Clarity, Quality of Leadership, Predictability) versus outcome signals (Health & Wellbeing scales: Burnout, Stress, Sleep Disturbances)
3. 3.Which interventions the evidence supports for each unfavourable domain

Act on the root-cause scales first. Unfavourable scores on Role Clarity and Quality of Leadership drive unfavourable scores on Burnout and Stress. Fixing the climate fixes the outcomes — not the other way around.

→ See how OccuSpan benchmarks COPSOQ III results against Australian norms

Common mistakes

After 25 years of occupational health practice, these are the mistakes that appear most consistently in psychosocial risk programs: