Compliance Guide
ISO 45003:2021 in Australia — what employers need to do
ISO 45003:2021 is the international standard for psychological health and safety at work. In Australia, it operates alongside the harmonised WHS Act and Safe Work Australia's psychosocial hazards code of practice. This guide explains what the standard requires, how to implement it, and what a compliant program looks like in practice.
What is ISO 45003?
ISO 45003:2021 is the international standard published by the International Organisation for Standardisation (ISO) for psychological health and safety at work. Its full title is Occupational health and safety management — Psychological health and safety at work — Guidelines for managing psychosocial risks.
It is a companion standard to ISO 45001 (occupational health and safety management systems). Where ISO 45001 covers the full scope of OHS risk — physical, chemical, biological, and psychosocial — ISO 45003 provides the specific framework for managing psychosocial hazards within that system.
The standard covers psychosocial risk identification, assessment, controls, monitoring, and continuous improvement. It is structured around the same Plan-Do-Check-Act cycle as ISO 45001.
Important: certification vs. alignment
ISO 45003 is a guidance standard, not a certification standard. You cannot certify to ISO 45003 in the same way you can certify to ISO 45001 or ISO 27001. What you can demonstrate is alignment — that your psychosocial risk program follows the ISO 45003 framework. This distinction matters for procurement conversations and regulator submissions.
Is ISO 45003 mandatory in Australia?
ISO 45003 is not mandatory by name in Australian legislation. However, the harmonised Work Health and Safety Act requires employers to eliminate or minimise psychosocial hazards as far as reasonably practicable — the same duty of care that applies to physical hazards such as noise, manual handling, and chemical exposure.
ISO 45003 is the internationally accepted framework for meeting this obligation. Safe Work Australia's code of practice on managing psychosocial hazards references it as the implementation standard. State WHS regulators in Queensland, NSW, Victoria, and Western Australia have all published guidance referencing ISO 45003 as the benchmark for a systematic approach to psychosocial risk.
For mid-to-large employers in high-risk industries — mining, construction, healthcare, transport — ISO 45003 alignment is increasingly expected by enterprise clients, insurers, and WHS regulators as evidence of a defensible, systematic approach. A psychosocial risk program that cannot demonstrate ISO 45003 alignment is a compliance gap that a regulator will identify during an audit.
The four-phase program cycle
What does ISO 45003 require?
Phase 1 — Identify
Conduct a validated psychosocial risk survey across the workforce. Identify hazards: excessive job demands, work pace, emotional demands, lack of role clarity, poor manager support, workplace conflict, low control over work, organisational change, remote working conditions. The survey must cover all relevant psychosocial hazard domains — not just individual distress.
Phase 2 — Assess
Score survey responses at group level. Aggregate at team, site, or organisational unit — never at individual level. Apply a minimum respondent threshold (typically 7) to protect anonymity. Benchmark group scores against a validated reference population. In Australia, this means Australian-specific benchmark norms — not European or North American data.
Phase 3 — Control
Develop an intervention program that addresses the root cause of elevated hazard domains. ISO 45003 prioritises primary controls — eliminating or reducing the hazard at source — over secondary controls (individual coping strategies) or tertiary controls (recovery support). A high job demands score requires workload redesign, not a mindfulness app.
Phase 4 — Review
Re-survey at 6 or 12-month intervals. Compare results against the baseline to determine whether interventions shifted risk levels. Generate a longitudinal trend report demonstrating continuous improvement. This report is the evidence base for WHS regulator submissions, board reporting, and insurance assessments.
The psychosocial survey — why instrument choice matters
ISO 45003 requires a validated instrument — one designed specifically to measure workplace psychosocial hazards, not individual psychological distress. The choice of instrument determines whether your program is compliant.
| Instrument | Measures | ISO 45003 | ANZ benchmarks |
|---|---|---|---|
| COPSOQ III | Workplace psychosocial hazards (41 dimensions) | ✓ Compliant | Rahimi et al. (2025) — 8,000+ ANZ workers |
| PSC-12 | Psychosocial safety climate (management commitment) | ✓ Compliant | Limited — use as secondary instrument |
| K10 | Individual psychological distress | ✕ Not suitable | Population health only — not workplace hazards |
COPSOQ III was developed in Denmark and validated across 40+ countries. Rahimi et al. (2025) provides the first validated Australian-specific COPSOQ III norms — derived from 8,000+ Australian workers across 13 industry sectors. Using European norms in an ANZ context systematically misclassifies risk levels, because the reference population reflects different work culture, regulatory context, and industry mix.
Implementation
What a compliant program looks like — 12-month timeline
| Timeframe | Action | Detail |
|---|---|---|
| Month 1 | Deploy COPSOQ III to workforce | Email or SMS delivery. Responses anonymous. Minimum 7-respondent threshold before group scores are released. |
| Month 2 | Close survey; generate anonymised group scores | Aggregate at team, site, or org level. Suppression rules enforced at database layer. |
| Months 2–3 | Benchmark against Rahimi et al. (2025) norms; identify elevated risk domains | Compare workforce scores to 8,000+ Australian workers across 13 industry sectors. |
| Month 3 | MIA intervention recommendations; build program plan | Risk-ranked interventions targeting elevated COPSOQ III domains. ISO 45003-aligned program plan generated. |
| Months 4–10 | Implement interventions | Leadership training, workload redesign, EAP referral, supervisor skill development — ranked by risk priority. |
| Month 12 | Re-survey; compare to baseline; demonstrate improvement | Longitudinal comparison. Trend report for board-level reporting or WHS regulator submission. |
The OccuSpan approach
How OccuSpan implements ISO 45003
OccuSpan runs the complete ISO 45003 cycle in one platform. Survey deployment, scoring, benchmarking, intervention planning, and longitudinal tracking — without manual aggregation or separate tools.
Phase 1 — Identify
COPSOQ III, PSC-12, and K10 delivered by email or SMS. Anonymity thresholds configured by org. Responses never linked to named individuals.
Phase 2 — Assess
Anonymised group scoring with 7-respondent suppression. Rahimi et al. (2025) Australian benchmarks built in. Scores displayed by domain, with benchmark comparison for each.
Phase 3 — Control
MIA intervention engine maps elevated domains to 15 evidence-based interventions. Generates an ISO 45003-aligned program plan with projected ROI. Exportable for board or regulator.
Phase 4 — Review
Longitudinal re-deployment at 6 or 12 months. Trend tracking across survey cycles. Full program history maintained for continuous improvement evidence.
Frequently asked questions
What does ISO 45003 require?
ISO 45003 requires employers to identify psychosocial hazards through a validated assessment, score and benchmark results against a reference population, implement controls targeting root causes, and review effectiveness longitudinally. It follows the Plan-Do-Check-Act cycle and requires continuous improvement — a one-time survey is not compliant.
Is ISO 45003 mandatory in Australia?
Not mandatory by name — but the WHS Act requires managing psychosocial hazards as far as reasonably practicable, and ISO 45003 is the internationally accepted framework for meeting that obligation. WHS regulators reference it in codes of practice. For high-risk industries and enterprise procurement contexts, alignment is increasingly expected.
What is the difference between ISO 45001 and ISO 45003?
ISO 45001 is the overarching OHS management system standard, covering all hazard types. ISO 45003 is a companion standard providing specific guidance on managing psychosocial hazards within the ISO 45001 framework. Implementing ISO 45001 without addressing ISO 45003 leaves psychosocial risk management incomplete.
Can a company get certified to ISO 45003?
No. ISO 45003 is a guidance standard — you cannot certify to it. You can demonstrate alignment, which OccuSpan supports through exportable ISO 45003-aligned program plans for regulator submissions and enterprise procurement requirements.
What is a psychosocial hazard under ISO 45003?
Aspects of work design, work organisation, and the social context of work that have the potential to cause harm — including excessive job demands, lack of role clarity, poor manager support, low control, workplace conflict, isolation, exposure to traumatic events, organisational change, and remote working conditions.
How is ISO 45003 related to the Work Health and Safety Act?
The WHS Act requires employers to eliminate or minimise psychosocial hazards as far as reasonably practicable. ISO 45003 is the internationally accepted framework for meeting this obligation. Safe Work Australia's code of practice on managing psychosocial hazards references it explicitly. ISO 45003 alignment demonstrates to regulators that you are meeting your duty of care with a systematic, evidence-based approach.
See how OccuSpan implements the ISO 45003 program cycle
Book a 30-minute demo to see OccuSpan run the complete ISO 45003 identify–assess–control–review cycle — COPSOQ III deployment, Rahimi et al. (2025) benchmark comparison, MIA intervention planning, and program plan export — in your industry context.
AS 4308:2023 · AS 4760:2019 · ISO 45003:2021 · Safe Work Australia NDS