Psychosocial Risk
Psychosocial risk management: a practical guide for Australian employers
Psychosocial risk management is the structured process of identifying, assessing, and controlling workplace factors that harm worker health. The harmonised WHS Act requires it. ISO 45003:2021 defines what a compliant program looks like. Most Australian employers are not yet meeting the standard.
What is psychosocial risk management?
Psychosocial hazards are features of the work environment that can harm workers physically or psychologically. They include excessive job demands, lack of role clarity, poor manager support, low control over work, workplace conflict, organisational change, and remote working conditions. These are systemic, workplace-level factors — not individual characteristics.
The distinction between psychosocial risk (systemic) and psychological health (individual) is legally significant. The WHS Act requires employers to eliminate or minimise psychosocial hazards as far as reasonably practicable — the same duty of care that applies to physical hazards. An employee assistance program (EAP) addresses individual psychological health. A psychosocial risk management program addresses the workplace conditions that create risk in the first place.
ISO 45003:2021 — the international standard for psychological health and safety at work — provides the framework for managing these hazards within an occupational health and safety management system (OHSMS). Safe Work Australia's code of practice on managing psychosocial hazards references ISO 45003 as the accepted implementation framework. For ANZ employers, particularly those in high-risk industries or under enterprise procurement requirements, alignment to ISO 45003 is increasingly expected by insurers, enterprise clients, and WHS regulators.
The compliance framework
The ISO 45003 psychosocial risk management cycle
Four phases, continuous improvement. A one-time survey is not a program.
Identify
Deploy a validated psychosocial risk survey across the workforce. COPSOQ III covers 41 dimensions — job demands, work pace, emotional demands, role clarity, manager support, trust, organisational justice, and more. Every worker receives the same validated instrument, delivered by email or SMS, with responses kept confidential.
Assess
Aggregate responses at group level — team, site, or organisational unit. Score each COPSOQ III dimension. Benchmark scores against a validated reference population. Australian-specific norms are essential: European benchmarks misclassify ANZ risk levels because they were derived from different work cultures and regulatory contexts.
Control
Develop interventions that address the root cause of elevated hazard domains — not just individual coping strategies. ISO 45003 prioritises primary controls (eliminating or reducing the hazard at source) over secondary controls (building individual resilience). A high "work pace" score requires workload redesign — not a mindfulness program.
Review
Re-survey at 6 or 12-month intervals. Compare results against the baseline. Demonstrate whether interventions shifted risk levels. Generate a longitudinal trend report for board-level reporting or WHS regulator submissions. Continuous improvement is the core requirement of ISO 45003 — a one-time survey is not a program.
Instrument selection
Why validated survey instruments matter
ISO 45003 requires the assessment instrument to be validated for the purpose of measuring workplace psychosocial hazards — not individual distress. The instrument you choose determines whether you have a compliant program or a gap that a regulator will identify.
COPSOQ III
ISO 45003 compliantPsychosocial risk assessment — ISO 45003
41 dimensions, validated in 40+ countries. Australian norms: Rahimi et al. (2025). This is the instrument of choice for a compliant psychosocial risk program.
PSC-12
ISO 45003 compliantPsychosocial safety climate — secondary instrument
12-item measure of management commitment to psychological safety. Useful as a secondary instrument alongside COPSOQ III. Does not replace it.
K10
Not for ISO 45003Individual distress screening — NOT a workplace hazard tool
Measures individual psychological distress. Appropriate for EAP referral screening. Does NOT assess workplace psychosocial hazards and does NOT satisfy ISO 45003 requirements. Using K10 as your psychosocial risk assessment instrument is a compliance gap.
On Australian benchmarks: COPSOQ III was developed in Denmark and validated across European populations. Without Australian-specific benchmark norms, an ANZ employer cannot accurately determine whether their workforce risk levels are elevated relative to comparable Australian workplaces. Rahimi et al. (2025) provides the first validated Australian COPSOQ III norms — 8,000+ workers across 13 industry sectors. These benchmarks are built into OccuSpan. Using European norms in an ANZ context systematically misclassifies risk levels.
The October 2026 transition
WorkSafe Queensland is retiring its government-operated psychosocial survey tool (PAW) on 2 October 2026. Organisations currently using PAW will need to migrate to an independently validated instrument before the deadline. COPSOQ III is the internationally validated alternative — it covers the same psychosocial hazard domains with stronger benchmarking data and broader industry applicability.
The transition also affects how WHS regulators evaluate psychosocial risk programs. A program built on a decommissioned government tool will not demonstrate continuous improvement capability — which is the core requirement of ISO 45003.
Read: What replaces the PAW survey after 2 October 2026? →The OccuSpan approach
What OccuSpan delivers
OccuSpan runs the complete ISO 45003 cycle in one platform — from survey deployment through to board-ready program plan and ROI modelling. No manual aggregation, no spreadsheet scoring, no separate tool for intervention planning.
Survey deployment
COPSOQ III, PSC-12, K10, and NMQ-E delivered by email or SMS. Anonymity thresholds enforced at the database layer — not a UI toggle.
Anonymised group scoring
Responses aggregated at team, site, or org level. Groups with fewer than 7 respondents are suppressed. Individual scores never accessible to line managers.
Australian benchmarks
Rahimi et al. (2025) norms built in. Compare your workforce scores against 8,000+ Australian workers across 13 industry sectors.
MIA intervention engine
Elevated domains map to 15 evidence-based interventions ranked by risk priority. The engine generates the program plan — not a consultant's spreadsheet.
ISO 45003 program plan
Exportable program plan aligned to the ISO 45003 identify–assess–control–review cycle. Ready for board reporting or WHS regulator submissions.
ROI modelling
Project the return from each intervention — absenteeism reduction, workers' compensation savings, productivity uplift. Board-level reporting format.
Frequently asked questions
What is the difference between psychosocial risk and psychological health?
Psychosocial risk refers to systemic workplace conditions that can harm workers — job demands, poor management, low control, organisational change. Psychological health refers to an individual's mental state. The WHS Act and ISO 45003 require employers to control psychosocial hazards in the workplace. An EAP or mindfulness program addresses individual health — it does not constitute a psychosocial risk management program.
What does ISO 45003:2021 require employers to do?
ISO 45003 requires employers to identify psychosocial hazards through a validated assessment, score and benchmark results against a reference population, implement controls that address root causes, and review effectiveness longitudinally. The standard operates within the ISO 45001 OHSMS framework. It does not require certification — it requires implementation.
How do you conduct a psychosocial risk assessment?
Deploy a validated survey (COPSOQ III) to the workforce. Aggregate responses at group level with a minimum respondent threshold (7 is standard). Benchmark against Australian norms. Identify elevated hazard domains. Build an intervention program targeting root causes. Re-survey at 12 months to measure change.
What survey should employers use for psychosocial risk assessment?
COPSOQ III is the internationally validated instrument for ISO 45003-aligned psychosocial risk management. It covers 41 dimensions, is validated in 40+ countries, and has Australian-specific benchmark norms (Rahimi et al., 2025). K10 measures individual distress — it does not assess workplace hazards and does not satisfy ISO 45003.
How often should psychosocial risk assessments be conducted?
Annual re-survey is the minimum for organisations with a formal ISO 45003 program. Interim checks at 6 months are recommended for high-risk cohorts. Unscheduled assessments are warranted after significant organisational change, a spike in psychological injury claims, or a regulator audit finding.
Related guides
See the COPSOQ III psychosocial risk workflow end to end
Book a 30-minute demo to see OccuSpan deploy COPSOQ III, score and benchmark results against Rahimi et al. (2025) Australian norms, generate an ISO 45003-aligned program plan, and model the ROI — in your industry context.
AS 4308:2023 · AS 4760:2019 · ISO 45003:2021 · Safe Work Australia NDS