Part 3 of a 4 Part Series – Why Most Psychosocial Risk Assessments Fail (and How to Fix Them)
Written by Niru Tyagi
Many Australian organisations have moved quickly to comply with new regulations on psychosocial hazards. A common first step is to conduct a staff survey and compile a risk register. However, those actions alone rarely reduce harm. Surveys may be poorly designed, results may be misunderstood and risk registers can become overloaded. Without clear governance and follow‑up action, risk assessments become an administrative exercise that delivers little change. This article explores common pitfalls in psychosocial risk assessment and offers evidence‑based strategies to make assessments effective. It draws on research and guidance from Australian regulators, industry experts and academics.
The Problem With Surveys
Surveys are a popular tool because they provide a snapshot of workplace culture and mental health risk. Yet questionnaires alone do not control risks. A study on psychosocial risk assessment found that surveys often lack meaningful cut‑off values; practitioners interpret results using arbitrary thresholds, which can misclassify normal variation as high risk or overlook serious problems[1]. Results are also abstract and may not translate into specific changes[2]. Employees may under-report issues due to fear of retaliation or survey fatigue. In Australia, the People at Work survey and the Copenhagen Psychosocial Questionnaire are validated instruments that can be useful. Still, survey data should be treated as one piece of evidence among many. Assessors should combine quantitative results with qualitative feedback from interviews, focus groups and incident reports.
Long Lists and Misclassification
Some consultants provide lengthy lists of psychosocial hazards, including every conceivable stressor. While comprehensive lists raise awareness, they can overwhelm risk registers and confuse matters. The EY report on psychosocial hazards notes that risk registers have grown to include hundreds of items, many of which reflect control failures rather than distinct hazards[3]. For instance, “lack of a bullying policy” is not a hazard; it is evidence that a control is missing. Misclassifying such issues as hazards creates bureaucratic burden and obscures priorities[4]. Organisations may believe they have identified and managed hazards when they have merely recorded their governance gaps. To avoid this, practitioners should distinguish between hazards (conditions inherent in work) and control failures (such as missing policies or poor supervision)[5].
Weak Governance and Inadequate Leadership
Effective risk assessment requires leadership commitment. Without senior sponsorship, assessments may be completed by HR or WHS teams and then shelved. Research on drivers and barriers to psychosocial risk management shows that top‑management support and a clear business case are critical drivers[6]. Barriers include economic pressures, organisational restructuring and resource constraints[7]. Boards and officers must integrate psychosocial risk into strategic decision‑making and allocate sufficient resources. In Australia, codes of practice emphasise that officers have due diligence duties: they must ensure that assessments are conducted, that controls are implemented and that systems are reviewed. Without leadership, risk assessments remain theoretical exercises.
Ignoring Organisational Context
Assessments often focus on individual stressors without considering systemic causes. For example, a survey may flag high workload, but the underlying cause could be understaffing or unrealistic deadlines. Studies show that psychosocial harm is created when job demands exceed resources and when workers have little control or support[8]. Therefore, assessments should investigate why hazards exist. Practitioners must map work processes, staffing levels, schedules and governance structures to understand systemic drivers. Without a systems perspective, organisations may recommend resilience training instead of addressing the root causes.
Practical Barriers
There are several practical challenges in psychosocial risk assessment:
- Limited resources and expertise – Small businesses may lack trained WHS practitioners or budget for comprehensive assessments. Larger organisations may not have personnel with specialist knowledge to interpret psychosocial data.
- Fear and stigma – Workers may be reluctant to report psychosocial issues due to concerns about confidentiality or being labelled weak.
- Competing priorities – During economic downturns or restructuring, psychosocial risk management may be seen as less urgent than financial or operational concerns[7].
- Compliance mindset – Some organisations treat risk assessment as a box‑ticking exercise to satisfy regulators. They may run a survey, complete a risk register and stop there.
- Siloed systems – Psychosocial risks are sometimes managed separately from physical safety, leading to inconsistent responses and duplication.
These barriers highlight the need for leadership and integration. Assessments must be resourced adequately, taken seriously and tied to broader WHS management.
Strategies For Effective Risk Assessment
Research and guidance from regulators suggest several actions to improve psychosocial risk assessments:
- Use validated tools and multiple data sources; Select surveys that have been scientifically validated, such as People at Work or COPSOQ; Combine survey results with HR metrics (e.g., absenteeism, turnover), incident reports, exit interviews and focus groups; Triangulate data to identify consistent patterns.[9]
- Engage workers and build trust; Involve employees in design, interpretation and follow‑up; Use participatory approaches such as workshops or risk mapping sessions; Ensure confidentiality and protection against retaliation to encourage honest reporting; Recognise that employee readiness and involvement are key drivers of successful risk management[6].
- Prioritise hazards based on risk; Assess the likelihood and potential severity of harm; Focus on hazards that could cause serious injury or that affect many workers; Avoid adding every minor issue to the register; This prioritisation aligns with general WHS risk principles and reduces administrative burden[10].
- Differentiate hazards from control failures; Identify whether an issue is an inherent hazard (e.g., exposure to trauma) or a missing control (e.g., absence of a bullying policy); Record control failures separately and implement governance improvements[5].
- Translate findings into actions; Risk assessments should lead to concrete control measures; Develop action plans with responsibilities and timelines; Controls may include workload adjustments, job redesign, policy development, leadership training or environmental improvements; The Sonder guidance emphasises analysis, prioritisation and action planning[9].
- Integrate psychosocial risk into WHS systems; Include psychosocial hazards in risk registers, incident reporting, audits and management reviews; Use the Plan–Do–Check–Act cycle to review effectiveness; Align with ISO 45001 and ISO 45003 to ensure systematic management.
- Ensure leadership oversight; Boards and officers must receive regular reports on psychosocial risks, controls and outcomes; Due diligence requires them to verify that systems are in place and working; Independent audits can provide assurance; Leadership must also allocate resources to implement controls and monitor progress.
Psychosocial risk assessments are essential for meeting legal duties and protecting workers’ health. Yet many assessments fail because they rely on surveys, compile endless lists and lack follow‑through. Research shows that questionnaires alone are not enough, and misclassification of hazards leads to bureaucratic overload. Effective assessments require validated tools, worker engagement, prioritisation, and translation of findings into actions. They must be integrated into WHS systems and supported by leadership. By adopting these evidence‑based practices, Australian organisations can transform risk assessments from a box‑ticking exercise into a powerful tool for prevention.
References
Ernst & Young. (2025). Psychosocial hazards: Think risks, not lists[3]. EY Insights.
International Organization for Standardization. (2021). ISO 45003:2021 Occupational health and safety management — Psychological health and safety at work.
Kompier, M. A. J., & van den Berg, A. (2014). Dealing with psychosocial hazards at work: Combining context, theory and practice. Occupational Medicine, 64(6), 394–399.
Sonder (Australia). (2024). Managing psychosocial hazards at work: A practical guide[9].
European Agency for Safety and Health at Work. (2023). Managing psychosocial risks: Drivers and barriers[6].
Van den Heuvel, M., & Demerouti, E. (2016). The Job Demands–Resources model: Challenges for future research. Journal of Organisational Psychology, 11(2), 64–76.
[1] [2] How to Use Questionnaire Results in Psychosocial Risk Assessment: Calculating Risks for Health Impairment in Psychosocial Work Risk Assessment – PMC
https://pmc.ncbi.nlm.nih.gov/articles/PMC8296915
[3] [4] [5] [10] ey-psychosocial-hazards-think-risks-not-lists-august-2025-final.pdf
[6] [7] Managing psychosocial risks: Drivers and barriers – OSHwiki | European Agency for Safety and Health at Work
https://oshwiki.osha.europa.eu/en/themes/managing-psychosocial-risks-drivers-and-barriers
[8] Algorithmic management and psychosocial risks at work: An emerging occupational safety and health challenge – PMC
https://pmc.ncbi.nlm.nih.gov/articles/PMC12766920
[9] 5 expert tips to mitigate psychosocial risks – Sonder
About the Author
Niru Tyagi is a Psychosocial Risk and WHS Governance Strategist and founder of WHS Guard. She works at the intersection of governance, risk, and regulatory accountability helping boards and executive leaders build defensible psychosocial risk management systems aligned with ISO 45003 and Australia’s WHS legislative framework.
Specialising in complex and high-risk industries, Niru architects integrated governance systems that strengthen due diligence under the WHS Act (s 27) and the Corporations Act. Her work goes beyond policy. She designs measurable assurance structures, leading indicators, and board-level reporting frameworks that make psychosocial risk visible, auditable, and proactively managed.
