Psychosocial Risk Assessment Guide for Australian WHS

You've probably got a risk register for plant, traffic management, manual handling, isolation, and contractor work. But psychosocial risk is still sitting in HR, buried in a wellbeing survey, or not captured at all across shifts, crews, and subcontractors.

That gap matters now. In Australia, by December 2025, the legal duty to manage psychosocial risks will be fully regulated across every Australian jurisdiction, while mental health claims, already 12% of serious claims, are growing at an annual rate of 10% according to this Australian overview of psychosocial hazard regulation and claims. On a live worksite, that isn't an abstract compliance issue. It shows up as conflict, fatigue, poor decisions, rework, absenteeism, supervision pressure, and incidents that look physical on paper but started with poor work design.

Most guidance still treats psychosocial risk assessment as a one-off survey exercise. That approach falls apart on industrial and construction sites where exposure changes by roster, crew mix, project phase, client pressure, shutdown timing, and who is supervising on the day.

Table of Contents

• Your Guide to Psychosocial Risk Assessment Under WHS Law
  • Start with the work, not the org chart
  • Document the scope like an auditor will read it
• Hazard Identification Methods Beyond Surveys
  • Use the 14 hazards as prompts, not wallpaper
  • Build a mixed-method evidence set
  • Where surveys fit
• Analysing and Prioritising Psychosocial Risks
  • Score exposure, not opinions
  • A practical priority table
• Implementing Effective Control Measures
  • What good controls look like on site
  • What doesn't pass the pub test or the regulator test
  • Tie controls to existing site systems
• Monitoring Review and Continuous Improvement
  • Set review triggers before you need them
  • Track signals that operations already see

Your Guide to Psychosocial Risk Assessment Under WHS Law

A psychosocial risk assessment now belongs inside your WHS system, not beside it. If you're a PCBU in construction, manufacturing, or industrial services, this sits with the same legal discipline you already apply to plant, hazardous chemicals, and high-risk work.

The mistake I see most often is treating psychosocial risk as a people issue rather than a work issue. That leads to generic training, an EAP poster, and a survey every so often. It doesn't deal with the actual drivers on site. Work overload, poor planning, unclear roles, weak supervision, bullying, remote work, conflicting instructions, poor change management, and badly designed reporting processes all sit in operations.

Practical rule: If the hazard is created by how work is designed, scheduled, supervised, or resourced, the control belongs in the WHS system.

That means your assessment needs to follow the same discipline as any other material risk. You identify where exposure exists. You assess who is affected and how serious the risk is. You put controls in place at the source where reasonably practicable. Then you review whether those controls are working in real conditions.

For high-risk sites, the primary challenge isn't writing the first assessment. It's keeping it live across multiple locations, changing crews, shutdowns, night shift, labour hire, and subcontractor interfaces. A static HR document won't do that. Your psychosocial risk assessment has to connect with pre-starts, incident reviews, supervision, SWMS, contractor coordination, and management of change.

Start with the work, not the org chart

Scope sets the quality of the whole assessment. If you scope it too narrowly, you'll miss the parts of the business where risk is highest. If you scope it too broadly without breaking it into workable groups, you'll end up with vague findings that no one can act on.

From 1 December 2025, WHS regulations mandate that PCBUs capture and manage psychological risks using a four-step framework: identify hazards, assess risks, implement control measures, and review effectiveness, as outlined by the Australian Institute of Company Directors on the psychosocial regulatory landscape.

That framework starts before the first workshop or survey. You need to define which parts of work are being assessed, who is consulted, and how evidence will be gathered.

A workable scope usually covers:

• Work groups: crews, departments, plants, projects, workshops, maintenance teams, shutdown teams, transport functions, and supervision layers.
• Employment arrangements: direct employees, labour hire, apprentices, supervisors, leading hands, contractors, and subcontractors where your systems affect their work.
• Operational variation: day shift, night shift, weekend work, call-outs, shutdown periods, commissioning, peak production, and mobilisation or demobilisation phases.
• Physical locations: fixed sites, satellite yards, remote work, client sites, vehicles, and isolated work environments.
• Known pressure points: restructures, deadline compression, staffing gaps, recurring client escalation, poor handover points, and areas with repeated grievances or conflict.

Document the scope like an auditor will read it

Your records should show that the PCBU took a structured approach. Keep it simple, but make it auditable. State what is in scope, what is out of scope, who approved the scope, which HSRs and worker groups were consulted, what methods will be used, and when the assessment will be reviewed.

A short scoping record should answer these questions:

If that level of structure isn't already built into your system, review your WHS duties of a PCBU and line your psychosocial process up with the rest of your legal obligations.

Good scope prevents two common failures. Missing high-risk groups entirely, and producing findings so broad that no manager can own the fix.

Hazard Identification Methods Beyond Surveys

A single survey won't identify psychosocial risk properly on a high-risk site. It might give you useful signals, but it won't tell you enough about where the hazard sits in the work, who is exposed, or what control is realistic.

Safe Work Australia's model WHS laws identify 14 specific psychosocial hazards that PCBUs must manage, including job demands, low job control, poor support, and bullying, and those hazards can interact to create higher combined risks, as listed by Safe Work Australia's psychosocial hazards guidance.

Use the 14 hazards as prompts, not wallpaper

Most sites already have the source material. The problem is that it sits in separate buckets. H&S has incidents. HR has complaints. Operations has overtime pressure, turnover pain, and roster headaches. Supervisors know where conflict is brewing but haven't framed it as a hazard.

Use the 14 named hazards as your checklist during consultation and review. Don't ask workers whether they feel “stressed”. Ask where work design creates pressure, uncertainty, conflict, isolation, poor support, or lack of control.

For example:

• Job demands: repeated compressed shutdown windows, unrealistic maintenance backlog clearance, chronic overtime, or split attention across too many systems.
• Low job control: operators held responsible for output but unable to influence sequencing, staffing, maintenance access, or break timing.
• Poor support: leading hands carrying people issues without training, delayed supervisor response, or no practical backup on remote jobs.
• Poor role clarity: overlap between client, principal contractor, subcontractor, and labour hire instructions.
• Poor organisational change management: restructure, system rollout, or roster change with little explanation and inconsistent implementation.
• Bullying, harassment, violence, and conflict: tolerated behaviours in crews, repeated public dressing-downs, or unresolved interpersonal hostility.

Here's a simple starting point if you need a broader prompt list for site teams: common workplace hazards and how to identify them.

Build a mixed-method evidence set

A sound psychosocial risk assessment usually combines several identification methods. Each one catches different failure points.

1. Review existing records
   Check incident reports, grievance themes, hazard reports, return to work patterns, absenteeism trends, turnover notes, exit feedback, disciplinary matters, and overtime or fatigue records. You're looking for clusters, recurring teams, repeated supervisors, and phases of work where pressure spikes.

2. Observe the work
   Walk the job. Watch handovers, pre-starts, permit interactions, shutdown coordination, traffic points, control room activity, and supervisor-worker exchanges. Look for interruption load, queueing, rework, waiting on approvals, contradictory instructions, and signs that workers can't complete tasks to the required standard with the time and resources available.

3. Run structured worker consultation
   Consultation isn't a courtesy. It's where hidden hazards show up. Small focus groups work well if they're grouped by task type or exposure pattern rather than title. A night shift maintenance crew will often name different hazards from a day shift production team.

4. Use HSRs properly
   HSRs can tell you where workers don't trust the reporting line, where a supervisor is part of the issue, and where a policy looks fine on paper but fails in the field.

5. Provide confidential reporting channels
   Some hazards won't surface in a room. Bullying, harassment, poor justice, and low support often appear only when workers have a confidential way to speak.

Workers usually won't use the term “psychosocial hazard”. They'll describe impossible deadlines, mixed messages, favouritism, being left alone on difficult tasks, or getting blamed for delays they can't control.

Where surveys fit

Surveys can help, especially when you need broad coverage across sites. But they are only one input. The stronger approach is to use survey findings to target deeper consultation and operational review.

Australia's People at Work survey is described as the country's only validated psychosocial risk assessment tool, with benchmarks developed from over 7,192 participants, according to the TrackSAFE Foundation resource on People at Work and Australian benchmarks. That matters because generic pulse surveys often miss the specifics that make a psychosocial risk assessment defensible and useful.

If you use a survey, don't stop at heat maps. Ask which sites, shifts, roles, and operational conditions sit under the result. Then verify it with worker consultation and field observation.

Analysing and Prioritising Psychosocial Risks

Once hazards are identified, the next job is to sort noise from genuine exposure. Not every complaint becomes a high-risk item. Not every calm team is low risk either. Some crews normalise bad conditions and under-report until an incident, grievance, or collapse in performance forces the issue.

The easiest way to assess psychosocial risk is to use the same logic you already apply to physical hazards, but tailor the evidence. Rate the hazard by frequency of exposure, duration, severity of likely harm, and how many workers are exposed. Then look at existing controls and whether they control the source.

Score exposure, not opinions

A top-down review often underrates risk because managers see the process, not the lived exposure. That's why consultation matters during analysis, not only during identification.

Assessments that skip the mandatory consultation step under WHS laws frequently miss high-risk areas, because focus groups often reveal hazards like bullying or lack of control that are invisible in management reviews, as noted in this Australian guide to psychosocial risk assessment practice.

A practical analysis lens for site teams:

• Frequency: How often does the hazard occur. Daily, weekly, only during shutdowns, only on night shift.
• Duration: Is exposure constant, prolonged, or short but intense.
• Severity: Could it contribute to sustained stress, psychological injury, fatigue-related error, conflict, or unsafe decision-making.
• Spread: Is it isolated to one supervisor or built into the job design across a work group.
• Control strength: Are current controls at the source, or are you relying on workers to cope.

A practical priority table

A good risk register entry should name the hazard, exposure group, task or context, likely harm, current controls, control gaps, responsible manager, due date, and review trigger.

If your analysis can't tell a supervisor what needs to change in the work, it's still too vague.

Construction teams often need to prioritise hazards created by programme pressure, poor sequencing, interface clashes, and unclear responsibility between principal contractor and subcontractors. Manufacturing sites often see persistent exposure from workload imbalance, inadequate staffing at peak demand, poor environmental conditions, repetitive work, and inconsistent supervision. Different context. Same discipline.

Implementing Effective Control Measures

Most organisations falter at this point. They identify the hazard correctly, then control it badly.

If the issue is unmanageable workload, weak role clarity, poor support, or dysfunctional change, you won't fix it with a wellbeing webinar. You may still provide support services, but they sit at the bottom of the control stack. They don't remove the source of exposure.

The Queensland Code of Practice sets out three levels of control for psychosocial risks and requires PCBUs to prioritise Level 1 elimination and Level 2 substitution or isolation over Level 3 human behaviour or supervision, which is the least effective, as explained in the Queensland Code of Practice for managing psychosocial hazards at work.

What good controls look like on site

The right question is always: what change to the work would remove or materially reduce the hazard?

• Elimination: remove a task design that creates constant deadline conflict between safety and output. On a construction job, that might mean reprogramming work packages so trades aren't stacked into the same space under impossible timing.
• Substitution or isolation: replace a chaotic after-hours reporting method with a structured handover process. Separate conflicting duties that force one supervisor to manage production pressure and contractor onboarding at the same time.
• Engineering or system design changes: redesign workflows, access to information, permit sequencing, or plant interface points so workers aren't carrying unnecessary interruption load.
• Administrative controls: clear escalation pathways, rostering limits, decision rights, documented handover standards, supervisor ratios, and conflict management procedures.
• Personal support and training: EAP, manager coaching, awareness training, and resources to prevent employee burnout can help, but only as support around stronger controls.

What doesn't pass the pub test or the regulator test

Bad controls all sound familiar:

• Resilience training as the main fix: useful as a support measure, not a source control.
• “Speak up” campaigns without protection: workers won't use them if the supervisor is the hazard.
• Generic policies with no operational owner: if no site leader owns the change, the hazard remains.
• Asking workers to self-manage impossible workloads: that shifts responsibility downward instead of controlling the risk.
• One toolbox on respectful behaviour: necessary sometimes, but weak on its own if bullying is tolerated by local supervision.

A psychosocial control is only credible if a frontline manager can describe what changed in the way work is planned, allocated, supervised, or reviewed.

Tie controls to existing site systems

Controls stick when they are built into the systems managers already use. That means embedding them into SWMS where relevant, pre-start expectations, fatigue management, contractor coordination, supervision routines, incident investigation, and management of change.

For example:

• Put role clarity requirements into subcontractor onboarding and daily coordination.
• Build workload and staffing checks into shutdown planning.
• Require consultation before roster changes, restructures, or process redesign.
• Set behavioural standards and escalation steps in supervisor procedures, not only in HR policy.

If you need a practical refresher on control selection, the hierarchy of control measures still applies. The difference with psychosocial hazards is that the source often sits in work design and management behaviour rather than plant or substance.

Monitoring Review and Continuous Improvement

A psychosocial risk assessment isn't complete when the action plan is signed off. It's only working when the site can tell whether exposure is dropping, controls are being used, and new hazards are being picked up as conditions change.

That matters even more on multi-site operations. A site can look stable on paper while one crew is absorbing deadline pressure, another is dealing with poor supervision, and a subcontractor group is falling through the cracks because no one owns the interface.

Set review triggers before you need them

Review should happen on a schedule, but fixed review dates aren't enough. You also need event-based triggers.

Strong triggers include:

• After an incident or near miss where workload, conflict, poor communication, or fatigue may have contributed
• After organisational change such as restructure, downsizing, new client demands, new technology, or revised reporting lines
• When HSRs or workers raise a new concern that points to a hazard not covered properly
• When a control fails in practice such as repeated non-compliance with handovers, rostering rules, or supervision requirements

Track signals that operations already see

You don't need fancy language to monitor psychosocial risk. Use indicators your site already recognises. Repeated shift coverage problems, unresolved grievances, high-conflict teams, recurring handover failures, fatigue concerns, and spikes in unplanned absence all tell you something about whether the work is under control.

A practical review cycle usually asks:

The strongest systems link psychosocial findings to the rest of WHS. If an incident investigation keeps surfacing workload, role confusion, or poor support, that's not a people problem. It's a risk control problem.

For multi-site businesses, digital monitoring makes this easier. It lets you connect hazard reports, incidents, actions, consultation records, and review dates across locations instead of chasing spreadsheets and inboxes. That's the difference between a static assessment and a live WHS process.

If your psychosocial risk assessment still sits outside your core safety system, Safety Space is worth a look. It gives H&S and operations teams one place to manage actions, reviews, contractor interfaces, site records, and ongoing monitoring across multiple locations, without relying on paper or scattered spreadsheets.