19th Jun, 2026 Read time 14 minutes

How to conduct a psychological risk assessment: A guide to the ISO 45003

As modern workplaces evolve, the definition of occupational health and safety continues to expand. Professionals in the health and safety sector increasingly recognise that protecting the psychological health of employees is as vital as managing physical hazards. 

Implementing ISO 45003 provides a structured, international framework to identify, manage and prevent work-related psychosocial risks. This allows organisations to move from reactive measures to proactive, strategic safety management.

The current regulatory landscape

The Health and Safety at Work etc. Act 1974

In the UK, Section 2 of the Health and Safety at Work etc. Act 1974 states employers maintain a clear legal duty to ensure, so far as is reasonably practicable, the health, safety, and welfare of all employees. 

The statutory definition of “health” explicitly includes both physical and psychological well-being. Furthermore, the Management of Health and Safety at Work Regulations 1999 highlights how employers must conduct suitable and sufficient assessments of all risks affecting their workforce. Failing to identify or control sources of significant workplace stress constitutes a direct breach of these regulations.

ISO 45003

Published in 2021 by the International Organization for Standardization, ISO 45003 arrived as a direct response to a worsening global corporate health crisis. According to the HSE, work-related stress, depression, or anxiety consistently accounts for approximately half of all work-related illnesses in Great Britain, resulting in millions of lost working days each year.

ISO 45003 operates as a guidance standard designed to complement ISO 45001 (the global standard for Occupational Health and Safety Management Systems). It provides specific, actionable guidance on managing psychosocial risks, shifting the corporate focus away from individual resilience and toward systemic organisational design.

What are psychosocial hazards in the workplace?

Psychosocial hazards arise from how work is designed, organised and managed. Unlike physical hazards that are often easily observable, psychosocial risks relate to factors that can potentially impair an employee’s mental health and well-being.

 

Hazard category Example Workplace indicators Operational impact
Work organisation High workload
Role confusion Micro-management
Spikes in overtime
Missed deadlines
High error rates
Decreased quality
Operational bottlenecks
Social factors Bullying
Toxic leadership
Lack of team support
Increased grievances
Interpersonal friction
High turnover
Fragmented teams
Loss of corporate trust
Work environment Noise
Poor lighting
Inadequate equipment
Frequent minor complaints
Low engagement
Presenteeism
Safety incidents
Lost productivity

 

According to ISO 45003, psychosocial risks typically fall into three categories:

1. How work is organised 

This category relates to the operational mechanics and intrinsic demands of a job role. Hazards include:

  1. Excessive workloads and unrealistic deadlines
    Demands that consistently outpace an employee’s capacity or available resources.
  2. Role ambiguity and role conflict
    A lack of operational clarity regarding duties, conflicting instructions from multiple managers, or confusion over performance metrics.
  3. Lack of autonomy
    Micro-management practices that prevent workers from exercising control over the pace, ordering, or execution of their daily tasks.
  4. Poorly managed change
    Structural or technological adjustments implemented without clear communication, consultation, or adequate retraining pipelines.

2. Social factors at work

This domain addresses the human and interpersonal environment within the business. Hazards include:

  • Interpersonal conflict
    Persistent, unresolved friction between colleagues or departments.
  • Bullying, harassment and victimisation
    Destructive behaviours that erode psychological safety and individual dignity.
  • Substandard leadership behaviour
    Toxic, inconsistent, or unsupportive management practices characterised by a lack of recognition or constructive feedback.
  • Lack of organised support
    Isolation within a role, where employees cannot access assistance from peers or supervisors when facing operational difficulties.

3. The work environment and equipment

This category connects physical operational conditions with psychological outcomes. Hazards include:

  • Inadequate physical conditions
    Working in poorly lit, excessively noisy, poorly ventilated, or ergonomically hazardous spaces can cause heightened cognitive fatigue and frustration.
  • Remote and hybrid work risks
    Increased feelings of isolation, blurred boundaries between home and professional life, and digital exhaustion.
  • Shift patterns and unpredictable hours
    Poorly structured rotas that disrupt circadian rhythms, causing sleep deprivation and straining personal or family commitments.

How to conduct a psychological risk assessment step-by-step

Conducting a formal assessment is a core requirement for complying with ISO 45003. By following a systematic process, organisations can identify where risks exist and develop targeted strategies to mitigate them.

Step 1: Preparation, cultural realignment and leadership commitment

Before gathering data, senior management must actively sponsor the project. This means allocating sufficient resources to act on the findings, including budgets, time and hands.

  • Establish a scope by defining whether the assessment will target the entire multinational enterprise, a specific regional branch, or higher-risk departments (e.g., call centres, front-line operations).
  • Deconstruct stigma through clearly communicating the purpose of the assessment to the workforce. Employees must be assured that discussing workplace stress will not result in disciplinary action or negative career progression. 

Step 2: Data collection and hazard identification

Relying solely on informal check-ins or gut instinct is insufficient for complex organisations. Safety teams should combine qualitative and quantitative metrics to paint an accurate picture of workplace hazards:

  • Lagging indicators
    Analyse historic data trends, such as sickness absence records (specifically looking for mental health or musculoskeletal reasons), employee turnover rates, exit interview data, and formal grievances.
  • Leading indicators
    Deploy validated survey instruments, such as the HSE Management Standards Indicator Tool. This covers demands, control, support, relationships, role, and change.
  • Qualitative direct consultation
    Organise structured, confidential focus groups or cross-functional safety committees. This ensures workers can explain the contextual nuances behind survey scores.

Step 3: Risk evaluation and prioritisation

Once hazards are catalogued, they must be rigorously evaluated based on the nature of exposure:

  • Frequency, such as how often are employees subjected to the hazard e.g. daily excessive workloads vs. annual restructuring stress
  • Duration, for example how long the exposure lasts during a typical shift
  • Severity, for instance what the potential psychological impact would be for a person

Safety professionals must use this data to rank risks, directing funding and intervention toward the highest scoring hazards.

Step 4: Proactive control measures

With a ranked risk register established, mitigation strategies must be applied using the traditional hierarchy of controls. Senior safety directors must focus on systemic changes that eliminate hazards at the source rather than relying on individual coping mechanisms.

  • Redesigning the system, such as altering reporting lines, adjusting production schedules, and establishing realistic headcount plans.
  • Individual support by providing training on stress management or resilience building as a supplementary measure to support broader organisational improvements.

Step 5: Continual monitoring and auditing

Psychosocial dynamics within a business fluctuate constantly due to market changes, new product launches or changes in teams and leadership. 

  • Schedule routine reviews to reassess risk registers at least annually or immediately following a significant operational restructure.
  • Track key metrics and monitor real-time performance indicators including employee engagement levels, retention rates, and EAP trends to verify the effectiveness of your control measures.

Integrating psychosocial evaluations directly into physical hazard matrices

For many health and safety professionals, integrating psychosocial risks into existing management systems is the most efficient path to compliance. Many organisations are successfully adapting the traditional risk matrix approach for physical risks to evaluate psychosocial hazards.

Overcoming the silo mentality

Managing mental safety via isolated HR programmes while physical safety remains under the strict control of the EHS department creates a disjointed corporate structure. This fragmentation can cause organisations to miss overlapping risks. For example, excessive work fatigue (a psychosocial hazard) can directly cause a forklift operator to miss a safety sign, resulting in a severe physical collision.

How to measure psychological safety

By mapping the frequency and severity of psychosocial exposure, you can place these risks within your existing risk register. While assessing a physical hazard involves calculating the structural integrity of a gantry or the speed of a blade, a psychosocial hazard evaluates the frequency and impact of systemic stressors.

Example: If a cross-functional department consistently operates at a 25% headcount deficit while experiencing a 30% rise in workload volume, the Likelihood of psychological injury or burnout moves to “Almost Certain” (Score 5). If the Severity of chronic burnout leads to long-term clinical absence, it scores as “Major” (Score 4). On a standard 5×5 matrix, this yields a total risk score of 20, requiring immediate executive intervention.

Building a unified corporate risk register

This method provides a standardised way to compare psychological hazards against physical ones, ensuring that resource allocation is driven by actual impact on employee health. Rather than using disconnected tools, a single, connected workflow helps maintain clear operational ownership and ensures that mandatory review cycles are strictly followed. 

When a senior safety director reviews the master corporate risk register, a high-stress procurement environment is viewed with the same level of urgency as an un-guarded conveyor belt on a factory floor.

Aligning corporate safety workflows with ISO 45003 compliance

ISO 45003 is designed as a guidance standard to complement ISO 45001, the international standard for occupational health and safety management systems. Alignment requires more than just a one-off assessment, it emphasises embedding psychological health into your organisation’s culture.

Policy integration

Health and safety policies must clearly state that managing psychosocial risks is just as important as controlling physical hazards. This foundational policy document should outline:

  • The exact definition of psychosocial risks accepted by the organisation.
  • The clear division of roles and responsibilities across executive, management, and worker levels.
  • The formal processes used to identify and mitigate these risks.

Leadership and participation

Effective psychological risk management relies on visible commitment from senior management and active, ongoing consultation with workers at all levels. Leadership should not simply sign off on policies; they must actively model supportive workplace behaviours.

Furthermore, workers must have a safe environment to contribute to risk assessments without fear of negative consequences. Frontline staff understand the day-to-day friction of their roles better than executive management. Leveraging their insights ensures the organisation designs more practical, effective control measures.

Competency and awareness

Organisations must provide targeted training for both managers and employees so they can recognise psychosocial hazards, understand their responsibilities, and support their peers.

Line managers do not need to act as clinical therapists or counsellors. Instead, they should be trained to spot early shifts in work behaviour, such as sudden drops in performance, uncharacteristic irritability, or withdrawal from team discussions. Once identified, managers must know how to direct employees toward appropriate internal support channels.

Proactive control measures for organisational stress 

Effective controls move beyond providing generic mental health resources and address the root causes of stress in the workplace. When designing measures, safety teams must structure interventions across three distinct tiers of prevention.

Primary prevention: Eliminating risks at the source (job design)

Primary prevention focuses on proactive, systemic changes designed to alter or remove structural stressors before they cause harm. This is the most effective approach within the occupational health hierarchy.

  • Smoothen workload processes
    Use predictive scheduling software to distribute task volumes evenly across teams, avoiding periods of intense understaffing.
  • Audit and establish clear job roles
    Standardising job descriptions and implementing clear, objective key performance indicators (KPIs) to eliminate role ambiguity.
  • Be flexible with working frameworks
    Giving workers greater control over their schedules, including hybrid arrangements or core working hours, to improve work-life balance.

Secondary prevention: Mitigating impact through organisational resilience

Secondary prevention aims to change how employees perceive and respond to stressors that cannot be fully designed out of operations, such as high-pressure crisis management or dealing with difficult clients.

  • Train leaders to practice supportive, empathetic management and to provide constructive, regular feedback.
  • Give teams practical toolkits to help them spot early signs of cognitive fatigue and manage boundaries during intense projects.
  • Establish trained mental health first aiders or peer support groups to provide safe, accessible spaces for informal guidance.

Third prevention: Reactive support and rehabilitation

While primary prevention is the goal, organisations must ensure effective individual support is available when workers experience significant psychological distress.

  • Employee Assistance Programmes (EAPs)
    Provide immediate, fully confidential access to professional clinical counselling and psychological support.
  • Robust reporting channels
    Operate secure, anonymous reporting lines for cases of workplace bullying, harassment, or micro-management.
  • Phased return-to-work pipelines
    Design clear, structured occupational health pathways to safely reintegrate employees returning from long-term mental health absence.

Moving from compliance to performance

Treating psychological health as a strategic investment allows organisations to build a resilient, engaged workforce that drives long-term performance and sustainability. Forward-thinking companies view ISO 45003 compliance as a strategic driver of operational excellence rather than an administrative burden.

The true cost of neglect

Extensive economic studies, including reports published by Deloitte on mental health in the workplace, demonstrate that poor psychological safety creates a significant financial drain on businesses. This cost shows up in three main ways:

  1. Absenteeism: Total days lost when an employee is unfit to attend work due to mental distress.
  2. Presenteeism: The practice of attending work while unwell, resulting in low concentration, frequent mistakes and lost productivity. This often costs companies significantly more than outright absence.
  3. Staff Turnover: The high cost of recruiting and retraining new staff when employees leave a toxic or unsupportive corporate culture.

The Value on Investment (VOI)

Conversely, businesses that systematically reduce psychosocial hazards experience substantial returns. Beyond lowering insurance premiums and reducing legal liabilities under the Health and Safety at Work Act, strong psychological safety fosters a culture of innovation.

When workers feel psychologically safe, they are far more likely to speak up about operational hazards, share creative ideas and collaborate across departments. This openness directly protects the business from costly operational failures and drives sustainable productivity.

Conclusion

Managing psychological safety requires the same rigor, structure, and accountability as monitoring physical risks. By aligning workflows with the ISO 45003 standard, safety leaders can identify hidden systemic hazards, build robust risk assessment models, and deploy effective long-term control measures.

True safety excellence means protecting the whole person, making sure everybody knows they can go to work safe and return home safe.

Brands who we work with

Sign up to our newsletter
Keep up to date with all HSE news and thought leadership interviews