Beyond the Staff Survey: How Australian Employers Should Assess and Control Psychosocial RisksIndependent WHS Audits and Safety Inspections Australia

Why a one-off survey is not enough

Surveys can give workers a structured way to describe their experience and can highlight patterns across teams or locations. They can be useful for screening, consultation and deciding where deeper investigation is needed.

They also have limits. Response rates, timing, question design, trust and confidentiality can affect what people report. Organisation-wide averages may hide higher exposure in a particular role, team, shift, site or worker group. A survey may show that people are experiencing excessive demands or poor support without explaining which work conditions are causing the risk or which controls will be effective.

Comcare advises that psychosocial assessment tools can support organisations, but tools alone are not sufficient. Leadership commitment, worker consultation, evidence analysis, action and continuing monitoring are also required.

The practical test is not whether a survey was completed. It is whether the organisation has understood the work-related hazards, made appropriately authorised control decisions and checked that those controls are effective.

Seven elements of a credible psychosocial risk assessment and control programme

1. Define the operating context and decision scope

Start with the work: what people do, where and when they do it, how work is allocated, what changes are occurring and which leaders control the relevant decisions.

Clarify the assessment scope, participating sites and worker groups, available evidence, privacy arrangements, decision authority and how urgent concerns will be escalated. This prevents the exercise becoming an open-ended wellbeing survey with no clear owner or action pathway.

2. Consult workers and health and safety representatives

Workers understand how work is actually performed, where demands or uncertainty arise and whether existing controls are practical. Consultation should give affected workers and their health and safety representatives a reasonable opportunity to contribute and should explain what will happen with the information.

A survey may be one consultation method. Depending on the workforce and risk, consultation may also include interviews, focus groups, workshops, site observations, existing HSR processes or other accessible channels.

The method should protect privacy, avoid retaliation and separate workplace risk evidence from clinical diagnosis or individual performance management.

3. Use multiple evidence sources

Build the risk picture from more than opinions or a single dataset. Relevant sources may include:

• survey or consultation themes;
• workload, staffing, rostering and work-design information;
• incident, injury, complaint and grievance records;
• absenteeism, turnover and workers compensation patterns;
• organisational change, role clarity and support arrangements;
• exposure to aggression, trauma, remote work or isolated work;
• policies, procedures, risk registers and control records; and
• site, task and team-level observations.

Each source has limitations. Patterns should be interpreted in context, with uncertainty and data quality stated rather than hidden.

4. Assess exposure, interaction and possible harm

Where risk assessment is required, consider who may be exposed, how often exposure occurs, how long it lasts and how severe it may be. Psychosocial hazards can interact or combine, so they should not always be assessed as isolated checklist items.

For example, high job demands may become more harmful when combined with low control, poor support, role ambiguity, remote work or organisational change. The assessment should identify the operating conditions creating exposure, not only label a hazard.

5. Select controls that address the source of risk

Prioritise changes to work design, systems, staffing, resources, supervision, communication, decision processes and workplace conditions where those changes can eliminate or minimise the risk.

Policies, awareness campaigns, resilience initiatives and employee assistance programs may provide support, but they should not be presented as substitutes for controlling the work-related source of risk. Administrative controls are generally less reliable when used alone.

Document why controls were selected, what evidence supports them, who is authorised to approve them and what could prevent them from being implemented effectively.

6. Assign owners, actions and escalation pathways

An assessment without implementation ownership is an incomplete process.

For each agreed action, define:

• the accountable owner;
• the workers or groups affected;
• the implementation date and dependencies;
• the evidence that will show the action occurred;
• the measure that will indicate whether exposure or risk has changed; and
• the escalation path when the owner lacks authority, resources or information.

Leaders should be able to distinguish a recommendation, an approved action, an implemented control and a control shown to be effective.

7. Verify and review control effectiveness

Review should test whether controls are working as intended, remain effective and have introduced any new risk. Evidence may include follow-up consultation, work observations, exposure measures, incident or complaint patterns, completion of system changes and targeted assurance checks.

Review is particularly important when work changes, new hazards emerge, consultation identifies a problem, a control is not effective or an HSR requests review under the applicable arrangements.

Repeating the same staff survey can contribute to monitoring, but a score movement alone does not prove that a particular control caused the change or that all affected workers are protected.

What should an external psychosocial consultant provide?

A credible consulting engagement should define the question being answered, evidence being used, limitations, participating worker groups, consultation approach and decision owners.

Depending on scope, useful deliverables may include:

• an agreed assessment and consultation plan;
• a documented evidence register and limitations;
• identified hazards, exposed groups and operating conditions;
• a risk assessment where required;
• prioritised control options connected to the source of risk;
• an action plan with owners, timing and escalation;
• implementation workshops or leadership support;
• control-effectiveness and review measures; and
• a clear statement of unresolved uncertainty and decisions retained by the organisation.

The consultant should not guarantee compliance, diagnose individuals or make organisational risk decisions outside the agreed authority. The employer or other duty holder retains responsibility for legal duties, consultation, authorised decisions and control effectiveness.

When to seek support beyond an internal survey

External support may be useful when:

• the organisation has significant or recurring psychosocial concerns;
• worker trust or participation is weak;
• hazards interact across work design, leadership and systems;
• major organisational change is planned or underway;
• serious incidents, complaints or injury patterns require a governed response;
• internal teams lack independence, specialist capability or capacity;
• leaders are uncertain about control options or decision ownership; or
• previous surveys or actions have not produced credible improvement.

The engagement should be proportionate to the work and risk. Not every organisation needs the same assessment method, survey or deliverable.

How Work Safety Hub can help

Work Safety Hub provides practical psychosocial risk consulting for Australian workplaces. We can help organisations define the assessment scope, consult workers, examine work design and system evidence, assess risk where required, identify practical controls and establish accountable implementation and review arrangements.

Our work supports organisational decision-makers; it does not replace legal duties, worker consultation, authorised risk decisions, clinical services or specialist legal advice.

Where the operating need is workforce or manager capability rather than an organisational risk assessment, use the separate RiskReady Academy psychosocial WHS training pathway.

Frequently asked questions

Is a psychosocial staff survey a risk assessment?

Not by itself. A survey can contribute evidence and consultation, but a risk assessment also considers the work, who may be exposed, duration, frequency and severity, how hazards interact, existing controls and what further action may be required.

Do employers have to use a particular psychosocial survey?

There is no single survey suitable for every Australian workplace. The method should be appropriate for the work, workforce, hazards, legal jurisdiction, available evidence and decisions that need to be made. Check current requirements with the relevant Commonwealth, state or territory regulator.

Can a good survey score prove psychosocial risks are controlled?

No. A survey score is one indicator and may be affected by participation, timing, trust and aggregation. Control effectiveness should be checked using evidence connected to the hazard, exposure and implemented control.

What evidence should be considered besides survey responses?

Relevant evidence may include consultation themes, work design, workload, staffing, rosters, change, incidents, complaints, injury, absenteeism, turnover, role clarity, support, observations and existing control records. Use only information that is relevant, lawful and handled with appropriate privacy protections.

Should psychosocial hazards be assessed separately?

Not always. Hazards may interact or combine. The assessment should consider the complete operating context and the duration, frequency and severity of exposure, rather than relying only on isolated checklist scores.

What makes a psychosocial control practical and credible?

A credible control addresses the source of risk where reasonably practicable, has an authorised owner, is implemented in the relevant work system and has a defined way to verify whether it is working.

When should psychosocial controls be reviewed?

Review when controls are not working, more can reasonably be done, work is changing, new hazards or risks are identified, consultation indicates review is needed, or an HSR requests review under the applicable arrangements. Check the requirements applying in the relevant jurisdiction.

Discuss your psychosocial risk priorities

Tell us what is changing, where the concern sits, which worker groups may be affected and what evidence you already have. Work Safety Hub can help you identify a proportionate next step and clarify what decisions and support are required.

Discuss Your Psychosocial Risk Priorities

Explore Psychosocial Safety Consulting

If the primary requirement is practical workforce or manager learning rather than an organisational assessment, use the separate RiskReady Academy psychosocial WHS training pathway.

Sources

Primary Australian authority sources reviewed on 26 August 2026:

1. Safe Work Australia — Model Code of Practice: Managing psychosocial hazards at work
2. Safe Work Australia — Identify, assess and control hazards
3. Comcare — Regulatory guide: Managing psychosocial hazards
4. Comcare — Psychosocial risk assessment tools
5. WorkSafe Victoria — Psychological health regulations frequently asked questions

Jurisdiction note: Safe Work Australia develops model WHS laws and guidance but is not a regulator. The model Code has legal effect only where adopted in a jurisdiction. Victoria's Occupational Health and Safety (Psychological Health) Regulations 2025 commenced on 1 December 2025 and differ from the model WHS framework. Check the current requirements and guidance issued by the relevant Commonwealth, state or territory regulator.

Reviewed by: Robert O'Neill Last reviewed: 26 August 2026