This is the ninth article in a weekly series on psychosocial hazard management in Australia. The series builds week on week, from the commercial stakes and recent enforcement actions to the governance responsibilities of boards and executive teams. It leads to The Psychosocial Safety Blueprint™, Culture Plus's executive operating model for governing the organisational systems that determine psychosocial safety.
Download The Psychosocial Safety Blueprint™
The first eight articles in this series established the case for executive attention: psychological injury claims are increasing, the commercial exposure is material, enforcement is advancing and officers have a personal duty to verify that appropriate systems are operating. The most recent article examined the relationship between psychosocial and physical safety, demonstrating how fatigue, workload, poor supervision and weak speaking-up cultures can undermine the human conditions on which critical physical controls depend.
Taken together, our analysis points to a broader conclusion.
Most organisations are not underinvesting in psychosocial safety. They are investing without an operating model capable of connecting that activity across the enterprise.
Investment has accumulated. The architecture has not.
Over the past decade, organisations have expanded employee assistance programs, leadership development, wellbeing initiatives, risk assessments, policies and governance reviews. Each investment has a legitimate purpose and, when well designed, contributes to improved workforce outcomes.
The difficulty is that most of these interventions operate at the level of the individual, the leader or the function. The risks they are intended to address are often created elsewhere: through decisions about workforce capacity, operating models, performance expectations, organisational change, management systems and resource allocation.
This creates a structural mismatch. Organisations are attempting to manage risks generated by enterprise systems through interventions designed primarily to support individuals or improve discrete organisational practices.
When results fall short, the usual response is to improve the intervention: commission further training, refresh the policy, repeat the assessment or increase awareness of the EAP. These actions may strengthen individual components, but they do not resolve the absence of an integrated system.
What the principal interventions can—and cannot—do
Employee assistance programs provide important counselling, recovery and wellbeing support to employees experiencing distress. Their value should not be understated. However, they operate principally after exposure has occurred. They do not redesign excessive workloads, improve poorly managed change or correct leadership practices that create sustained psychological risk. An EAP is therefore an important part of an organisational response, but it is not a primary prevention system.
Leadership training builds knowledge, judgement and management capability. Its effectiveness, however, depends on the environment into which that capability is introduced. A manager may understand how to identify psychosocial hazards and conduct supportive conversations, but remain unable to address the underlying risk because they lack the authority, resources or organisational support to change the work. A manager responsible for forty employees, competing operational priorities and an unachievable delivery schedule does not principally have a capability problem. The organisation has a work design and governance problem.
Psychosocial risk assessments provide visibility of hazards, affected workgroups and areas of material exposure. They are essential diagnostic instruments. Their preventative value depends on what happens next: whether findings are linked to accountable owners, whether controls alter the conditions creating the risk and whether control effectiveness is subsequently verified. An assessment that concludes with a risk register has identified the problem. It has not yet controlled it.
Policies, governance reviews and compliance programs strengthen formal accountability and regulatory readiness. Their impact depends on whether requirements are translated into executive decisions, operational processes, leading indicators and credible assurance. A policy establishes an organisational position. It does not, by itself, establish an operating model.
The limitation is therefore not the quality of any one intervention. It is the absence of an architecture connecting them.
The relevant unit of analysis is the organisation
Psychological harm rarely arises from a single factor. It is more commonly produced through the interaction of work design, leadership practice, organisational processes, governance decisions and cultural norms.
Three interdependent domains shape that interaction.
Work and leadership encompasses how work is designed, allocated and managed; how leaders behave; and how competing demands are resolved in day-to-day operations.
Systems and processes includes the decision rights, reporting lines, escalation pathways and management processes through which risks are identified and acted upon.
Governance and culture determines executive accountability, the information available to boards and leaders, the behaviours the organisation rewards or tolerates, and whether identified weaknesses are addressed over time.
An organisation may perform strongly in one domain while remaining exposed through another. Capable managers cannot compensate indefinitely for structurally excessive workloads. A comprehensive risk assessment cannot compensate for unclear ownership. Strong policies cannot compensate for incentives that reward results without regard to how those results are achieved.
Psychosocial risk is produced through the interaction of these conditions. Effective prevention must therefore address the interaction, not simply its individual components.
Guidance establishes expectations, not enterprise architecture
Two weeks ago, this series examined the guidance landscape: approved codes of practice, regulator guidance, the Australian Human Rights Commission's Seven Standards and ISO 45003.
These instruments provide substantial direction on the outcomes organisations are expected to achieve. They explain how psychosocial hazards should be identified and managed, how the positive duty should be approached and how psychological health and safety can be incorporated into broader management systems.
They do not determine how an organisation should allocate executive accountability, integrate the responsibilities of People and Culture, Safety, Risk, Legal and Operations, or incorporate psychosocial risk into decisions about workforce strategy, restructuring, performance systems and investment.
Nor were they designed to do so.
Guidance explains the required standard. An operating model determines how that standard is delivered consistently across the enterprise: who is accountable, where decisions are made, what information is required, how risks are escalated and how leaders verify that controls are effective.
In many organisations, those questions remain unresolved. Responsibility is distributed across several functions, but the connections between them are informal. Information exists, but it is not aggregated into a reliable view of organisational exposure. Programs are delivered, but their combined effect is not evaluated.
The result is a portfolio of activity without an integrated prevention system.
The executive test is evidence of changed conditions
The conventional executive question—Are we doing enough on psychosocial safety?—tends to elicit a catalogue of programs, policies and completed actions.
A more useful inquiry is whether those activities have changed the organisational conditions creating the risk.
That requires executive teams to examine:
- where material psychosocial risks originate within the organisation;
- who has the authority and resources to control them;
- how information from complaints, investigations, surveys, risk assessments and workforce data is connected;
- whether significant business decisions are assessed for psychosocial risk before implementation;
- how the effectiveness of controls is verified; and
- whether board reporting demonstrates changes in exposure rather than volumes of activity.
If these questions cannot be answered coherently, the organisation may have substantial psychosocial safety activity without having effective governance over psychosocial safety.
That distinction matters. A regulator, board or coroner examining the organisation's response will not be assessing the volume of activity undertaken. The relevant question will be whether reasonably practicable controls were implemented and whether the organisation had evidence that they were operating effectively.
From activity to organisational capability
The next stage of maturity is not another standalone initiative. It is the integration of existing initiatives within a coherent governance and management system.
The Psychosocial Safety Blueprint™ sets out the governance gap and introduces the operating model developed to address it. The Blueprint's Executive Summary has been designed as an executive briefing note that can be circulated to boards and leadership teams ahead of a discussion about the organisation's current approach.
Download the executive summary of The Psychosocial Safety Blueprint™ →
Next Monday, after nine weeks establishing the case for change, the series turns to the architecture itself: The Psychosocial Safety Blueprint™.
This article provides executive advisory commentary, not legal advice. Organisations should obtain advice on their specific legal obligations from appropriately qualified legal practitioners.
Felicity Menzies is the CEO and Principal Consultant of Culture Plus Consulting, a specialist executive advisory practice in organisational culture, psychosocial safety and executive governance. For more than fifteen years, she has advised boards, chief executives and executive leadership teams across government, listed companies and regulated industries on the organisational systems that shape culture, leadership, workplace conduct and psychosocial risk.
Related programmes
- Psychosocial Hazards Training for Leaders & Managers — practical capability to identify, assess and control psychosocial hazards at work.
- Psychosocial Risk Assessment & WHS Consulting — independent advisory to identify, assess and control psychosocial hazards.
- Respect at Work Training for Executives & Boards — governance-level capability for officer due diligence.
Sources
- The Psychosocial Safety Blueprint™, Culture Plus Executive Papers No. 01, Chapter 10, "From Activities to Systems".
- The Psychosocial Safety Blueprint™, Chapter 9, "Guidance and the Governance Gap".
- Safe Work Australia (2022), Model Code of Practice: Managing Psychosocial Hazards at Work.
- Australian Human Rights Commission (2023), Guidelines for Complying with the Positive Duty.
- ISO 45003:2021, Psychological Health and Safety at Work.