A psychosocial risk assessment is a structured, systematic process used to identify, assess, and manage work-related factors that may cause psychological harm.

 It focuses on how work is designed, organised, managed, and experienced, examining factors such as workload, role clarity, leadership practices, working time, interpersonal relationships, and organisational change. These factors can create risk or protection depending on how they are managed.

Like any other workplace risk assessment, it involves:

• Identifying psychosocial hazards
  
• Evaluating the level of risk they present
  
• Prioritising risks based on evidence
  
• Defining proportionate control measures
  
• Reviewing effectiveness over time
  

Importantly, a psychosocial risk assessment is not a mental health screening exercise and does not assess individuals. It looks at systems, structures, and management practices, providing actionable insight into where changes to work design or management can reduce risk and improve wellbeing.

It applies the same health and safety principles used for physical risks to psychological health at work, helping organisations meet their duty of care in a structured and defensible way

A stress risk assessment typically focuses on work-related stress and is often limited to identifying stressors that may contribute to stress-related ill health.

 A psychosocial risk assessment is broader and more comprehensive. It looks at the full range of work-related psychosocial factors that can affect psychological health, wellbeing, and performance, not just stress.

Key differences include:

• Scope: Stress risk assessments focus primarily on stress. Psychosocial risk assessments examine how work is designed, organised, and managed, including workload, leadership, role clarity, working time, relationships, change, recognition, and communication.

• Purpose: Stress risk assessments often identify areas of concern. Psychosocial risk assessments are designed to assess risk, prioritise hazards, and support preventative, system-level controls.

• Alignment with standards: Psychosocial risk assessments align more closely with modern regulatory expectations and international standards such as ISO 45003.

 In practice, stress is often an outcome of unmanaged psychosocial risks. A psychosocial risk assessment addresses the causes, rather than focusing only on one of the symptoms.

The assessment covers work-related psychosocial risks, the aspects of how work is designed, organised, managed, and experienced that can cause psychological harm or, when managed well, provide protection.

These risks typically include factors such as:

Work Content: The nature of the tasks people perform, including variety, meaning, complexity, and emotional demands of the work itself.

Workload & Pace: The amount of work employees are expected to complete and the speed or intensity at which it must be done.

Working Time: How working hours are organised, including length of shifts, overtime, breaks, and predictability of schedules.

Participation & Control: The degree to which employees can influence decisions about their work, how tasks are carried out, and changes that affect them.

Role Clarity & Responsibility: How clearly employees understand their role, responsibilities, priorities, and what is expected of them.

Professional Development: Access to learning, skill development, career progression, and opportunities to grow within the organisation.

Interpersonal Relationships: The quality of day-to-day interactions at work, including respect, support, conflict, bullying, or harassment.

Team Dynamics: How effectively teams work together, including trust, collaboration, communication, and shared accountability. 

Mental Workload: The cognitive demands of the job, such as concentration, decision-making, problem-solving, and information processing.

Work–Life Balance: The extent to which work allows adequate time and energy for rest, recovery, and life outside of work.

Leadership Style: How leaders manage, communicate, support, and set expectations, including consistency, fairness, and approachability.

Response to Change: How organisational changes are planned, communicated, and managed, and how supported employees feel during periods of change.

Social Recognition: The extent to which effort, contribution, and achievements are acknowledged and valued by the organisation.

Information & Transparency: How clearly, consistently, and honestly information is shared, including communication about decisions, expectations, and organisational direction.

The assessment focuses on systemic and organisational factors, not individual resilience, personality, or medical conditions. It identifies where the design and management of work may be creating unnecessary risk and where controls or improvements are required.

These risk areas align with recognised regulatory expectations and international standards, ensuring the assessment produces actionable insights that can be translated into proportionate control measures and integrated into existing health and safety management systems.

Failing to identify and manage psychosocial risks can expose an organisation to serious legal, regulatory, financial, and reputational consequences, particularly where psychological harm is linked to work.

In many countries, employers have a legal duty of care to protect employees’ psychological health. Where organisations cannot demonstrate that psychosocial risks have been identified, assessed, and reasonably managed, regulators may take enforcement action, and organisations may face civil claims or sanctions. 

In the UK, this duty is clearly established under health and safety legislation. If an organisation fails to manage psychosocial risks appropriately:

•  The regulator may issue an Improvement Notice, requiring specific remedial action within a defined timeframe
•  Failure to comply, or serious breaches linked to harm, can lead to prosecution
•  Under UK sentencing guidelines, fines for health and safety breaches can be substantial and, in serious cases, can reach up to 10% of an organisation's annual turnover, depending on factors such as severity, culpability, and harm caused

Importantly, regulators do not expect organisations to eliminate all psychosocial risk. However, they do expect clear evidence of a structured, proportionate, and proactive approach to risk management. A documented psychosocial risk assessment is a key part of demonstrating due diligence and meeting legal obligations.

Without this evidence, organisations are significantly more exposed during inspections, investigations, or legal proceedings.

The psychosocial risk assessment provides clear, documented evidence that your organisation is identifying, assessing, and managing psychosocial risks in a structured and proportionate way.

During inspections or audits, regulators typically look for evidence that:

• Psychosocial hazards have been formally identified
  
• Risks have been assessed using a recognised methodology
  
• Findings have been prioritised based on risk
  
• Reasonable control measures have been identified and implemented
  
• The process is reviewed and kept up to date
  
  

This assessment supports that by producing:

• A documented risk assessment aligned with health and safety principles
• Clear records of methodology, scope, and employee consultation
• Evidence-based findings that justify management decisions
• A defensible audit trail showing due diligence and reasonable practicability
  

Rather than relying on informal wellbeing initiatives or ad-hoc surveys, the assessment demonstrates that psychosocial risks are being managed with the same rigour as physical risks and are embedded within your existing health and safety management system.

It helps you move from “we care about wellbeing” to “we can evidence how we manage psychosocial risk”, which is exactly what regulators and auditors expect to see.

Psychosocial risk assessment sits at the intersection of Health & Safety and HR, and responsibility should be shared between both functions.

From a governance perspective, Health & Safety brings the risk management discipline, ensuring psychosocial risks are identified, assessed, documented, and reviewed in line with legal and regulatory expectations. This includes applying the same structured approach used for physical hazards and ensuring defensible evidence of compliance.

HR plays a critical role because many psychosocial risks are shaped by people processes, leadership practices, job design, performance management, and organisational culture. HR insight is essential to interpreting findings accurately and translating them into practical, sustainable interventions.

When both functions work together:

• Psychosocial risks are managed as formal workplace risks, not informal wellbeing issues
  
• Root causes linked to work design and management practices are properly addressed
  
• Actions are embedded into existing policies, systems, and leadership behaviours
  

 Psychosocial risk assessment requires Health & Safety rigour and HR capability. Treating it as the responsibility of only one function risks either weakening compliance or limiting meaningful change.

Yes. Psychosocial risk assessments must be reviewed and repeated periodically, and this is a legal requirement, not a one-off exercise.

As with any workplace risk assessment, employers are required to ensure that risks to health and safety,  including psychological health, remain up to date and effectively managed. This means reviewing the assessment:

• At regular intervals
  
• When significant organisational changes occur (such as restructures, new roles, or changes to working practices)
  
• When there are indicators of increased risk, such as rising absence, turnover, or complaints 

In the UK, health and safety legislation requires employers to keep risk assessments current and relevant. Similar expectations exist internationally, reinforced through occupational health and safety frameworks and recognised standards such as ISO 45003.

Regular review ensures that control measures remain effective, emerging risks are identified early, and organisations can demonstrate ongoing due diligence rather than reactive compliance.

Repeating the assessment is part of good governance and legal compliance, not an optional extra.

Yes. The psychosocial risk assessment is designed to protect anonymity.

Employee input is collected and analysed at group or organisational level, not at an individual level. Responses are aggregated so that no individual can be identified, and results are reported only where there is a sufficient number of responses to preserve confidentiality.

The purpose of the assessment is to identify patterns and systemic risks in how work is designed and managed, not to assess individual performance or personal circumstances.

Maintaining anonymity is essential for both data integrity and trust, and it helps ensure honest, meaningful responses that lead to accurate and actionable insights.

The assessment is designed to be concise and focused. For most respondents, it typically takes around 10–15 minutes to complete. 

The questions are targeted specifically at recognised psychosocial risk factors, avoiding unnecessary or repetitive items. This helps minimise burden on employees while still generating precise, actionable data.

Keeping completion time short supports higher participation rates and better-quality responses, without compromising the rigour of the assessment.

The timeframe depends on the size, structure, and complexity of the organisation, but most psychosocial risk assessments are completed within a defined, time-bound process rather than as an open-ended exercise.

Typically:

• Planning and setup  takes a short period to agree scope, populations, and communication
  
• Data collection  (including surveys) usually runs for a limited window to ensure focus and good participation
  
• Analysis and reporting  follows promptly, producing clear, prioritised findings
  

For many organisations, the full process, from launch to final report, can be completed in 6-8 weeks, without disrupting day-to-day operations.

Yes. Segmentation is highly customisable and can be tailored to your organisation’s specific needs, priorities, and structure.

The assessment allows you to define segmentation criteria in advance so the results reflect what is most meaningful for your decision-making. This may include departments, functions, locations, role types, seniority levels, working patterns, or other relevant groupings.

Custom segmentation helps you:

• Identify where psychosocial risks are most concentrated
  
• Compare patterns across different parts of the organisation
  
• Target actions more precisely and effectively
  
  

To ensure confidentiality and data integrity, segmentation is applied only where there is a sufficient number of responses in each group. This protects anonymity while ensuring the data remains reliable and defensible.

Segmentation is flexible by design,  shaped around your operational reality, not a fixed reporting template. 

Yes. The assessment allows for sector-specific benchmarking, so your results can be compared against organisations operating in the same industry or sector.

This helps you:

• Understand how your psychosocial risk profile compares with similar organisations
  
• Identify areas where risk levels are higher or lower than typical for your sector
  
• Add meaningful context to prioritisation and action planning
  

Benchmarking is conducted using aggregated, anonymised data to ensure confidentiality and fair comparison. It is designed to provide insight and perspective rather than create league tables or one-size-fits-all targets.

Used alongside internal segmentation and trend analysis, sector benchmarking supports better-informed, evidence-based decisions about where to focus effort and resources.

Once the psychosocial risk assessment is completed, the focus shifts from diagnosis to action and governance.

You receive a clear, evidence-based report that: 

• Highlights key psychosocial risks and priority areas
  
• Shows how risks vary across teams, roles, or populations (where appropriate)
  
• Translates findings into practical, proportionate recommendations
  

The results are then used to:

• Develop a prioritised action plan based on risk level and reasonable practicability
  
• Integrate actions into existing health and safety, HR, and leadership processes
  
• Support internal decision-making, reporting, and accountability
  
  

The assessment also establishes a baseline, allowing organisations to monitor progress over time and review the effectiveness of control measures.

To help you understand what the output looks like in practice, you can download a sample psychosocial risk assessment report from the Resources section on this page.

The assessment does not end with a report, it creates a structured pathway from insight to action, aligned with legal and best-practice expectations.

No, provided the assessment is positioned and used correctly.

The purpose of a psychosocial risk assessment is not to commit the organisation to solving every issue identified. It is to identify, assess, and prioritise risks, so that reasonable and proportionate action can be taken based on evidence.

Risk assessment results support:

• Prioritisation of the most significant risks
  
• Decisions about what is reasonably practicable
  
• Clear justification for why some actions are taken immediately and others are phased
  

 From a legal and regulatory perspective, organisations are expected to demonstrate due diligence, not perfection. Having documented evidence of identified risks, risk ratings, and planned control measures strengthens governance and defensibility, even where constraints mean not all issues can be addressed at once.

When findings are communicated clearly, with emphasis on prioritisation and proportional action, the results create clarity rather than unrealistic expectations.

That is precisely the value of conducting a psychosocial risk assessment.

Identifying serious issues early allows organisations to take informed, proportionate action before problems escalate into sickness absence, grievances, regulatory intervention, or legal exposure. The assessment provides evidence to prioritise risks based on severity and impact, rather than reacting to isolated incidents or assumptions.

Importantly, highlighting serious issues does not create an expectation to fix everything immediately. It enables organisations to:

• Understand where the most significant risks exist
  
• Take reasonable, staged action based on risk level and practicability
  
• Demonstrate due diligence and responsible risk management
  

From a regulatory perspective, it is far more defensible to have identified risks and be actively managing them than to be unaware of them or unable to evidence any action.

Difficult findings are not a failure, they are a starting point for prevention, prioritisation, and improvement.

Absenteeism is often a symptom of underlying work-related issues, not an isolated problem. Common drivers include sustained workload pressure, poor role clarity, ineffective management practices, lack of control, and poorly managed change.

A psychosocial risk assessment helps reduce absenteeism by:

• Identifying the work-related factors most strongly linked to stress, burnout, and sickness absence
  
• Showing where risks are concentrated across teams, roles, or working patterns
  
• Providing evidence to prioritise changes that reduce strain and support recovery
  
  

Rather than reacting once absence levels rise, the assessment enables organisations to intervene earlier, addressing the root causes that contribute to stress-related absence.

 Over time, organisations that use psychosocial risk assessments to improve how work is designed and managed typically see:

• Fewer stress-related absences
  
• Reduced short-term sickness linked to workload and fatigue
  
• Improved consistency in attendance
  
• More sustainable performance
  

By improving the conditions in which people work, the assessment helps prevent avoidable absence rather than simply managing its consequences.

No. In practice, a psychosocial risk assessment is modest in cost compared to the risks and costs it helps prevent.

The investment is typically small when set against:

• The cost of sickness absence and presenteeism
  
• The cost of voluntary employee turnover
  
• Management time spent reacting to issues after they escalate
  
• Potential legal, regulatory, or reputational exposure
  
  

Because the assessment is structured, time-bound, and focused on gathering precise, actionable data, it avoids the inefficiency and cost of unfocused wellbeing initiatives or repeated engagement surveys with limited impact.

More importantly, the assessment helps organisations prioritise action, ensuring resources are spent where they will have the greatest effect, rather than spread thinly across multiple initiatives.

In short, the question is rarely whether organisations can afford to conduct a psychosocial risk assessment, but whether they can afford not to.

Yes. We recognise that non-profits, charities, and other mission-driven organisations often operate with tighter budgets while facing significant psychosocial risks.

We offer preferential pricing for eligible organisations in these sectors, designed to make psychosocial risk assessment accessible without compromising quality or rigour.

If you are a non-profit, charity, or charitable organisation, please get in touch to discuss your needs and eligibility, and we will explore the most appropriate and cost-effective option for your organisation.

Psychosocial risk assessment aligns directly with established health and safety management systems and uses the same risk management principles applied to physical hazards.

It fits naturally within existing frameworks by: 

•  Identifying psychosocial hazards alongside physical, chemical, and ergonomic risks
•  Assessing risk using recognised criteria such as likelihood and severity
•  Supporting the selection and implementation of proportionate control measures
•  Providing documented evidence for governance, audits, and inspections

The assessment can be integrated into current policies, risk registers, and review cycles without creating parallel systems. It complements existing processes such as incident reporting, audits, management reviews, and continuous improvement activities.

In organisations operating formal management systems (for example, those aligned with international standards), psychosocial risk assessment strengthens the system by ensuring psychological health is managed with the same rigour as physical safety.

In short, it enhances what is already in place rather than replacing it, helping create a more complete and defensible approach to workplace risk management.

A psychosocial risk assessment complements and strengthens your existing risk assessment portfolio by extending it into an area that is already covered by employers’ legal duty of care but often under-served. It allows you to offer a more complete, integrated view of workplace risk, addressing not only physical, chemical, and ergonomic hazards, but also work-related psychological risks.

By adding psychosocial risk assessment to your services, you:

• Close a recognised compliance gap for clients
  
• Align your offering with international standards such as ISO 45003
  
• Increase the strategic relevance of your services to senior stakeholders
  
• Move from reactive issue management to proactive risk prevention
  

Rather than replacing existing assessments, psychosocial risk assessment enhances them by addressing the organisational and work-design factors that often sit behind recurring incidents, absence, and performance issues.

The HSE Management Standards Indicator Tool is a valuable starting point and has helped many organisations begin to explore work-related stress. However, it was designed primarily as a screening and benchmarking tool, not as a comprehensive psychosocial risk assessment aligned with current best practice and international standards.

Dharma’s psychosocial risk assessment builds on this foundation by:

• Assessing a broader range of psychosocial hazards beyond stress alone
  
• Providing clearer links between identified risks and practical control measures
  
• Supporting structured risk evaluation and prioritisation, not just scoring
  
• Aligning with ISO 45003 and modern psychosocial risk management frameworks
  
• Producing documentation that supports governance, audits, and regulatory scrutiny
  
  

While the HSE tool helps you identify areas of concern, Dharma’s assessment helps you understand the underlying organisational factors, assess risk more robustly, and take proportionate, evidence-based action.

Many organisations use both, starting with familiar tools, then moving to a more comprehensive assessment to strengthen their duty of care and risk management maturity.

The psychosocial risk assessment is aligned with the principles and requirements of ISO 45003, the international standard for managing psychological health and safety at work.

ISO 45003 does not prescribe a single tool or survey. Instead, it sets out expectations for how organisations should identify psychosocial hazards, assess risks, implement control measures, and review effectiveness as part of a wider occupational health and safety management system.

This assessment supports ISO 45003 alignment by:

• Identifying recognised psychosocial hazards related to work design, organisation, and management
  
• Using a structured, evidence-based risk assessment methodology
  
• Supporting prioritisation and proportionate control measures
  
• Producing documented outputs that integrate into existing health and safety management systems
  
  

When used as part of a broader management approach, the assessment provides organisations with a practical and defensible way to demonstrate alignment with ISO 45003 expectations.

Voluntary turnover is rarely caused by a single issue. It is usually the result of persistent, work-related factors such as unmanaged workload, poor leadership practices, lack of role clarity, limited development opportunities, or ineffective handling of change.

A psychosocial risk assessment helps reduce voluntary turnover by:

•  Identifying the underlying work conditions that drive disengagement and attrition
•  Showing where risks are concentrated across roles, teams, or functions
•  Providing evidence to prioritise changes that have the greatest impact on retention

Rather than relying on exit interviews or assumptions after people have already left, the assessment allows organisations to intervene earlier, addressing the root causes that influence employees’ decisions to stay or leave.

Over time, organisations that use psychosocial risk assessments to improve how work is designed and managed typically see:

•  Improved engagement and trust
•  Reduced burnout and presenteeism
•  Greater role clarity and fairness
•  More sustainable performance

In short, by improving the conditions in which people work, the assessment supports retention through prevention, not reactive fixes.

Employee engagement is strongly influenced by how work is designed, managed, and experienced. A psychosocial risk assessment helps improve engagement by identifying the work-related factors that either enable or undermine it.

The assessment provides insight into areas such as workload balance, role clarity, leadership practices, participation, recognition, and communication,  all of which are core drivers of engagement.

By using the results to:

• Address root causes of disengagement rather than symptoms
  
• Improve fairness, clarity, and consistency in how work is managed
  
• Strengthen trust through evidence-based decision-making organisations create conditions where engagement can grow naturally and sustainably.

Unlike engagement surveys alone, which describe how people feel, a psychosocial risk assessment helps organisations understand why they feel that way and what needs to change. When employees see that feedback leads to tangible improvements, confidence and engagement typically increase over time.

The assessment improves engagement by improving the quality of the work environment, not by adding another engagement initiative.

Employee engagement surveys and psychosocial risk assessments serve different but complementary purposes.

Engagement surveys are designed to capture how employees feel at a particular point in time,  for example, levels of motivation, satisfaction, or commitment. They are valuable for tracking sentiment and trends, but they do not assess risk in the health and safety sense.

A psychosocial risk assessment focuses on identifying and evaluating work-related factors that may cause psychological harm, such as workload design, role clarity, management practices, control, and organisational change. It examines the conditions of work that create risk or protection, rather than perceptions alone.

In simple terms:

• Engagement surveys describe outcomes
  
• Psychosocial risk assessments identify causes
  
  

Organisations that rely solely on engagement data may see warning signs but lack the structured insight needed to take proportionate, defensible action. A psychosocial risk assessment provides that structure, helping translate engagement findings into clear risk controls and preventative measures.

Many organisations use engagement surveys alongside psychosocial risk assessments to gain both insight and assurance.

Absenteeism is often a symptom of underlying work-related issues, not an isolated problem. Common drivers include sustained workload pressure, poor role clarity, ineffective management practices, lack of control, and poorly managed change.

A psychosocial risk assessment helps reduce absenteeism by:

• Identifying the work-related factors most strongly linked to stress, burnout, and sickness absence
  
• Showing where risks are concentrated across teams, roles, or working patterns
  
• Providing evidence to prioritise changes that reduce strain and support recovery
  
  

Rather than reacting once absence levels rise, the assessment enables organisations to intervene earlier, addressing the root causes that contribute to stress-related absence.

Over time, organisations that use psychosocial risk assessments to improve how work is designed and managed typically see:

• Fewer stress-related absences
  
• Reduced short-term sickness linked to workload and fatigue
  
• Improved consistency in attendance
  
• More sustainable performance
  

By improving the conditions in which people work, the assessment helps prevent avoidable absence rather than simply managing its consequences.

If the goal is to obtain precise, defensible, and actionable data, then structured employee input through surveys is essential.

Psychosocial risks relate to how work is experienced. While organisational data and qualitative insights can provide useful context, they cannot replace systematically collected employee data when it comes to accurately identifying risk levels, prioritising hazards, and determining where action is genuinely required.

A well-designed psychosocial risk assessment survey:

• Focuses only on validated psychosocial risk factors
  
• Avoids generic or repetitive engagement questions
  
• Produces data that can be analysed, prioritised, and translated into specific control measures
  
• Provides clear evidence to support decision-making and regulatory assurance
  
  

Survey fatigue is often a symptom of poorly designed or unfocused surveys, not of the assessment itself. When employees understand that the data will lead to tangible changes in how work is designed and managed, participation and data quality improve significantly.

If organisations want reliable insight that leads to targeted action, not assumptions, structured employee surveys remain the most effective and credible method.

ISO 45003 is the international standard that provides guidance on managing psychosocial risks and promoting psychological health and safety at work.

It focuses on how work is designed, organised, and managed, helping organisations identify and control factors that can negatively impact mental health, wellbeing, and performance.

Successful implementation of ISO 45003 starts with a structured psychosocial risk assessment, followed by proportionate action and ongoing monitoring. Organisations benefit from expert guidance to interpret findings, prioritise risks, and embed psychosocial risk management into existing systems.

Dharma is certified by the British Standards Institution as an ISO 45003 Associate Consultant, supporting organisations to apply the standard in a practical, defensible way.

ISO 45003 itself is not law, but it reflects how employers are expected to meet their existing legal duty of care under UK health and safety legislation.

The standard aligns closely with regulatory expectations around risk assessment, prevention, and management of work-related stress and psychosocial hazards.

A psychosocial risk assessment is central to ISO 45003. It provides the evidence organisations need to identify psychosocial hazards, understand levels of exposure, and prioritise action.

Without a robust assessment, it is difficult to demonstrate that psychosocial risks are being managed in line with the standard.

ISO 45003 is a guidance standard and does not require formal organisational certification. Instead, it supports organisations in strengthening their health and safety management systems.

Many organisations choose to align with ISO 45003 to demonstrate best practice, improve governance, and provide defensible evidence of how psychosocial risks are managed.