ISO 45003: the four psychosocial risks hiding in plain sight.

Most leaders don’t miss psychological risk because it’s invisible. They miss it because it shows up as something else – an absence pattern, a resignation, a complaint that seems unrelated to anything in particular.

Under Australian Work Health and Safety (WHS) law, that distinction doesn’t hold up. The law doesn’t separate a physical hazard from a psychological one – a stress injury is managed to the same standard as a trip hazard or faulty machinery. And enforcement is catching up to that principle: SafeWork NSW inspector visits are set to rise significantly under the 2024–26 Psychological Health and Safety Strategy, with a clear shift towards proactive checks rather than after-the-fact response.

So the signs below aren’t isolated issues. They’re hazard signals – and ISO 45003, the international guidance standard for managing psychosocial risk, names each one and prescribes exactly how to respond.

Sign one: unplanned absence creeping up

Sick days trending upward, but nothing “officially” wrong. This is often excessive job demands at work – workload, hours, or pace outpacing what’s sustainable.

ISO 45003 doesn’t treat this as an individual resilience problem. It requires job demands to be identified and assessed as a hazard in their own right, with control measures – workload redistribution, staffing review, hour limits – tracked and reviewed like any other risk control. The standard’s answer isn’t an EAP referral once someone’s struggling. It’s catching the demand imbalance before it produces the absence.

Sign two: good people leaving from one team, not others

Turnover clustering around a specific manager or department, while the rest of the business looks stable. This usually points to low job control or poor supervisor support.

The standard’s response is worker consultation as a control measure – asking a team directly what they’re experiencing, rather than relying on exit interviews after someone has already decided to go. Supervisor capability becomes something to monitor and address, not something to assume.

Sign three: friction and complaints spiking after a change

A restructure, a new system, or a leadership change, followed by a rise in grievances. ISO 45003 names this plainly: poorly managed organisational change.

The standard treats change management itself as a control measure. That means risk assessment before a change lands – not just a communications plan – so the psychological impact of the change is planned for alongside the business case, rather than dealt with once it’s already caused friction.

Sign four: people present but checked out

Attendance is fine, but output has dropped. This pattern often traces back to poor recognition and reward, or role ambiguity.

Rather than a one-off risk assessment, ISO 45003 builds in ongoing monitoring and review, so disengagement is caught as a live signal – before it becomes attrition, a workers’ compensation claim, or a regulator’s Improvement Notice.

The pattern behind the signs

Every one of these traces back to a hazard category the standard already names, with a control measure it already prescribes. ISO 45003 isn’t abstract theory. It’s a diagnostic lens for things leaders are already seeing.

Wellness perks and employee assistance programmes respond to symptoms. They don’t answer the question a regulator will actually ask, which is whether the underlying hazards were identified and controlled. That takes a system, not a perk.

Which changes the real question a business should be asking. Not “do we have a wellbeing programme?” – but “would our approach hold up against this framework if it were checked?”

Recognising the signs vs proving the response

Recognising these signs is a starting point. What follows is a question of independent verification: ISO 45003 itself isn’t a certifiable standard. It’s guidance, intended to be incorporated into an ISO 45001 occupational health and safety management system, which is the certifiable standard.

Once a psychosocial risk management system reflecting ISO 45003’s guidance is in place, the relevant question becomes whether that system can be independently verified. This is where Citation Certification’s role begins: assessing whether an ISO 45001 management system, with (ISO 45003 incorporated), genuinely meets the standard’s requirements.

Before that assessment can take place, a business needs the system itself. Responding to the signs above, running a diagnostic to identify where psychosocial hazards exist, building a tailored psychosocial management plan, and providing ongoing advice and confidential employee support through an Employee Assistance Program – is where Citation Safety’s psychosocial hazards management services come in.

Building the response and independently verifying it are two distinct undertakings, carried out by two distinct teams. Together, they’re what allow a business to move from stating that it takes psychological health seriously to demonstrating it.

Want to learn more about this topic?

We’re running a webinar on ISO 45003, unpacking how the standard’s guidance translates into a psychosocial risk management system that stands up to independent assessment.