PsychSecure FAQ: psychosocial hazards for Australian employers

Answer-first question-and-answer pairs written for an employer who is learning the terms, not fluent in them. Each answer is self-contained so it survives being lifted out of context by a search engine or AI answer engine.

1. What are psychosocial hazards, in plain English?

Psychosocial hazards are aspects of how work is designed, organised, or managed that can cause psychological or physical harm. Common examples include unreasonable workload, low job control, poor support, bullying, harassment, exposure to traumatic events, and role conflict. The point that trips most employers up is that these are about the work itself, not just about an individual’s resilience, so the fix usually means changing how the work is done rather than only offering counselling. Under Australia’s model work health and safety framework, employers are expected to manage these hazards with the same rigour as physical safety hazards.

2. Are psychosocial risk assessments actually mandatory for my business, or just good practice?

For most employers covered by the work health and safety laws, managing psychosocial risk is a legal duty, not optional best practice, and a risk assessment is the normal way you show you have done it. The duty is to identify the hazards, assess the risk, control it so far as is reasonably practicable, consult your workers, and review. A formal written assessment is how you evidence that you went through those steps. PsychSecure supports you to run and document that process; whether and how the duty applies to your specific business is something to confirm against the rules in your state and, where needed, with your own adviser.

3. Where do I even start if I have never done this before?

Start by identifying which psychosocial hazards realistically apply to your workplace, then check what you already have in place against them. You do not need a large WHS team to begin: a structured assessment that maps the recognised hazards, grades your existing controls, and lists the gaps gives you a defensible starting record and a plan. PsychSecure is designed to do exactly this for small and medium employers, delivering an assessment report and a prioritised 90-day plan within two business days. The aim is to move you from “we have a policy and not much else” to a documented, evidence-traced position.

4. Do our EAP, wellbeing program, and training already cover the duty?

An employee assistance program, wellbeing perks, and awareness training are useful, but on their own they are generally not enough to discharge the duty. The reason is that these are lower-order responses: they help people cope with the work rather than changing the work that is causing harm. Regulators increasingly expect employers to look first at higher-order controls, meaning changes to workload, job design, rostering, and management practice. PsychSecure helps you map your existing controls against the recognised hazards so you can see where you are relying on an EAP to do a job that work redesign should be doing.

5. What records and documentation do I actually need to keep?

You generally need a record of the hazards you identified, how you assessed the risk, the controls you chose, evidence that you consulted workers, a way to track the actions you committed to, and proof that you reviewed it over time. In practice this looks like a risk register, a consultation log, an action tracker, leadership reporting, and an evidence pack that an inspector or an insurer could read and follow. The honest test is whether someone outside your organisation could pick up the file and see that you took the duty seriously and acted on what you found. PsychSecure helps you create this defensible documentation in a form that drops straight into your due-diligence file.

6. What is “reasonable management action” and why does everyone mention it?

Reasonable management action is the idea that legitimate, fairly conducted management decisions are not themselves a psychosocial hazard that creates exposure for you, even if an employee finds them stressful. Things like performance management, reasonable direction about how work is done, or restructuring can be lawful and reasonable when handled properly. It is mainly a workers-compensation and bullying concept, and even where it applies it does not discharge your separate, continuing WHS duty to manage hazards across the workplace; the two run on different tracks. The phrase matters because the line between reasonable management action and a genuine hazard is exactly where disputes and claims turn. PsychSecure provides decision-support and documentation to help you show your management actions were considered and reasonable; it is not legal advice, so genuinely contested cases still warrant your own legal input.

7. Is any of this actually being enforced, or is it just words on paper?

Enforcement of psychosocial duties is increasing, and 2026 is widely described in WHS and legal commentary as the year the focus shifts from education to active enforcement. Improvement and prohibition notices and significant penalties are available enforcement tools, and several regulators have signalled more active workplace checks. The practical takeaway is that “no one is checking” is no longer a safe assumption, and the cost of having nothing on file rises as scrutiny rises. PsychSecure exists to help you have a defensible record before, rather than after, anyone asks to see it.

8. Can my directors or I be personally fined or prosecuted?

Yes, officers such as directors can carry a personal due-diligence duty under the work health and safety framework, which is separate from the organisation’s own duty. That means an officer can be expected to show they took reasonable steps to understand the psychosocial risks and to see that the business had appropriate resources and processes in place to manage them. This is why a documented assessment and action plan matters at board level, not just operationally: it is the evidence an officer can point to. PsychSecure helps create that officer-facing evidence; the precise scope of personal liability is a legal question best confirmed with your own adviser.

9. We ran a survey and found problems. What do we do now?

Once a survey or assessment surfaces problems, the duty is to act on what you found, prioritise the higher-risk issues, choose controls, assign owners, and track the actions to completion. Many employers hesitate to run a survey precisely because they fear surfacing issues they then cannot show they addressed. The more defensible position, though, is usually to identify a hazard and track how you responded to it, rather than leave a known issue without a recorded response. The fix is a clear action tracker tied to named owners and review dates. PsychSecure is built around turning assessment findings into a prioritised, tracked plan, so the survey becomes the start of a defensible record rather than a liability.

10. What does this cost, and what do I get for it?

PsychSecure starts at $4,500 plus GST for a full psychosocial-hazards assessment that, for most small and medium employers, is the whole job. You get a board-readable assessment report, the recognised psychosocial hazards mapped and graded against your own evidence, your existing controls graded adequate, partial, or absent, and a prioritised 90-day plan with named owners, delivered within two business days. That one-off assessment is the price we quote today. If your organisation wants ongoing maintenance of the record after the assessment, we can talk through what that looks like on a short call, but there is no obligation beyond the assessment itself.

11. Do I need a senior WHS practitioner involved, or can I do this myself?

Most small and medium employers can run and own the assessment internally, with PsychSecure supporting the workflow and documentation. The assessment is built for self-owned interpretation: you get the report, the gap analysis, and the plan, and you act on it. Where an outside party such as a board or an insurer wants independent assurance on the record, you can engage your own suitably qualified adviser to review it. The primary work health and safety duty stays with you; PsychSecure helps you evidence that you have taken it seriously.

12. What is PsychSecure, and what is it not?

PsychSecure is a managed service that supports employers to implement and maintain their psychosocial risk-management workflow and to create defensible documentation aligned with applicable WHS guidance. It is decision-support and workflow automation: it helps you assess hazards, grade controls, plan actions, and keep an evidence trail your board or an inspector can follow. It is not legal advice, it is not a clinical diagnostic tool, and it does not by itself make your organisation compliant. The primary work health and safety duty stays with you; PsychSecure helps you evidence that you have taken it seriously, quickly and in a form that holds up.