5 Myths About ISO 45003 That HR and EHS Still Believe

ISO 45003 is not a workplace happiness brochure. It is the management-system expression of a hard operational truth, which is that workload, control, support, relationships, role clarity, and change can become hazards when leaders leave them unmanaged.

Many organizations hear the words psychosocial risk and immediately reach for a survey, a poster, or a wellness vendor. That reaction looks active, but it often stops at symptoms while the schedule, the role split, the decision rights, and the escalation path remain untouched. Across 25+ years in executive EHS roles, Andreza Araújo has seen that pattern repeat when leaders want a visible answer before they are willing to change the work itself.

In The Illusion of Compliance, Andreza Araújo argues that paperwork can look complete while the field still absorbs the risk. ISO 45003 exposes the same trap. If HR collects the form, EHS files the report, and operations keeps the same workload logic, the organization produces evidence without control.

That is why the comparison between psychosocial hazard assessment, stress survey, and EAP matters. The tools are not interchangeable, and once leaders mix them up, they start solving the wrong problem with the wrong layer of response.

Why ISO 45003 gets reduced to paperwork

ISO 45003 is often reduced to paperwork because paperwork is easy to assign and easier still to audit. A policy can be approved in a meeting, a survey can be launched in a week, and a training deck can be delivered without touching the operating model. That gives leaders a feeling of progress, although it leaves the psychosocial hazard where it started, inside the way work is actually organized.

The standard does not say that people should be tougher. It says organizations should identify psychosocial hazards and manage the risk. That distinction matters because the hazard is usually structural. It sits in production peaks, role conflict, customer abuse, impossible deadlines, night work, weak support, or change that arrives without enough time for people to absorb it.

The HSE Management Standards and EU-OSHA ESENER both point in the same direction. Workload, control, support, relationships, role, and change are not morale topics. They are operating conditions, which means the control question belongs in line management, operations, and governance, not only in HR.

Andreza Araújo has made that point in more than 250 cultural transformation projects. The organizations that improved did not start by making people more resilient. They started by changing the conditions that made resilience a substitute for design.

Myth 1: ISO 45003 is an HR standard

This myth is common because HR usually manages surveys, wellbeing campaigns, and support programs. Those functions are useful, but they are not the whole control system. If HR is the only owner, the company turns psychosocial risk into a people topic, when the actual source is often a work-design decision made by operations, finance, or the line leader.

ISO 45003 belongs in HR, EHS, operations, and occupational health at the same time. HR sees absence, turnover, conflict, and complaint patterns. EHS sees incident precursors, unsafe decisions, and field drift. Operations controls the staffing model, the production target, and the schedule that create pressure. Occupational health sees fit-for-work limits and recovery boundaries. No single function sees the whole exposure.

In Safety Culture: From Theory to Practice, Andreza Araújo shows that culture changes when leadership behavior changes, not when one department starts sending more messages. The same logic applies here. If the line leader keeps the workload, while HR keeps the survey, and EHS keeps the poster, the risk survives the organizational chart.

The practical fix is a shared ownership model with named accountabilities. HR can own the listening route, but operations must own the workload decision, EHS must own the hazard logic, and senior leadership must own the tradeoff when schedule pressure conflicts with safe capacity. That is how ISO 45003 becomes operational instead of ceremonial.

Myth 2: A stress survey is the diagnosis

A stress survey can be useful, but it is not a diagnosis. It captures a moment, not the whole system. A high score can point to a problem, yet the score alone cannot tell leaders whether the main driver is role ambiguity, customer aggression, overtime, change saturation, supervisor behavior, or a mix of all four.

That is why a survey must sit beside other evidence. Turnover, absenteeism, overtime, first aid patterns, complaint logs, conflict escalations, and qualitative field notes give the survey context. Without that second layer, the organization ends up managing sentiment instead of hazard structure.

The article on workload calibration shows the same principle from another angle. If demand, control, and recovery are not calibrated, a survey only tells you that the system is already hot. It does not tell you where the heat is entering.

Andreza Araújo’s advice in this area is simple and strict. Use surveys as one instrument, not as the instrument. In more than 250 cultural transformation projects, the useful turning point always came when leaders stopped asking, "What did the survey say?" and started asking, "Which decision in the system created this pattern?"

Myth 3: Training and resilience messaging will fix it

This myth survives because training is visible and easy to fund. If the company runs a session on stress management, it can say it acted. The gap is that training does not change a schedule whose workload keeps expanding, a role that remains ambiguous, or a supervisor whose only answer to overload is, "push through."

Training has value when people need language, awareness, or early recognition. It does not have value as a substitute for redesign. A worker who knows the signs of overload still cannot control a shift pattern, a surge in customer abuse, or a repeated emergency response cycle that leaves no recovery time.

In A Ilusão da Conformidade, Andreza Araújo warns that a system can look correct because people have attended, signed, and acknowledged, while the actual exposure remains untouched. Psychosocial risk follows the same pattern. A resilience seminar may improve the tone of the conversation, but it will not fix the schedule whose shape is creating exhaustion.

James Reason’s work on latent failures is useful here because it keeps the discussion on the system that shaped the behavior. The person who looks tired is not the root explanation. The root explanation sits in the earlier decisions that made tiredness predictable.

Myth 4: EAP is the control

EAP is important, but it is not the control. It is a support route for people who need help, and it should remain available. Still, if the organization uses EAP as the main response to psychosocial risk, it has already moved too late and too far downstream.

Support without upstream change becomes a repair service for a system that keeps producing the same strain. That is why EAP should sit beside work design controls, not instead of them. If people are calling because workload, role conflict, harassment, or impossible deadlines keep repeating, the organization is treating the symptom while preserving the cause.

The link with psychosocial risk governance is direct. Governance fails when HR handles support, EHS handles records, and leaders keep the work design decisions that generate demand. ISO 45003 is useful exactly because it pushes those decisions back into the management system.

Andreza Araújo has said in many settings that safety and mental health need the same discipline: clear ownership, visible escalation, and decisions that move upstream. In Antifragile Leadership, that idea becomes practical, because a capable system does not wait for collapse before it improves the design.

Myth 5: Silence means the risk is under control

Silence is one of the most dangerous false signals in psychosocial risk. People may not complain because they fear retaliation, because they think nothing will change, or because they have already normalized overload. A quiet site can be a healthy site, but it can also be a site where people have stopped believing that speaking up matters.

That is why silence must be read together with other signals. Unplanned absence, conflict spikes, late deliverables, quality escapes, supervisor burnout, and repeated scope changes all tell a story that a single survey score cannot tell alone. EU-OSHA and the HSE both treat these organizational conditions as part of the risk picture, which is exactly why silence is not proof of control.

Andreza Araújo’s experience across 30+ countries makes the pattern easy to recognize. Where leaders punish bad news, risk disappears from the report and stays in the work. Where leaders ask for the signal and then change the plan, people speak earlier and the system gets smarter.

That is also the bridge to workload calibration meetings. The meeting matters less than the decision it forces. If the decision does not change workload, role clarity, support, or change management, the silence returns quickly.

What HR and EHS should do now

Start by naming the psychosocial hazards in work terms, not in mood terms. Use the language of workload, control, support, relationships, role, and change, because those words are close to the decisions that operations can actually change. Then connect the survey results to field evidence, so the conversation moves from sentiment to structure.

Next, create a shared review route that includes HR, EHS, operations, and occupational health. The group should look at the last ninety days of overtime, turnover, absenteeism, complaint patterns, conflict cases, and any serious incidents that carried psychosocial pressure in the background. The question is not whether people are tough enough. The question is whether the current work design is asking them to absorb more than it should.

Then write one short rule for line leaders: if workload, role clarity, or change management creates predictable strain, the issue is not an individual weakness. It is a management decision. That is the level at which ISO 45003 becomes real, because the standard only helps when leaders accept that psychosocial risk is part of the work system, not a side note to it.

If you want the deeper playbook, Andreza Araújo’s Safety Culture Diagnosis and the resources at Andreza Araújo's store help leaders move from diagnosis to action without turning the topic into corporate theater.