How to Build a Psychosocial Risk Register in 30 Days

A psychosocial risk register is a practical record of work-design conditions that can harm mental health, decision quality, attendance, or safe performance. It connects evidence, exposed groups, current controls, missing controls, owners, deadlines, and review dates so psychosocial risk becomes managed work, not a wellness slogan.

Many organizations already have surveys, EAP reports, absence dashboards, exit interviews, engagement comments, and manager anecdotes. The weakness is that these signals often sit in different systems, which means leaders discuss stress, burnout, conflict, and workload without translating them into risk ownership.

The thesis of this guide is direct. A psychosocial risk register is useful only when it changes work design. If it only stores concerns, it becomes another file that confirms people are under pressure while leaving demand, control, support, relationships, role clarity, and change unmanaged.

What you need before starting

Before building the register, choose one pilot area and collect enough evidence to avoid guessing. Useful inputs include overtime, sickness absence, turnover, supervisor span, complaints, change calendars, incident patterns, accommodation requests, EAP themes where confidentiality allows aggregation, and interview themes from workers, supervisors, HR, and EHS.

ISO 45003:2021 gives guidance for managing psychological health and safety within an occupational health and safety management system, while the HSE Management Standards give managers a plain language lens through demands, control, support, relationships, role, and change. The register should translate those lenses into local evidence and local controls.

Across 25+ years in executive EHS roles and more than 250 cultural transformation projects supported by Andreza Araujo's team, one repeated lesson is that leaders underestimate signals they cannot see on a classic safety dashboard. Psychosocial risk needs the same discipline as any other exposure: source, affected group, control, owner, verification, and review.

Step 1: Choose one pilot area with visible pressure

Start with one department, shift, call queue, maintenance group, project team, logistics operation, or support function where pressure is already visible. Do not begin with the whole company. A small pilot gives enough detail to identify real work conditions instead of averaging every team into vague corporate language.

The best pilot is not necessarily the noisiest area. Choose the area where evidence converges, such as repeated overtime, high turnover, supervisor conflict, fast change, role confusion, customer abuse, rework, fatigue complaints, or declining reporting quality. If EHS and HR cannot name the pressure source, the register will start too abstract.

Verify the scope by asking one practical question. Can this team see something different in 30 days if leaders act? If the answer is no, narrow the pilot until work design, supervision, or escalation can realistically change.

Step 2: Separate symptoms from work sources

The second step is to keep symptoms and sources separate. Anxiety, fatigue, irritability, absence, conflict, and errors may be visible symptoms. The register should still ask which work condition is feeding them, because psychosocial risk management is not the same as diagnosing employees.

Use the six HSE factors as the first sorting lens. Demands may include volume, pace, emotional load, shift pattern, or impossible deadlines. Control concerns decision authority. Support concerns resources, manager response, information, and coaching. Relationships include conflict, bullying, harassment, and customer abuse. Role concerns unclear priorities or conflicting expectations. Change concerns timing, communication, and absorption capacity.

The related article on work-related stress risk and the six HSE factors gives the diagnostic language. The register adds ownership and closure, so the conversation moves from what people feel to what the organization will change.

Step 3: Define the minimum fields

A useful first register should fit on one screen. Use fields for risk source, evidence, exposed group, current control, missing control, risk owner, action owner, deadline, verification method, review date, and status. Add a confidentiality note when the evidence comes from sensitive health, complaint, or HR data.

Do not copy every survey comment into the register. A comment can support the evidence, but the register should record the pattern that leaders can manage. For example, write that production planners receive same-day priority changes without capacity review, rather than storing ten separate comments about stress.

The common mistake is building a register that looks impressive but cannot be maintained. If supervisors, HR business partners, and EHS managers need a training course just to update it, the tool will fail during the first busy month.

Step 4: Score exposure with evidence, not emotion

Score each item by exposure, severity, and control weakness. Exposure asks how many people or shifts face the condition and how often. Severity asks what harm could follow if the condition continues, including health, error, conflict, unsafe decisions, or absence. Control weakness asks whether current controls actually change the work source.

This is where many psychosocial programs become soft. Leaders may feel uncomfortable scoring stress or conflict, so they either avoid prioritization or rank everything as high. Neither choice helps. A controlled register should explain why one issue receives immediate leadership attention while another receives monitoring.

Use named evidence. An entry supported by three months of overtime, two turnover clusters, repeated supervisor concerns, and a change calendar has stronger weight than an entry based only on general mood. The scoring does not have to be perfect, but it has to be visible enough for leaders to challenge and improve it.

Step 5: Match controls to the source of risk

The fifth step is control selection. If the source is demand, the control may be staffing, sequencing, priority rules, break recovery, workload caps, or escalation thresholds. If the source is role ambiguity, the control may be decision rights, clearer approval paths, supervisor calibration, or conflict rules. If the source is relationships, the control may be conduct standards, reporting protection, investigation routines, or manager intervention.

Awareness campaigns rarely control the source by themselves. Training people to recognize stress while leaving the same staffing, targets, customer-abuse exposure, or change rhythm untouched only teaches the workforce that leaders can name the problem without changing the work.

Andreza Araujo's book Safety Culture: From Theory to Practice matters here because culture appears in what leaders reinforce and tolerate. If a manager praises resilience while accepting impossible deadlines, the control message and the production message are in conflict.

Step 6: Assign owners who can change conditions

Each register entry needs an owner with authority to change the condition. HR may coordinate the process, and EHS may structure the risk method, but the owner for excessive demand may be operations, workforce planning, customer service leadership, maintenance planning, or project management.

This distinction protects the register from becoming an HR repository. Psychosocial hazards often sit in work design, supervision, staffing, communication, and change governance. The owner should be close enough to those decisions to remove the exposure, not only close enough to record it.

For high-risk work, connect ownership to safety decisions. Cognitive overload, fatigue, fear of reporting, or role conflict can affect permit quality, handover quality, field verification, and stop-work behavior. That is why the register should link to routines such as safety decision logs when leadership choices are required.

Step 7: Build the first review cadence

Set a weekly review during the first 30 days. Keep it short and decision focused. Review new evidence, overdue actions, blocked controls, confidentiality concerns, and any item whose exposure is rising because staffing, targets, customer volume, change, or conflict has shifted.

The review should include HR, EHS, the relevant line owner, and occupational health where appropriate. It should not become a meeting where leaders ask for more data every week because they are avoiding a difficult decision. If the evidence is enough to test a control, test the control.

Use the same discipline described in a workplace mental health escalation protocol. The register is not a clinical triage tool, but it should know when work-related risk needs manager action, occupational health, HR investigation, or senior escalation.

Step 8: Verify whether controls changed the work

The final step is verification. A psychosocial risk action should not close because a workshop happened, a message was sent, or a policy was updated. It should close when evidence shows that the work condition changed or the exposure is under review with stronger controls.

Verification may include schedule data, overtime reduction, fewer same-day priority changes, improved supervisor response time, lower abusive-contact recurrence, clearer role decisions, worker interviews, or a targeted review of change load. Where confidentiality applies, use aggregated evidence and protect personal health information.

After 30 days, keep what worked and remove what did not. A register that never changes is probably ceremonial. A living register should show controls being tested, rejected, adjusted, and strengthened as leaders learn which work conditions are really driving harm.

Psychosocial risk register template

Final checklist for the first 30 days

• One pilot area is selected because evidence shows visible pressure.
• Symptoms are separated from work sources before controls are chosen.
• The register uses minimum fields that leaders can maintain during a busy week.
• Exposure is scored with evidence from data, interviews, and operational signals.
• Controls target work design, supervision, staffing, role clarity, relationships, or change load.
• Each item has an owner who can change the condition, not only record it.
• The weekly review makes decisions rather than asking endlessly for more data.
• Actions close only when verification shows that the exposure changed.

A psychosocial risk register is not a mental health dashboard. It is a management tool that asks whether the organization is willing to change the work conditions that create preventable harm.

For deeper work on safety culture, leadership routines, and psychosocial risk, explore Andreza Araujo's books and corporate programs at andrezaaraujo.com.