HR Business Partner in 90 Days: Psychosocial Risk Plan

ISO 45003:2021 made psychosocial risk a management-system issue, but many companies still leave the first 90 days to good intentions and scattered HR initiatives. This guide gives the HR business partner a practical first-quarter plan for turning workload, conflict, role ambiguity, and manager behavior into visible controls.

Why should HR own part of psychosocial risk?

HR should own part of psychosocial risk because the strongest causes often sit inside job design, manager routines, staffing decisions, and conflict handling, not inside the medical department. ISO specifies in ISO 45003:2021 that psychological health and safety at work requires guidelines for managing psychosocial risks, which places the topic beside occupational health and safety rather than outside it.

That shift matters because a psychosocial program handled only as wellness usually measures participation, not exposure. As Andreza Araujo argues in Safety Culture: From Theory to Practice, culture is proven by routine decisions, especially the small decisions leaders make when production, staffing, and human limits collide. HR has access to those decisions before they become absence, burnout, or a formal complaint.

The HR business partner does not replace EHS. The role is to translate work design into organizational action, while EHS keeps the risk process disciplined through hazard identification, risk assessment, control verification, and management review. When those two functions work separately, psychosocial risk becomes a campaign; when they work together, it becomes a controllable exposure.

1. What should the HR business partner learn in week 1?

The first week should produce a risk map of the work, not a calendar of awareness activities. By day 5, the HR business partner should know the 3 highest-pressure departments, the 3 managers with repeated people-risk signals, and the 3 work routines where demand, role conflict, or harassment risk is already visible.

The fastest source is not a new survey. Start with existing evidence: sickness absence, turnover, overtime, grievance logs, exit interviews, incident reports, and EHS observations. HSE reports that its Management Standards cover 6 key areas of work design, including demands, control, support, relationships, role, and change, which gives HR a better first lens than generic well-being language.

This is where Andreza Araujo's experience is useful. Across 25+ years leading EHS in multinationals, she identifies that organizations often discover cultural risk after the damage is already counted. The practical move is to treat HR signals as precursor data, much like near-miss quality reveals whether the system is learning or only collecting volume.

In week 1, build a one-page map with departments, headcount, overtime exposure, current conflicts, manager changes, and open complaints. The trap is to interview only senior leaders, because they often see policy while the workforce experiences workload and silence.

2. How should HR and EHS divide responsibilities?

HR and EHS should divide responsibilities by control ownership, because psychosocial risk has both organizational and safety-management dimensions. HR owns role clarity, manager capability, staffing, case handling, and employee relations, while EHS owns risk assessment method, control hierarchy, assurance, incident linkage, and the rhythm of review.

That split prevents two common errors. If HR owns everything, the plan becomes therapeutic and loses operational control. If EHS owns everything, the plan can become a form, whose language is technically correct but distant from how promotions, targets, reporting lines, and conflict actually work.

In more than 250 cultural transformation projects, Andreza Araujo observes that culture changes when ownership is placed where the decision is made. For role ambiguity, the owner may be the plant manager. For excessive workload, it may be workforce planning. For bullying complaints, it may be HR investigation with EHS involvement when the behavior increases safety exposure.

Use a simple RACI for 90 days: HR leads diagnosis of people signals, EHS validates the risk method, operations owns corrective actions, and senior leadership removes structural constraints. Without that split, psychosocial risk becomes everybody's topic and nobody's control.

3. What should happen in the first 30 days?

The first 30 days should convert scattered evidence into a ranked psychosocial risk register. A practical first version needs 5 columns: exposure, affected group, current controls, control owner, and verification date.

Do not start with a 40-question climate survey if managers already know where the pressure sits. The better sequence is evidence first, listening second, survey third. A survey can validate scale, but it should not be the first time the organization admits that demands, role conflict, or toxic leadership are risk factors.

Connect each exposure to a work-design cause. For example, 14 consecutive days with overtime in maintenance is not only a fatigue issue; it may also reveal planning failure, staffing shortage, and weak change management. The article on role ambiguity shows why vague responsibilities become a real exposure when pressure rises.

By day 30, the HR business partner should have interviewed at least 12 people across 3 levels, reviewed 12 months of absence and turnover data, and selected no more than 5 priority exposures. More than 5 priorities in the first cycle usually means the organization is avoiding the harder choice of where to act first.

4. What manager behavior should HR verify first?

HR should verify manager behavior that changes whether employees speak early or hide bad news. In psychosocial risk, the decisive behaviors are response to dissent, workload negotiation, conflict escalation, and how the manager reacts when an employee reports overload, harassment, fatigue, or a mistake.

ILO Convention 190, adopted in 2019, states that violence and harassment in the world of work can include behaviors that result in physical, psychological, sexual, or economic harm. That makes manager response a control issue, not merely a leadership style preference.

Araujo's book The Illusion of Compliance warns against policies that look complete while daily conduct contradicts them. The HR partner should test whether the anti-harassment policy survives the first uncomfortable conversation with a high-performing manager. If the company protects the result producer and silences the person reporting harm, the written policy has already failed.

Run 6 short field checks in the first month. Ask employees what happens after they disagree with a target, report disrespect, request staffing support, or refuse unsafe pace. Then compare answers by department, because the average score can hide a local pocket where fear is already established.

5. How do you turn psychosocial risk into controls?

Psychosocial controls must change the work condition that creates exposure. Training people to be resilient has limited value when the risk source is chronic understaffing, unclear authority, public humiliation, impossible deadlines, or a reporting process that punishes the messenger.

Use the same discipline applied to physical risk. If the exposure is excessive workload, the control may be staffing rules, workload caps, escalation triggers, and schedule redesign. If the exposure is conflict, the control may be a case triage protocol, independent investigation path, and manager consequence process. The article on toxic leadership traps explains why personality language can obscure a preventable organizational hazard.

During the PepsiCo South America tenure, where the accident ratio fell 50% in 6 months, Andreza Araujo learned that indicators move when leaders change the operating routine, not when they only repeat the value statement. The same principle applies here: a psychosocial control must be visible in staffing, meetings, escalation, and consequence.

By day 45, choose 3 controls that can be verified weekly. Examples include a workload escalation threshold after 10 overtime hours in a week, a 48-hour triage rule for harassment allegations, and a manager check-in script for employees returning from stress-related absence.

Each month without a control owner allows the same exposure to appear as turnover, absence, conflict, and safety silence, while the organization keeps treating each symptom as a separate HR case.

6. What should months 2 and 3 prove?

Months 2 and 3 should prove that controls are being used, not only approved. The HR business partner should show at least 4 evidence streams: manager action logs, exposure trend, employee feedback, and EHS verification of whether the risk remains controlled.

This is the point where many programs drift. A steering committee approves a beautiful plan, managers receive training, and the dashboard celebrates completion. Yet completion does not prove risk reduction. If workload stays unchanged, if silence persists, or if complaints move underground, the program is administratively active and operationally weak.

Link the psychosocial register to EHS governance. A production area with repeated overload may also show more shortcuts, skipped pre-task checks, or low-quality observations. That connection gives HR a stronger business argument, because psychosocial risk is not separate from speak-up and safety climate metrics.

By day 90, the minimum proof should include 3 closed actions with evidence, 3 open actions with named owners, and 1 executive decision that removed a structural cause. Without that executive decision, the first quarter probably solved cases, not risk.

7. What mistakes should HR avoid in the first 90 days?

HR should avoid 4 mistakes in the first 90 days: treating psychosocial risk as wellness, separating it from EHS governance, over-surveying before acting, and protecting managers whose behavior creates exposure.

The wellness mistake is attractive because it is easier to buy than redesign. A meditation app, webinar series, or awareness month can support employees, but it cannot compensate for impossible workload, chronic ambiguity, or intimidation. That is why the article on workplace mental health campaigns separates communication from prevention.

The governance mistake is more subtle. HR may run cases confidentially, while EHS runs risk reviews publicly, and operations never sees the combined pattern. The result is a company that has many interventions and no shared picture of exposure.

The manager-protection mistake is the most damaging. When a manager repeatedly produces absence, turnover, complaints, and silence, HR should stop describing the issue as interpersonal tension. It is a control failure with a human source, and it needs consequence, coaching, redesign, or removal depending on severity.

Comparison: campaign logic vs risk-control logic

Conclusion: the first 90 days decide credibility

The HR business partner earns credibility in psychosocial risk by proving that the company can identify exposure, name owners, verify controls, and correct manager behavior before harm becomes normalized. 90 days is enough to build the first operating rhythm, although it is not enough to declare cultural victory.

If your leadership team needs to integrate HR, EHS, and operational governance around psychosocial risk, Andreza Araujo can support the diagnosis and implementation through safety culture consulting at Andreza Araujo.