ISO 45003 Explained: 4 Work Factors That Change Psychosocial Risk Controls
ISO 45003:2021 connects psychological health with work design, leadership ownership, and verifiable controls for psychosocial risk.

Key takeaways
- 01Treat psychosocial risk as a work-condition issue, not only an individual wellness issue.
- 02Review workload, pace, role clarity, decision authority, relationships, and organizational change.
- 03Assign the operational leader who can change the condition as the control owner.
- 04Test whether the response changes exposure and control effectiveness, rather than only adding training.
- 05Use ISO 45003:2021 with ISO 45001 processes for participation, planning, review, and improvement.
Psychosocial risk becomes difficult to manage when an organization treats it as a wellness topic instead of a work-design problem. ISO 45003 gives safety and operational leaders a common language for identifying the conditions that can harm psychological health at work.
ISO 45003:2021 is guidance for managing psychosocial risks within an occupational health and safety management system based on ISO 45001. It helps an organization identify work conditions that may cause psychological harm, assess how those conditions are created, and improve controls through the same management discipline used for other occupational risks.
What does ISO 45003 mean in practice?
ISO 45003 does not turn every difficult day into a clinical diagnosis. It asks a more practical question: which features of the work, the organization, or the relationship between people create avoidable exposure?
That distinction matters because a stress-awareness campaign cannot correct an impossible workload, unclear authority, repeated incivility, or a shift pattern that prevents recovery. The psychosocial exposure explainer is useful for separating the condition from the individual reaction.
Which four work factors should leaders examine?
1. Workload and pace
Workload becomes a psychosocial risk when volume, urgency, staffing, or recovery time remain incompatible with the work that must be completed. A team may still meet a short-term target, although the operating pattern can create errors, fatigue, withdrawal, or unsafe shortcuts over time.
Leaders should compare planned work with actual interruptions, overtime, rework, staffing gaps, and missed recovery periods. The question is not whether employees are resilient. It is whether the work system keeps demanding more than the available capacity can safely absorb.
2. Role clarity and decision authority
People face a different exposure when they are accountable for an outcome but cannot control the resources, sequence, or escalation route. Unclear priorities then become personal pressure, especially when two managers give incompatible instructions.
ISO 45003 becomes operational when leaders name who can change the plan, who can pause the work, and who must respond when the original assumption no longer holds. The workload-control article shows why capacity and authority need to be reviewed together.
3. Relationships and unacceptable conduct
Psychosocial risk can be created by bullying, harassment, humiliation, exclusion, or repeated incivility, even when the formal procedure appears complete. The relevant control is not a statement that respect matters. It is a credible route for reporting, investigating, protecting people from retaliation, and correcting the condition.
The workplace incivility guide helps teams distinguish a difficult interaction from a repeated pattern that changes whether people can work safely and speak honestly.
4. Change, isolation, and support
Organizational change, remote work, isolation, night work, and weak manager support can alter exposure without changing a job description. A control review should therefore ask what changed in the work and whether the support available still matches the new demand.
This is where psychological health connects with safety leadership. The leader does not need to become a clinician, but must recognize when a work condition needs redesign, when a concern needs escalation, and when an employee needs professional support.
How is ISO 45003 different from a wellness program?
| Question | Wellness activity alone | ISO 45003-oriented control |
|---|---|---|
| Where is the problem? | Inside the individual | In the interaction between people and work conditions |
| What changes? | Awareness, coping, or voluntary support | Work design, authority, staffing, conduct, and escalation |
| Who owns the response? | Often HR or the provider | The operational leader who controls the condition |
| How is progress checked? | Participation or satisfaction | Evidence that exposure and control effectiveness changed |
A wellness program can be useful, particularly when it gives people access to support. It becomes insufficient when the organization uses participation to imply that the work itself is safe. Andreza Araujo’s book The Illusion of Compliance offers a relevant warning: documented activity is not the same as a controlled condition.
When should a leader use ISO 45003?
Use it when psychosocial concerns are recurring, when absence or turnover is concentrated in a team, when people report impossible deadlines, or when safety concerns are raised but not acted upon. The standard is also useful during restructuring, major technology changes, new shift patterns, and periods of sustained production pressure.
Start with one work condition rather than a broad survey. Name the exposure, identify the decision owner, collect evidence from the people doing the work, and test whether the proposed control changes the condition. If the response only adds a training module, the control has probably remained too far from the source of risk.
What should an ISO 45003 review produce?
A useful review produces a short chain of evidence. It identifies the psychosocial hazard, the work condition that creates it, the people exposed, the control owner, the escalation threshold, and the evidence that will show whether the condition improved.
ISO 45003:2021 is strongest when it is connected to the existing ISO 45001 management system rather than isolated as a separate campaign. That connection keeps psychological health inside risk assessment, worker participation, operational planning, leadership review, and continual improvement.
Where should a team begin?
Choose one recurring condition that leaders can change within the next operating cycle. A practical first review might examine workload and decision authority in a shift team, then compare planned staffing with interruptions, overtime, unresolved concerns, and the time required to escalate a risk.
The goal is not to label people as resilient or fragile. It is to make the work condition visible enough that the accountable leader can change it, verify the result, and reopen the decision when new evidence appears.
ISO 45003 is therefore best understood as a bridge between occupational safety management and psychological health. It moves the conversation from generic wellness language toward identifiable work conditions, accountable decisions, and controls that can be checked.
Frequently asked questions
What is ISO 45003:2021?
Is ISO 45003 a wellness program?
Who owns psychosocial risk controls?
How should a company start using ISO 45003?
How does ISO 45003 connect with ISO 45001?
About the author
Andreza Araújo
Safety Culture Expert | Senior EHS Executive
Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.
- Civil & Safety Engineer (Unicamp)
- M.A. Environmental Diplomacy (University of Geneva)
- Sustainability Cert (IMD Switzerland)
- People Management & Coaching (Ohio University)
- UN Paris speaker representative for Brazil
- ILO Turin speaker
- LinkedIn Top Voice
- Indra Nooyi PepsiCo CEO recognition (2x)
Documentaries
Watch Andreza's documentaries
Three productions on safety culture, organizational failure and the human lessons behind major disasters.
Podcasts
Listen to Andreza's podcasts
She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.