Psychosocial Risks

ISO 45003 vs WHO Guidelines vs ILO C190

Compare ISO 45003, WHO mental health guidance, and ILO C190 to decide which reference should lead a psychosocial-risk program.

By 7 min read
corporate environment depicting psychosocial factors in iso 45003 vs who guidelines vs ilo c190 — ISO 45003 vs WHO Guidelines

Key takeaways

  1. 01Use ISO 45003 when psychosocial hazards need a management-system backbone with owners, controls, monitoring, and review.
  2. 02Use WHO mental health guidance when prevention, manager capability, worker support, and return-to-work decisions need the same program.
  3. 03Use ILO C190 when violence, harassment, intimidation, customer aggression, or retaliation risk is a credible work exposure.
  4. 04Do not let HR own the whole subject alone, because many psychosocial controls sit in operations, staffing, supervision, and work design.
  5. 05Build one governance model that lets EHS, HR, legal, and operations select the lead reference according to the exposure being controlled.

ISO 45003, the WHO mental health guidelines, and ILO C190 often appear in the same psychosocial-risk conversation, although they do not solve the same management problem. Treating them as interchangeable makes the program look wider while the work design, reporting route, and violence-prevention duties remain unclear.

The practical decision for an EHS manager or HR leader is which reference should lead. ISO 45003:2021 gives structure for managing psychosocial risks inside an occupational health and safety management system. The WHO guidelines on mental health at work, published in 2022, give evidence-based direction for prevention, protection, promotion, and support. ILO C190, adopted in 2019, focuses the organization on violence and harassment, including the psychosocial risks connected with those exposures.

Across 25+ years leading EHS in multinational operations, Andreza Araujo has seen that psychosocial-risk programs fail less from lack of concern than from poor method selection. The team picks a campaign when it needs a risk register, picks a survey when it needs supervisor redesign, or picks a policy when the real gap is retaliation fear. This comparison is written to prevent that mismatch.

Evaluation criteria for choosing the right reference

A useful comparison needs criteria that separate management-system discipline from health guidance and rights-based prevention. The first criterion is scope. Does the reference organize psychosocial hazards as part of occupational safety, worker mental health, or violence and harassment? The second is operating owner. Does the natural owner sit in EHS, HR, legal, operations, or an integrated committee with decision authority?

The third criterion is evidence. ISO 45003 pushes the company toward hazard identification, risk assessment, consultation, controls, monitoring, and improvement. WHO guidance pushes leaders to consider organizational interventions, manager training, worker participation, and support for people with mental health conditions. ILO C190 pushes the company to recognize violence and harassment as work-related risks that must be prevented, addressed, and not normalized.

The fourth criterion is field use. A plant manager needs to know what changes next Monday, not only which document sounds more complete. If the issue is role conflict, workload, isolation, traumatic exposure, bullying, customer aggression, or supervisor conduct, the leading reference should change because the control logic changes.

Andreza Araujo's book A Ilusao da Conformidade, glossed for English readers as The Illusion of Compliance, is useful here because a psychosocial-risk program can look mature on paper while workers still absorb impossible demands, vague accountability, and unsafe silence.

ISO 45003 works best when psychosocial risk needs system control

ISO 45003 is strongest when the organization already has or is building an occupational health and safety management system and needs psychosocial hazards to stop living outside that system. It gives leaders a way to manage workload, role clarity, leadership behavior, social support, remote work, traumatic exposure, and other psychosocial hazards through the same discipline used for physical risks.

The strength is integration. The EHS manager can connect psychosocial risk with ISO 45001 routines such as consultation, participation, risk assessment, controls, performance evaluation, management review, and continual improvement. That matters because psychosocial hazards are often treated as soft issues until they affect absence, turnover, conflict, error, or serious exposure.

Its weak point is that organizations can reduce ISO 45003 to a document set. A risk assessment, policy, and training module do not control excessive demand if staffing, shift design, supervisor targets, and escalation routes remain untouched. The standard gives the frame, but the company still has to redesign the work.

Use ISO 45003 as the lead reference when the main need is a repeatable management process. It fits well with building a psychosocial risk register, especially when the company wants owners, controls, review cadence, and evidence instead of scattered initiatives.

WHO guidelines work best when prevention and support need balance

The WHO guidelines on mental health at work, published in 2022, are strongest when leaders need to avoid the old mistake of treating workplace mental health only as counseling after harm. The guidance emphasizes prevention of risks, protection and promotion of mental health, and support for workers who live with mental health conditions.

This reference is valuable because it keeps the organization from pushing every problem into individual resilience. Manager training, organizational interventions, return-to-work support, and reasonable workplace action all matter when job demands, control, support, fairness, and role clarity are part of the exposure. It also helps HR and EHS speak the same language when the topic crosses clinical, organizational, and operational boundaries.

The weak point is implementation ownership. WHO guidance can become a health-promotion campaign if leaders do not translate it into work-design decisions. Posters about well-being do not reduce chronic overload, poor supervisor conduct, or moral distress created by impossible service targets.

Use WHO guidance as the lead reference when the organization must balance prevention with support. It fits cases such as return-to-work after mental health absence, manager capability, and the boundary between occupational risk control and individual care. The article on mental health return-to-work planning is a practical companion because support must be structured rather than improvised.

ILO C190 works best when violence and harassment are credible exposures

ILO C190 is strongest when the psychosocial-risk issue includes violence, harassment, intimidation, abuse, threats, gender-based harm, or customer aggression. It gives the organization a sharper lens for exposures that many companies hide inside broad words such as conflict, incivility, or conduct issue.

The value of C190 is that it forces prevention beyond a generic code of conduct. Violence and harassment can sit in reporting channels, contractor interfaces, field service routes, client-facing work, isolated work, travel, shift overlap, and supervisor power. When the company treats those exposures only as interpersonal problems, it misses work factors that increase likelihood and silence.

The weak point is that legal or policy ownership can dominate the response. A policy may be necessary, but it does not replace hazard identification, reporting protection, investigation quality, supervisor action, and controls for high-risk work groups. If the only answer is a rule, workers learn that the organization wants clean language more than early signals.

Use ILO C190 as the lead reference when harm is linked to behavior that threatens dignity, safety, voice, or personal security. It connects closely with speak-up retaliation risk, because people who fear retaliation rarely report the first signs of harassment or intimidation.

Decision matrix for psychosocial-risk leaders

The table below should not be read as a ranking. It shows which reference should lead depending on the management problem. In many operations, the final program will need all three, but one should set the operating logic.

Decision factorISO 45003WHO guidelinesILO C190
Best lead questionHow do we manage psychosocial hazards inside OH&S?How do we prevent harm and support workers?How do we prevent violence and harassment at work?
Natural ownerEHS with HR and operationsHR and occupational health with EHSHR, legal, EHS, and operations
Strongest useRisk management structure, controls, monitoring, reviewPrevention, manager training, support, return to workPolicy, reporting, prevention, protection, investigation
Common failurePaper system without work redesignWell-being campaign without hazard controlLegal policy without safe reporting
Best triggerWorkload, role conflict, low control, weak supportMental health absence, manager capability, support gapsHarassment, threats, bullying, customer aggression

A simple rule helps. Let ISO 45003 structure the system, let WHO guidance shape prevention and support, and let ILO C190 sharpen the response to violence and harassment. The sequence changes when one exposure is dominant, but the three references should not fight each other.

Recommendation by context

In a manufacturing plant with overtime, unclear roles, and supervisor pressure, ISO 45003 should lead because the exposure is embedded in work organization. The first action is not a resilience campaign. It is a work-design review that tests demands, control, support, role clarity, staffing, escalation, and leadership behavior.

In a service center with anxiety claims, mental health absence, and managers who feel unprepared, WHO guidance should lead. The company still needs risk assessment, although the immediate gap may be manager training, return-to-work planning, confidential support, and a clearer boundary between performance management and health protection.

In a field-service operation where workers face customer threats, isolated visits, gender-based harassment, or intimidation from subcontractors, ILO C190 should lead. The controls should include route planning, escalation protocols, reporting protection, client rules, contractor expectations, and investigation standards. A broad psychosocial survey may miss the urgency if workers do not trust the reporting route.

In a multinational company, use all three through one governance model. ISO 45003 can provide the management-system backbone, WHO guidance can calibrate mental health prevention and support, and C190 can define the non-negotiable treatment of violence and harassment across countries. The article on psychosocial framework selection expands this problem for leaders comparing multiple international approaches.

Common traps when leaders combine the three

The first trap is assigning the whole subject to HR because mental health appears in the title. HR is essential, but psychosocial hazards often sit in staffing, maintenance backlog, task design, supervisor cadence, contractor rules, and production planning. Without operations, the program becomes advice without authority.

The second trap is using surveys as proof of control. A survey can identify patterns, although it cannot prove that workload, role conflict, harassment, or traumatic exposure has been controlled. Leaders need field verification, action aging, and worker feedback after controls are changed.

The third trap is treating violence and harassment as conduct issues only. Conduct matters, but credible prevention also asks where exposure is likely, who is isolated, which power relationships silence reporting, and which business pressures make abuse easier to tolerate.

Andreza Araujo's work in more than 250 cultural-transformation projects points to the same operational lesson. Culture changes when leaders redesign routines, decisions, and accountability, not when they rename old practices with newer language.

Final decision for EHS and HR

The best reference depends on the problem in front of the company. ISO 45003 is the strongest lead when psychosocial risks need to enter the management system. WHO guidance is the strongest lead when prevention and worker support must be balanced. ILO C190 is the strongest lead when violence, harassment, intimidation, or retaliation risk is credible.

The worst decision is choosing one document because it sounds more authoritative and then forcing every exposure into it. A mature psychosocial-risk program starts by naming the exposure, identifying who can change the work, and selecting the reference that gives the strongest operating discipline for that exposure.

If your organization needs to integrate psychosocial risks, mental health support, and safe reporting into one operational model, Andreza Araujo's safety culture and EHS consulting can help leaders turn standards into decisions that workers can feel in the workday.

Topics iso-45003 who-guidelines ilo-c190 psychosocial-risks mental-health-at-work hr ehs-manager

Frequently asked questions

What is the difference between ISO 45003 and WHO mental health guidance?
ISO 45003 gives guidance for managing psychosocial risks as part of an occupational health and safety management system. The WHO guidelines on mental health at work focus on prevention, protection, promotion, and support for workers, including people living with mental health conditions. ISO 45003 is stronger as a system backbone. WHO guidance is stronger when prevention and support need to be designed together.
When should ILO C190 lead a psychosocial-risk program?
ILO C190 should lead when the exposure includes violence, harassment, threats, intimidation, bullying, gender-based harm, or customer aggression. In those cases, a broad well-being program is too weak. The organization needs prevention, reporting protection, investigation standards, and controls for groups that face credible exposure.
Can a company use ISO 45003, WHO guidance, and ILO C190 together?
Yes. The strongest model often uses all three. ISO 45003 structures the management system, WHO guidance shapes prevention and support, and ILO C190 sharpens prevention and response for violence and harassment. The important point is to let the exposure decide which reference leads.
Who should own psychosocial risk management?
Ownership should be shared by EHS, HR, operations, and legal where needed. HR alone cannot control workload, staffing, shift design, supervisor cadence, contractor rules, or production pressure. EHS alone may miss return-to-work support and mental health accommodation needs. Operations must be present because many controls require work redesign.
What is the biggest mistake when applying ISO 45003?
The biggest mistake is creating a paper system without changing work. A policy, risk assessment, and training module do not control excessive demand, poor role clarity, harassment, or weak support if staffing, supervision, reporting, and escalation remain unchanged.

About the author

Andreza Araújo

Safety Culture Expert | Senior EHS Executive

Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.

  • Civil & Safety Engineer (Unicamp)
  • M.A. Environmental Diplomacy (University of Geneva)
  • Sustainability Cert (IMD Switzerland)
  • People Management & Coaching (Ohio University)
  • UN Paris speaker representative for Brazil
  • ILO Turin speaker
  • LinkedIn Top Voice
  • Indra Nooyi PepsiCo CEO recognition (2x)

Documentaries

Watch Andreza's documentaries

Three productions on safety culture, organizational failure and the human lessons behind major disasters.

Podcasts

Listen to Andreza's podcasts

She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.

Summarize with AI