Psychosocial Risk Ownership: 5 Failures That Split Control

Psychosocial risk often fails because everyone is involved and nobody owns the control. This article diagnoses 5 ownership failures that split accountability between HR, EHS and operations while the real exposure stays in workload, autonomy, conflict, role clarity and supervisor decisions.

Why psychosocial risk ownership breaks down

ISO 45003:2021 specifies guidelines for managing psychosocial risk within an occupational health and safety management system based on ISO 45001. That placement matters because it makes psychological health part of risk management, not only part of well-being communication.

The usual market mistake is to move the topic to HR because the symptoms look human. Absence, anxiety, conflict, fatigue, complaints and burnout do involve people, although the exposure often comes from work design. If the same team has excessive demand, low control, poor support and unclear roles for 6 months, the problem is not solved by reminding workers to be resilient.

Across 25+ years leading EHS at multinationals, Andreza Araujo has observed that weak ownership appears when care is separated from control. HR cares for the person, EHS documents the risk, operations owns the pace, and senior leadership approves the tradeoff. Unless those pieces meet in one decision forum, psychosocial risk becomes a topic with many meetings and few changed conditions.

1. Failure: HR receives the case but not the control

HR is often the first department to receive the signal because workers report stress, conflict, harassment, absence or accommodation needs through people-management channels. WHO published its mental health at work guidelines in 2022 with recommendations that include organizational interventions, manager training, worker training and return-to-work support, which already shows that the answer cannot sit only inside individual care.

The ownership failure starts when HR becomes responsible for a condition it cannot change. HR can provide EAP access, accommodation, coaching, policy language and investigation routes, but it cannot always change staffing levels, production targets, overtime, job autonomy or shift design. When HR owns the file and operations owns the exposure, the case can be managed while the hazard remains untouched.

In Andreza Araujo's Portuguese book Diagnóstico de Cultura de Segurança, glossed for English readers as Safety Culture Diagnosis, the central discipline is comparing declared systems with lived practice. Apply that discipline here: if the organization says HR owns psychosocial risk, ask which work-design decision HR can actually change within 30 days.

A practical fix is to separate case ownership from exposure ownership. HR may own the employee-support case, while operations owns workload, EHS owns risk assessment and control verification, and senior leadership owns conflicts between capacity, delivery and safety.

2. Failure: EHS documents the hazard but lacks decision rights

EHS teams usually understand the management-system logic. They can connect psychosocial hazards to ISO 45003, risk registers, action tracking, audit evidence and worker participation. The weakness appears when EHS can identify the hazard but cannot force the decision that removes or reduces exposure.

This is why a psychosocial risk register is useful but insufficient. A register can name excessive workload, role conflict, violence, harassment, poor support or low autonomy, yet the risk stays active if every action is assigned to awareness training or another survey. The register should show the owner who controls staffing, schedule, escalation, team design or supervisor cadence.

As Andreza Araujo argues in Safety Culture: From Theory to Practice, culture becomes visible in repeated decisions under pressure. Psychosocial risk ownership is one of those decisions. If EHS raises the exposure and the business keeps the same deadline, the culture has answered.

The fix is to give EHS a verification role with escalation rights. EHS should not own every psychosocial control, but it should be able to challenge whether the action changed exposure in the field, the same way it would challenge a weak control after an incident.

3. Failure: operations treats workload as productivity, not exposure

Workload is where psychosocial risk becomes material. The HSE Management Standards describe 6 areas of work design associated with work-related stress: demands, control, support, relationships, role and change. Four of those areas are usually shaped directly by operational decisions.

The dangerous sentence is familiar in plants, warehouses, construction sites, service centers and corporate teams: "We just need to get through this week." One week becomes 3 weeks, then 1 quarter, and the temporary exception becomes the operating model. Operations may not intend harm, but repeated overload lowers attention, weakens conflict resolution and makes poor decisions feel normal.

Andreza Araujo's editorial grounding for psychosocial risk is blunt: no one leaves their life at the turnstile. The worker arrives with grief, debt, anxiety, family conflict, fatigue and pressure, but the company still controls how much additional load the work system adds. Ignoring that interaction is not realism. It is a control failure.

The fix is to make workload a risk signal in the same review where production is discussed. If overtime, backlog, absenteeism, turnover and complaints rise together for 4 consecutive weeks, the operations leader should own a control decision, not wait for HR to absorb the damage.

4. Failure: harassment and conflict are investigated apart from safety

ILO Convention C190 records violence and harassment in the world of work as a formal treaty adopted in 2019 and in force since 25 June 2021. For safety leaders, that date matters because it confirms that violence, harassment and unacceptable conduct belong in prevention governance, not only in disciplinary files.

The ownership failure appears when an interpersonal conflict or harassment allegation is treated only as an employee-relations matter. HR may need confidentiality and procedural fairness, but EHS and operations still need to ask whether the work environment has risk factors that can be controlled: isolation, customer aggression, supervisor behavior, unstable teams, unclear roles or retaliation fear.

The internal guide on building a role conflict map helps because many conflict cases are not purely personality clashes. They often sit on top of unclear accountability, competing targets and work handoffs that make people fight over impossible constraints.

The fix is a dual-track response. HR protects the case process, while EHS and operations review the exposure pattern without revealing confidential details. If 5 complaints in the same unit point to the same supervisor cadence, staffing model or customer interface, the organization has a safety signal.

5. Failure: leaders confuse support resources with risk controls

Support resources matter. EAPs, counseling routes, mental health first aid, manager training and return-to-work processes can reduce harm and support recovery. The failure is treating those resources as if they controlled the exposure that made harm more likely.

The difference is visible in the action. A support action says workers can call a helpline. A risk-control action changes the shift roster, removes a hostile handoff, clarifies role authority, adds staffing for peak demand, limits after-hours contact or gives supervisors a clear escalation threshold. One helps the person after pressure accumulates. The other changes the pressure.

In more than 250 cultural-transformation projects supported by Andreza Araujo's team, the recurring pattern is that organizations overvalue visible programs and undervalue uncomfortable decisions. A campaign can be launched in 10 days. Redesigning work, capacity and authority requires leaders to admit that the system itself is producing exposure.

The fix is to classify every psychosocial action as support, prevention, mitigation or verification. If a plan has 8 support actions and zero work-design actions, it is not a risk-control plan. It is a care plan with an unresolved hazard beside it.

Ownership model: case owner vs exposure owner

The fastest way to repair fragmented ownership is to separate the person who manages the case from the person who controls the exposure. The psychosocial decision-rights matrix should make that separation explicit before a serious complaint, absence cluster or conflict escalation forces the organization to improvise.

How to test whether ownership is real

Real ownership can be tested in 5 questions. Who can change the exposure? Who pays for the control? Who verifies that the work changed? Who escalates when the control conflicts with delivery? Who explains the decision to workers within a defined time frame?

The comparison article on ISO 45003, WHO guidelines and ILO C190 is useful because each source pushes the organization from a different angle. ISO 45003 pushes management-system ownership, WHO pushes organizational interventions and support, and ILO C190 pushes prevention of violence and harassment. None of the 3 supports a model where care resources replace changes to work.

For HR leaders, the test is whether the support case leads to a work-design discussion when patterns repeat. For EHS managers, the test is whether psychosocial risk actions have owners with authority. For operations leaders, the test is whether production decisions are allowed to be named as exposure sources.

For senior leaders, the test is sharper. If psychosocial risk appears in board language but not in capacity decisions, staffing approvals, supervisor routines or escalation thresholds, ownership is still cosmetic.

What should change next

Psychosocial risk ownership should move from departmental identity to decision authority. HR, EHS and operations all matter, although each exposure needs one accountable control owner whose decisions can be verified in the field.

If your organization needs to turn fragmented psychosocial-risk ownership into a clear operating model, start with Andreza Araujo's safety culture diagnostics and ACS Global Ventures consulting through Andreza Araujo. Safety is about coming home, and that includes the way work affects the mind before it affects the body.