Psychosocial Hazards at Work: Common Risks and How to Control Them

Psychosocial hazards at work are features of how work is designed, organised and managed, and of its social setting, that can cause psychological or physical harm. The most common are excessive job demands, low job control, poor support, unclear roles, bullying, harassment and badly managed change. Employers control them like any other hazard: identify, assess, control and review.

This guide lists the hazards recognised by international standards and Asia Pacific regulators, gives a workplace example for each, and shows how to apply the hierarchy of control and keep a psychosocial risk register that will stand up to scrutiny.

What are psychosocial hazards at work?

A psychosocial hazard is anything in the design or management of work, or in working relationships, that increases the risk of stress and, over time, psychological or physical injury. The hazard is the work condition, not the person. A heavy workload, a manager who belittles staff or a restructure announced with no detail are hazards; anxiety, burnout or a musculoskeletal injury are possible harms.

ISO 45003:2021, the international guideline for managing psychosocial risk within an occupational health and safety management system, groups the sources of psychosocial risk into three areas: how work is organised, social factors at work, and the work environment, equipment and hazardous tasks. That grouping is a practical way to structure an assessment, because each area points to a different owner inside the business.

Psychosocial risk is the combination of how likely a hazard is to cause harm and how severe that harm could be. Two teams can face the same hazard, such as tight deadlines, and carry very different risk depending on duration, frequency and the support available.

Why do psychosocial hazards matter for employers in Asia Pacific?

The business case is now global. The WHO and the ILO estimate that 12 billion working days are lost every year to depression and anxiety, costing the global economy nearly US$1 trillion. WHO's 2022 guidelines on mental health at work ask employers to act on workplace risks such as heavy workloads and negative behaviours, and to train managers.

Regulators across the region are moving from awareness to expectation:

• Australia: Safe Work Australia's 2022 model Code of Practice, Managing psychosocial hazards at work, sets out 14 common hazards and a risk management process that mirrors physical safety.
• Malaysia: DOSH published the Guidelines on Psychosocial Risk Assessment and Management at the Workplace 2024 (the PRisMA Guidelines). In May 2026, DOSH signalled it is moving to treat psychosocial wellbeing as a legal duty under the Occupational Safety and Health Act, as part of the OSH Master Plan 2026 to 2030.
• Singapore: the Tripartite Advisory on Mental Health and Well-being at Workplaces, issued by MOM, NTUC and SNEF in November 2023, recommends regular review of employee mental well-being, after-hours communication policies, manager training and Employee Assistance Programmes.
• Japan: since December 2015, the amended Industrial Safety and Health Law has required workplaces with 50 or more employees to run an annual Stress Check and use group results to improve the work environment.

For a regional employer, the common thread is clear. Psychosocial hazards are treated as safety hazards, and the expected response is systematic prevention, not a wellness calendar alone.

What are the most common psychosocial hazards at work?

The list below combines the three ISO 45003 areas with the 14 hazards named in the Safe Work Australia code. The examples are typical of what HR teams see in Asia Pacific workplaces. No list is exhaustive, so treat it as a starting point for your own consultation.

How work is organised

• High job demands: sustained high workload or unreasonable time pressure. Example: a regional finance team closes month-end across four markets with no extra headcount during audit season.
• Low job control: little say over how or when work is done. Example: contact centre agents with scripted calls, fixed break slots and real-time monitoring.
• Lack of role clarity: unclear, conflicting or changing responsibilities. Example: a matrix role reporting to a country head and a regional functional lead who set competing priorities.
• Poor organisational change management: change that is poorly planned, consulted on or communicated. Example: a shared services relocation announced by email with no detail on roles or timelines.
• Inadequate reward and recognition: effort that is not matched by feedback, recognition or career progress. Example: high performers passed over for promotion with no explanation.
• Remote or isolated work: limited access to help, colleagues or communication. Example: a field engineer working alone at a plantation or offshore site, or a remote employee in a different time zone from the rest of the team.

Social factors at work

• Poor support: too little practical or emotional help from managers and colleagues, or insufficient training and tools. Example: a new hire handed complex client accounts in week one.
• Poor organisational justice: unfair or inconsistent decisions and policies. Example: hybrid work rules enforced strictly for one department and ignored for another.
• Bullying: repeated unreasonable behaviour directed at a worker or group. Example: a supervisor who routinely mocks one team member in meetings.
• Harassment, including sexual harassment: unwelcome conduct linked to personal characteristics or of a sexual nature. Example: repeated comments about a colleague's appearance in a team chat.
• Conflict or poor workplace relationships: interpersonal conflict, rudeness or exclusion. Example: a team member deliberately left out of project meetings.
• Violence and aggression: threats, intimidation or assault, often from customers or the public. Example: retail, hospitality and healthcare staff facing abusive customers.

Work environment, equipment and hazardous tasks

• Traumatic events or material: exposure to fear, injury or distressing content. Example: content moderators, claims handlers for serious injury cases, or first responders.
• Poor physical environment: unpleasant or hazardous conditions. Example: constant noise, heat or poor lighting on a factory floor, or an open-plan office with no quiet space.

Hazards rarely appear alone. High demands combined with low control and poor support is a well-known combination, and it is also a common pattern behind burnout as a systemic workplace issue.

How do you identify psychosocial hazards in your workplace?

Identification works best when it draws on several sources rather than one annual survey. Consultation with workers is central to every step in both ISO 45003 and the Safe Work Australia code, because employees often know where the risks sit before data shows it.

Useful sources include:

• Anonymised surveys that measure both symptoms and work conditions, such as a validated psychosocial risk questionnaire or the Organisational Mental Wellness Assessment, which takes under seven minutes and combines PHQ-2, GAD-7 and the Edmondson psychological safety scale.
• HR data: sick leave patterns, overtime hours, turnover by team, exit interview themes and grievance records.
• Incident and complaint reports, including bullying, harassment and customer aggression.
• Focus groups or walk-throughs with frontline staff and health and safety committee members.
• Aggregated, anonymised trends from your EAP provider on the themes employees raise.

Look at results by team, location and role. A company-wide average can hide one site where every hazard is concentrated.

How do you control psychosocial hazards using the hierarchy of control?

The hierarchy of control ranks measures from most to least effective. The Safe Work Australia code states that administrative controls and personal protective equipment are the least reliable controls and should be combined with more effective ones. For psychosocial hazards, that means fixing the work before relying on training or individual coping.

1. Eliminate the hazard. Remove the source where reasonably practicable. Example: stop a practice of sending non-urgent requests after 9pm, or remove an unrealistic service-level target.
2. Redesign the work. Change job design, systems of work, workloads, rosters or reporting lines. Example: add a second approver to share peak volume, rotate staff off traumatic caseloads, or clarify a matrix role in writing.
3. Change the environment and interactions. Example: install a duress alarm and screen for customer-facing staff, provide quiet rooms, or set clear rules for team chat behaviour.
4. Use administrative controls. Policies, procedures and training, such as a bullying and harassment policy with a confidential reporting route, an after-hours communication policy, and manager training on spotting distress.
5. Provide individual support. Access to counselling, crisis support and return-to-work planning. This is essential but does not replace controls higher up.

Individual support matters most for harm that cannot be fully designed out, such as exposure to traumatic material. A confidential Employee Assistance Programme gives employees fast access to qualified counsellors and psychologists, while aggregated, anonymised themes help HR see where controls are failing. Pair it with manager capability, for example the Psychologically Safe Manager programme, since managers shape workload, clarity and support every day.

How do you build a psychosocial risk register?

A risk register turns assessment into a record of decisions and actions. It shows regulators, auditors and your board that hazards were identified, rated and controlled, and that controls are reviewed. Keep it alongside your physical safety register rather than in a separate wellbeing file.

Fields to include for each hazard

1. Hazard and location: for example, "high job demands, accounts payable team, Kuala Lumpur".
2. Evidence: survey scores, overtime data, complaints, consultation notes.
3. Who is exposed and how often: number of workers, duration and frequency.
4. Current controls: what is already in place and whether it works.
5. Risk rating: likelihood multiplied by severity, using the same matrix you use for physical risks.
6. New controls: ranked by the hierarchy of control, with an owner and due date.
7. Residual risk: the expected rating once new controls are in place.
8. Review date and trigger: a fixed date plus triggers such as a restructure, an incident or a spike in complaints.

In Malaysia, employers that want an assessment aligned to the DOSH PRisMA Guidelines can use the PRisMA psychosocial risk assessment, which applies the LEO26 and EPC23 tools in line with OSHA 1994 and ISO 45003 and produces a report from a certified assessor. The register then records what you decide to do with those findings.

Psychosocial hazard control checklist for HR leaders

Use this checklist to test whether your current approach covers prevention as well as support.

• Senior leaders have named an owner for psychosocial risk, and it sits within the OSH management system.
• Workers and safety committee members are consulted at each step, not only surveyed.
• All 14 common hazards have been considered for each major role or site.
• Assessment data is analysed by team and location, with small groups protected to preserve anonymity.
• Each high or medium risk has at least one control above training and individual support in the hierarchy.
• Workload, rostering and after-hours communication rules have been reviewed in the last 12 months.
• There is a confidential route to report bullying, harassment and customer aggression, and reports are tracked.
• Change projects include a people impact assessment and a communication plan before announcement.
• Managers are trained to recognise distress and refer employees to support.
• Employees can reach confidential counselling and crisis support, and know how to access it.
• The risk register has review dates, owners and evidence that controls were checked.

How often should psychosocial risks be reviewed?

Review controls at least once a year and whenever something changes. Common triggers are a restructure, merger or relocation, a new system or target, a serious incident or complaint, a spike in sick leave or turnover, and feedback from workers that a control is not working. Japan's Stress Check model shows the value of an annual cycle: measure, return results to individuals confidentially, then use group-level results to improve conditions.

Measure whether controls changed the work, not only whether people feel better. If overtime in the finance team is still 20 hours a week after a workload review, the hazard has not been controlled, whatever the engagement score says.

Next step: from awareness to a controlled risk

Most organisations already run wellbeing activities. The gap is usually the middle of the process: a structured assessment, controls that change how work is done, and a register that shows progress. Start with one high-risk team, complete the cycle, and use what you learn to scale the approach across your markets.

ThoughtFull supports employers across Asia Pacific with assessment, manager training, EAP and crisis support in 30 languages. To plan a psychosocial risk programme for your organisation, book a demo with ThoughtFull.