Psychosocial risks are no longer optional. OH&S auditors are expanding evidence gathering into mental wellbeing.
ISO 45003 — the first international standard providing guidance on managing psychosocial risk within an ISO 45001 occupational health and safety management system — has moved from an emerging concept to a central focus of OH&S audits in 2026. Recent updates to the guidance, combined with national legislation in the EU, UK, Australia and several U.S. states, mean auditors now actively probe psychosocial risk management as part of standard 45001 conformity assessment.
What counts as a psychosocial hazard
- Excessive workload, unrealistic deadlines and chronic understaffing.
- Bullying, harassment, discrimination and incivility.
- Role ambiguity, lack of autonomy and unclear performance expectations.
- Isolation associated with remote and hybrid work arrangements.
- Exposure to traumatic events or emotionally demanding work.
Evidence auditors now expect
- Psychosocial hazard identification methodology — not just physical hazards.
- Worker consultation records covering mental health and workload concerns.
- Anonymous reporting channels with evidence of action taken on issues raised.
- Manager training in recognizing distress and supporting affected workers.
- Integration of psychosocial metrics into management review.
Why most organizations are unprepared
Many ISO 45001-certified organizations have mature systems for physical hazard control but treat psychosocial risk as an HR matter outside the OH&S management system. Auditors are increasingly raising findings where this separation prevents systematic identification, control and review of psychosocial hazards.
MEGADEMİ's ISO 45001 Lead Auditor and Internal Auditor courses now include a dedicated ISO 45003 module with practical audit scenarios drawn from manufacturing, healthcare, financial services and public sector deployments.
