As psychosocial risk management becomes a frontline compliance obligation for Australian employers, a gap has opened up between organisations that can demonstrate they are managing the risk and those that cannot. Most fall into the second category, not because they haven’t tried, but because the systems they’re using weren’t built to produce demonstrable compliance.

In December 2025, the Department of Defence became the first Commonwealth employer in Australia to be convicted for a worker death linked to psychosocial risk. The case didn’t make headlines for long. But for every HR director, Chief People Officer, and board member who read it, one question quietly followed them into their next leadership meeting:

If that happened to us, could we prove we’d done enough?

For the vast majority of Australian organisations, the honest answer is no. Most have wellness programs. Many have completed EAP reviews and rolled out mental health awareness training. A significant number have run psychosocial risk surveys in the last two years. They have tried.

The problem isn’t effort. It’s architecture. The systems, tools, and approaches most organisations rely on were not designed to produce demonstrable compliance. They were designed to check boxes. And in a regulatory environment that has shifted decisively from guidance to prosecution, checking boxes is no longer enough.

What Australian WHS Law Actually Requires

Australian WHS legislation, and its state and territory equivalents, is explicit about what psychosocial risk management requires. Organisations must:

• Proactively identify psychosocial hazards in the workplace
• Assess and document the level of risk those hazards present
• Implement and monitor appropriate control measures
• Maintain adequate reporting and record-keeping systems
• Establish governance at board and senior leadership level
• Consult with workers and log the outcomes of that consultation

This is not a one-time audit. It’s a continuous, documented system. And the consequences of not having one are substantial: fines of up to $18 million for organisations, personal criminal liability for officers and directors, and workers’ compensation premium impacts that can compound for five years or more following a single significant claim.

The regulatory signal has been consistent since the introduction of the model WHS regulations in 2022: psychosocial safety is not a soft issue sitting alongside physical safety. It is a legal obligation of equal standing. The Department of Defence conviction simply made that visible at the highest possible level.

For a detailed breakdown of how each Australian state approaches psychosocial health and safety obligations, Safe Work Australia’s guidance is the authoritative starting point.

Why Psychosocial Risk Management Fails Without the Right Data

The survey problem

When most organisations hear “psychosocial risk assessment,” the default response is to deploy a survey. It’s understandable. Surveys are familiar, scalable, and they produce data that can be reported upward.

But survey-based assessment has a fundamental design flaw: it measures what people feel safe enough to say, not what is actually happening.

The EY Oceania experience is instructive. Internal culture surveys returned a result that 94% of staff felt psychologically safe. In the same period, separate investigations found that 15% were experiencing bullying, 10% sexual harassment, and 8% racism. The survey wasn’t wrong because people were dishonest. It was wrong because in low-trust environments, people stop reporting. They don’t believe anything will change. They’ve learned that speaking up carries risk.

A perfect survey score, in this context, is not a green light. It may be the most dangerous signal of all, because it creates the appearance of safety where none exists.

This is not an argument against surveys entirely. Perception data has its place. However, when a survey is the primary or only mechanism for psychosocial risk assessment, organisations are building their compliance position on a foundation that can be silently undermined by the very conditions they’re trying to detect.

The data fragmentation problem

There’s a second structural issue that sits closer to home for most HR and People leaders: the data they need to understand psychosocial risk already exists inside their organisation. It’s just scattered across systems that were never designed to talk to each other.

Mental health claims live in one platform. Absenteeism data sits in another. Turnover is tracked in the HRIS. Safety incident logs are in a separate WHS system. Return-to-work rates are managed by claims teams. Sick leave trends are somewhere in payroll.

Each team sees their slice. WHS sees incidents. HR sees turnover. Finance sees claims costs. No single team sees the full picture. As a result, the patterns that would reveal emerging psychosocial risk go unread: rising absenteeism in one division, a spike in short-term sick leave following a leadership change, sustained turnover in a particular team. Nobody has assembled the puzzle.

This is how organisations end up reactive. An incident happens. A regulator asks questions. A board member reads a headline. And suddenly everyone is asking why there was no warning. The answer, almost always, is that there was a warning. It was just fragmented.

What Diagnosis-First Psychosocial Risk Management Looks Like

The Safe Minds Index®, developed by InCheq and delivered through Learnt’s Safe Minds, Better Work® program, starts from a different premise: before you can manage psychosocial risk, you have to know where it actually sits.

The Index produces a benchmarked psychosocial maturity score across 10 pillars, using data organisations already hold across their HR, safety, operations, claims, and injury management systems. No survey is required. The process uses no personally identifiable information. Learnt delivers a baseline assessment within two weeks of engagement.

The 10 pillars span the full landscape of psychosocial hazards as defined under Australian WHS codes of practice: workload and demands, role clarity, leadership and support, physical environment, relationships and conflict, organisational justice, hazard identification, resource allocation, governance and reporting, and recovery and return-to-work pathways.

Each pillar is scored relative to industry benchmarks. The output tells boards and leadership teams not just where they stand, but which pillars need the most urgent attention, what is likely driving the gaps, and what type of intervention is warranted. Learnt maps it to WHS codes across all Australian jurisdictions, so the documentation it produces is directly relevant to regulatory compliance.

Once the diagnostic is complete, Learnt deploys evidence-matched learning directly to the identified gaps. Not a generic wellbeing catalogue. Not a suite of modules selected because they seemed relevant. Learning that is targeted because the data said this specific psychosocial risk exists in this specific part of this specific organisation.

The result is a documented, auditable, and defensible compliance position, with outcomes that are measurable over time.

A Real Example: Aged Care, 780 Employees, Year One Results

An aged care provider with 780 employees across seven Victorian residences came to the Safe Minds, Better Work® program with a presenting problem: rising turnover and a request for bullying training. Turnover had climbed from 41% to 49% over the previous year and the cause wasn’t clear. There had been 15 mental health claims in the prior 12 months, averaging 142 days off work each.

The instinct, understandable and common, was to deploy training and move on.

Instead, the team ran the Safe Minds Index® first.

What the diagnostic revealed was more specific and more actionable than any survey could have produced. The diagnostic confirmed bullying at three of the seven residences. The diagnostic identified sexual harassment issues at five residences, driven primarily by residents with dementia, a risk profile that generic psychosocial training would have missed entirely. Hazard identification scored 22 out of 100. Resource allocation scored 26 out of 100. The assessment revealed multiple compliance gaps across governance and risk assessment pillars.

What the Interventions Targeted

With that picture in hand, the team designed interventions to match the actual problem:

• Learnt updated and implemented psychosocial risk, bullying, and harassment policies across all sites
• Learnt delivered board, executive, and manager training on psychosocial risk management and duty of care
• The team implemented environmental and role design controls at the highest-risk residences
• Learnt overhauled the internal communication system to serve a multilingual workforce that had been systemically underserved
• Learnt deployed the Safe Minds Risk Management System as the ongoing governance infrastructure across all sites

Results After Year One

The outcomes were measurable across every dimension that matters to a board:

• Staff turnover fell from 49% to 44%
• New mental health claims reduced by 25%
• Sick leave dropped 8%
• Return-to-work rate improved from 58% to 65%
• Staff engagement increased by 12%
• Safe Minds Index score moved from 25 to 58 out of 100
• Approximately $265,000 returned to the business through reduced claims and recruitment costs

None of this happened because the organisation ran a training session. It happened because they ran the psychosocial risk assessment first, deployed interventions targeted to the actual risk profile, and measured the change against a baseline that gave the results credibility.

The Board Question That Changes Everything

Boards across Australia are now being asked a specific question by insurers, regulators, and their own governance obligations: Can you evidence psychosocial compliance?

Answering that question requires more than a training completion report. It requires:

• An objective, benchmarked maturity score that can be reported with confidence
• A governance reporting structure that gives the board visibility over risk and progress
• An audit-defensible documentation trail across all relevant regulatory obligations
• A way to demonstrate improvement over time, not just point-in-time activity

As the AICD has noted, psychosocial risk is now firmly a board-level issue, not just an operational one. Therefore, directors who cannot demonstrate that the organisation has a functioning psychosocial risk management system face genuine personal exposure.

The Safe Minds, Better Work® program is built to produce exactly what boards need. It is not a compliance exercise. It is a compliance system that treats psychosocial risk the way any serious risk function treats a complex, consequential problem: with a rigorous diagnostic, targeted intervention, and measurable outcomes.

Where to Start

If your organisation has a psychosocial program but cannot clearly answer yes to the question “can we evidence compliance?”, the gap is almost certainly structural, not motivational. The effort has been made. The architecture hasn’t caught up.

The Safe Minds Index® baseline assessment gives you a clear picture of where your organisation sits across all 10 pillars of psychosocial maturity, benchmarked against your industry, within two weeks. From there, the path to a defensible compliance position is specific, sequenced, and measurable.

A 30-minute discovery call is the right place to start.