Psychosocial Risk Governance: 5 Symptoms That Expose Weak Ownership
Psychosocial risk governance fails when HR collects complaints, EHS tracks harm, and line leaders keep the work design decisions that create exposure.

Key takeaways
- 01Psychosocial risk governance fails when support activity is measured more clearly than work-design change.
- 02Complaint data is necessary but late, because many exposure patterns appear first in overtime, role conflict, aggression, recovery loss, and supervisor capacity.
- 03HR can coordinate support, but the line leader who controls staffing, workload, tempo, and role boundaries must own the exposure source.
- 04ISO 45003:2021 places psychosocial risk inside occupational health and safety management, which makes governance a leadership decision system rather than a wellness calendar.
- 05Headline Podcast leaders can test governance by tracing one live psychosocial risk signal from first warning to the decision that changed the work.
Psychosocial risk governance is the decision system that assigns ownership for workload, role clarity, recovery, aggression, conflict, and other work-design factors that can harm mental health and safety. It is not the same as offering an employee assistance program, running a stress survey, or asking HR to manage complaints after exposure has already turned into absence.
The weak version looks organized from a distance. HR has a wellbeing calendar, EHS has incident records, operations has production meetings, and senior leaders receive a people dashboard once a month. The problem is that none of those artifacts proves that someone with authority is changing the work conditions that generate psychosocial risk.
Across 25+ years of executive EHS work and more than 250 cultural transformation projects supported by Andreza Araujo, one pattern keeps repeating: psychosocial risk becomes invisible when the organization treats it as a sentiment issue, while the actual exposure sits in staffing, planning, supervision, customer interface, recovery time, and decision rights.
Why psychosocial risk governance is not a wellness program
A wellness program can help people recover, but it cannot govern exposure. If the work system overloads crews every quarter close, leaves supervisors with impossible spans of control, tolerates customer aggression as part of the job, or lets role ambiguity persist for months, a resilience workshop becomes a downstream patch.
ISO 45003:2021 frames psychosocial risk management through occupational health and safety management, which matters because it places the issue inside hazard identification, risk assessment, participation, leadership, planning, support, operation, performance evaluation, and improvement. The standard does not ask companies to outsource the problem to a benefits page.
The governance question is therefore practical: who has the authority to change the source of exposure, and how quickly does that authority act when signals appear? If the answer points only to HR, the organization has already misplaced a large part of the risk.
1. Complaint data is treated as the main risk map
The first symptom appears when formal complaints become the primary map of psychosocial risk. Complaints matter, but they are late, selective, and filtered by trust. Many workers will not report overload, intimidation, isolation, or chronic ambiguity when they believe the report will damage their reputation or disappear into a slow process.
This is why a complaint-only model underreads exposure. It captures the cases that crossed a reporting threshold, not the conditions that are still developing in daily work. By the time a formal complaint reaches HR, the operation may already have months of warning signs in overtime patterns, supervisor turnover, unresolved conflicts, schedule volatility, short staffing, and repeated recovery failures.
The Headline article on effort-reward imbalance shows how recognition, fairness, and recovery signals can appear before the organization receives a formal complaint. Governance improves when leaders read those signals as exposure data, not as background morale noise.
2. HR owns the file, but operations owns the exposure
The second symptom is an ownership split that looks polite in meetings and dangerous in the field. HR owns the case file, EHS owns the risk language, and operations owns the staffing, tempo, customer promises, handover quality, and supervisory capacity that shape the exposure.
When those ownership lines stay separate, psychosocial risk becomes administratively managed but operationally unchanged. HR can document concern, offer support, and advise managers, yet the shift pattern, workload peak, hostile interface, or unclear role boundary may remain exactly as it was.
A stronger governance model assigns the line leader as owner of the exposure source, with HR and EHS acting as technical partners. That distinction is uncomfortable because it moves the topic from support services into business decisions, but it is the only way to prevent psychosocial risk from becoming a case-management loop.
3. The dashboard counts support activity instead of work-design change
The third symptom sits inside the dashboard. Leaders count counseling referrals, mental health campaign reach, training attendance, pulse survey participation, and manager conversation completion. Those measures may be useful, although none of them proves that exposure decreased.
A governance dashboard needs evidence that the work changed. Examples include workload peaks redesigned, role conflicts removed, minimum recovery rules enforced, customer aggression controls installed, supervisor span reduced, escalation time shortened, and unresolved conflict cases closed with a verified work-system correction.
This is close to the warning in metric debt in safety governance. A metric becomes debt when it keeps appearing in review meetings after leaders have stopped using it to make decisions. Psychosocial risk metrics create the same debt when they document support while leaving exposure untouched.
4. Psychosocial signals are escalated only after harm is visible
The fourth symptom is delayed escalation. The organization waits for absence, conflict escalation, medical restriction, resignation, or a formal grievance before treating psychosocial exposure as a safety issue. That delay is not neutral, because it teaches managers that early signals are optional until harm becomes undeniable.
The International Labour Organization and World Health Organization have both treated work-related mental health as a serious occupational concern in recent guidance, including the 2022 policy brief on mental health at work. The practical implication is that leaders should not wait for injury-level evidence before acting on exposure patterns that are already visible.
For field leaders, early escalation can be simple. A repeated overtime spike, a supervisor unable to release people for breaks, a customer-facing team reporting aggression every week, or a role that receives incompatible demands from two managers should move into a risk review before someone leaves work unfit to return.
5. Corrective actions support the person but spare the system
The fifth symptom is the most revealing. After a psychosocial event, the action plan supports the affected person but does not challenge the system that produced the exposure. The worker receives accommodation, the manager receives a reminder, the team receives awareness content, and the work design stays intact.
Individual support is necessary and should not be treated as cosmetic. The failure occurs when support becomes the whole response. If the exposure came from role ambiguity, chronic overload, aggression, or poor recovery, the corrective action must name what will change in planning, staffing, supervision, interface design, or decision authority.
The Headline piece on role ambiguity as psychosocial risk control makes this concrete. Ambiguity is not solved by asking workers to communicate better if the organization has never clarified who decides, who supports, who approves, and who carries the consequence when priorities collide.
What strong ownership looks like in practice
Strong psychosocial risk governance names the exposure owner before the case owner. The exposure owner is the leader who can change workload, staffing, schedule design, customer rules, supervisory capacity, role boundaries, or recovery expectations. The case owner may coordinate support, but the exposure owner must change the condition.
A workable governance rhythm has four parts. First, the organization defines a short list of psychosocial exposure classes that match its work, such as overload, aggression, role conflict, isolation, fatigue, low control, and poor recovery. Second, each class receives an executive owner and a line owner. Third, early signals enter a monthly risk review with action thresholds. Fourth, actions stay open until a field check proves that the exposure has changed.
Andreza Araujo's book Safety Culture: From Theory to Practice is useful here because it treats culture as the way decisions are repeated, reinforced, and measured. Psychosocial risk governance follows the same logic. The culture is not what leaders say about care. It is what leaders decide when care competes with delivery pressure.
How leaders should test the governance model this month
The fastest test is to take one live psychosocial risk pattern and trace it from signal to decision. Choose a real issue, such as overtime after a late customer change, repeated aggression at a service counter, role conflict between maintenance and production, or short recovery after emergency callouts. Then ask who saw the signal first, who had authority to change the work, how long escalation took, and what proof shows that exposure reduced.
If the trail ends in advice, awareness, or individual coping, the governance model is weak. If the trail ends in changed staffing, changed demand, changed escalation authority, changed interface rules, or changed recovery protection, the organization is closer to real control.
This review should include HR, EHS, operations, and one senior leader who can remove tradeoff ambiguity. Psychosocial risk sits where human health, production design, and leadership priorities meet, which is exactly why it becomes diluted when no one owns the tradeoff openly.
Where Headline Podcast fits
Headline Podcast exists for conversations with constantly learning people, and psychosocial risk governance needs that kind of conversation because the topic is too often softened into wellbeing language. The harder question is whether leaders are willing to redesign work when the evidence says the work itself is hurting people.
For the next leadership review, bring one psychosocial risk signal and refuse to stop at support activity. Ask what exposure source created it, who owns that source, and which decision will change the work before the signal becomes harm.
Frequently asked questions
What is psychosocial risk governance?
Why is a wellness program not enough?
Who should own psychosocial risk?
Which standard helps structure psychosocial risk governance?
What is a practical first test?
About the author
Andreza Araújo
Safety Culture Expert | Senior EHS Executive
Andreza Araújo is a safety culture expert and senior EHS executive with more than 25 years of experience in environment, health and safety. She is a Civil Engineer and Occupational Safety Engineer from Unicamp, holds a Master's degree in Environmental Diplomacy from the University of Geneva, and completed sustainability studies at IMD Switzerland. Andreza has served in Global Head of EHS roles in Fortune 500 environments, leading cultural transformation programs across multinational operations. She has represented Brazil as a speaker at the United Nations in Paris and has spoken at the International Labour Organization in Turin. She is the author of more than 16 books on safety culture in Portuguese, Spanish, English and German. Her work has earned more than 10 EHS awards, including two recognitions from Indra Nooyi, former PepsiCo CEO.
- Civil & Safety Engineer (Unicamp)
- M.A. Environmental Diplomacy (University of Geneva)
- Sustainability Cert (IMD Switzerland)
- People Management & Coaching (Ohio University)
- UN Paris speaker representative for Brazil
- ILO Turin speaker
- LinkedIn Top Voice
- Indra Nooyi PepsiCo CEO recognition (2x)
Documentaries
Watch Andreza's documentaries
Three productions on safety culture, organizational failure and the human lessons behind major disasters.
Podcasts
Listen to Andreza's podcasts
She hosts three shows on safety leadership, EHS and organizational culture, in English and Portuguese.