Anonymous page analytics

With your permission we measure public page views, referral domains, campaign labels, browser time zones, page journeys and outbound domains. No names, emails, IP addresses or private learning content. Retained 90 days. You can opt out at any time from the footer.

Psychological Safetyat Work

Services

Independent audits of psychosocial risk management

Evidence-based testing of controls against agreed criteria, reported plainly with limits, risk-prioritised findings and an action plan.

Start a conversationBack to all services

Why it matters

Independent audits of psychosocial risk management

Boards and executives often hear that controls are in place. An independent audit checks whether that is so, by someone who did not design the controls and has no stake in the result.

The work starts with scope and criteria. Criteria can include applicable local duties, recognised guidance such as ISO 45003, your own policies and good practice. ISO 45003 is voluntary guidance, not a certifiable standard, and it is not a universal mandatory certification.

Audit findings are risk-prioritised. They are not a legal pass mark. Duties in your jurisdiction are verified separately and an audit cannot guarantee legal compliance.

Scope

How evidence is tested

01
Scope and criteria
Agree entities, sites, period and criteria before fieldwork, and record them in writing.
02
Document review
Examine policies, procedures, risk assessments, action logs and committee papers.
03
Evidence sampling
Select a documented sample of records, incidents and actions to test how procedures are applied.
04
Representative interviews
Speak with leaders, managers, representatives and workers across roles and locations.
05
Control testing
Check whether stated controls operate in practice, for example how an escalation moves.
06
Independence and conflicts
Declare any prior involvement, set safeguards and avoid auditing work we designed.

Outcomes

What the report contains

  • Scope, criteria and methods stated up front.
  • Findings linked to evidence and rated by risk.
  • Explicit limits: what was not examined and why.
  • Examples of good practice worth keeping.
  • An action plan with suggested owners and timeframes.
  • Optional follow-up to check progress against the plan.

Process

Audit stages

  1. Plan

    Define scope, criteria, sample and independence arrangements.

  2. Fieldwork

    Review documents, interview and test controls.

  3. Report

    Present evidence, findings, limits and recommendations.

  4. Action and follow-up

    Agree an action plan and, if wanted, return to test progress.

Checklist

Before commissioning an audit

  • What is the purpose: board assurance, a response to an event, or voluntary benchmarking?
  • Which criteria will be used, and who confirms local legal ones?
  • Is there any prior involvement that affects independence?
  • Who will ensure access to records and people?
  • How will confidentiality of interviews be handled?
  • Who owns the action plan after the report?

FAQs

Frequently asked questions

Is this an ISO 45003 certification?

No. ISO 45003 is voluntary guidance that cannot be certified. It can be one of the criteria used.

Will we receive a pass or fail?

No. Findings are prioritised by risk and described against criteria, which is more useful for action than a pass mark.

Can you audit work you consulted on?

We declare and manage conflicts. Where we designed the controls, we recommend another party tests them.

Get evidence you can rely on

Describe your purpose and jurisdictions, and we will propose scope, criteria and safeguards.

Start a conversation

Next steps

Related next steps

Pages that connect to this one.