Using a psychosocial risk assessment template (and the tools worth trusting)

Key takeaways

• A template is only as good as the columns it forces you to fill in. The right ones make you name evidence, a rating, an owner, and a review date. The wrong ones let you list problems and call it a day.
• A blank spreadsheet with the right structure will get you further than most organisations currently are. You don't need to buy anything to start.
• For the measurement side, the free, validated People at Work assessment, backed by Comcare and Safe Work Australia, is a genuinely good and neutral starting point. Trust the validated tools over a template you found at random online.
• A template is a container, not a control. Filling it in doesn't reduce anyone's risk; acting on what it holds does. The most common failure is a beautifully completed register nobody ever revisits.
• Start by finding out where you actually stand. Our free readiness checklist is faster than building a full register from scratch and tells you what to put in it first.

We've lost count of the psychosocial risk assessment templates clients have sent us with the question "is this any good?" Usually they're a tidy grid someone downloaded, with a place to write "yes we've considered this." And almost always the honest answer is the same: the template isn't the problem, but it won't save you either, because it's a container you've mistaken for a control.

So let's be useful about it. A template is one of the practical tools of psychosocial safety: what makes one worth using, which tools you can trust, and how to keep the thing alive. For the full process behind it, see how to run a psychosocial risk assessment.

What a good template forces you to do

The difference between a useful hazard register and a decorative one is the columns. A good template doesn't just give you room to list hazards; it forces you to be honest about each one. The columns that matter:

Hazard, described plainly. Not "workload" but "sustained overtime in the claims team since the March restructure." Specific enough that someone who wasn't in the room understands it.

Where it shows up. Team, role, or location. Psychosocial risk lives at the team level, not the org-wide average, so a register that only records company-wide hazards is too blunt to act on.

Evidence. What told you this was real? Survey data, exit interview themes, absenteeism, grievances, direct feedback. A hazard with no evidence column is just an opinion with a border around it.

Likelihood, severity, and priority. A simple low, medium, high on each of likelihood and severity, combined into a priority, so you know what to act on first. The point isn't precision, it's to stop every hazard getting equal attention when they don't deserve it.

Control(s) planned. What you'll actually do, starting with source-level fixes, not "monitor the situation."

Owner. A named person accountable for the control happening. Not "HR." A person.

Review date and status. When you'll check whether it worked, and whether it's open, in progress, reviewed, or closed. A register with no review dates is a snapshot, not a system.

If your template is missing evidence, a rating, a named owner, or a review date, it's not really a risk assessment template. It's a list with ambitions. Those four columns are what turn it into something you can actually run.

The free, validated tools worth trusting

For the measurement side of your assessment, use tools validated by people who do this for a living, not a template off a random website.

People at Work is the one we point people to first. It's free, backed by Comcare and Safe Work Australia, and built on genuine psychometric ground rather than someone's guess at good questions. It surveys your people against the recognised psychosocial hazards and gives you a proper baseline. For an organisation that hasn't measured anything yet, it's a strong, neutral, no-cost place to begin, and because it's government-backed, nobody can accuse you of picking a tool that flatters you.

It sits alongside other validated instruments regulators reference, so if it doesn't fit you're not short of credible options. The point is to trust validated tools over improvised ones. A self-built template is fine for organising and tracking hazards; for measuring them, lean on instruments that have done the psychometric work.

One honest limitation: People at Work, like most validated survey instruments, is built to be run periodically, not continuously. It gives you a baseline, not a live feed. We've written about that gap, and how continuous measurement fills it, if you want to go deeper.

Where a template quietly fails

Here's the trap we see most. An organisation builds a genuinely good register, fills every column in properly, presents it, and never opens it again. The template did its job; the people didn't.

A template is a container. Filling it in changes nothing on its own. The risk only drops when someone acts on what the register holds and checks whether the action worked. A perfectly completed register sitting untouched in a shared drive is worth almost nothing to the team it describes.

So the discipline isn't building the template. It's the habit around it: reviewing it when something material changes, closing the loop on controls, updating it when a restructure shifts the risk. A template and a system aren't the same thing. The template holds your hazards; the system is the routine that keeps turning around it, which we've laid out in psychosocial risk management as a routine and built into the Whyser Work Culture module.

How to actually use one

Starting from a blank spreadsheet, here's the practical sequence.

Find out where you stand first. Our free psychosocial readiness checklist walks you through where your organisation sits against the identify, assess, control, review cycle, and it's the fastest way we know to turn "we should probably do this" into a first list of hazards worth registering.

Populate it from real data, not assumptions. Fill the register from what your evidence shows, exit interviews, absenteeism, grievances, direct feedback, and ideally a validated read like People at Work, not from what you imagine your hazards are.

Rate, assign, and diarise. Give each hazard its priority, a named owner, and a review date in the calendar, not just a column. Consult the people doing the work as you go; they usually know the hazard and often the fix, which makes the register more accurate and more defensible.

A short example

A retail group asked us to look at their psychosocial risk assessment. It was a lovely template: colour-coded, every hazard listed, neat ratings. But every "review date" column was blank, and every "owner" said "People & Culture."

So we changed almost nothing about the columns and everything about how they used it. Each hazard got a real named owner, usually the manager closest to it, and a real review date, and they ran a People at Work assessment to replace the guesswork in the evidence column.

The template barely changed. The results did. For the first time the register had someone accountable for each line and a date when someone would actually check, and within two review cycles half the open hazards had genuinely been addressed.

Frequently asked questions

Is a spreadsheet good enough, or do we need software?

A spreadsheet with the right columns will get you further than most organisations currently are. Software earns its place when you're tracking many hazards across many teams and want reviews and measurement connected automatically. But the discipline matters far more than the tool: a well-run spreadsheet beats neglected software.

Where can we get a validated psychosocial assessment tool?

The People at Work assessment, backed by Comcare and Safe Work Australia, is free and validated, and it's the one we'd point most Australian organisations to first. For measuring hazards, prefer validated instruments over a template you found at random; save the self-built template for organising what you find.

How is a template different from a risk assessment?

A template is the container; the risk assessment is the process of filling it with real evidence, rating the hazards, controlling them, and reviewing whether the controls worked. Having a template proves nothing on its own; a completed, actively maintained register that drives real action is the assessment, and the full how-to guide walks through that process.

Does using a template mean we've met our WHS obligations?

Not by itself, and this is general guidance rather than legal or WHS advice. A template helps you organise and evidence your risk management, but the duty is met by genuinely identifying hazards, controlling them at the source, and reviewing them, then being able to show you did. Your obligations depend on jurisdiction and facts, so get your own advice for compliance certainty.

If you opened your hazard register right now, would it read as a living record of what you're actually doing, or as a tidy document nobody's touched since the day it was made?