A psychosocial hazard assessment: the first step for any employer

Published October 25, 2026 · Last reviewed October 25, 2026

A psychosocial hazard assessment looks at how work is organized, led and supported, finds the parts that could harm workers’ mental health, and decides what to fix first. It is the first step because every later choice, from controls to training to what you measure, depends on what it finds. This guide sets out a seven-step method built on how CSA Z1003 frames psychosocial hazards and on guidance from the Canadian Centre for Occupational Health and Safety (CCOHS).

What a psychosocial hazard assessment is

It is the same idea as any workplace risk assessment, applied to a different kind of hazard. CCOHS’s guide to risk assessment lists psychosocial hazards as one of the common hazard categories, alongside biological, chemical, ergonomic, physical and safety hazards.

The national standard, CAN/CSA-Z1003-13/BNQ 9700-803, gives the working definitions:

Hazard: “a potential source of psychological harm to a worker.”
Psychosocial risk factor: “hazards including elements of the work environment, management practices, and/or organizational dimensions that increase the risk to health.”
Risk: “the combination of the likelihood of the occurrence of harm and the severity of that harm.”

The key word is “work.” You are assessing workload, leadership, civility, support, role clarity and similar conditions. You are not assessing people. CCOHS is clear that “it is not the responsibility of the assessor or investigator to determine a diagnosis of another person’s state of mental health.”

Why it comes first

CSA Z1003 builds its whole system on this step. Clause 4.3.4 requires a documented process for hazard identification, elimination where possible, risk assessment, controls and priorities. Objectives and targets should be based on, among other things, the identification and assessment of workplace factors. Monitoring includes a “baseline assessment of psychosocial risk factors,” so the first assessment also becomes the yardstick for later ones. For the bigger picture of the Standard, see CSA Z1003 explained.

The Standard also says organizations should “assess needs and address gaps in psychological safety prior to embarking on far reaching health promotion activities.” An assessment stops you from spending on wellness perks while the real problem is chronic understaffing or a supervisor nobody can approach.

Do Ontario employers have to do one?

Ontario’s Occupational Health and Safety Act does not use the words “psychological” or “psychosocial,” and it does not spell out a separate psychosocial hazard assessment. Three parts of it still matter here:

The general duty. Clause 25(2)(h) requires an employer to “take every precaution reasonable in the circumstances for the protection of a worker.”
A required violence assessment. Under subsection 32.0.3(1), an employer “shall assess the risks of workplace violence that may arise from the nature of the workplace, the type of work or the conditions of work,” share the results with the committee or representative, and reassess as often as necessary. Our guide to the workplace violence risk assessment in Ontario covers that duty in detail.
The committee’s role. Under clause 9(18)(a), a joint health and safety committee has the function and power to “identify situations that may be a source of danger or hazard to workers.”

Other provinces can be more explicit. In Quebec, section 59 of the Act respecting occupational health and safety says a prevention program must set out the identification and analysis of risks, “including the chemical, biological, physical, ergonomic and psychosocial risks related to the work.” Under section 58, a prevention program is required for each establishment with at least 20 workers. Where no program is required, the employer prepares an action plan instead (sections 61.1 and 61.2), and it must also identify psychosocial risks. See Quebec’s psychosocial risk rules for more. If you operate in more than one province, check each one.

How to run a psychosocial hazard assessment in seven steps

1. Set it up: team, scope and confidentiality

CCOHS advises that assessments be done by a competent person or team with good working knowledge of the work, including supervisors and workers, and that the health and safety committee or representative be consulted. Z1003 asks you to engage workers in data gathering and planning, and to define the committee’s involvement. It also says planning, data collection and evaluation are “to be conducted in a psychologically safe, confidential, and ethical manner.”

Decide the scope before you start: one site, one department or the whole organization. CCOHS notes you can assess all the factors at once or “target one or a few of them at a time, as long as all factors are assessed on a regular basis.” Write down who will see raw data and how results will be de-identified.

2. Gather the data you already have

Clause 4.3.5 of Z1003 lists useful sources. Use aggregated figures only:

absenteeism and turnover rates;
return-to-work and accommodation data;
short- and long-term disability costs, assistance plan use and workers’ compensation data;
incident reports, worker complaints and investigations;
existing policies and job descriptions or job demands analyses.

The Standard requires that any data collection comply with privacy laws, collective agreements and policies, and that you keep a record of the data and the methods used.

3. Ask the people who do the work

CCOHS lists conversations, observations, group discussions, anonymous forms and surveys as ways to gather feedback, and says most organizations “will need to use more than one assessment method.” A common pattern is a short survey across all factors, then small discussion groups on the areas that look weakest. Pace the work to avoid survey fatigue. For wording that works, see our list of psychosocial risk survey questions. Z1003 also points to Guarding Minds at Work, a free resource, as a possible first step.

4. Look at the work itself

Data and surveys point to where problems are. Observing the work helps explain them. CCOHS’s sample checklist for psychological hazards includes areas such as:

pace of work, fatigue and hours of work, including working through breaks;
conflicting demands and little say in decisions;
conflict with others, social isolation and working alone;
poor communication and unclear roles;
decisions about leave or training that seem unfair, and few chances to grow.

Use the 13 workplace psychosocial factors as your master checklist so nothing is missed. CCOHS describes the same 13 factors the Standard uses. Also remember Z1003’s open item: “other chronic stressors as identified by workers.” CCOHS also advises including people who work off-site, such as drivers and teleworkers, and looking at how the work is organized. Committee members can watch for some of these conditions during regular rounds; see psychosocial hazards on a JHSC inspection.

5. Rate the risks and set priorities

CCOHS expresses risk as probability times severity and gives a simple qualitative matrix: low, medium or high likelihood against low, medium or high severity. You do not need precise numbers. You need a consistent, written way to decide what comes first.

One caution: the severity examples in CCOHS’s matrix are physical injuries, from an injury that needs first aid only to a fatal injury. They do not describe psychological harm. Before rating anything, the team should write down its own plain descriptions of low, medium and high severity and likelihood for psychological harm, agree on them, and apply them the same way every time.

When choosing priorities, CCOHS suggests weighing the results and trends from your assessment, the likelihood, impact and consequences of each hazard, your internal resources and expertise, and whether outside organizations could help. Z1003 asks for a priority process that reflects “the size, nature, and complexity of the hazard and risk.”

6. Choose controls that fix the source

Z1003 asks you to respect the traditional hierarchy of risk control where possible. Its list starts with eliminating the hazard and includes changing how work is organized and done and modifying procedures, with administrative measures, training and protective equipment further down. CCOHS’s page on controlling psychosocial hazards says this means “prioritizing control measures that can affect the whole organization instead of only focusing on measures individuals may take.”

In practice: if workload is the hazard, fix staffing, scheduling and work planning before offering a stress workshop. CCOHS also warns to make sure controls “do not create any new hazards,” and to name who is responsible for each control and set a timeline of milestones.

7. Share the results, record them and plan the review

CCOHS recommends sharing the overall findings “while maintaining confidentiality” of the people consulted, for example with a short email to discussion group participants or a one-page summary posted in common areas. CCOHS adds that celebrating successes encourages continued participation.

Then set objectives with an owner and a time frame, as Z1003 clause 4.3.7 requires, and decide when you will look again. Z1003’s change-management clause covers significant changes to work procedures, organizational structure and staffing. CCOHS adds that an assessment is needed before new processes or changes are introduced and when new information about harm comes up.

A worked example: one hazard from start to finish

This is an illustration, not a real workplace. It follows one hazard through steps 2 to 7.

Existing data. A warehouse’s turnover figures show the evening shift losing more pickers than any other shift.
Asking workers. The survey scores workload management lowest on that shift. Two discussion groups say pick targets went up but staffing did not.
Looking at the work. Observation confirms pickers working through scheduled breaks at peak times.
Rating. Using the team’s own written definitions, the hazard is rated high and goes to the top of the list.
Controls. Match evening staffing to volume, stagger and protect breaks, and review pick targets with the workers who do the job.
Record and review. The de-identified register entry reads: “Evening shift, picking. Workload exceeds staffing at peak; breaks skipped. Risk: high. Controls: staffing plan, protected breaks, target review. Owner: operations manager. Review: in three months.” No names appear anywhere.

The small-employer version

Z1003’s Annex D walks through a garage with 10 employees. The owner raises the problem at a staff meeting, writes a short policy statement, asks workers to take part, then assesses needs using a tool, conversations and simple data such as absenteeism, incidents and turnover. When working alone turns up as a concern, the example goal is to always have two staff working together or, if that is not feasible, to control the risk another way, such as keeping the door locked. The Standard notes the process “can be quick (i.e., a matter of a few hours).” The steps above scale down the same way.

Common mistakes to avoid

Assessing people instead of work. No diagnosing and no lists of “who seems stressed.”
Breaking confidentiality. Z1003 requires identifying markers to be removed from documents discussed at the health and safety committee.
Surveying and going quiet. Z1003 expects evaluation results and follow-up plans to be communicated to managers, workers and their representatives.
Only individual fixes. Resilience tips do not fix an unworkable schedule.
Doing it once. The Standard is built on continual improvement, and CCOHS expects all factors to be assessed on a regular basis.

Where training fits

An assessment is only as good as the people running it and the reports that feed it. Bedrock Minds builds those skills. The Champion stream, for supervisors, HR, JHSC members and program leads, covers finding hazards, building the plan and measuring results, and ends with a written 90-day plan for the learner’s own organization. On the practical day, Champions take tabletop and mini-audit roles, and groups build a de-identified hazard register. Both streams teach the 4C Pathway, which ends with Close the loop: follow up, report the workplace hazard, not the person, and look after the helper. That habit keeps your next assessment fed with honest information. The course supports your program; it does not make an organization conform to any standard.

Give your people a plan they have practised

Bedrock Minds combines online modules with one practical day where staff and leaders rehearse the conversations this article describes. Tell us about your team and we reply within one business day.

Request a quote

See the course

This article is general information, not legal advice.