Risk assessments · Ireland

What Should an Irish Psychosocial Risk Assessment Cover?

Assess how work is designed and managed—not whether individual workers are resilient. Identify demands, control, support, relationships, role and change risks, then assign practical organisational actions and verify that they work.

An Irish psychosocial risk assessment should examine how work is designed, organised and managed, identify the work factors that could cause psychological or physical harm, show which employees or groups may be exposed, and record practical measures to eliminate or reduce the risk. It should assess the work—not label individual employees as unable to cope.

The short answer

Look at demands, control, support, relationships, role, organisational change and exposure to critical incidents, violence, bullying or other traumatic work. Use several sources of evidence, consult employees and their representatives, distinguish hazards from symptoms, then give every improvement an owner, target date and method of verification. Include the findings in the written risk assessment and Safety Statement, and review them when work changes or the evidence shows that controls may not be working.

What is the employer's duty?

Section 19 of the Safety, Health and Welfare at Work Act 2005 requires every employer to identify workplace hazards, assess the risks to employees' safety, health and welfare, keep a written risk assessment and implement the improvements identified. Section 20 requires a written Safety Statement based on that assessment.

The Act does not create a separate document called a “psychosocial risk assessment”. The obligation is to include work-related psychosocial hazards within the employer's overall hazard identification and risk-assessment process where those hazards can affect safety, health or welfare. The Health and Safety Authority (HSA) states that stressors are potential hazards that can lead to personal injury in the form of mental ill health, and that risk assessments should cover stressors, controls, monitoring and review in consultation with staff.

Work-related stress itself is not an incident that an employer reports to the HSA in the way a reportable workplace accident is reported. That does not remove the duty to assess and control the workplace hazards that may create it.

Important distinction

A wellbeing programme, employee assistance line or resilience course may support employees, but it does not replace an assessment of workload, staffing, working time, role clarity, management behaviour, violence or other hazards created by the work.

Which psychosocial hazards should be considered?

The HSA describes psychosocial hazards as factors in the design or management of work that can harm psychological wellbeing. The assessment should follow the actual work and workforce rather than rely on a generic checklist. Common areas include:

  • Demands: excessive or conflicting workload, unrealistic deadlines, understaffing, long or unpredictable hours, emotional demands, difficult customers, inadequate recovery time, or work that does not match available skills and resources.
  • Control: little influence over pace, method, sequence, breaks, scheduling or how problems are resolved.
  • Support: inadequate supervision, training, information, equipment, colleague support or access to help during difficult work.
  • Relationships: bullying, harassment, conflict, incivility, violence, aggression, discrimination or poor processes for raising concerns.
  • Role: unclear duties, incompatible instructions, responsibility without authority, or uncertainty about priorities and escalation.
  • Change: poorly planned or communicated restructuring, new technology, redundancies, site changes, new working patterns or prolonged uncertainty.
  • Critical incidents: exposure to death, injury, abuse, emergencies or other potentially traumatic events, including repeated indirect exposure through case work or incident review.
  • Working alone or remotely: isolation, weak contact, difficulty accessing support, blurred working time, unsuitable home-working arrangements or limited visibility of excessive demands.

Some hazards overlap. A lone worker facing aggressive customers may also have high demands, low control and weak access to support. Assess the combined work situation rather than scoring each item in isolation.

Do not treat all pressure as harmful or all difficult work as the same risk. Describe the frequency, duration, intensity and predictability of the exposure, the groups affected and the safeguards already in place. Consider routine work, peaks, nights, emergencies, organisational change and situations where normal staffing or supervision is unavailable.

What evidence should the assessment use?

No single survey result proves that risk is controlled. Use several sources and protect confidentiality. Useful evidence includes:

  • employee consultation, focus groups, safety-representative input and confidential survey findings;
  • staffing levels, workload, queue or caseload data, overtime, missed breaks and working-time patterns;
  • turnover, retention, absence and transfer trends, interpreted carefully rather than used to diagnose individuals;
  • reports of bullying, aggression, violence, fatigue, conflict, excessive demand or lack of support;
  • incidents, near misses, complaints, error trends and corrective actions;
  • results from change projects, exit feedback and return-to-work discussions where appropriate;
  • existing controls, supervision arrangements, training, employee-assistance resources and critical-incident support; and
  • differences between sites, teams, roles, shifts, employment arrangements and remote or lone-working groups.

Consultation is central because psychosocial hazards may not be visible in a walk-through inspection. Ask employees what creates pressure, what happens during peak or abnormal conditions, which controls help and where the written process differs from real work. The assessment owner should still test the evidence and decide what action is required; consultation is not a vote on whether a hazard exists.

Aggregate sensitive information where possible. The purpose is to identify work-system risk, not to expose an employee's medical or personal information. Set clear rules for who can see raw responses and how small teams will be protected from identification.

What should the written assessment record?

A useful record should allow a manager to understand the hazard, the evidence behind the decision and the action expected. Record at least:

  • Work scope: business area, sites, roles, shifts and activities covered.
  • Hazard: the work factor that may cause harm, written specifically rather than as “stress”.
  • People exposed: affected roles or groups, including new starters, lone workers, contractors, remote staff and people exposed to critical incidents where relevant.
  • Exposure pattern: when the hazard occurs, how often, for how long and under which peak, emergency or change conditions.
  • Evidence: consultation, survey, workload, incident and other information used, with appropriate confidentiality safeguards.
  • Existing controls: what is in place, who operates it and how the assessor knows it works.
  • Risk decision: the assessor's reasoned view of likelihood and potential harm, including combined hazards and groups at unusual risk.
  • Improvements: the organisational, technical or procedural action required, responsible owner, due date and priority.
  • Verification: the evidence that will show the action was implemented and reduced the risk.
  • Consultation and approval: who was involved, the competent assessor and management sign-off.
  • Review trigger: the planned review date and events that require an earlier review.

A red-amber-green score is not the assessment. A useful entry might state that late-shift staff face unpredictable customer aggression while working alone, that the only existing control is a phone in the office, and that incident records show delays obtaining help. The actions can then address staffing, layout, communications, escalation and emergency response. “Medium risk—monitor” does not tell anyone what must change.

What do suitable controls look like?

Controls should address the source in the design and management of work. Start by removing or reducing the hazard through staffing, workload, scheduling, role design, equipment, decision authority and management processes. Individual support is important, but it sits alongside—not ahead of—work-system controls.

Depending on the evidence, practical actions may include:

  • setting safe staffing levels and escalation points for overload or absence;
  • adjusting workload, caseload, targets, deadlines or task allocation;
  • protecting breaks and recovery time and managing excessive or unpredictable hours;
  • clarifying roles, priorities, reporting lines and authority to stop or defer unsafe work;
  • giving teams more control over scheduling or the method of work where practicable;
  • training and supporting managers to recognise and act on work-system problems;
  • improving communication and consultation before and during organisational change;
  • preventing and responding to bullying, harassment, violence and aggression;
  • providing reliable lone-worker communication and emergency assistance;
  • preparing for critical incidents, including immediate response, follow-up and access to appropriate support; and
  • offering confidential support services without presenting them as the main risk control.

Assign actions to roles with authority and resources. “Managers to be aware” is not a controlled action. “Regional operations manager to introduce a two-person close after 20:00 at the three locations with repeated aggression reports by 30 November; site managers to verify rotas for four weeks” is specific enough to manage and check.

Verification should examine outcomes and implementation. Confirm that staffing changed, breaks are actually taken, employees can obtain help, incident response is timely and the hazard indicators improve. A closed action with no evidence of effect may only show that paperwork was completed.

How does Work Positive fit in?

Work Positive CI is a free, confidential psychosocial risk-management process provided by the HSA, State Claims Agency and Critical Incident Stress Management Network Ireland. It can collect structured feedback on workplace stress, employee psychological wellbeing and critical-incident exposure, then support development of an action plan.

The tool can strengthen consultation and provide comparable evidence, especially for larger or distributed organisations. It is not a substitute for management judgement, site knowledge or action. Before launching a survey, the organisation should define governance, confidentiality, communication, participation, how results will be analysed and who will own the response.

After results are available, consult employees on priorities and convert findings into controlled actions. Tell staff what was found, what will change, what cannot change immediately and when progress will be reviewed. Repeated surveys without visible action can reduce trust and participation.

How should multi-site employers manage it?

A group assessment can define common hazards and minimum controls, but it should not erase local differences. Customer aggression may be concentrated at late-opening sites. Workload may vary with footfall, vacancies or seasonal demand. Support available to a head-office team may not be available to a lone frontline worker.

Use three connected levels:

  • Organisation-level assessment: culture, change, common policies, management capability, survey governance and group-wide controls.
  • Role or activity assessment: demands, control, emotional exposure, critical incidents and controls associated with particular work.
  • Site or team verification: local staffing, opening hours, customer profile, supervision, facilities, incident history and whether minimum controls are working.

Compare sites carefully. A high response rate is useful, but a site with few reports is not automatically low risk. It may have strong controls, little exposure, low trust in reporting or no safe reporting route. Combine survey information with operating and incident evidence.

Keep assessment actions visible

Fit2Trade Ensure supports structured risk, incident and corrective-action workflows with visibility across locations. Use it to keep owners, due dates, evidence and verification connected while local managers confirm the controls in real work.

Explore Fit2Trade Ensure

When should the assessment be reviewed?

Section 19 requires review where there has been a significant change or another reason to believe the assessment is no longer valid. For psychosocial risks, review triggers can include restructuring, rapid growth, new technology, changed opening hours, staffing shortages, new targets, remote-working changes, a serious incident, repeated aggression, bullying concerns, rising overtime, missed breaks or evidence that support and escalation arrangements failed.

Set a planned review appropriate to the risk and rate of change, then add event-driven review. Revisit the evidence after controls have had time to work. Where an action affects several locations, confirm implementation at each relevant site rather than accepting a group-wide completion statement.

The HSA's conference on managing psychosocial risks at work, scheduled for 12 November 2026, is intended to provide practical guidance on identifying and managing these hazards and using Work Positive. The conference does not create a new legal duty; it reinforces the existing requirement to assess work-related hazards and implement proportionate controls.

Primary sources

This article is general information for Irish employers, managers and safety practitioners. It does not replace a competent assessment of the work, workforce and organisational conditions in a particular workplace.

Keep exploring

More practical guidance.

Browse Insights