ISO 45003 Compliance Checklist for UK Employers 2026

Table of Contents

• What ISO 45003 Requires: The Compliance Checklist
  • Leadership commitment and policy
  • Documented procedures and records
• Conducting a Psychosocial Risk Assessment Template
  • Planning your assessment
  • Gathering data and identifying hazards
• Workplace Stress Risk Assessment: A Step-by-Step Approach
  • Identifying workplace stressors
  • Evaluating and prioritising risks
• ISO 45003 Implementation Guide: Practical Actions
  • Building your support infrastructure
  • Training managers and supervisors
• Workplace Mental Health Risk Assessment Examples
• Monitoring, Review and Continuous Improvement
  • Setting up measurement systems
  • Annual review and updating your checklist
• Common Mistakes to Avoid
• Conclusion
• Frequently Asked Questions

Last Updated: 12 October 2026

What ISO 45003 Requires: The Compliance Checklist

ISO 45003 is the international standard for managing psychological health and safety at work. It sets out what organisations need to do to protect employee wellbeing and prevent workplace stress. The checklist below covers the essential elements you'll need in place by 2026.

The standard requires two foundational areas: leadership commitment and documented procedures. Both must be visible and active across your organisation.

Leadership commitment and policy

Your leadership team must actively support psychosocial risk management. This isn't a box-ticking exercise, it requires visible commitment and resource allocation.

Start by creating a formal policy statement. This should declare your organisation's commitment to managing workplace stress and mental health risks.

Assign clear responsibility for implementation. Designate a lead person or team who owns the psychosocial risk programme. Give them authority to act and resources to deliver.

Review your existing health and safety policies. Check whether they address psychological hazards alongside physical ones. Many organisations find their current policies focus only on physical safety.

Set measurable objectives. Your goals might include reducing stress-related absences by a certain percentage or increasing the number of staff accessing mental health support. These targets keep the programme accountable.

Documented procedures and records

You need written procedures for identifying hazards, assessing risks, and managing them. Documentation shows regulators and your team that you have a structured approach.

Create a procedure for conducting psychosocial risk assessments. This should outline who leads assessments, how often they happen, and what methods you'll use. The procedure must explain how findings feed into action planning.

Document your process for reporting and investigating stress-related incidents. Include who staff should contact, how reports are handled confidentially, and what happens next.

Keep records of all assessments, actions taken, and outcomes. These records demonstrate compliance and help you track progress over time.

---

Conducting a Psychosocial Risk Assessment Template

A psychosocial risk assessment template identifies workplace stressors that could harm mental health. It forms the backbone of your ISO 45003 compliance checklist for UK employers.

Planning your assessment

Begin by defining the scope. Will you assess the whole organisation or specific departments first? Most organisations start with high-risk areas such as customer-facing roles or teams with high turnover.

Decide who will lead the assessment. You might use internal staff, an external consultant, or a combination. An external view often catches issues internal teams miss.

Choose your assessment method. Common approaches include surveys, interviews, focus groups, and observation. Many organisations use multiple methods to get a complete picture.

Set a timeline. Plan for data collection, analysis, and feedback. Allow at least 8-12 weeks for a thorough assessment.

Communicate the purpose to staff. Explain that the assessment aims to improve their working environment, not to blame individuals. Reassure staff that responses will be confidential.

Gathering data and identifying hazards

Distribute surveys to capture how staff experience workplace demands. Ask about workload, control over decisions, support from managers, and relationships with colleagues. Include questions about how work affects their wellbeing.

Conduct focus groups or interviews with a cross-section of staff. These conversations often reveal pressures that surveys don't capture. Listen for patterns across different roles and teams.

Review existing data. Check absence records, turnover figures, and exit interview feedback. High absence or turnover often signals underlying stress.

Observe working conditions. Note shift patterns, deadline pressures, and how teams interact. Physical environment matters too, poor lighting or noise affects wellbeing.

Document all findings systematically. Create a list of hazards you've identified, with notes on how many staff are affected and how severe the impact is.

---

Workplace Stress Risk Assessment: A Step-by-Step Approach

A workplace stress risk assessment evaluates which stressors pose the greatest risk and prioritises action. This is essential for your ISO 45003 compliance checklist.

Identifying workplace stressors

Common workplace stressors include excessive workload, unclear expectations, lack of control, poor communication, and inadequate support. List all stressors your assessment uncovered.

Book your meeting →

Categorise them by type. Stressors related to task demands differ from those related to relationships or organisational change. Grouping them helps you address root causes.

Consider which groups are most affected. Some stressors hit particular roles or teams harder. A customer service team might face different pressures than a back-office team.

Rate the frequency of each stressor. Does it happen daily, weekly, or occasionally? Frequent stressors generally pose greater risk.

Evaluating and prioritising risks

For each stressor, assess how many people it affects and how serious the impact is. Multiply these factors to create a risk score. This helps you prioritise where to focus first.

Stressors affecting many people or causing severe harm deserve immediate action. Stressors affecting few people or causing mild harm can be addressed later.

Consult staff when prioritising. They often have insights into which issues matter most. This also builds buy-in for your action plan.

Document your risk evaluation clearly. This shows that your decisions are evidence-based and fair.

---

ISO 45003 Implementation Guide: Practical Actions

Once you've identified risks, you need concrete actions to manage them. MySafeWellbeing supports organisations through this stage by providing tools and training that embed psychosocial risk management into daily practice.

Building your support infrastructure

Create clear pathways for staff to access support. This might include an employee assistance programme, counselling services, or peer support networks. Make sure staff know how to access these resources.

Establish a mental health committee or working group. Include staff representatives, managers, and health and safety leads. Meet regularly to review progress and address emerging issues.

Review your management practices. Ensure managers have tools to support their teams. This includes flexible working options, reasonable workloads, and clear communication about expectations.

Consider using a platform that combines anonymous insights into workplace pressures with confidential support pathways. This gives you data on what's affecting staff whilst offering them practical help.

Training managers and supervisors

Managers are crucial to creating a supportive environment. They need training on recognising stress, having supportive conversations, and signposting staff to help.

Provide training on psychosocial hazards and how to manage them. Managers should understand what causes workplace stress and their role in preventing it.

Teach managers how to have conversations about wellbeing. Many managers feel uncomfortable discussing mental health. Training builds confidence and skill.

Ensure managers know how to refer staff to support services. They should be able to explain options clearly and without stigma.

---

Workplace Mental Health Risk Assessment Examples

Real-world examples help you understand what a workplace mental health risk assessment looks like in practice.

A technology company identified that rapid growth had created unclear roles and responsibilities. Staff didn't know who to ask for decisions. The company created clear role descriptions and decision-making frameworks. This reduced confusion and stress.

A retail organisation found that scheduling practices created unpredictable hours for staff. This made it hard to plan personal time and caused anxiety.

A healthcare trust discovered that staff felt unsupported when dealing with difficult situations. The trust introduced peer support groups and coaching for managers. Staff reported feeling more confident and supported.

These examples show that psychosocial risks are often manageable when you understand what's causing them and take targeted action.

---

Monitoring, Review and Continuous Improvement

Your ISO 45003 compliance checklist isn't a one-time exercise. You need systems to monitor progress and update your approach as circumstances change.

Setting up measurement systems

Define metrics that track your progress. These might include:

• Staff absence rates and trends
• Results from regular pulse surveys on wellbeing
• Usage of support services
• Staff turnover in high-risk areas
• Feedback from focus groups or interviews

Collect data regularly. Monthly or quarterly reviews help you spot trends early. Don't wait a year to assess progress.

Benchmark against previous years. This shows whether your actions are making a difference. It also helps you set realistic targets.

Book your meeting →

Annual review and updating your checklist

Schedule a formal annual review of your psychosocial risk management programme. Involve staff, managers, and health and safety leads.

Review what you've learned during the year. Which actions worked well? Which didn't? What new stressors have emerged?

Update your risk assessment based on current conditions. Organisations change, new pressures emerge, old ones may ease.

Refresh your action plan. Set new priorities based on current risks. Celebrate progress and adjust tactics where needed.

Communicate findings and plans to staff. Transparency builds trust and shows that their feedback leads to action.

---

Common Mistakes to Avoid

Many organisations stumble on the same pitfalls when implementing ISO 45003 compliance.

Treating it as a compliance box rather than a genuine improvement effort. If staff sense that psychosocial risk management is just paperwork, they won't engage. Commitment must be visible and real.

Assessing risks but not acting on findings. An assessment that leads nowhere damages trust. Ensure you have resources to implement actions.

Focusing only on individual support rather than addressing workplace hazards. Counselling helps individuals cope, but it doesn't fix underlying stressors. You need both hazard management and support.

Failing to involve staff in the process. Staff know what causes stress in their work. Exclude them and you'll miss key issues and lose buy-in.

Not reviewing and updating your approach. Organisations change. Your psychosocial risk management must evolve with them.

---

Conclusion

An ISO 45003 compliance checklist for UK employers in 2026 requires commitment to identifying and managing psychosocial hazards. This means leadership support, documented procedures, regular assessment, and concrete action.

The standard recognises that workplace stress is a health and safety issue like any other. It demands the same rigour, documentation, and continuous improvement you'd apply to physical safety.

MySafeWellbeing helps organisations embed this approach through anonymous insights into workplace pressures, confidential support pathways for employees, and practical training for managers.

Start with a thorough assessment of your current situation. Build leadership commitment. Implement actions based on what you learn. Monitor progress and adjust as you go. This approach turns compliance into a genuine culture of psychological safety.

HSE guidance on managing stress at work

ISO 45003 standard overview

CIPD research on workplace mental health

Acas guidance on workplace mental health support

Mind guidance for employers on mental health at work

Frequently Asked Questions

What is ISO 45003 and why does it matter for UK employers?

ISO 45003 is an international standard that provides guidance on managing psychosocial risks and mental health in the workplace. For UK employers, it complements existing health and safety obligations under the Health and Safety at Work etc. Act 1974 and the Management of Health and Safety at Work Regulations 1999. Whilst not a legal requirement in itself, ISO 45003 helps organisations systematically identify and control workplace stressors that can harm employee wellbeing. Adopting the standard demonstrates a commitment to creating a psychologically healthy workplace and can reduce absence, improve retention, and enhance productivity.

How do I assess psychosocial risks at work using ISO 45003?

A psychosocial risk assessment template under ISO 45003 involves identifying hazards related to work organisation, job demands, control, support, and relationships. Start by consulting employees and managers to understand their experiences. Use surveys, focus groups, or interviews to gather data on factors like workload, clarity of role, bullying, or inadequate support. Document findings in a risk register, evaluate the severity and likelihood of each hazard, and prioritise those with the greatest impact on mental health. Record all steps and outcomes to demonstrate due diligence and inform your control measures.

What should a workplace mental health risk assessment include?

A comprehensive workplace mental health risk assessment should cover: job demands and workload, level of control and autonomy, managerial and peer support, relationships and potential for conflict, organisational change and job security, and physical working conditions. Include examples such as excessive overtime, unclear responsibilities, inadequate training, poor communication, or remote work isolation. Assess how these factors interact and their cumulative effect on mental wellbeing. Document the assessment process, involve employee representatives, and ensure findings lead to specific, measurable control actions rather than remaining theoretical.

How often should I review my ISO 45003 compliance checklist?

ISO 45003 requires regular monitoring and review. Conduct a formal review at least annually, or sooner if significant organisational changes occur, such as restructuring, new technology, or changes in working patterns. After implementing control measures, monitor their effectiveness through employee feedback, absence data, and engagement surveys. Update your checklist when new risks emerge or when previous controls prove ineffective. Continuous improvement is central to the standard, so treat your checklist as a living document rather than a one-time exercise.