Psychological Safety ISO 45003 Case Study: Lessons from a 90-Day Transformation Project

Consultants normally publish case studies when everything went perfectly.

This is a little different.

This psychological safety implementation project ultimately produced meaningful progress for the client, but commercially it was one of those projects where we underestimated the implementation effort and effectively consumed our expected project margin by putting additional consultants and trainers into the assignment.

It also gave our team one of our most useful lessons in implementing psychological safety, psychosocial risk management and ISO 45003.

The central lesson was simple:

ISO 45001 certification can provide an excellent management-system foundation, but it should never be used as a substitute for assessing actual psychological safety maturity.

For confidentiality, the customer's name, location and identifying operational information are not disclosed in this case study.

The Project Background

Himaya Prevention routinely undertakes ISO implementation, documentation and management-system improvement projects.

Our normal model may include:

ISO documentation projects;
Gap assessments;
Implementation support;
Management-system transformation projects;
Internal audit readiness;
Corrective-action support; and
Approximately 90-day structured improvement programmes.

For these projects we normally estimate consultant and trainer effort based on:

Number of sites;
Number of employees;
Existing management-system maturity;
Existing documentation;
Management involvement;
Training requirements;
Number of departments;
Implementation scope; and
Expected on-site man-days.

Why This Psychological Safety Project Looked Straightforward Initially

The client already had an established ISO 45001-certified occupational health and safety management system and was certified through a reputed certification body.

This naturally gave us confidence that several management-system foundations would already be available.

We expected to find established systems covering areas such as:

Policies;
Risk assessment;
Worker consultation;
Incident reporting;
Training;
Corrective actions;
Internal audits;
Management reviews;
Safety observations; and
General safety communication.

Our assumption was therefore that the organization already had a strong platform and that our main task would be to extend that platform towards psychological health, psychosocial risks and psychological safety using ISO 45003 guidance.

This assumption influenced our original project man-day calculation.

That was our first mistake.

Our Original 90-Day Psychological Safety Transformation Model

Our planned transformation journey followed four stages:

Diagnose → Align → Embed → Monitor

For transformation projects, our objective is normally to create measurable maturity improvement during the initial project period and provide a roadmap for subsequent maturity stages.

Where baseline maturity permits, we may target approximately one maturity-stage improvement during a focused 90-day intervention. This depends heavily on management commitment, workforce participation and the initial maturity identified during assessment.

Stage 1 — Diagnose: Assess Maturity and Employee Sentiment

We started by assessing the organization's current psychological safety environment.

Map the Existing Maturity

For consulting purposes, our maturity model uses stages broadly described as:

Pathological;
Reactive;
Calculating;
Proactive; and
Progressive / Generative.

This five-stage maturity model is an implementation framework used by our consulting team and is not a maturity classification specified by ISO 45003.

Assess Employee Sentiment

We also incorporated psychological safety survey concepts associated with Amy Edmondson's research to understand whether employees felt comfortable:

Raising difficult issues;
Asking for help;
Admitting mistakes;
Expressing different opinions;
Taking reasonable interpersonal risks; and
Contributing their individual knowledge and skills.

The intention was to compare employee perception data with the maturity assessment rather than depending on either method alone.

Stage 2 — Align: Leadership and Supervisor Training

The second stage was designed around leaders, managers and supervisors.

Key behavioural themes included:

Responding constructively to bad news;
Listening before judging;
Encouraging employees to report uncertainty;
Replacing immediate blame with fact-finding;
Inviting disagreement;
Asking open questions;
Acknowledging personal limitations;
Responding appropriately when someone admits a mistake; and
Creating space for quieter employees to contribute.

Stage 3 — Embed: BBS, Spot Feedback and BFS

Our intention was then to move psychological safety away from the training room and into daily work.

Behaviour-Based Safety

Existing BBS and observation processes would be used to reinforce psychologically safe behaviours.

Spot Feedback

Managers, supervisors and employees would provide immediate positive reinforcement when people demonstrated behaviours such as speaking up, requesting assistance or challenging risk constructively.

Behavioural Feedback Sessions

We planned structured Behavioural Feedback Sessions — BFS where teams could review:

Behavioural observations;
Communication barriers;
Peer feedback;
Supervisor response;
Recurring concerns; and
Opportunities for improvement.

BBS and BFS were implementation mechanisms selected for this programme. They are not mandatory elements prescribed by ISO 45003.

Stage 4 — Monitor: Measure Progress and Sustain the Programme

The final stage would analyse:

BBS trends;
BFS participation;
Survey trends;
Peer-to-peer feedback;
Manager-to-employee feedback;
Reported concerns;
Corrective actions;
Leadership participation; and
Movement against the maturity roadmap.

Then the Baseline Assessment Changed Everything

The organization had a reasonably mature conventional safety-management system.

Procedures existed.

Safety protocols existed.

Management-system documentation existed.

ISO 45001 certification existed.

From a traditional safety-management perspective, the foundation appeared comparatively strong.

But psychological safety revealed another picture.

Safety-System Maturity Was Not the Same as Behavioural Maturity

Once we started examining behaviours, particularly around BBS, BFS, speaking up and peer-to-peer feedback, maturity was substantially lower than we had assumed during quotation.

The management system could tell employees:

“You should report unsafe conditions.”

But psychological safety asks another question:

“How comfortable are employees actually doing it — particularly when the issue involves a colleague, supervisor or established practice?”

Those are very different questions.

Our First Major Lesson: Never Infer Psychological Safety From an ISO Certificate

This became the most important lesson from the project.

ISO 45001 certification was useful evidence that an occupational health and safety management system existed.

But it did not tell us enough about:

Interpersonal trust;
Quality of peer feedback;
Fear of negative consequences;
Employee willingness to challenge supervisors;
Voluntary reporting behaviour;
Learning from mistakes;
How teams responded to disagreement;
Managerial reaction to bad news; or
Actual psychological safety at frontline level.

In retrospect, we should have completed a preliminary site visit and behavioural baseline before finalizing the fixed project effort.

Leadership Training Required Almost Three Times Our Expected Effort

Once the baseline became clear, simply delivering the originally planned training sessions would not have produced the intended result.

We needed substantially more:

Leadership sessions;
Supervisor workshops;
Small-group discussions;
Practical examples;
Coaching;
Repeated reinforcement;
Field follow-up; and
Behavioural observation.

Instead of reducing the project scope, we increased our involvement because we had committed to delivering a meaningful 90-day transformation programme.

Additional consultants and trainers were therefore deployed.

The Commercial Impact

The number of training and consulting man-days eventually became approximately three times higher than originally expected in parts of the programme.

Those additional visits consumed most of the project's expected profit margin.

From a purely commercial perspective, we had underestimated the assignment.

From a consulting perspective, however, it was important not to protect margin by reducing implementation quality after identifying that additional intervention was genuinely required.

By Month Three, the Project Was Coming Back on Track

After the increased intervention, we started seeing better alignment.

Managers and supervisors had a clearer understanding of:

What psychological safety meant;
How their responses influenced reporting;
Why listening mattered;
How to respond when employees admitted mistakes;
How to ask questions rather than immediately assign blame;
How to encourage difficult conversations; and
Why employee participation needed to extend beyond formal HSE systems.

By approximately the third month, the programme was much closer to the intended transformation path.

Then another important data point appeared.

The Second Blocker: Our BFS Participation Ratio Was Wrong

One of the programme's intended indicators was the source of Behavioural Feedback Sessions.

We did not want feedback to exist only because supervisors had been given a target.

A healthy psychological safety programme should progressively generate voluntary participation between colleagues.

Our Target

Our working target was approximately:

50% manager/supervisor-to-reportee feedback; and
50% peer-to-peer feedback.

It was not intended as an ISO 45003 requirement. It was a project KPI designed to test whether feedback behaviour was spreading horizontally through the workforce rather than remaining management-driven.

What the Actual Data Showed

The actual distribution was closer to:

80% management/supervisor-led feedback; and
20% voluntary peer-to-peer feedback.

At first glance the total BFS count appeared encouraging.

But once we analysed who was initiating the feedback, the picture changed.

Why 80% Supervisor Feedback and 20% Peer Feedback Concerned Us

Managers and supervisors were participating partly because programme expectations and targets had been established for them.

Employees had not yet adopted peer feedback at the same rate voluntarily.

That indicated that the programme was producing compliance faster than culture.

This distinction became extremely useful.

If we had measured only:

“Number of BFS completed”

the programme could have appeared successful.

But measuring:

“Who initiated the feedback?”

revealed a behavioural maturity gap.

Psychological Safety KPIs Need More Than Activity Counts

This experience changed how we think about psychological safety measurement.

For example:

Simple KPI	More Useful Question
Number of safety observations	What percentage were voluntarily generated by employees?
Number of BFS completed	Who initiated them?
Number of near misses reported	Which levels of the organization are reporting them?
Training completion	Did observable leadership behaviour change?
Employee suggestions	Were employees informed what happened to their suggestions?
Speak-up channels available	Do employees trust those channels enough to use them?

We Started a Second Awareness Intervention

Rather than accepting the overall BFS number, we introduced additional awareness and reinforcement focused specifically on peer-to-peer communication.

The message was:

Psychological safety is not something managers do to employees. It is something teams create together.

The additional intervention focused on:

How to give respectful peer feedback;
How to disagree without creating conflict;
How to challenge unsafe behaviour constructively;
How to receive feedback without becoming defensive;
How to ask colleagues for assistance;
How to appreciate somebody for speaking up;
How to discuss mistakes as learning opportunities; and
How to escalate an issue when peer discussion cannot resolve it.

And That Additional Intervention Made the Project Commercially Loss-Making

By this stage, the project's original consulting and training man-day allowance had already been substantially consumed.

The additional peer-to-peer awareness campaign required:

More consultant time;
More trainer visits;
Additional discussions;
Additional data review;
Further field engagement; and
Continued monitoring.

Because this was our first large-scale project focused specifically on this type of psychological safety transformation, we decided to absorb much of the additional effort rather than compromise the intended project outcome.

Commercially, that was painful.

Professionally, it was extremely valuable.

Our Corrective and Preventive Actions After This Project

We also apply CAPA thinking to our own consulting process.

The experience resulted in several changes to how Himaya Prevention now scopes psychological safety and ISO 45003 projects.

CAPA 1 — Never Assume Psychological Safety Maturity From ISO 45001 Certification

ISO 45001 certification remains valuable evidence of an established occupational health and safety management system.

However, we now treat psychological safety maturity as a separate baseline question.

We do not automatically assume that:

ISO 45001 certified = psychologically mature.

CAPA 2 — Conduct a Baseline Assessment Before Final Commercial Quotation

For significant psychological safety transformation assignments, we now prefer to obtain baseline information before finalizing the full implementation estimate.

Depending on the project, this may include:

One preliminary site visit;
Management interviews;
Review of existing BBS data;
Review of employee survey results;
Safety observation trends;
Near-miss reporting trends;
Existing employee engagement information;
Management-system documentation;
Workforce demographics; and
Existing training programmes.

CAPA 3 — Separate Documentation Effort From Behavioural Transformation Effort

Developing documentation can usually be estimated with reasonable accuracy.

Behavioural transformation is different.

Two organizations with:

The same workforce size;
The same industry;
The same ISO certification;
The same organizational structure; and
Similar documentation

can require completely different levels of coaching and intervention.

We now distinguish more clearly between:

Fixed deliverables — assessments, reports, procedures, formats and agreed training.

and

Variable implementation effort — additional consultant and trainer man-days required because of the actual maturity identified during implementation.

CAPA 4 — Include a Variable Consultant and Trainer Man-Day Component

Previously, a transformation project could be quoted almost entirely as a fixed project price based on estimated effort.

Our preferred commercial structure now protects both parties.

Fixed Project Component

This may cover:

Baseline assessment;
ISO 45003 gap assessment;
Survey design and analysis;
Documentation;
Defined workshops;
Defined reports;
Implementation tools; and
Roadmap.

Variable Man-Day Component

A defined rate may also be established for additional:

Consultant man-days;
Trainer man-days;
Site visits;
Coaching;
Department workshops;
Field observations; and
Additional interventions requested or found necessary.

This means that if either the client or our consulting team identifies the genuine need for additional on-site effort, that support can be provided transparently without either compromising the programme or unexpectedly absorbing unlimited additional effort.

CAPA 5 — Measure Participation Quality, Not Just Participation Quantity

The BFS experience taught us that activity counts alone can be misleading.

We therefore recommend segmenting relevant indicators by:

Management initiated;
Supervisor initiated;
Employee initiated;
Peer initiated;
Department;
Site;
Shift;
Employment category; and
Repeat participation.

This can reveal whether a programme is genuinely spreading through the organization.

What We Would Do Differently If We Started the Same Project Today

If the same opportunity came to us today, our sequence would be:

1. Preliminary Data Request

Collect essential information before final quotation.

2. Baseline Site Visit

Observe actual communication and behavioural practices.

3. Psychological Safety Survey

Establish employee sentiment while protecting appropriate anonymity.

4. Leadership Interviews

Understand how managers perceive reporting, mistakes, challenge and accountability.

5. BBS and Reporting Analysis

Examine who is generating observations rather than only total volumes.

6. Maturity Assessment

Establish a realistic starting point.

7. Define the 90-Day Objective

Agree what can realistically be achieved within the initial transformation window.

8. Establish Fixed and Variable Project Components

Define project deliverables and additional man-day rates before implementation starts.

9. Begin the Transformation Programme

Start Diagnose → Align → Embed → Monitor with a much more reliable baseline.

Another Important Lesson: Documentation Is Usually the Easy Part

ISO consultants are accustomed to developing:

Policies;
Procedures;
Risk assessments;
Registers;
Forms;
Checklists;
Training matrices;
Audit programmes;
Objectives; and
Management-review formats.

Those are important.

But psychological safety becomes real when an employee standing in front of their supervisor believes:

“I can tell you something you may not want to hear, and you will listen.”

No document can create that response by itself.

Psychological Safety Does Not Mean No Accountability

Another concern raised during many psychological safety discussions is whether increasing openness weakens management discipline.

It should not.

Organizations still need clear boundaries between:

Honest mistakes;
Human error;
System weaknesses;
Competence gaps;
At-risk behaviour; and
Deliberate or reckless violations.

Psychological safety should make it easier to identify problems early — not eliminate accountability.

Why Peer-to-Peer Feedback Matters

Supervisor feedback is valuable, but when virtually all feedback comes from people in authority, the programme remains predominantly hierarchical.

Peer-to-peer feedback provides another maturity signal.

Imagine an employee telling a colleague:

“I noticed something that could put you at risk. Can we discuss it?”

and the colleague responding:

“Yes, thanks for telling me.”

That small interaction tells us something important about organizational culture.

The eventual objective is not to achieve an artificial numerical ratio. It is to establish an environment where constructive dialogue happens voluntarily and naturally.

How This Experience Improved Our Psychological Safety Consulting Methodology

The commercial loss from this project became an investment in our own capability.

It changed:

How we conduct pre-project assessments;
How we interpret ISO 45001 maturity;
How we estimate consulting effort;
How we structure commercial proposals;
How we measure BBS;
How we measure BFS;
How we segment feedback data;
How we train managers;
How we promote peer-to-peer participation; and
How we define realistic 90-day transformation objectives.

That learning now benefits future customers.

Our Current Psychological Safety Transformation Framework

Stage	Primary Activities
Diagnose	Site assessment, ISO 45003 gap review, psychosocial-risk assessment, survey, interviews, BBS analysis and maturity assessment.
Align	Leadership training, supervisor workshops, management coaching and behavioural expectations.
Embed	BBS, spot feedback, BFS, worker participation, communication campaigns and operational integration.
Monitor	KPI analysis, peer-feedback ratio, survey trends, corrective actions, maturity reassessment and improvement roadmap.

What Organizations Planning ISO 45003 Implementation Should Check Before Starting

Before deciding the programme duration or budget, we recommend asking:

Do workers voluntarily report concerns?
Can employees challenge supervisors?
How are mistakes handled?
How strong is peer-to-peer feedback?
Does BBS genuinely involve employees?
Who generates most safety observations?
Do employees ask for help?
Do leaders invite opposing views?
Are psychosocial hazards included in risk assessments?
How is workload monitored?
How are organizational changes assessed?
Are bullying and harassment risks managed?
Do employees trust existing reporting mechanisms?
What employee sentiment data already exist?
How will improvement be measured?

Frequently Asked Questions

Does ISO 45001 certification mean an organization has good psychological safety?

No. ISO 45001 provides a strong OH&S management-system framework, but psychological safety needs to be assessed through employee experience, leadership behaviour, communication patterns, participation and other evidence.

Is ISO 45003 only for companies without ISO 45001?

No. ISO 45003 is specifically designed to support management of psychosocial risks within an OH&S framework and can be integrated particularly effectively into an existing ISO 45001 system.

Can psychological safety be transformed in 90 days?

A focused 90-day programme can establish a baseline, develop systems, train leaders, introduce behavioural mechanisms and generate measurable improvement. Sustainable culture change generally requires continued reinforcement beyond the initial programme.

What is the biggest mistake when estimating an ISO 45003 project?

One major mistake is estimating behavioural transformation effort solely from documentation maturity or ISO 45001 certification status.

Why measure peer-to-peer feedback?

Peer participation can help determine whether feedback behaviours have moved beyond management-driven compliance and are becoming part of everyday team interaction.

Are BBS and BFS mandatory under ISO 45003?

No. They can be useful implementation tools, but ISO 45003 does not require organizations to operate a BBS programme or Himaya Prevention's BFS methodology.

Does psychological safety remove disciplinary action?

No. Organizations still need accountability. Psychological safety should support reporting, learning and constructive challenge while maintaining appropriate responses to deliberate or reckless violations.

What We Learned From Losing Our Margin

Looking back, the project gave us four lessons that are now built into our methodology:

Never assume behavioural maturity from certification alone.
Assess the baseline before committing to transformation effort.
Measure the quality and source of participation, not only activity counts.
Separate predictable documentation work from variable behavioural-change man-days.

We could simply describe the project as a successful psychological safety implementation.

But the more useful story is that our initial assumption was wrong, the real baseline required substantially more effort, we deployed additional resources to protect the project objective, and the experience permanently improved how we scope and deliver these assignments.

Planning a Psychological Safety or ISO 45003 Project?

If your organization is considering ISO 45003 implementation, psychological safety maturity assessment, psychosocial risk assessment, leadership training, BBS improvement or a structured psychological safety transformation programme, the best starting point is an evidence-based baseline.

Himaya Prevention can support:

Psychological Safety Maturity Assessment;
ISO 45003 Gap Assessment;
Psychosocial Risk Assessment;
Employee Psychological Safety Surveys;
Management and Supervisor Interviews;
Leadership Training;
BBS and BFS Implementation;
Psychological Safety Documentation;
90-Day Transformation Programmes;
Internal Assessment;
KPI Development;
Management Review Support; and
Continual Improvement Roadmaps.

Our biggest learning from our first large-scale project is now part of the value we bring to the next one: establish the real baseline first, then design the transformation around evidence rather than assumptions.