The Culture Problem that isn’t a Culture Problem

For the first few years of my consulting practice, I sold leadership training as the cure for toxic culture. Give the managers better tools, better conversations, better self-awareness, and the culture would follow. I believed it because it worked often enough to keep selling it.

Then I sat in on a psychosocial risk briefing and it was then I realised that leadership training would barely scratch the surface.

Training could sharpen how a leader showed up in the room. It couldn't touch the legal duty sitting underneath, one the organisation was already failing to meet.

Read as a Style Issue, not a Hazard

A large organisation I worked with had a workload problem in one directorate for close to three years. Complaints came through the usual channels: anonymous discussions with HR, exit interviews, the annual engagement survey, a handful of grievances that got resolved quietly. Leadership read the pattern as a management style issue. Someone needed coaching. Maybe a restructure.

But none of that, the workload complaints, the unclear reporting lines, the unresolved interpersonal conflict, ever got called what it legally was: a psychosocial hazard. Psychosocial hazard regulation is now in force in every Australian state. Victoria has its own dedicated regime under the Occupational Health and Safety Act, and its rules explicitly restrict employers from relying solely on general training, information, or instruction as a control measure unless higher-order operational or work-design changes are not reasonably practicable. Employers everywhere carry the same duty to identify, assess, and control these hazards as they do for a malfunctioning forklift or a chemical spill. A hazard register that only covers physical risk is an incomplete register.

Training Fixes Skill Gaps. A Hazard Needs a Fix

A leadership program can improve how a manager handles a difficult conversation. It cannot retrospectively discharge a duty the organisation should have been meeting through risk assessment, consultation, and documented controls.

Psychosocial hazards include job demands, low job control, poor support, workplace conflict, poor organisational justice, and more. They carry the same legal standing as a trip hazard on a warehouse floor, and regulators are increasingly treating them that way. There is now less tolerance for a generic wellbeing program, and yes that includes your Building Resilience workshop, standing in for a specific and assessed control. An organisation can run a wellbeing session every quarter and still be sitting on an unmanaged psychosocial hazard, in the same way a workplace can run a fire drill every quarter and still have faulty wiring.

The Napkin Test

I need to be blunt here, because someone should be, and this pattern is common enough that I doubt it's just organisations I've worked with. You already know where this sits. You could write it on the back of a napkin right now: the team, the manager, the process that's been generating complaints for years. You don't need a survey to tell you.

Yet these same generic workshops keep getting the sign-off. New values posters adorn the walls, and a resilience module is rolled out across the organisation, because naming the specific team or manager feels heavier than keeping the response general. Not because you can't see it, you can, but because the system rewards the general response and rarely protects the person who names the specific one. When the proverbial s%#t eventually hits the fan, a formal complaint, a WorkSafe notification, a resignation letter that names names, it won't be a surprise. The trigger will have been visible for a long time.

This is where being an outsider is the advantage. The Culture Compass diagnostic exists precisely to surface the specific over the general. I don't have to sit across from that manager at the next leadership offsite, so I can say the uncomfortable thing directly, in a confidential report to the executive team with their name attached to the pattern, in a way that someone inside the building often can't afford to. That's not a criticism of internal HR teams carrying real political risk every day. It's the entire reason a robust outside diagnostic has value: it can point at the exact hazard, not the softened version of it.

Picture two responses to the same napkin list. The generic response is an organisation-wide resilience module, a revised values statement, and a line in next year's engagement survey asking whether people feel supported. Nobody is named, nothing is documented as a hazard, and the same complaint shows up again in twelve months, just phrased differently. Leadership gets to point at the spend and the attendance numbers as evidence something was done, and technically something was, just not the thing that was needed.

The person standing at the front of that resilience workshop, clicker in hand, is very often the same person the napkin list points to. The hazard ends up delivering the training, and everyone in the room claps politely at the end.

The targeted response takes that list somewhere else entirely. It names the directorate and the manager whose behaviour is driving the pattern and treats that as the hazard rather than the symptom. It documents a control plan specific to that team: clearer role boundaries where the complaints point to unclear reporting lines, a mediated conversation where they point to interpersonal conflict, a workload review where they point to volume. It sets a review date, three or six months out, where someone is accountable for checking whether the specific control reduced the specific hazard, not whether the organisation-wide engagement score moved. The manager is enrolled in targeted development, not as punishment, but because the hazard sits with them and pretending otherwise is how it survives another year. Alternatively, the decision is made to move the person on.

One approach pretends the whole organisation is the hazard. The other treats the actual source as the hazard, and only the second one closes anything out.

The practical shift, whether you use a diagnostic or not, is this: stop treating psychosocial risk as an engagement initiative and start treating it as a WHS obligation with its own paper trail, aimed at the specific source, not the whole organisation.

That means a documented risk assessment naming the actual team or process, not a survey averaged across the organisation. It means consultation records that show workers had genuine input into controls, not just a feedback form. It means a review cycle, because a hazard assessed as low risk twelve months ago doesn't stay that way on its own. Your culture reporting belongs in the same governance conversation as your WHS reporting, reviewed by the same committee, held to the same standard of evidence, naming the same specifics.

Most organisations keep these two conversations in separate rooms and keep the specifics out of both. HR owns one, safety owns the other, and the overlap between them is where the exposure sits, exactly where nobody wants to point directly.

Bad Culture isn't the Risk

What gets an organisation caught out isn't a bad culture. It's a compliance problem dressed up as a people problem, signed off by someone who hoped nobody would check the paperwork.

A hazard doesn't stop being a hazard because you called it something softer. Somewhere in your organisation right now, someone could write the same napkin list I described earlier. The only question left is whether that list becomes a plan before it becomes an incident report.

Not something you'd put in the comments. Understandably.