Helping schools maximise technology investment to protect students and manage psychosocial risks
Helping schools maximise technology investment to protect students and manage psychosocial risks
Schools are increasingly expected to manage psychosocial hazards with the same level of rigour as physical safety risks. Under model work health and safety laws, organisations must identify potential sources of psychological harm, assess associated risks, implement appropriate controls, and regularly review their effectiveness.
In a school context, these risks can stem from a range of factors, including bullying and harassment, exposure to distressing student matters, high workloads, unclear roles, inadequate support, and workplace conflict. While these issues directly affect staff wellbeing, they also intersect with student safety, particularly where harmful behaviours, limited oversight or ineffective response processes create broader risks across the school community.
Safe Work Australia guidance requires psychosocial risks to be eliminated, so far as is reasonably practicable, or otherwise minimised. This reinforces that psychosocial risk management is not optional; it is a core legal and operational responsibility for organisations.
Embedding psychosocial risk into governance and operations
For school leaders and business managers, managing psychosocial risk cannot sit solely within HR or wellbeing programs. It needs to be embedded across key areas, including:
- Governance frameworks and oversight structures
- Policies and reporting pathways
- Investigation processes and record keeping
- Training and staff awareness
- Systems used to monitor and respond to incidents.
Guidance specific to schools highlights that risks including bullying, harassment, aggression, trauma exposure, unreasonable workloads and organisational change require proactive management. Regulators are increasingly expecting schools to demonstrate practical steps to identify and manage these risks early, rather than relying on reactive responses after harm has occurred.
This creates a strong case for schools to review whether their existing processes, technology controls and investigation capability are fit for purpose. This reinforces psychosocial risk management as both a legal and operational responsibility for schools.
Strengthening oversight through digital monitoring and early intervention
One practical area where schools can strengthen their response is the monitoring and management of inappropriate digital interactions within school-managed platforms.
BDO recently supported an independent school to uplift its monitoring and alerting capabilities within its Microsoft 365 environment using Purview. Working across a large cohort of staff and students, the objective was to strengthen digital safety, enable earlier identification and intervention where concerning behaviours emerge, and support a more robust and defensible investigations process aligned to policy, governance, and privacy requirements.
While this work focused on inappropriate conduct, it was limited to school-issued accounts and devices. Social media interactions or bring-your-own-device (BYOD) environments were out of scope.
Although this work focused on digital interactions rather than the full spectrum of psychosocial hazards, it demonstrates how schools can apply a risk-based lens to behaviours that may contribute to bullying, harassment or other psychosocial risks.
It also illustrates how governance, process design and technology can work together to enable earlier identification and a more proactive response.
To support the school, BDO delivered a series of targeted improvements designed to strengthen both process and system capability, including:
- Mapping existing investigation processes, with a focus on subpoena handling and compliance searching
- Developing a clear Purview configuration guide to support consistent use
- Establishing a structured naming convention to enable end-to-end investigations in Purview
- Delivering targeted training to uplift capability in the communication compliance module
- Refining alert configurations to reduce false positives and minimise alert fatigue.
Together, these outcomes helped streamline investigations, improve consistency in record keeping, and enable a more timely and defensible response to potential issues, supporting more effective use of existing technology and a safer environment for staff and students.
What schools should do now
For school leaders and business managers, the key question is whether current settings are sufficient to identify and respond to risks before they escalate. Practical actions to consider include:
- Reviewing whether psychosocial risk is addressed across governance frameworks, policies, reporting pathways and investigation procedures
- Assessing whether existing controls enable early identification of harmful behaviours, including within digital environments
- Clarifying roles and responsibilities across leadership, HR, wellbeing, IT, and risk functions
- Testing whether existing systems and processes support consistent record keeping, defensible investigations, and appropriate privacy safeguards
- Prioritising targeted improvements that strengthen safety and compliance while maximising existing technology investments.
Schools that address these issues early are better positioned to meet their obligations, support staff wellbeing, and demonstrate a practical, defensible approach to governance and risk management.
How BDO can help
BDO’s digital team works with schools to strengthen their approach to psychosocial risk management by aligning governance, processes, and technology. Taking a pragmatic, risk-based approach, BDO supports schools to move beyond high-level policy and implement practical solutions that contribute to a safer, more resilient school environments.

