Skip to content
Aligned to the PRisMA Guidelines 2024 · DOSH Malaysia

DOSH Audit-Ready Workplace Psychosocial Risk Assessment

PRisMA (Psychosocial Risk Assessment and Management at the Workplace) is the psychosocial risk assessment DOSH requires of employers in Malaysia. We run all three phases — the LEO26 survey, the EPC23 checklist, and the PRiMA Action Plan — and hand over a compliance report that is ready to be inspected.

Example Assessment Scope

1,500

Employees

6

Work Units

Typical Estimated Cost

RM15,400 – RM21,100

Pricing is fitted to your organisational structure, the number of work units, and the risk levels identified.

Estimate the cost for your company
PTP-registered assessors

Assessments are run by DOSH-registered assessors.

Employee answers stay confidential

No link between a respondent identity and their answers.

Reports generated automatically

The compliance pack is generated straight from the raw data.

Support through the inspection

We are there when the DOSH officer starts asking.

26

Items in the LEO26 survey

Measures three components: JC, WD and JS

23

Items in the EPC23 checklist

Employer practices that must be evidenced

3

Assessment phases

Survey, practice review, action plan

1–2

Years of validity

1 year if any work unit is high risk

The PRisMA Assessment Journey

Three phases, one audit-ready report

Each phase builds on the results of the one before it. Phase 2 runs only for the work units identified as high risk in Phase 1 — you are not paying for a review nobody needs.

Phase 01

Preparation & Survey

LEO26 Survey

  • Digital distribution, tracking and hosting of the confidential 26-item survey across your entire workforce.
  • Data aggregation and the two-level score calculation — individual (RICoV), then organisational (% at high risk).
  • Paper form and OMR scanning mode for employees without email or a smartphone.
  • Multilingual survey delivery, including options for migrant workers.

Estimated Cost

RM11,400 – RM15,600

Phase 02

Employer Practice Review

EPC23 Checklist

  • A guided session with your management team to complete the 23-item employer practice checklist.
  • Every “Yes” must be backed by documentary evidence; without evidence it is recorded as “No”.
  • Run only for the work units identified as high risk in Phase 1 — you are not paying for a review nobody needs.
  • Every “No” is mapped against the LEO26 component it fails to control.

Estimated Cost

RM2,200 – RM3,000

Phase 03

Action Plan & Report

PRiMA Action Plan Table

  • Drafting the PRiMA table — every gap grouped under the seven prescribed action themes.
  • A DOSH audit-ready report with prioritised interventions for each work unit.
  • A HIRARC-style risk register with residual risk ratings.
  • Cost sits toward the top of the range when corporate training or manager workshops are included.

Estimated Cost

RM1,800 – RM2,500

Total Estimated Cost

RM15,400 – RM21,100

Fitted to your organisational structure. The cost is calculated on a survey scope of 1,500 employees and analysis across 6 work units. Stratified sampling can bring the Phase 1 administration cost down substantially without weakening statistical validity.

Deliverables

The documents and outputs you receive

What You Receive

  • Individual and organisational risk scores for every work unit
  • EPC23 checklist findings for the high-risk work units
  • The PRiMA table — your psychosocial risk management action plan
  • Prioritised interventions and an action roadmap
  • A DOSH audit-ready report with the full compliance pack
  • Expert recommendations for reducing psychosocial risk

Validity Period

2

years if every one of your work units sits at low risk

1

years if any work unit returns a high-risk score

A reassessment must be carried out before this period lapses, per the DOSH guidelines. Our system tracks your assessment expiry date and sends early reminders.

Financial Factors That Matter

Not claimable against HRD Corp

This is a regulator-mandated risk assessment service, not a training course. This external consultancy invoice cannot be claimed against your HRD Corp levy. Follow-on training modules are invoiced separately and are normally claimable.

Stratified sampling versus a full census

A statistically valid sample (300–400 out of 1,500, for example) can bring your Phase 1 administration cost down substantially.

Why It Matters

Psychosocial risk is not an HR issue — it is an occupational safety issue

A PRisMA assessment helps you meet the DOSH requirement, reduce psychosocial hazards, protect employee mental health, and build a more resilient and productive organisation.

Compliance

Meets the risk assessment requirement under the Occupational Safety and Health Act 1994.

Protection

Identify work stress, bullying and workload pressure before they become a crisis.

Productivity

Reduce absenteeism and turnover driven by work-related stress.

Evidence

Aggregate data you can defend when it is questioned.

Confidentiality Guarantee

Every employee answer is stored entirely separately from their identity. There is no link in the database between who answered and what they answered.

A work unit result is only shown once there are enough respondents. Work units too small to protect are labelled insufficient data — never shown as a score that could expose an individual.

Without confidentiality, there is no honesty.

Without honesty the data is invalid — and an invalid assessment protects nobody, the employer included.

Our Clients

Trusted across a range of industries

“Proses tiga fasa mereka jelas dari awal. Kami tahu tepat apa yang berlaku pada setiap peringkat, dan laporan akhir terus diterima semasa pemeriksaan DOSH tanpa sebarang pertanyaan susulan.”
SA Sarah Lim Human Resources Manager, Sinaran Manufacturing Sdn Bhd
“Kebanyakan pemandu kami tiada emel syarikat. Mod borang kertas dan imbasan menyelesaikan masalah yang kami sangka tidak boleh diselesaikan tanpa berbulan kerja manual.”
RA Ravi Kumar Pengarah Operasi, Nusantara Logistics Bhd
“Yang paling meyakinkan pasukan pengurusan kami ialah apabila skor persepsi dipadankan dengan data pusing ganti sebenar kami. Ia menukar perbualan daripada pendapat kepada bukti.”
DR Dr. Aishah Omar Ketua Perkhidmatan Klinikal, Delima Healthcare Group

Knowledge Centre

Latest guides & updates

All articles

FAQ

What clients ask us most often

Cannot find the answer you need? Our team replies within one working day.

Ask us directly

What is PRisMA?

PRisMA (Psychosocial Risk Assessment and Management at the Workplace) is the framework for assessing and managing workplace psychosocial risk issued by Malaysia’s Department of Occupational Safety and Health (DOSH). It covers three instruments: the LEO26 employee survey, the EPC23 employer practice checklist, and the PRiMA action plan table. Note that PRiMA is the name of the action plan table only, while PRisMA is the name of the whole assessment process.

What is LEO26?

LEO26 (Likelihood of Environment & Occupational Exposure Scale) is a 26-item survey completed by employees themselves to measure their exposure to occupational psychosocial risk over the past six months. Its items fall into just three components: Job Control (JC, 11 items), Work Demand (WD, 5 items) and Job Support (JS, 10 items). Each component score is totalled, then compared against the RICoV cut-off value to determine every individual’s risk status.

What is EPC23?

EPC23 (Employer Practice Checklist) is a 23-item checklist of employer practices answered Yes or No. The employer completes it together with the consultant in one guided session. Every Yes must be backed by documentary evidence — without evidence, the answer is recorded as No. Every No is then mapped against the LEO26 component it fails to control.

How much does a PRisMA assessment cost?

For an organisation with 1,500 employees and 6 work units, the typical estimate falls between RM15,400 and RM21,100. Phase 1 runs from RM11,400 to RM15,600, Phase 2 from RM2,200 to RM3,000, and Phase 3 from RM1,800 to RM2,500. Pricing depends on your organisational structure, the number of work units, the risk levels identified, and whether follow-on training is included.

Is a PRisMA assessment claimable against HRD Corp?

No. Because it is a regulator-mandated risk assessment service rather than a training course, the invoice for this external consultancy cannot be claimed against your HRD Corp levy. Follow-on training modules such as manager workshops are, however, invoiced separately and are normally claimable.

How long is an assessment valid for?

The assessment is valid for 2 years if every one of your work units sits at low risk. If any work unit returns a high-risk score, validity drops to 1 year. A reassessment must be carried out before that period lapses, per the DOSH guidelines.

Does every employee have to answer the survey?

Not necessarily. Statistically valid stratified sampling can be used — around 300 to 400 out of 1,500 employees, for example — and this can bring the Phase 1 administration cost down substantially. We calculate the minimum sample size for each work unit so the results stay valid, with a practical minimum of 10 respondents per unit.

Are employee answers genuinely confidential?

Yes. Answers are stored entirely separately from respondent identities and there is no link in the database between the two. Each respondent is known only by a code such as R1, R2 and R3 — never by name. A work unit result is only shown once there are enough respondents; work units too small to protect are reported as insufficient data. Without confidentiality employees will not answer honestly, and dishonest data makes the entire assessment invalid.

For consultants

Certified consultant? Run your own assessments on the same platform.

The platform we use to run our own PRisMA assessments is open to registered PTPs. LEO26 campaigns, the EPC23 checklist, the PRiMA Action Plan, and audit-ready report packs — all under your control, for your clients.

  • No monthly fee, no minimum contract, no user limit.
  • Survey campaigns with short links and QR posters for every department.
  • LEO26 and EPC23 scores calculated automatically, reports generated straight from the raw data.
  • Employee answers stay confidential — no link between a respondent identity and their answers.

Monthly Fee

RM0

You are charged only when you produce real work.

RM29per organisation

Client organisation registered

One time only. Reassessing the same client next year is not charged again.

RM1.00per participant

Participant assessed

Charged when the campaign closes. Participants who did not respond are not charged.

RM50per department

Departmental report

Charged when the report is finalised. New versions of the same report are free.

Not a PTP, and just want the assessment done for your company? Request a quote — we run all three phases.

Next Step

Ready to start your PRisMA assessment?

Tell us your headcount and how many work units you have. We will come back to you with a scope and a quote built for your organisation within one working day.

Are you a registered PTP wanting to run this platform yourself? See platform pricing or register a PTP account.