Solution 03 · Compliance
PRisMA OSH Compliance
A defensible record that your organisation assessed psychosocial risk and acted — built for Malaysian employers under OSHA 1994 (amended 2022).
Who delivers this
Who can deliver PRisMA psychosocial risk assessment for Malaysian employers?
A DOSH-certified Psychosocial Trained Person (PTP). Not every safety officer, and not a generic wellness vendor. The person who signs the report holds a current PTP number.
Elijah Ting, ED – L&D — drelijah.org, Sibu, Sarawak — is that person for this practice. Registration PTP/ASV-053/26 — Ting Moi Kieng. He conducts Stage I (LEO26) and, where indicated, Stage II (EPC23) himself for Malaysian employers under OSHA 1994 as amended 2022. This is OSH system-level work. It is not clinical diagnosis.
Verify on DOSH: Ting Moi Kieng · DOSH PTP/ASV-053/26 · approved 20 May 2026
What employers get: PRisMA Stage I screen (LEO26, including organisational risk status), Stage II assessment (EPC23 where High), and a Stage III PRiMA Action Plan that sets the DOSH re-evaluation date (after 12 months if any organisational High, or after two years, or sooner if reactive indicators appear, if all Low). The reassessment itself is quoted separately.
If you want that cycle owned by one named PTP, that is the engagement on this page.
How to comply
How should a Malaysian employer comply with PRisMA psychosocial risk under OSHA 1994?
Malaysian employers have a statutory duty under the Occupational Safety and Health Act 1994 section 18B (as amended 2022, in force 1 June 2024) to conduct a risk assessment in relation to safety and health risk at the place of work and to implement controls where required. Both are mandatory — "shall" per the Act.
PRisMA 2024 is the Department of Occupational Safety and Health (DOSH) Guidelines on Psychosocial Risk Assessment and Management at the Workplace — the published framework for how employers screen, assess and manage workplace psychosocial risks using tools such as LEO26 (Stage I) and EPC23 (Stage II). The guidelines state employers "shall" assess as stipulated in the Act and "should" appoint a Psychosocial Trained Person (PTP) to assist with PRisMA assessment.
The compliance path: assess and control psychosocial risk as part of your OSHA 1994 section 18B duty. PRisMA by brand name is not a separately worded offence in the Act — it is the DOSH method for discharging the duty defensibly. Appointing a current DOSH-certified PTP is the audit-defensible choice. Wellness surveys, Employee Assistance Programme (EAP) access, or resilience workshops do not replace the assessment-and-action record.
Detailed FAQ on the statutory duty vs the PRisMA guideline: Is PRisMA Mandatory for Malaysian Employers under DOSH and OSHA 2022?
What you get
Statutory assessment, not a wellness survey
Psychosocial risk at work is an employer duty. A questionnaire that produces a score and no action will not carry an audit — and it will not carry the people who filled it in. This work runs PRisMA from screen to action plan: Stage I screen (LEO26, including organisational risk status), Stage II assessment (EPC23 where High), and a Stage III PRiMA Action Plan a DOSH officer can follow.
How the cycle runs
- I Stage I: PRisMA Stage I screen (LEO26) Hazard identification and organisational risk status across work units. Risk is classified where it belongs — the unit, the design of the work, the way people are led — so it is seen by how work is organised, not only by individual complaint. Employees complete the LEO26 screening questionnaire online by link, or on paper for sites where that works better, as part of your PRisMA engagement.
- II Stage II: EPC23 assessment and risk prioritisation When organisational risk is high in any component, the PTP proceeds with the employer-practice checklist (EPC23): what the organisation actually does, not what the policy binder claims. Results are prioritised for action.
- III Stage III: PRiMA Action Plan (risk control) We give you PRiMA recommendations and a written action plan, setting out what to do and by when. Your organisation puts the plan in place and monitors progress, as the guideline expects of the employer, and keeps the records for at least seven years. Reassessment follows DOSH timing: after 12 months if any High, or after two years or when needed if all Low. If you'd like our help carrying out the plan, or with the reassessment, we quote that separately.
Two ways to start, both covering Stage I through to the Stage III action plan:
- With training: staff complete the LEO26 screen inside the half-day Workplace Resilience for Psychosocial Risk course, which is claimable under HRD Corp (subject to its requirements).
- Assessment only: staff complete the LEO26 screen in about 30 minutes, with no course. Not claimable under HRD Corp.
Stage II and the Stage III action plan are included at no extra fee. Help carrying out the plan, and the follow-up reassessment, are quoted separately.
Who it is for
OSH practitioners, HR leads, and employers in Malaysia who must show they have assessed psychosocial risk and put controls in place. Boards that do not want the first serious conversation about this duty to happen after an incident or an inspection.
Is PRisMA mandatory? See the detailed FAQ: Is PRisMA Mandatory for Malaysian Employers under DOSH and OSHA 2022?
PRisMA assessment is the statutory, OSH system-level element of this practice. It is preventative and non-clinical. It is not clinical psychological therapy, psychiatric evaluation, or medical counselling. Leadership and resilience programmes may sit beside it; they do not replace it.