By Phil O'Toole
Managing Partner
This week marks the national Bullying No Way Week, an initiative traditionally designed to protect school children from intimidation and harassment. Yet, as risk and audit professionals, we must ask ourselves a critical question: do these toxic behaviours genuinely disappear at graduation, or do they simply evolve into sophisticated corporate risks? The reality is that playground dynamics frequently transform into corporate liabilities, where subtler, more insidious forms of bullying compromise both human wellbeing and operational integrity.
The Scalability of Behavioural Risks
The official 2026 campaign theme, ‘Small Acts, Big Impact’, serves as an excellent framework for corporate governance. In a school yard, a small act might be including someone at lunch; in a corporate environment, a small act is ensuring a junior analyst's dissenting voice is heard during a critical risk assessment. In risk management, we know that microaggressions, targeted overwork, and informational gatekeeping are the cultural equivalents of minor process deviations. Left unchecked, these small behavioural failures scale up rapidly, ultimately causing operational breakdowns and severe compliance breaches.
Why Bullying is a Material Control Failure
From an audit perspective, workplace bullying is far more than a localised human resources grievance; it represents a material control failure. When a toxic manager or peer uses intimidation to dominate a team, a culture of fear takes root.
In this environment, staff actively hide mistakes, skip mandatory peer-review protocols, and suppress data out of fear of retaliation. This silence breaks the internal control chain, meaning your audit trails are no longer reliable, your risk registers are compromised, and the data driving your executive decision-making is fundamentally flawed.
The Regulatory Shift to Psychosocial Governance
Regulatory bodies are increasingly treating psychological safety with the same scrutiny as financial or physical safety. National health and safety frameworks demand that corporate leaders take an active, analytical approach to behavioural exposure.
According to the regulatory guidelines on Managing Risks from Workplace Bullying published by Safe Work Australia, organisations must systematically:
For an auditor, these metrics are the leading indicators of cultural rot.
Furthermore, this shift from human resources to formal corporate governance means that boards and executives now face direct legal and fiduciary accountability for failing to police toxic environments. Relying on passive, written policies without testing their execution leaves an organisation exposed to substantial regulatory penalties.
The Blind Spot in Fiduciary Duty
Commenting on corporate governance shifts, professional resources like the Governance Institute of Australia emphasise that ‘ignoring psychosocial governance isn't just bad optics, it's a governance breach’. If a leadership team is comfortable auditing complex financial structures but completely blind to whether managers are covertly terrorising staff or structurally hoarding information, they are neglecting a critical piece of their risk management matrix.
Embedding Cultural Health into the Internal Audit Plan
Mitigating this risk requires moving past reactive, tick-box policies and embedding psychological safety directly into your internal audit plan. Comprehensive risk assessments must evaluate low-visibility operational areas, structure anonymous feedback loops, and mandate rigorous exit interviews to capture cultural realities that standard reviews miss.
Leaders must proactively establish clear behavioural benchmarks, ensuring that even minor instances of exclusion or unreasonable management action are flagged and modified immediately before they manifest as costly legal liabilities.
Ultimately, fostering a resilient organisation means realising that governance and culture are deeply intertwined. This Bullying No Way Week, we challenge corporate leaders to look closely at the ‘small acts’ defining their daily office or remote operations. By auditing your culture with the same discipline applied to your financial balance sheets, you protect your most valuable asset—your people—while securing the integrity of your entire operational risk framework.
How Healthy Is Your Corporate Culture?
Culture is the ultimate internal control, but it cannot be measured on a standard balance sheet. If you want to identify hidden behavioural blind spots before they escalate into regulatory or operational failures, a structured cultural risk assessment is your best line of defence.
Your Risks | Our Solutions – How Centium Can Help
Centium prides itself on its internal audit and risk management expertise. Our team of compliance, WHS specialist and performance auditors brings a wealth of experience and professional qualifications. At all times our team members adhere to the highest standards set forth by the Institute of Internal Auditors’ International Professional Practices Framework (Global Internal Audit Standards), and other Australian and international standards, and relevant sector requirements. We deliver risk-based plans and audits to our clients, always ensuring that our recommendations are practicable and improvement-focused.
Some recent engagements have included:
To find out how Centium can help you, go to centium.com.au or ring us on 1300 237 810
