Counselling after the incident, no prevention before it: the gap the NSW Audit Office named

You have a critical-incident response. You have an EAP your people can call at 2am. On the spreadsheet the wellbeing spend looks healthy — arguably generous against the sector benchmark. And yet psychological injury keeps moving from a line item you can budget for to a ledger problem you cannot. The claims tail keeps lengthening, and now the Auditor-General is not looking at one bad outcome — it is looking at the program itself. The uncomfortable part is that nobody is doing their job badly. The response works. The question is whether a response was ever the right instrument.

It is worth reading what the NSW Auditor-General actually said, because it names the gap with unusual precision. Reviewing the mental health and wellbeing of NSW Police in 2025, the report found that the force's initiatives "provide counselling and support" but "do not address other psychological risk factors such as fatigue, role overload, or burnout" (NSW Auditor-General, 2025). Read that twice. The finding is not that the support is poor. It is that the support sits entirely at the bottom of the cliff, and nothing is being done at the top.

What does "no prevention before it" actually cost?

The same review put a figure on the consequence: psychological injury made up 74% of NSW Police workers compensation costs over five years — approximately $1.75bn (NSW Auditor-General, 2025). That is not a wellbeing statistic. That is an operating-model statistic. A number that size does not come from a few catastrophic events; it comes from a structural pattern in which the only available intervention activates after the injury has already occurred. You cannot counsel your way out of a $1.75bn claims trend any more than you can fund a burns unit instead of fireproofing the building.

The pattern is not unique to policing. It runs through every front-line public-sector role where exposure is the job. A paramedic in Victoria is assaulted, on average, every 50 hours, with assaults having tripled between 2001 and 2014 (Maguire 2018, cited in The Conversation). A national study found 40% of Australian paramedics have been diagnosed with a mental health condition and 8% live with PTSD — double the national average (cited in The Conversation, 2020). Emergency services, corrections, hospitals, child protection: same shape. The exposure is foreseeable, recurring and, in many cases, measurable in advance. Which is precisely why the law treats it the way it does.

Why is this a WHS matter, not a mental health one?

This is the reframe where most organisations are a year or two late. Under the model WHS laws and the psychosocial regulations now in force across most Australian jurisdictions, psychosocial hazards — fatigue, role overload, exposure to trauma, high job demands — are hazards in the same legal sense as a working-at-height risk or an unguarded machine. The duty is to eliminate or minimise them so far as is reasonably practicable. That obligation is discharged through the hierarchy of controls, a risk assessment, a live risk register and officer due diligence — not through the availability of support afterwards.

An EAP is reactive support. It is necessary, and it is downstream. It cannot satisfy a duty that is, by its own wording, about identifying and controlling the hazard before harm occurs. When the Auditor-General writes that a program "does not address" fatigue or role overload, that is not a clinical critique. It is a compliance finding stated in operational language. The control measure for the named hazard is simply absent. A regulator can read a risk register. They cannot read good intentions.

Why doesn't more spend close the gap?

Because most wellbeing spend is concentrated at the wrong end of the timeline. More funding for the same response-only model buys you a faster, kinder reaction to harm that has already happened. It does nothing to reduce the rate at which the harm occurs. This is why an organisation can increase its wellbeing budget year on year and watch its psychological-injury claims rise in the same period. The two are barely connected, because the spend never touches the hazard.

There is a second, quieter failure. In the absence of structured prevention, the load lands on people who never signed up to carry it — the experienced sergeant, the senior nurse, the shift supervisor everyone offloads to. These accidental counsellors and informal wellbeing champions absorb the early signals the system should be catching, and they do it without mandate, training or relief. It is unsustainable, it is invisible on any dashboard, and it tends to break exactly the people you can least afford to lose. Making that invisible risk visible — putting it on the register where it can be controlled — is the work that sits upstream of the EAP.

What does prevention before the incident look like in practice?

It looks like a system, not a service. A psychosocial safety framework that names the specific hazards a role carries — exposure, fatigue, role overload — and assigns a control to each, the same way you would for any physical risk. A risk register that a board or a regulator can actually inspect. Roster and demand data treated as leading indicators rather than retrospective excuses. And a deliberate structure that routes someone toward support early, before the line-item injury becomes a ledger crisis, rather than waiting for them to fall.

This is where the design becomes counter-intuitive. Building the prevention infrastructure does two things at once. It reduces the demand on the EAP, because fewer people reach the point of escalation. And it increases appropriate uptake of the EAP, because people are routed to it earlier and for the right reasons, instead of arriving in crisis or not at all. Prevention and response stop competing for budget and start reinforcing each other. The Pathway is the operating model that connects them — it is the structure in the gap between a healthy spreadsheet and a controlled risk.

What does this mean for an officer's due diligence?

The Auditor-General's report should be read by every officer in a high-exposure organisation as a preview of the question they will eventually be asked: what did you do, in advance, about a hazard you knew was foreseeable? "We funded an EAP" is not an answer to that question. It describes what you did after the harm. Due diligence is demonstrated by the controls you put in place before it — the assessment, the register, the framework, the structured prevention. The organisations that move now are not buying insurance against the regulator. They are building the thing the regulator has already told an entire sector was missing.

The wrong question is "how do we improve our wellbeing support?" The support is probably fine. The right question is "where, on our risk register, is the entry for fatigue, role overload and exposure — and what is the control?" If that line is blank, the Auditor-General has already written your finding for you.