The obligation does not depend on your headcount
The LPRL (arts. 14.2, 15.1.b and 16.2.a) requires risks — psychosocial ones included — to be assessed without setting any minimum number of employees. The tool always marks the assessment as mandatory; what it works out from your answers is the format, the method and how urgent a review is.