Free Download · WVP
The workplace violence prevention checklist
Risk assessment, written WVP plan, threat assessment team, engineering + administrative controls, Cal/OSHA SB 553 evidence, and Run-Hide-Fight active-threat response, every element OSHA's general duty enforcement and California Title 8 §3343 expect, on one document. Built for HR Directors, Safety Officers, and Corporate Security leaders running a WVP program without a six-figure consulting engagement.
No credit card · No call required · Instant link
What's inside
Every element of a defensible WVP program, mapped to OSHA, Cal/OSHA, and ASIS
25 line items grouped by the seven WVP program areas regulators and threat assessors actually review. The order mirrors how an OSHA inspector or a Cal/OSHA SB 553 audit reads your file, risk first, written plan second, controls and response last.
Risk Assessment
Risk Assessment · Foundation
- RA-1 · Workplace exposure analysis (Type I criminal intent · Type II customer / client · Type III worker-on-worker · Type IV personal relationship)
- RA-2 · Vulnerable roles + areas inventory (lone workers, late-shift, public-facing, cash handling, healthcare clinicians, parking lots, reception)
- RA-3 · Prior-incident review (OSHA 300 logs, security reports, near-misses, threats, minimum 5-year lookback per Cal/OSHA SB 553)
- RA-4 · Threat actor categorization (criminal, customer / patient, current or former employee, domestic / personal relationship)
Written WVP Plan
Written Plan · Program Document
- WP-1 · Workplace violence policy statement (zero-tolerance, scope, definitions of threats + violence + intimidation)
- WP-2 · Leadership commitment (named executive sponsor, board / C-suite sign-off, budget authority)
- WP-3 · Employee involvement (front-line worker input on hazards, controls, and plan review, required by SB 553)
- WP-4 · Training requirements (initial + annual, role-specific for high-risk staff, recordkeeping format + duration)
- WP-5 · Plan review cycle (annual + after every reportable incident or significant operational change)
Threat Assessment Team
Threat Team · Cross-functional
- TA-1 · Cross-functional team formation (HR, Security, Legal, EAP / mental health, Operations, optional law enforcement liaison)
- TA-2 · Escalation pathway (intake form, triage 24h, investigation 72h, mitigation plan ≤7 days, ASIS WVPI standard)
- TA-3 · Threat categorization framework (low / moderate / high / imminent, with defined behavioral indicators per category)
- TA-4 · Decision authority + documented protocols (administrative leave, fitness-for-duty, no-trespass, restraining-order coordination)
Engineering Controls
Engineering · Physical Security
- EC-1 · Physical security baseline (badge / card access, panic alarms at vulnerable stations, CCTV with retention, visitor management)
- EC-2 · Workspace design (sight lines, barriers + counter heights, controlled entry, parking-lot lighting, secure refuge areas)
- EC-3 · Lone-worker protections (mobile duress devices, check-in cadence, GPS for field staff, escort policy for late-shift)
Administrative Controls
Administrative · Behavioral
- AC-1 · De-escalation training (verbal de-escalation, trauma-informed approach, situational awareness, initial + annual refresher)
- AC-2 · Incident reporting (anonymous channel, threats + intimidation + near-misses, integrated with OSHA 300 / 301 forms)
- AC-3 · Post-incident response (medical care, EAP referral, root-cause analysis, regulatory notification, return-to-work protocol)
Cal/OSHA SB 553
California · Title 8 §3343
- SB-1 · Title 8 §3343 elements (every required plan section: risk identification, hazard correction, training, post-incident response, periodic review)
- SB-2 · Training records (initial + annual + after material changes, with content + trainer + attendees + duration retained ≥1 year)
- SB-3 · Violent incident log retention (≥5 years, employee + bargaining-rep access on request, no PHI / PII spillover)
Active-Threat Response
Active-Threat · Crisis Plan
- AT-1 · Run-Hide-Fight training (FBI / DHS protocol, role-play drills, evacuation routes, hide-in-place hardening)
- AT-2 · Lockdown procedures (mass-notification system, lockdown vs shelter-in-place decision tree, accountability + reunification)
- AT-3 · Law enforcement coordination (pre-incident site walkthrough, floor plans on file, incident-command integration, after-action review)
The PDF appendix includes a Run-Hide-Fight tabletop drill scenario, the Cal/OSHA SB 553 violent-incident log template (≥5-year retention format), and the post-incident debrief worksheet ASIS WVPI uses for after-action review. 22 pages total.
Why use this checklist
Built for OSHA's general duty clause + Cal/OSHA SB 553, not for slideware
OSHA enforcement is real, even without a federal WVP standard. OSHA cites workplace violence under Section 5(a)(1) of the OSH Act, the General Duty Clause, when an employer fails to address recognized hazards causing or likely to cause serious harm. Healthcare workers (nearly 5x the national rate of intentional injury), retail and late-night service staff, social services, and corrections account for the largest share of OSHA general-duty workplace-violence citations. OSHA's published guidance and the 2024 Bureau of Labor Statistics Census of Fatal Occupational Injuries continue to put intentional injury by another person among the top causes of workplace fatalities every year.
Cal/OSHA SB 553 made WVP planning law for nearly every California employer. California Senate Bill 553, in effect July 1, 2024, added Labor Code §6401.9 and Title 8 §3343, requiring almost every California employer (with narrow healthcare and small-workplace exceptions) to maintain a written Workplace Violence Prevention Plan, train workers initially and annually, log violent incidents for at least five years, involve employees in plan development, and make records available to Cal/OSHA and bargaining representatives. The checklist mirrors the SB 553 element list one-to-one so the document you complete is the document Cal/OSHA asks for during an inspection.
Aligned to ASIS WVPI and the FBI Run-Hide-Fight protocol. ASIS International's Workplace Violence and Active Assailant standard (WVPI / WVPSA) is the security-industry methodology cited by most threat-assessment professionals, and the FBI / DHS Run-Hide-Fight protocol is the active-threat response baseline trained at federal facilities. The checklist references both inline so the document a corporate-security director hands the threat assessment team is the same document a Cal/OSHA inspector or an OSHA general-duty investigator would expect to see, with no gap between the security narrative and the labor-law narrative.
Who is it for
Three roles, one checklist
HR Director / Safety Officer
Owns the written WVP plan, training cadence, employee involvement, and Cal/OSHA SB 553 recordkeeping across every facility. Often coordinates with EHS, legal, and the EAP provider on post-incident response.
Outcome · Walk into a Cal/OSHA inspection or an OSHA general-duty letter knowing every plan element, training record, and incident log is in place, with the regulatory citation against each line.
Corporate Security Director / CSO
Owns the threat assessment team, physical security baseline (access, alarms, CCTV, visitor management), workspace hardening, and active-threat response. Coordinates with HR on behavioral threats and with law enforcement on incident response.
Outcome · Run a defensible threat assessment process and an active-threat playbook the executive team trusts, using one document that ties the security narrative to the labor-law narrative.
Risk + Insurance Manager
Owns the negligent-security exposure, premises-liability claims, and the WVP evidence trail underwriters now ask for during D&O, EPL, and general-liability renewals across healthcare, retail, and late-night-services portfolios.
Outcome · Demonstrate to underwriters and counsel that the WVP program is documented, trained, and continuously reviewed, a defensible record the day a serious incident lands in litigation.
Common questions, answered
OSHA WVP alignment under the General Duty Clause, Cal/OSHA SB 553 (Title 8 §3343) coverage, threat assessment team setup, Run-Hide-Fight active-threat protocol, and healthcare-specific (1910.1030 BBP) cross-references.
Related
Keep going
Beyond the checklist
Run WVP + physical security on one platform?
The PDF is the readiness diagnostic. The platform runs continuous WVP scoring against OSHA, Cal/OSHA SB 553, and ASIS WVPI, alongside physical security, EHS, and 39 other framework libraries, across every facility, with the documented evidence trail underwriters and regulators already accept.
Or call US: +1 941-500-4525