Workplace Violence: Plans, Policies and Procedures

A workplace violence policy and a workplace violence prevention plan are related but distinct documents serving different purposes. The policy is a high-level statement of the organization's position—defining prohibited behaviors, establishing consequences, articulating the commitment to a safe workplace, and describing reporting mechanisms. It tells employees what is expected of them and what the organization promises in return. The prevention plan is the operational companion document: it outlines specific hazard identification procedures, risk assessment methods, engineering and administrative controls, emergency response protocols, training requirements, and incident logging systems. Some states, such as California under SB 553, now require employers to maintain a formal written prevention plan. Best practice is to have both—a concise, clearly written policy that every employee acknowledges, and a detailed operational plan that HR, security, and management can execute consistently. Together they form a defensible framework that demonstrates organizational commitment to preventing workplace violence.

Effective workplace violence response procedures must be developed before an incident occurs, tested through regular drills, and communicated clearly to all employees. Start by conducting a workplace-specific risk assessment to identify hazards—entry points, isolated work areas, after-hours operations, cash handling—and tailor response procedures to those risks. Immediate response procedures should cover employee safety first (evacuation, shelter-in-place, lockdown), notification of law enforcement, and activation of your crisis communication plan. Post-incident procedures should address preserving the crime scene, supporting affected employees through EAP and critical incident stress debriefing, communicating with the broader workforce, and cooperating with law enforcement investigations. A post-incident review process—analyzing what happened, why, and what can be improved—is essential for organizational learning. Procedures should be reviewed annually, updated after any incident, and validated through tabletop exercises with the leadership team.

OSHA and threat assessment professionals typically identify four types of workplace violence that employer policies should address. Type I (criminal intent) involves violence by individuals with no employment relationship to the organization—robberies, random attacks. Type II (customer/client) involves violence by people the organization serves, such as patients, customers, or students—particularly prevalent in healthcare, social services, and retail. Type III (worker-on-worker) involves current or former employees targeting coworkers or supervisors. Type IV (personal relationship) involves domestic violence that enters the workplace, such as a domestic partner confronting an employee at work. Each type requires different prevention strategies: environmental controls for Type I and II, behavioral threat assessment for Type III, and domestic violence accommodation policies for Type IV. Comprehensive workplace violence programs address all four types rather than focusing solely on the active shooter scenario that dominates media coverage.

Manager training for workplace violence prevention should cover recognition, response, and reporting. Recognition training teaches managers to identify behavioral warning signs—changes in demeanor, verbal threats, expressions of grievance—and understand that these observations are not diagnoses but rather data points to report. Response training equips managers with de-escalation techniques for defusing tense confrontations and clear guidance on when to disengage and involve security or HR rather than attempting to handle a situation alone. Reporting training explains the organization's escalation process, who to contact, what information to document, and how to report without alarming the employee or creating a hostile work environment. Managers should also understand their role in supporting affected employees after an incident and facilitating their reintegration. Interactive scenario-based training—using realistic case studies—is far more effective than lecture-based approaches in building the skills managers need to respond confidently under pressure.

Under OSHA's General Duty Clause (Section 5(a)(1) of the OSH Act), employers are required to provide a workplace free from recognized serious hazards—including the hazard of workplace violence where it is reasonably foreseeable. While OSHA has not issued a specific general industry standard for workplace violence prevention, it has cited employers under the General Duty Clause in industries with high rates of workplace violence, particularly healthcare and social services. OSHA has published guidelines for preventing workplace violence in healthcare and late-night retail settings that, while not mandatory, establish the standard of recognized good practice. California's SB 553 sets a mandatory prevention plan standard for most employers in that state, and other states are developing similar regulations. Employers facing elevated violence risks—based on industry, location, or prior incidents—should develop formal prevention programs that go beyond basic policy statements to demonstrate OSHA compliance and organizational due diligence.