Workplace Violence Prevention Program: Built Before It Is Needed
Short answer. A workplace violence prevention program is a written plan, a hazard assessment of the real building, a behavioral threat assessment capability, a reporting route people will actually use, training that reaches every employee, and a record that satisfies the mandate. We build all six for organizations from a single site to a national footprint, on the P.R.O. Model™, the prevention framework the U.S. Department of Justice selected as "A" national standard for the Assistant United States Attorneys and across the Department, twice. The plan satisfies the regulator. The training is what makes it work on a Tuesday afternoon.
The U.S. Secret Service’s October 2026 guide, Preventing Targeted Workplace Violence, lays out the same program as an eight-step framework for employers, and we map each step to what we build in this walkthrough of the guide.
A plan you can hand to a regulator is the minimum. A plan your people would actually use is the point.
A workplace violence prevention program is now a legal requirement for employers in a growing list of states, and a practical one for all of them. California’s SB 553 has required written plans, hazard assessments, and annual training of virtually every employer in the state since July 2024, with penalties running $18,000 to $25,000 per violation. New York’s Retail Worker Safety Act followed. Connecticut, Maryland, Minnesota, New Jersey, Oregon and Washington carry healthcare and social-services mandates. And OSHA has cited employers over workplace violence under the General Duty Clause for years without ever issuing a specific standard.
The compliance clock is real. It is also the least interesting reason to do this work.
What is the difference between a compliant plan and a working one?
Most workplace violence prevention programs are written to survive an audit. They live in a binder, they are reviewed annually by someone who did not write them, and the people they are meant to protect have never read a page.
That distinction shows up on exactly one day, and by then it is not recoverable.
A working program answers questions an auditor never asks. Who does a supervisor call at 9 p.m. about an employee who said something that felt wrong? What happens between that call and Monday morning? Who decides whether a person is a concern or just having a hard week, and what training did that person get to make the distinction? If someone is separated on Friday, who is still watching on the following Thursday?
Compliance asks whether you have a plan. Prevention asks whether the plan has a phone number attached to it.
What does a workplace violence prevention program actually contain?
1. A hazard assessment of the real building
Not a template. A walk-through of your actual site: entrances, sightlines, reception exposure, parking, after-hours access, the places where a person can stand unobserved and watch. Most organizations have never had anyone read their building the way someone planning harm would read it.
2. A behavioral threat assessment capability
The single highest-return element, and the one most often missing. Violence in workplaces is preceded by observable behavior far more often than not. What is usually absent is not the signal. It is a trained team, a defined threshold, and a documented path from “someone noticed” to “someone acted.” More on how behavioral threat assessment programs are built.
3. A reporting route people will actually use
An anonymous inbox nobody trusts is worse than nothing, because it creates a record of a system that failed. Reporting has to be easy, visibly safe, and demonstrably acted upon, because people report when they have seen a report matter.
4. Training that survives contact with a real day
Prevention, Response, and Options, the three tenets of the P.R.O. Model™, “A” DOJ-selected national standard for active shooter prevention, in use at some installations and commands across the Department of Defense. Delivered in plain language, sized to shift workers and executives alike, and built on hope rather than fear. Response training belongs in the same program. Bleeding control training is the most learnable of those skills, and the one your people are most likely to actually use.
5. Separation and reduction protocols
Terminations and workforce reductions are the most predictable high-risk moments an employer creates, and most plans are silent on them. How the message is delivered is the single most controllable risk factor in the entire process. P.R.O. Model™ Workforce Care covers this in depth.
6. A written record that satisfies the mandate
Everything above, documented in the format a regulator, an insurer, and a plaintiff’s attorney will each read differently. You want the same document to hold up for all three.
Who is a workplace violence prevention program for?
Corporations and mid-market employers carrying duty-of-care exposure. Healthcare and social services, where mandates arrived first because the risk arrived first. Manufacturing and logistics with shift work and controlled access. Professional services firms whose exposure is a lobby and a receptionist. Government contractors with flow-down safety obligations. Public safety agencies as well: DoD Instruction 1438.06 is the Department of Defense’s own workplace violence prevention policy, and our page on active shooter prevention for public safety covers military installations, fire departments and airports.
Size is not the qualifier. A 60-person company and a 6,000-person company face the same pathway; only the scale of the response changes.
Why build the program around prevention rather than response?
Law enforcement reaches the average scene in 12 to 15 minutes. The average incident is over in about 8. Help usually arrives after the event has ended, which means the protection that matters most happens in the weeks and months before, not in the final minutes. The longer argument for prevention over faster response is here.
This is not a criticism of response training. Response is the last layer. The mistake is making it the only one.
The numbers behind that choice are federal. The Bureau of Labor Statistics counted 470 workplace homicides in 2024 out of 5,070 fatal work injuries, up from 458 the year before. Those events are not random, and they are rarely silent. The Cybersecurity and Infrastructure Security Agency documents the observable progression that precedes them as the Pathway to Violence, and the program is built around teaching a workforce to recognize that progression early enough to act on it. A response plan begins at the worst moment. A prevention program begins at the first one.
What does working with ASPP™ look like?
- One conversation. Free, no obligation, no pitch.
- On-site assessment. Your building, your shifts, your actual operating rhythm.
- Written findings. Highest-return improvements named first, so the spending has an order and a reason.
- Training. P.R.O. Model™, sized to your workforce.
- A repeatable program. Something your own people can run in year three without us in the building.
We do not publish pricing. A number should never be attached to a life, and the right scope is a conversation rather than a menu.
How does the program map to OSHA and Cal/OSHA requirements?
There is no specific federal OSHA standard for workplace violence. OSHA enforces it under the General Duty Clause, Section 5(a)(1) of the Occupational Safety and Health Act, which requires a workplace free from recognized hazards that are causing or are likely to cause death or serious physical harm. California’s Labor Code section 6401.9, in force since July 1, 2024, is the most detailed state requirement in the country, and Cal/OSHA must adopt a formal standard by the end of 2026. Employers outside California are not bound by it. It is still the clearest picture of where the rest of the country is heading, which is why we map every part of the program to it. If you want to see how the training actually runs on the floor before you call, Chris Grollnek has written about it in his own words at chrisgrollnek.com.
| What is required | Where it comes from | What the program delivers |
|---|---|---|
| A workplace free from recognized hazards likely to cause death or serious harm | OSHA General Duty Clause, Section 5(a)(1) | A hazard assessment of the real building, documented and corrected |
| A written workplace violence prevention plan with named responsible persons | Cal/OSHA Labor Code 6401.9 | The written plan |
| Procedures to accept and respond to reports, with retaliation prohibited | Cal/OSHA Labor Code 6401.9 | A reporting route people will actually use, and the response protocol behind it |
| Training for employees on the plan | Cal/OSHA Labor Code 6401.9 | Training delivered to every employee, across every shift |
| Methods to identify, evaluate and correct workplace violence hazards | Cal/OSHA Labor Code 6401.9 | The hazard assessment and the behavioral threat assessment capability |
| Post-incident response and investigation | Cal/OSHA Labor Code 6401.9 | Separation and reduction protocols, and the after action record |
| Review of the plan for effectiveness | Cal/OSHA Labor Code 6401.9 | An annual review built into the written record |
We are not a law firm, and your counsel should confirm the finished plan against your specific operations. What we build is the structure the statute describes, in the order an inspector reads it.
Frequently asked questions
Does SB 553 apply to us if we are not in California?
Not directly, but the standard of care it established is spreading state by state, and plaintiff’s counsel cites it regardless of geography. Employers outside California are increasingly held to the expectation it created.
We already have an EAP and an HR policy. Is that enough?
Those are valuable and they are not a workplace violence prevention program. An EAP supports an employee who seeks help. A prevention program identifies concern when the person is not seeking help.
Will training frighten our staff?
It should not, and ours does not. Prevention taught as awareness and reporting is calming, because it replaces a vague dread with something a person can act on. Prepared, not scared.
How long does this take?
An assessment is measured in days, a program build in weeks. The compliance clock is usually the constraint, not our calendar.
Does this satisfy California SB 553?
The written plan, the training, the hazard assessment and the review are built to the elements Labor Code section 6401.9 names. Your counsel should confirm the finished plan against your specific operations, but the structure is the one the statute describes.
Can it be delivered across multiple sites and shifts?
Yes. Training is scheduled around the operation rather than through it, split across shifts and repeated per site. The written plan is one document, with a site-specific hazard assessment attached for each location.
Start the conversation
The first conversation is free and carries no obligation. No pitch, no pressure. Talk with our team about what a workplace violence prevention program would look like in your building.
#NEVERHERE™
