Emergency Response Plan Development

Why Emergency Response Plan Development Matters
Emergencies—fires, chemical releases, explosions, severe weather, medical crises, workplace violence, utility failures—are low-frequency but high-consequence events. The Certified Safety Professional (CSP) is expected to be the organizational leader who ensures that when the unexpected happens, people know what to do, who is in charge, and how to protect life, property, and the environment. A well-developed Emergency Response Plan (ERP) is also a regulatory requirement under multiple OSHA standards (29 CFR 1910.38 Emergency Action Plans, 1910.39 Fire Prevention Plans, 1910.120 HAZWOPER, 1910.119 PSM, 1910.165 Alarm Systems) and is reinforced by consensus standards such as NFPA 1600 (Standard on Continuity, Emergency, and Crisis Management) and NFPA 101 (Life Safety Code). On the CSP exam, this topic appears in the Emergency Management / Risk Management domain and tests your ability to apply a systematic process rather than simply recall definitions.

What an Emergency Response Plan Is
An ERP is a documented, site-specific set of procedures that defines how an organization prepares for, responds to, and recovers from emergencies. It is distinct from, but related to, several other documents:
• Emergency Action Plan (EAP) – the OSHA 1910.38 minimum: evacuation procedures and routes, critical shutdown procedures, headcount/accounting for employees, rescue and medical duties, reporting procedures, and contact persons. Must be written if more than 10 employees; may be communicated orally if 10 or fewer.
• Fire Prevention Plan (FPP) – 1910.39: major fire hazards, ignition source control, housekeeping, maintenance of fire protection equipment, and responsible persons.
• Emergency Response Plan (HAZWOPER) – 1910.120(q): required when employees will respond to releases of hazardous substances; includes pre-emergency planning, personnel roles, lines of authority, training, communication, PPE, decontamination, site security, and critique of response.
• Business Continuity Plan (BCP) – focuses on restoring critical operations after the emergency; NFPA 1600 integrates emergency management and continuity into one framework.
The CSP exam frequently tests whether you can distinguish these documents and know which regulation drives which requirement.

The Four Phases of Emergency Management
Plan development is anchored in the classic FEMA emergency management cycle. Expect exam questions to ask which phase an activity belongs to:
1. Mitigation (Prevention) – actions taken to eliminate or reduce the probability or severity of an event: substituting less hazardous chemicals, installing sprinklers, seismic bracing, relocating storage away from floodplains.
2. Preparedness – planning, training, drills, stockpiling supplies, establishing mutual-aid agreements, building the plan itself.
3. Response – actions during and immediately after the event: alarm, evacuation or shelter-in-place, rescue, containment, firefighting, first aid, notification.
4. Recovery – restoring operations, salvage, investigation, claims, counseling, and lessons learned feeding back into mitigation.

How Emergency Response Plan Development Works: The Step-by-Step Process
Step 1 – Obtain management commitment and form a planning team. The team should be multidisciplinary: safety, operations, maintenance, security, HR, communications, medical, and representatives of the workforce. Management must provide authority, budget, and policy. On the exam, the first step in nearly any planning question is management commitment and team formation—not writing procedures.

Step 2 – Conduct a hazard identification and vulnerability analysis (HVA). Identify credible emergency scenarios (internal: fire, release, explosion, structural collapse, medical, violence; external: tornado, hurricane, flood, earthquake, pandemic, civil disturbance, neighboring facility incidents, utility loss). Rate each by probability and consequence (human, property, business, environmental) and consider existing controls. Tools include FEMA's Threat and Hazard Identification and Risk Assessment (THIRA), risk matrices, and historical loss data. Prioritize scenarios with the highest risk ranking.

Step 3 – Assess resources and capabilities. Inventory internal resources (fire brigades, medical responders, PPE, detection and suppression systems, communication systems, backup power) and external resources (local fire department, EMS, hospitals, HAZMAT teams, contractors, mutual-aid partners). Identify gaps between what the scenarios require and what is available. Coordinate with the Local Emergency Planning Committee (LEPC) as required under EPCRA (SARA Title III).

Step 4 – Define the organization and chain of command. Adopt the Incident Command System (ICS) within the National Incident Management System (NIMS). Key ICS principles: single Incident Commander (IC), manageable span of control (optimally 3–7, ideally 5), unity of command (each person reports to one supervisor), common terminology, modular organization, and the five functional areas—Command, Operations, Planning, Logistics, and Finance/Administration. Command staff include the Safety Officer (who has authority to stop unsafe operations), Public Information Officer, and Liaison Officer. Designate alternates for every key position and specify an Emergency Operations Center (EOC) with a backup location.

Step 5 – Develop response procedures. Core elements include:
• Alarm and notification – distinctive alarms recognizable above ambient noise (1910.165), redundant means, who calls 911 and regulatory agencies (e.g., National Response Center for reportable releases; OSHA within 8 hours for fatality, 24 hours for inpatient hospitalization, amputation, or loss of an eye).
• Evacuation – primary and secondary routes, exit marking and lighting, assembly areas upwind and away from the hazard and emergency vehicle access, accounting for all personnel (headcount), procedures for visitors, contractors, and persons with disabilities, and designated evacuation wardens (roughly one per 20 occupants is a common guideline).
• Shelter-in-place – for tornadoes, external chemical releases, or active threats; interior rooms, HVAC shutdown, sealing.
• Critical operations shutdown – who stays behind, how long, and when they must leave.
• Rescue and medical – first aid/CPR/AED, in-house vs. external EMS, limits on employee rescue (confined space, HAZMAT).
• Spill/release response – levels of response tied to HAZWOPER training (Awareness, Operations, Technician, Specialist, Incident Commander), PPE levels A–D, decontamination corridors, hot/warm/cold zones.
• Security and access control, utilities, media and family communications, and documentation.

Step 6 – Write the plan. Keep it clear, action-oriented, and usable under stress. A typical structure: purpose and scope, policy, hazard analysis summary, organization and responsibilities, notification and communication, scenario-specific annexes (fire, release, weather, medical, violence, bomb threat, pandemic), evacuation maps, resource lists, contact lists, recovery procedures, training and drill schedule, and plan maintenance procedures. Use checklists and flowcharts for responders.

Step 7 – Train personnel. OSHA requires training when the plan is developed, when an employee's responsibilities change, and when the plan changes. All employees need awareness of alarms, routes, assembly points, and reporting. Responders need role-specific training (HAZWOPER levels require 8, 24, or 40 hours depending on level, with 8-hour annual refreshers). ICS courses (IS-100, 200, 700, 800) are common benchmarks.

Step 8 – Exercise the plan. Progressive exercise types, from least to most complex:
• Orientation/seminar – walk-through discussion of the plan.
• Tabletop exercise – facilitated scenario discussion, no deployment of resources; low cost, tests decision-making and coordination.
• Drill – tests a single function (e.g., evacuation drill, alarm test).
• Functional exercise – simulates an emergency in the EOC with real-time decisions but no field deployment.
• Full-scale exercise – field deployment of personnel and equipment with outside agencies; the most realistic and most costly.
Every exercise should be followed by a hot wash and a written After-Action Report (AAR) with an improvement plan.

Step 9 – Evaluate, review, and revise. Review at least annually and after any actual emergency, exercise, change in process, personnel, facility layout, or regulation. Use Plan-Do-Check-Act thinking: the plan is a living document. Control document distribution so that only current versions are in use.

Key Standards and Numbers to Remember
• 29 CFR 1910.38 – EAP; written if >10 employees; 6 minimum elements.
• 29 CFR 1910.39 – Fire Prevention Plan.
• 29 CFR 1910.120(q) – HAZWOPER emergency response; ICS required; Safety Officer required.
• 29 CFR 1910.119(n) – PSM emergency planning and response.
• 29 CFR 1910.165 – Employee alarm systems.
• 29 CFR 1910.157 – Portable extinguishers; if employees are expected to use them, training at initial assignment and annually.
• NFPA 1600 – Program management, risk assessment, planning, incident management, training, exercises, program maintenance.
• NFPA 600 – Industrial fire brigades.
• EPCRA/SARA Title III (40 CFR 355, 370, 372) – LEPC coordination, Tier II reporting, facility emergency coordinator.
• EPA RMP (40 CFR 68) – emergency response program for regulated substances.
• NIMS/ICS – span of control 3–7, unity of command, five functional sections.

Common Pitfalls in Plan Development
• Plans that are generic or copied from another site and not based on a site-specific hazard analysis.
• No designated alternates; single points of failure in leadership.
• Assembly areas located where emergency vehicles stage or downwind of likely releases.
• Assuming employees will fight fires or perform rescue without training or equipment.
• No procedure to account for contractors and visitors.
• Training and drills not documented, or drills always conducted at convenient times (never on night shift).
• Failure to coordinate with outside responders before the event—first meeting the fire chief during the fire.
• No after-action process, so the same deficiencies repeat.

Exam Tips: Answering Questions on Emergency Response Plan Development
1. Identify the first step correctly. When asked what should be done first in developing a plan, the answer is almost always management commitment/forming the planning team or conducting the hazard/vulnerability assessment—never training, drills, or buying equipment. Planning precedes procedures; assessment precedes planning.
2. Classify activities by phase. Sprinklers and chemical substitution = mitigation; drills and training = preparedness; evacuation and containment = response; salvage and restoration = recovery. Watch for distractors that place training under response.
3. Know the OSHA thresholds and element lists cold. Written EAP required for more than 10 employees; the six EAP elements; HAZWOPER training hours (24/40, 8-hour refresher); extinguisher training annually; OSHA reporting timeframes (8 hours fatality, 24 hours hospitalization/amputation/eye loss).
4. Apply ICS principles. If a question describes a supervisor directing 12 responders, the issue is span of control (3–7, ideal 5). If responders receive conflicting orders, the issue is unity of command. The Safety Officer has stop-work authority. The IC is the single point of command even in unified command situations.
5. Match the exercise to the objective. Low cost, test coordination and decision-making = tabletop. Test one function = drill. Test EOC in real time without field assets = functional. Full deployment with outside agencies = full-scale. The exam often asks for the most cost-effective way to test a plan—usually tabletop.
6. Think hierarchy and life safety. When ranking priorities, life safety comes first, then incident stabilization, then property/environmental protection. Evacuation of personnel always outranks saving equipment or records.
7. Choose the systematic, documented, site-specific answer. The CSP exam rewards answers reflecting a management-system approach: hazard-based, written, trained, exercised, evaluated, and revised. Eliminate options that are ad hoc, generic, or rely on untrained employees.
8. Watch for "must" versus "should." Regulatory questions test minimum legal requirements (OSHA); best-practice questions test consensus guidance (NFPA 1600, FEMA). Read whether the stem asks what is required or what is recommended.
9. Read for the weakest link. Scenario questions describing a plan often contain a flaw—no alternate IC, assembly point in the fire lane, no shelter-in-place procedure, no annual review. Find the gap and select the answer that closes it.
10. Use elimination and avoid absolutes. Answers with "always" or "never" are usually wrong unless they restate a regulation. Prefer answers that reference coordination with external agencies, after-action review, and continuous improvement, because these reflect how mature emergency management programs actually operate.

Mastering this topic means being able to walk through the development process in order, connect each step to its regulatory or consensus basis, and recognize how a competent safety professional would strengthen a flawed plan. Practice by mentally building a plan for a hypothetical facility—chemical warehouse, manufacturing plant, office tower—and asking at each step what the exam would consider the defensible, systematic choice.