Workplace Violence Prevention Programs

1. Why Workplace Violence Prevention Matters

Workplace violence is one of the leading causes of occupational fatality in the United States. Bureau of Labor Statistics (BLS) data consistently rank homicide among the top causes of job-related death, and for many years it was the single leading cause of death for women in the workplace. Beyond fatalities, hundreds of thousands of nonfatal assaults occur each year, with healthcare, social services, late-night retail, taxi/transportation, and education workers at disproportionate risk.

For the CSP candidate, this topic sits at the intersection of emergency management, risk assessment, regulatory compliance, and human factors. The exam expects you to know that:
• Violence is a recognized occupational hazard that can be anticipated, assessed, and controlled like any other hazard.
• OSHA enforces workplace violence hazards through the General Duty Clause, Section 5(a)(1) of the OSH Act, because there is no federal vertical standard (several states, such as California with SB 553 and Washington, have their own requirements).
• A Workplace Violence Prevention Program (WVPP) is a structured management system, not just a policy statement or a single training session.

2. What a Workplace Violence Prevention Program Is

A WVPP is a written, management-supported system designed to prevent, prepare for, respond to, and recover from acts or threats of violence affecting workers. It incorporates policy, hazard assessment, engineering and administrative controls, training, incident response, post-incident support, recordkeeping, and continuous evaluation.

Key reference documents you should recognize:
• OSHA 3148 – Guidelines for Preventing Workplace Violence for Healthcare and Social Service Workers
• OSHA 3153 – Recommendations for Workplace Violence Prevention Programs in Late-Night Retail Establishments
• NIOSH Publication 96-100 – Violence in the Workplace: Risk Factors and Prevention Strategies
• ANSI/ASIS/SHRM WVPI.1 – Workplace Violence Prevention and Intervention (consensus standard)
• FBI – Workplace Violence: Issues in Response
• DHS/FEMA guidance on active shooter preparedness (Run, Hide, Fight)

3. The Four Types (Classifications) of Workplace Violence

This typology, developed by the California Division of Occupational Safety and Health (Cal/OSHA) and adopted by NIOSH and OSHA, is heavily tested. Memorize it:

Type I – Criminal Intent: The perpetrator has no legitimate relationship to the business; violence occurs during the commission of a crime such as robbery. Highest risk: late-night retail, taxi drivers, convenience stores. Accounts for the majority of workplace homicides.

Type II – Customer/Client: The perpetrator is a customer, client, patient, student, or inmate who becomes violent while receiving services. Highest risk: healthcare, social services, corrections, education. Accounts for the majority of nonfatal assaults.

Type III – Worker-on-Worker: The perpetrator is a current or former employee attacking coworkers, supervisors, or managers. Often linked to disciplinary action, termination, or interpersonal conflict.

Type IV – Personal Relationship: The perpetrator has no relationship with the business but has a personal relationship with the intended victim (domestic violence spilling into the workplace). Disproportionately affects women.

Exam hint: If a question describes a robbery, think Type I. A patient striking a nurse, Type II. A fired employee returning with a weapon, Type III. An estranged spouse appearing at the worksite, Type IV.

4. How a Workplace Violence Prevention Program Works: The Five OSHA Program Elements

OSHA structures WVPPs around the same five core elements found in its general safety and health program guidelines. Know each element and what belongs under it.

Element 1 – Management Commitment and Employee Participation
• Written policy stating that violence, threats, harassment, and intimidation will not be tolerated (often called a zero-tolerance policy).
• Assigned responsibility and authority; allocation of resources.
• Employee involvement through safety committees and threat assessment teams.
• Clear non-retaliation provisions so workers report incidents and near misses.
• Commitment to investigate and respond to every reported incident.

Element 2 – Worksite Analysis (Hazard Assessment)
• Records review: OSHA 300 logs, incident reports, workers compensation claims, security logs, police reports.
• Employee surveys and focus groups to identify unreported incidents.
• Job hazard analysis of high-risk tasks (handling cash, working alone, working at night, dealing with volatile clients, mobile work, home visits).
• Walk-through inspections of physical security, lighting, access control, sightlines, and escape routes.
• Review of trends by location, shift, job title, and type of violence.

Element 3 – Hazard Prevention and Control
Apply the hierarchy of controls:
• Engineering controls: physical barriers and bullet-resistant enclosures, panic/duress alarms, CCTV, access control and badge systems, improved lighting, metal detectors, controlled entry vestibules, drop safes, secure rooms, furniture arranged to prevent trapping staff, two exits in interview rooms.
• Administrative and work-practice controls: cash-handling limits and signage, staffing levels (no working alone in high-risk settings), buddy systems, visitor sign-in, flagging of patients or clients with violence history, de-escalation procedures, restricted after-hours access, pre-employment screening, discipline and termination procedures conducted safely (security present, final pay prepared, access deactivated).
• Post-incident response: immediate medical care, psychological first aid, Employee Assistance Program (EAP) referral, critical incident stress debriefing, incident investigation, and support for witnesses.

Element 4 – Safety and Health Training
• All employees: policy awareness, recognizing warning signs and escalating behavior, reporting procedures, de-escalation and verbal defusing, personal safety, emergency response, and active threat response (Run, Hide, Fight or Avoid, Deny, Defend).
• Supervisors and managers: recognizing and responding to troubled employees, handling discipline and termination safely, conducting investigations.
• Security personnel: specialized response, restraint policy, coordination with law enforcement.
• Training should be provided at hire, annually, and whenever duties or hazards change; it should be documented.

Element 5 – Recordkeeping and Program Evaluation
• Record all incidents, threats, and near misses, not just injuries. Injuries meeting OSHA recordability criteria must be entered on the OSHA 300 Log; workplace violence is a recordable work-related event when the case meets general recording criteria (medical treatment beyond first aid, days away, etc.).
• Maintain training records, hazard assessments, inspection results, and corrective actions.
• Evaluate program effectiveness through leading indicators (training completion, reporting rates, hazard corrections) and lagging indicators (incident rates, severity, lost time).
• Review the program at least annually and after any serious incident; update controls accordingly (Plan-Do-Check-Act).

5. Threat Assessment and Management

Modern programs include a multidisciplinary threat assessment team (HR, security, safety, legal, management, mental health, and sometimes law enforcement). The team:
• Receives reports of concerning behavior through a single clear channel.
• Gathers information and evaluates the credibility, specificity, and imminence of a threat.
• Distinguishes between someone who makes a threat and someone who poses a threat (concept from the U.S. Secret Service and FBI behavioral research).
• Develops a management plan: monitoring, intervention, EAP referral, protective orders, access restrictions, law enforcement notification.
• Documents decisions and follows up.

Behavioral warning signs that exams may list: increasing belligerence, direct or veiled threats, fascination with weapons or prior violent events, fixation on grievances, significant changes in behavior or hygiene, substance abuse, paranoid statements, blaming others, isolation, and statements about hopelessness. No single indicator predicts violence; patterns and escalation matter.

6. Integration With Emergency Management

A WVPP should connect to the facility Emergency Action Plan (EAP) under 29 CFR 1910.38 and the broader emergency management cycle:
• Mitigation/Prevention: hazard assessment, engineering controls, policy, hiring practices.
• Preparedness: training, drills (including lockdown and active threat exercises), communication systems, mutual aid with local law enforcement, pre-designated safe rooms and assembly points.
• Response: duress alarms, lockdown or evacuation decisions, notification of police, accounting for personnel, first aid and bleeding control (Stop the Bleed kits), coordination under the Incident Command System (ICS/NIMS).
• Recovery: medical and psychological support, business continuity, communication with families and media, investigation, and corrective action.

Recognize the distinction between evacuation (used for fire or hazardous release) and lockdown/shelter-in-place (often preferred for an armed intruder when escape is not safe). Plans must address both and must not conflict.

7. Legal and Regulatory Considerations

• OSHA cites under Section 5(a)(1) when a recognized hazard likely to cause death or serious harm exists and feasible abatement is available; OSHA Enforcement Directive CPL 02-01-058 guides inspectors on workplace violence cases.
• State plans may have specific requirements (e.g., California SB 553 requires nearly all employers to have a written WVPP, violent incident log, and annual training; Cal/OSHA Title 8 Section 3342 covers healthcare).
• Employers may face negligent hiring, negligent retention, and premises liability claims.
• Programs must respect privacy, anti-discrimination law, and the Americans with Disabilities Act when addressing employee behavior; focus on conduct and threats, not diagnoses.
• Domestic violence leave laws and protective-order enforcement are relevant to Type IV incidents.

8. Common Pitfalls in Real Programs (and Exam Distractors)

• Having a policy but no hazard assessment or controls.
• Training only after an incident occurs.
• Failing to record threats and verbal abuse because no injury resulted.
• Relying solely on security guards or cameras rather than a system of controls.
• Terminating employees without a safety plan.
• Arming employees without policy, training, and legal review; the exam generally favors de-escalation, engineering controls, and law enforcement coordination over employee weapons.

9. Exam Tips: Answering Questions on Workplace Violence Prevention Programs

Tip 1 – Classify first. When a scenario is described, identify the type (I–IV). The correct control often follows from the type: Type I calls for cash controls, lighting, visibility, and drop safes; Type II calls for staffing, flagging systems, de-escalation training, and secure room design; Type III calls for threat assessment teams, HR procedures, and safe termination practices; Type IV calls for protective-order protocols, access control, and employee support.

Tip 2 – Think in the five program elements. If a question asks what is missing or what should come first, map the answer to management commitment, worksite analysis, hazard prevention and control, training, or recordkeeping and evaluation. Hazard assessment precedes control selection; management commitment underpins everything.

Tip 3 – Apply the hierarchy of controls. When several controls are offered, the exam usually prefers engineering controls (barriers, alarms, access control) over administrative controls, and administrative controls over reliance on individual vigilance or personal defensive measures.

Tip 4 – Know the regulatory basis. Federal OSHA enforces workplace violence through the General Duty Clause 5(a)(1), not a specific standard. If an answer choice cites a nonexistent federal workplace violence standard, it is a distractor. Recognize OSHA 3148 (healthcare) and 3153 (late-night retail) as guidance documents.

Tip 5 – Recordkeeping questions. An assault resulting in medical treatment beyond first aid, restricted work, or days away is recordable on the OSHA 300 Log. Threats and near misses should be recorded internally even though they are not OSHA recordable. Program evaluation should use both leading and lagging indicators.

Tip 6 – Watch for the word first or most effective. In a threat scenario, the first action is typically to ensure immediate safety and notify appropriate personnel or law enforcement; investigation and discipline come later. For program development, the first step is securing management commitment and conducting a hazard assessment.

Tip 7 – Remember the human side. Post-incident care (medical treatment, EAP, debriefing) is a required program component, not an optional extra. Questions about reducing long-term impact on workers point to psychological support and follow-up.

Tip 8 – Distinguish response strategies. Fire means evacuate; armed intruder means Run, Hide, Fight based on the situation; chemical release means shelter-in-place. Plans must be rehearsed, communicated, and coordinated with local responders.

Tip 9 – Eliminate absolutes and single-fix answers. Choices that claim one measure eliminates violence, or that profiling a personality type predicts violence, are usually wrong. Correct answers emphasize systematic, multi-layered, behavior-focused approaches.

Tip 10 – Know the statistics in general terms. Homicide is a leading cause of workplace death; Type I incidents dominate fatalities; Type II incidents dominate nonfatal injuries; healthcare and social service workers face the highest nonfatal assault rates. You will not need exact numbers, but you must know the patterns.

10. Quick-Review Summary

• WVPP = written, management-driven system to prevent, prepare for, respond to, and recover from violence.
• Four types: Criminal Intent, Customer/Client, Worker-on-Worker, Personal Relationship.
• Five elements: Management Commitment and Employee Participation; Worksite Analysis; Hazard Prevention and Control; Training; Recordkeeping and Evaluation.
• Legal basis: OSHA General Duty Clause 5(a)(1); guidance in OSHA 3148 and 3153; consensus standard ANSI/ASIS/SHRM WVPI.1; state laws such as California SB 553.
• Controls follow the hierarchy: engineering, then administrative and work practice, then post-incident response and support.
• Threat assessment teams evaluate and manage concerning behavior; focus on conduct, escalation, and credible threats.
• Integrate with the Emergency Action Plan, ICS/NIMS, drills, and law enforcement coordination.
• Measure, review annually, and improve continuously.