"Emergency Action Plans: What Every Employer Must Have"

Let me be blunt with you.

Somewhere in your office — maybe stuffed in a binder behind the break room coffee maker, maybe buried in a shared drive nobody opens — there is a document that is supposed to save your employees' lives in a crisis.

Your Emergency Action Plan.

And if you are like most California employers I have worked with over the years, that document is either (a) missing entirely, (b) so outdated it references a building layout you renovated three years ago, or (c) so generic it could apply to any business on earth, which means it applies to none of them.

Here is the uncomfortable truth: OSHA does not care about your excuses. Cal/OSHA cares even less. When an inspector walks through your door — and eventually one will — your Emergency Action Plan is one of the first things they ask for. If you do not have one, or if the one you have is garbage, you are looking at citations, fines, and a paper trail that follows your business for years.

But fines are not the real problem. The real problem is what happens when the actual emergency hits and your people do not know where to go, who is in charge, or what to do. That is when people get hurt. That is when people die.

This guide is going to walk you through exactly what OSHA requires, what California adds on top, and how to build an EAP that does not just check a compliance box — but actually works when seconds count.

What Is an Emergency Action Plan (and Why Does OSHA Require One)?

An Emergency Action Plan — EAP — is a written document that describes what your employees should do during various workplace emergencies. Fires. Chemical spills. Severe weather. Active threats. Earthquakes. Medical emergencies.

The federal requirement lives at **29 CFR 1910.38**. It is part of OSHA's General Industry standards, and it applies to virtually every employer in the country. If another OSHA standard requires you to have an EAP (and many do — fire extinguisher standards under 1910.157, process safety management under 1910.119, hazardous waste operations under 1910.120), then 1910.38 tells you what that plan must contain.

In California, Cal/OSHA enforces these requirements through **Title 8, Section 3220** of the California Code of Regulations, which mirrors and in some cases exceeds the federal standard. California's Injury and Illness Prevention Program (IIPP) requirement under Section 3203 also intersects with your EAP — your IIPP must address emergency procedures.

Here is the key point most employers miss: **the EAP is not optional.** If you have more than 10 employees, the plan must be written. If you have 10 or fewer employees, you can communicate the plan orally — but you still need one. No employer is exempt from having emergency procedures. Period.

The Required Elements: What Your EAP Must Contain

OSHA spells out the minimum required elements in 29 CFR 1910.38(c). This is not a suggestion list. This is not a "best practices" recommendation. These are mandatory components. Miss any one of them and your plan is deficient.

1. Procedures for Reporting Fires and Other Emergencies

Your plan must describe how employees report emergencies. Who do they call? What number do they dial? Is there an internal notification system? Do they pull a fire alarm? Do they call 911 directly or go through a receptionist?

This sounds elementary. It is not. I have walked through facilities where employees had no idea whether they were supposed to call the front desk, dial 911, or find their supervisor. In a real emergency, that five seconds of confusion can be the difference between containment and catastrophe.

Your reporting procedures need to be specific:

• **Internal reporting:** Phone number, intercom code, alarm pull station locations
• **External reporting:** 911 protocols, non-emergency numbers for local fire/police
• **Chain of notification:** Who gets called after 911 — facility manager, building owner, corporate office

2. Evacuation Procedures and Emergency Escape Route Assignments

This is the meat of your EAP. Your plan must include:

• **Evacuation routes** from every area of the facility. Not just the main hallways — every work area, every floor, every wing.
• **Exit locations** clearly identified. Primary exits and secondary exits for when primary routes are blocked.
• **Floor plans or workplace maps** showing routes and exits. Under 29 CFR 1910.38(c)(2), these must be posted or otherwise made available to employees.
• **Procedures for employees who operate critical equipment** that must be shut down before evacuation. If you have processes that will create additional hazards if abandoned mid-operation (chemical reactions, pressurized systems, electrical generation), your plan must identify who stays behind to perform shutdown — and for how long.

The evacuation procedures must account for employees with disabilities. This is not just an ADA consideration — it is an OSHA requirement. If you have employees who use wheelchairs, have mobility limitations, or have visual or hearing impairments, your plan must address how those employees evacuate. Designated assistants, evacuation chairs, areas of refuge — all of this needs to be documented.

3. Procedures to Account for All Employees After Evacuation

Your plan must include a system for counting heads after an evacuation. Every single person. Employees, visitors, contractors — everyone who was in the building needs to be accounted for.

The most common method is **assembly point roll call.** You designate assembly areas outside the building (far enough away to be safe, close enough to be practical), and supervisors or designated wardens take attendance using employee rosters.

This is where most plans fall apart in practice. The roster is outdated. The supervisor who was supposed to take roll is on vacation. Nobody counted the three contractors who were in the conference room. The assembly point is in the parking lot where fire trucks need access.

Your plan needs to address:

• **Designated assembly areas** with alternates if primary areas are compromised
• **Accountability method** — roll call, badge scanning, headcount by department
• **Who is responsible** for accounting in each area or department
• **Procedures for reporting missing persons** to emergency responders

4. Rescue and Medical Duties

If you have employees who are designated to perform rescue operations or provide first aid, those roles must be identified in the EAP. Under 29 CFR 1910.38(c)(4), the plan must describe the duties of employees assigned to these functions.

This does not mean every employer needs an in-house rescue team. Most do not. But if your workplace has hazards that could require technical rescue (confined spaces, elevated work areas, chemical exposures), you need to identify:

• Who is trained and assigned to perform rescue or medical duties
• What equipment is available (first aid kits, AEDs, rescue equipment)
• When employees should attempt intervention vs. when they should wait for professional responders

For most general industry workplaces, this section addresses first aid and CPR-trained employees, AED locations, and the protocol for summoning emergency medical services.

5. Employee Alarm System

Your EAP must describe the alarm system used to notify employees of an emergency. Under 29 CFR 1910.165, employee alarm systems must:

• Be capable of being perceived above ambient noise or light levels
• Be distinctive and recognizable as a signal to evacuate or take other action
• Be maintained in operating condition (tested regularly)

The alarm does not have to be a building-wide klaxon. For small workplaces, a voice notification system, a PA announcement, or even a manually operated device (air horn, bell) can suffice — as long as every employee can hear or see it from their work area.

What matters is that every employee knows what the alarm sounds like and what it means. If your fire alarm sounds different from your severe weather alarm, employees need to know the difference. If you use a PA system, the announcement protocol needs to be scripted and practiced.

6. Names, Titles, and Contact Information

The plan must list the names or job titles of every person employees can contact for more information about the plan or their duties under it. This typically includes:

• The EAP coordinator or safety manager
• Floor wardens or area wardens
• Department supervisors
• The person responsible for maintaining and updating the plan

29 CFR 1910.38(c)(6) is specific: employees must know who to ask when they have questions about the plan. A plan that exists only on paper and nobody can explain is not a plan — it is a liability.

Training Requirements: The Part Most Employers Skip

Having a written plan means nothing if your employees have never seen it, never practiced it, and could not find the nearest exit if their desk caught fire.

OSHA's training requirements under 29 CFR 1910.38(f) are clear:

Initial Training

Every employee must be trained on the EAP **when the plan is first developed** and **when they are initially assigned to a job.** This means every new hire, on their first day or during orientation, must receive EAP training. Not a handout in a packet they never read. Actual training.

The training must cover:

• The types of emergencies that could occur in the workplace
• What to do when each type occurs (evacuate, shelter in place, lockdown)
• Evacuation routes from their specific work area
• Assembly point locations
• The alarm system — what it sounds like, what each alarm means
• Their specific role, if any (warden, first aid, equipment shutdown)
• How to report emergencies
• Who to contact with questions

Training When the Plan Changes

Whenever you revise the EAP — new evacuation routes, new alarm systems, changes to assembly points, updated contact lists — affected employees must be retrained. Not just emailed a PDF. Retrained.

Annual Drills

While 29 CFR 1910.38 does not explicitly mandate annual drills for all workplaces, Cal/OSHA expects them, fire codes typically require them, and OSHA interprets the training requirement to include periodic practice. **California Fire Code Section 405** requires evacuation drills at intervals prescribed by the fire code official — annually at minimum for most occupancies, and more frequently for educational, institutional, and high-hazard occupancies.

Here is what a drill should look like:

1. **Announced or unannounced** — mix both. Announced drills teach procedures. Unannounced drills test readiness.
2. **Full evacuation** — every person exits the building. No "we will just pretend."
3. **Timed** — track how long full evacuation takes. Compare to previous drills.
4. **Accountability tested** — wardens take roll at assembly points.
5. **Documented** — date, time, participants, evacuation time, issues observed, corrective actions.
6. **Debriefed** — what went right, what went wrong, what needs to change.

If you are not doing annual drills, you are not compliant. Full stop.

Building an EAP That Actually Works

Compliance is the floor, not the ceiling. A plan that technically meets every OSHA element but cannot be executed in a real emergency is worthless. Here is how to build one that works.

Step 1: Conduct a Real Risk Assessment

Before you write a single word of your EAP, you need to understand what can actually go wrong in your specific facility. Not theoretical hazards from a generic template — your hazards, in your building, with your operations.

Walk the facility. Identify:

• **Fire hazards:** Flammable materials storage, ignition sources, cooking equipment, electrical panels
• **Chemical hazards:** Stored chemicals, gas lines, processes that produce toxic fumes
• **Natural disaster exposure:** Earthquake fault proximity, flood zones, wildfire interface areas
• **Structural risks:** Single-exit areas, basement workspaces, multi-story buildings without elevators
• **Human threats:** Active shooter vulnerability, workplace violence history (see SB 553 requirements)
• **Utility disruptions:** Power outage impacts, water supply loss, HVAC failure with sealed buildings

Your risk assessment drives the plan. A warehouse full of flammable materials has different emergency priorities than a law office on the third floor. Your plan should reflect that.

Step 2: Design for Your Facility, Not a Template

Templates are starting points, not finished products. Your EAP must reflect:

• **Your actual floor plan.** Routes drawn on your actual building layout, not a generic diagram.
• **Your actual workforce.** Shift schedules, remote workers, employees with disabilities, multilingual workforce considerations.
• **Your actual equipment.** Alarm systems you have installed, fire suppression systems in place, first aid equipment on hand.
• **Your actual neighborhood.** Nearest fire station, hospital proximity, access roads for emergency vehicles.

I have seen EAPs that reference "the south stairwell" in a building that has no south stairwell. I have seen plans that list emergency contacts who left the company two years ago. I have seen evacuation maps printed so small nobody over 40 can read them.

Your plan has to match your reality. If it does not, it is fiction.

Step 3: Assign Clear Roles and Authority

Emergencies create chaos. Chaos is managed with clear authority. Your EAP must designate:

• **EAP Coordinator:** The person ultimately responsible for the plan, its maintenance, and its execution. Usually the safety manager or facilities manager.
• **Floor/Area Wardens:** Employees assigned to specific zones who are responsible for directing evacuation, checking rooms, assisting mobility-impaired employees, and reporting to the coordinator.
• **First Aid Responders:** Employees trained in first aid and CPR, with clear instructions on when to intervene and when to stand back.
• **Equipment Shutdown Personnel:** Employees responsible for shutting down critical operations before evacuating — with clear time limits and abort triggers.

Every role needs a primary and a backup. People take vacations. People call in sick. If your entire evacuation plan depends on one person and that person is at a dentist appointment, your plan has a single point of failure.

Step 4: Test, Debrief, Revise

A plan that has never been tested is a theory. Run drills. Time them. Document them. Debrief them.

After every drill, ask:

• Did everyone hear the alarm?
• Did everyone know where to go?
• Were all areas checked before wardens exited?
• How long did full evacuation take?
• Was everyone accounted for at the assembly point?
• Were there bottlenecks at exits?
• Did elevator use occur during a fire drill (it should not)?
• Were employees with disabilities assisted appropriately?

Fix what is broken. Update the plan. Train on the changes. Drill again.

This is a cycle, not a one-time project.

California Earthquake Considerations

If you operate in California and your EAP does not address earthquakes, your plan is incomplete. Period.

California sits on some of the most active seismic faults on the planet. The San Andreas Fault, the Hayward Fault, the San Jacinto Fault — these are not theoretical risks. The Northridge earthquake in 1994 caused $20 billion in damage and killed 57 people. The Ridgecrest sequence in 2019 reminded everyone that major seismic events are not historical curiosities.

Your EAP must include earthquake-specific procedures:

During the Earthquake

• **Drop, Cover, and Hold On.** This is the California Governor's Office of Emergency Services recommended response. Under a sturdy desk or table, away from windows, exterior walls, and heavy objects that could fall.
• **Do NOT evacuate during shaking.** Most earthquake injuries occur from people trying to move during the event. Stay put until shaking stops.
• **If outdoors:** Move away from buildings, utility wires, and overpasses. Drop to the ground.
• **If driving:** Pull over away from overpasses, bridges, and buildings. Stay in the vehicle.

After the Earthquake

• **Evacuate only if structurally necessary.** Unlike fire, immediate evacuation is not always the correct response after an earthquake. If the building is structurally compromised — visible cracks, leaning walls, gas smell — evacuate. If not, shelter in place may be safer, especially with aftershock risk.
• **Check for gas leaks.** If you smell gas, do not flip switches. Evacuate and call the gas company.
• **Check for structural damage** before re-entering any building.
• **Prepare for aftershocks.** Major earthquakes are followed by aftershocks that can cause additional damage to already weakened structures.
• **Account for all personnel** using the same procedures as any other evacuation.

Earthquake-Specific Preparedness

• **Secure heavy objects:** Bookshelves, filing cabinets, servers, and equipment should be anchored to walls or floors.
• **Emergency supplies:** California employers should maintain earthquake kits — water (one gallon per person per day for three days minimum), non-perishable food, flashlights, batteries, first aid supplies, blankets. Cal OES recommends all businesses in seismic zones maintain these supplies.
• **Utility shutoff training:** Designated employees should know how to shut off gas, electricity, and water.

Cal/OSHA does not have a separate earthquake-specific regulation, but the general duty clause (California Labor Code Section 6400) requires employers to provide a safe workplace — and in California, that means accounting for seismic risk in your emergency planning.

Common EAP Deficiencies: What Gets Employers Cited

After years of seeing emergency action plans across every industry, here are the deficiencies I see over and over. If any of these sound familiar, fix them today.

1. The Plan Exists but Nobody Knows About It

The most common deficiency. A plan was written years ago by someone who no longer works there. It sits in a binder or a SharePoint folder. No employee has been trained on it. No drill has ever been conducted. As far as OSHA is concerned, this is the same as not having a plan.

2. Generic Templates with No Facility-Specific Information

Downloaded from the internet. Company name filled in at the top. Everything else is boilerplate. Evacuation routes do not match the actual building. Assembly points are described as "parking lot" with no specifics. Contact names are from the template or blank.

3. No Provisions for Employees with Disabilities

The ADA and OSHA both require that emergency plans account for employees who need assistance evacuating. If your plan says "all employees exit via the stairwell" and you have an employee who uses a wheelchair on the third floor, your plan has a life-threatening gap.

4. Outdated Contact Information

Emergency contacts who left the company. Phone numbers that are disconnected. Fire department numbers that changed after a merger of emergency services. Your contact list must be current. Review it quarterly at minimum.

5. No Drill Documentation

You say you did drills. OSHA says prove it. If there is no documentation — dates, times, participants, observations, corrective actions — the drills did not happen as far as any inspector is concerned.

6. Single-Exit Plans

Many EAPs only identify one evacuation route from each area. That route may be blocked by the emergency itself. Every area must have a primary and secondary route. If your building layout makes secondary routes impossible, that is a building design issue that needs to be addressed with the fire marshal.

7. No Shelter-in-Place Procedures

Not every emergency requires evacuation. Chemical releases, active threats, severe weather — these may require employees to stay inside, seal doors, and shelter. If your EAP only covers evacuation, it is incomplete.

8. Alarm System That Cannot Be Heard

Your alarm has to be perceivable in every work area. That includes the warehouse with hearing protection requirements, the server room with ambient noise, and the outdoor work area 200 feet from the building. If employees cannot hear the alarm from where they work, the alarm does not comply with 29 CFR 1910.165.

What Protekon Delivers

Here is where I stop describing the problem and start talking about the solution.

Protekon exists because California employers — especially small and mid-sized businesses — do not have the time, the expertise, or the bandwidth to build, maintain, and continuously update the compliance infrastructure that Cal/OSHA demands.

When it comes to Emergency Action Plans, here is what Protekon delivers:

**Facility-Specific EAP Development.** Not a template. Not a fill-in-the-blank form. A plan built from a real risk assessment of your facility, your operations, your workforce, and your hazard profile. Every evacuation route is drawn on your floor plan. Every role is assigned to a real person. Every procedure reflects your actual building and operations.

**Regulatory Alignment.** Your EAP is built to satisfy 29 CFR 1910.38, Cal/OSHA Title 8 Section 3220, California Fire Code Section 405, and your IIPP integration requirements under Section 3203. One plan, fully aligned to every applicable standard.

**Employee Training Programs.** Initial training for all employees. Role-specific training for wardens, first aid responders, and equipment shutdown personnel. New hire orientation integration so every employee is trained from day one.

**Drill Coordination and Documentation.** We schedule, facilitate, observe, and document your evacuation drills. Timed evacuations, warden assessments, accountability checks, bottleneck identification — all documented and filed for inspector readiness.

**Continuous Maintenance.** When your facility changes, your roster changes, your alarm system is upgraded, or regulations are updated — your EAP is revised, employees are retrained, and documentation is updated. This is not a one-time deliverable. It is an ongoing managed service.

**California-Specific Hazard Integration.** Earthquake procedures, wildfire smoke protocols (per Cal/OSHA's wildfire smoke standard, Title 8 Section 5141.1), and any region-specific hazards relevant to your location in the Inland Empire and beyond.

**Audit-Ready Documentation.** Every element of your EAP — the plan itself, training records, drill logs, maintenance history — is maintained in a format that is immediately producible when Cal/OSHA comes knocking. No scrambling. No searching. No excuses.

The Bottom Line

An Emergency Action Plan is not a bureaucratic formality. It is the document that tells your people what to do when the building is on fire, the ground is shaking, or a threat is at the door.

OSHA requires it. Cal/OSHA enforces it. Your employees depend on it.

And if you are like most California employers I have worked with, you know your current plan — if you have one — is not where it needs to be.

You have two choices. You can keep that binder behind the coffee maker and hope you never need it. Or you can build a plan that actually works, train your people on it, test it regularly, and maintain it as your business evolves.

Protekon handles all of it. That is what managed compliance means.

The emergency is not going to wait for you to get your act together. Neither should you.

---

*Protekon provides managed compliance services for California employers. Emergency Action Plans, IIPP programs, SB 553 workplace violence prevention plans, and ongoing Cal/OSHA compliance — built for your business, maintained continuously. [Contact Protekon](https://protekon.com/contact) for a compliance assessment.*