Risk & Worksite Analysis

The Annual Worksite Analysis: A Field Guide

A practical field guide to the annual workplace violence worksite analysis hospitals owe under Joint Commission, OSHA, and Texas Chapter 331 — scope, cadence, and the evidence surveyors open the binder to find.

VIGILO Compliance Editorial Team8 min

An annual worksite analysis is a documented, facility-specific study of where workplace violence hazards concentrate in your environment of care, refreshed at least once a year. It reviews your own incident data, walks the physical environment, gathers frontline input, ranks the findings, and feeds a mitigation log that tracks each item to closure. It is the engine that keeps your written plan honest year over year.

This field guide is for the person who already ran a first assessment and now owns the recurring cycle — the safety director, risk manager, or designated program leader who has to make the analysis happen on schedule and survive a survey. Below is what to do, in what order, and what a surveyor opens the binder to find.

#Why "annual" is the operative word

Three regimes converge on a recurring analysis, not a one-time one.

  • The Joint Commission workplace violence prevention requirements (effective Jan. 1, 2022 for hospitals) call for an annual worksite analysis with follow-up in the Environment of Care chapter.
  • OSHA Publication 3148, Guidelines for Preventing Workplace Violence for Healthcare and Social Service Workers, makes Worksite Analysis and Hazard Identification an ongoing program component — something you maintain, not finish.
  • Texas HSC Chapter 331 (added by SB 240) requires a written, facility-specific plan plus an annual evaluation to the governing body — and you cannot evaluate a plan without re-examining the hazards underneath it.

The deliverable that gets scored is not one perfect report. It is a dated trail showing the analysis was redone, the data moved, and last year's findings were closed or carried forward with a reason.

#The annual cycle, step by step

A defensible annual worksite analysis re-runs the same three-leg method each cycle — records, walkthrough, frontline input — and then reconciles against the prior year. The full first-pass method is in how to conduct a healthcare workplace violence risk assessment; this is the annual rhythm layered on top.

#1. Re-pull current incident data

Start each cycle with fresh data for the trailing 12–24 months. Reconcile the internal workplace violence log against the OSHA 300 Log, 300A, and 301 (29 CFR 1904) for the same window. Year over year, you are looking for trend lines — a unit trending up, a shift that newly concentrates events, a category of trigger that has grown.

#2. Re-walk what changed

You do not have to walk every square foot every year, but you must document why you walked what you walked. Prioritize:

  • Units with rising incident counts.
  • Areas touched by renovation, relocation, or a new service line.
  • Spaces flagged in last year's analysis that received a control — you are verifying the fix held.

#3. Re-collect frontline input

Re-survey or re-interview staff in high-risk units. OSHA Pub. 3148 makes employee participation its first program component, and a surveyor reading an analysis with no current employee voice reads a paper exercise. Fresh input also surfaces drift the data lags behind.

#4. Reconcile last year's mitigation log

This is the step that separates a real program from a re-photocopied one. Walk every open item from the prior cycle: closed, still open, or reopened. An item that has sat open for two cycles is the classic "recognized but not abated" exposure that surfaces in both surveys and post-incident litigation.

#What the annual analysis must cover

Scope it across the same domains every year so the record is comparable cycle to cycle.

DomainWhat to re-examine annually
Incident historyInternal log + OSHA 300 reconciliation, trended year over year
Physical environmentIngress/egress, sightlines, waiting-room flow, duress systems in changed/high-risk areas
High-risk unitsED, behavioral health, L&D, and any unit newly trending up
Staffing geometryCoverage, visibility, lone-worker exposure by shift
Prior findingsClosure status of last year's mitigation log
Frontline inputCurrent survey/interview results from affected staff

#Set a cadence — and honor event triggers

Annual is the floor, not the ceiling. A worksite analysis frozen for 12 months stops being current the moment a unit relocates or a serious incident lands. Define a written cadence that pairs the annual cycle with event-driven refreshes after renovations, service changes, staffing-model shifts, or significant incidents. The trigger logic is laid out in how often to update your workplace violence risk assessment.

#Feed the annual plan evaluation

The annual worksite analysis is not a standalone exercise — it is the input to the annual plan evaluation your governing body must receive under Chapter 331. The analysis says what the hazards are now; the evaluation says whether the plan still addresses them. Surveyors expect to trace one into the other.

#A note on scope

An annual worksite analysis is a compliance and documentation activity — an environment-of-care security risk assessment in the regulatory sense. It identifies and re-examines gaps and proves the facility kept looking. It is not a guard deployment, patrol design, or physical-security staffing service. The deliverable is a dated, survey-defensible report and an updated mitigation log — not personnel on a post.

#How VIGILO helps

VIGILO runs the recurring worksite-analysis cycle as part of an annual program review: re-pulling and reconciling your data, re-walking changed and high-risk areas, re-collecting frontline input, and reconciling last year's findings into an updated, ranked register tied to your written workplace violence risk assessment. For Texas facilities it maps directly to the HSC Chapter 331 requirements and feeds the governing-body evaluation. To benchmark where your current cycle stands, start with the Chapter 331 compliance checklist.


VIGILO provides compliance, training, and consulting assistance and supports survey-readiness and preparedness; it does not guarantee safety outcomes and does not provide security guard, patrol, or investigative services. Sources: The Joint Commission Workplace Violence Prevention requirements (Environment of Care chapter, annual worksite analysis with follow-up; effective Jan. 1, 2022 for hospitals); OSHA Publication 3148 (Worksite Analysis & Hazard Identification, Component 2) and recordkeeping 29 CFR 1904; Texas Health & Safety Code Chapter 331 (SB 240, 88th Leg., 2023) and 26 TAC §133.55.

From this article

Frequently asked questions

What is an annual worksite analysis for workplace violence?

It is a documented, facility-specific study of where violence hazards concentrate in your environment of care, refreshed at least once a year. It reviews your incident data, walks the physical environment, collects frontline input, ranks the findings, and feeds a mitigation log. The Joint Commission expects it annually for hospitals; OSHA treats it as an ongoing program component.

How is an annual worksite analysis different from a one-time risk assessment?

A one-time assessment is a snapshot; an annual worksite analysis is a recurring cycle. Each year you re-pull current incident data, re-walk units that changed, re-survey staff, and reconcile last year's open mitigation items. The defensible evidence is the year-over-year trail, not a single dated report.

Does the worksite analysis have to be done every 12 months exactly?

The Joint Commission frames it as annual for hospitals, and you should also refresh it after any significant change — a renovation, a service-line shift, a serious incident, or a staffing model change. Treat 12 months as the outer limit, not a target; event-driven refreshes between annual cycles strengthen the record.

Turn this guidance into a survey-ready program

VIGILO builds, documents, and maintains the workplace violence prevention program of record — committee, written plan, training, and binder — aligned to Chapter 331, the Joint Commission, and OSHA.

CallRequest an Audit