Risk & Worksite Analysis
How Often to Update a WV Risk Assessment
How often should a healthcare workplace violence risk assessment be updated? At least annually for the Joint Commission, plus event-driven triggers — with the cadence and triggers in writing.
A healthcare workplace violence risk assessment should be updated at least annually, with event-driven triggers layered on top. The Joint Commission requires an annual worksite analysis for hospitals; OSHA expects an ongoing process rather than a one-time event; and Texas HSC Chapter 331's annual plan evaluation pairs naturally with a yearly reassessment. A serious incident or a change to the environment triggers an off-cycle update on its own.
Cadence is not a footnote. A worksite analysis performed once and never repeated is one of the most frequently questioned findings in the field — the analysis becomes stale, and a stale assessment cannot keep your written plan facility-specific.
#The annual baseline
Three regimes point to the same yearly rhythm.
| Regime | What it requires | Primary source |
|---|---|---|
| Joint Commission | Annual worksite analysis with follow-up (EC chapter) | TJC WVP requirements, eff. Jan. 1, 2022 (hospitals) |
| OSHA | Ongoing worksite analysis; periodic program evaluation | OSHA Pub. 3148 (Components 2 & 5); §5(a)(1) |
| Texas HSC Ch. 331 | Annual plan evaluation reported to the governing body | HSC Ch. 331 (SB 240, 2023); 26 TAC §133.55 |
The Joint Commission is the most explicit: the worksite analysis is annual, and the analysis must be followed up. OSHA's Publication 3148 frames worksite analysis (Component 2) and program evaluation (Component 5) as recurring, not one-and-done. Texas Chapter 331 does not name a separate risk-assessment frequency, but it does require an annual plan evaluation reported to the governing body — and you cannot meaningfully evaluate a plan whose underlying risk picture is two years old.
The practical answer: run the reassessment on the same annual calendar as your Chapter 331 plan evaluation. One cadence, one set of evidence, three regimes satisfied.
#Event-driven triggers (the off-cycle reassessment)
The annual baseline is the floor, not the ceiling. A current program defines, in writing, the events that trigger an off-cycle reassessment. Surveyors ask, "How often do you redo the analysis, and what triggers an off-cycle one?" — and they expect a documented answer, not improvisation.
Common triggers to put in your plan:
- A serious workplace violence incident or a sentinel event
- A near-miss pattern surfacing in the incident trend report
- Construction, renovation, or a unit reconfiguration that changes the environment of care
- A new service line or patient population (e.g., opening behavioral-health boarding in the ED)
- A relevant regulatory or accreditation change
- A change in security systems (alarms, access control, camera coverage)
Writing the triggers down converts an ad-hoc reaction into a defined process — which is exactly what closes the gap between "we'd look at it" and "here is our documented trigger criteria."
#Why a stale assessment fails
The most common cadence-related deficiencies are predictable:
- Analysis done once, never repeated — fails the Joint Commission's annual requirement and OSHA's ongoing expectation.
- No documented trigger criteria — the facility cannot show it would reassess after an incident or a renovation.
- Annual evaluation with no current data — the Chapter 331 plan evaluation reads as a paperwork exercise when the underlying assessment is stale.
Each of these is avoidable with a calendar and a written trigger list. The deeper risk is downstream: after a serious assault, litigation discovery asks whether the facility kept its assessment current. A years-old analysis that missed a known, changed hazard is precisely the kind of gap that becomes an exhibit — see documenting your worksite analysis so it survives a survey and a deposition.
#Build the cadence into the program
Treat the reassessment as a standing item, not a project you rediscover each year:
- Anchor it to the annual plan evaluation so one date drives both.
- Write the trigger criteria into the WVP plan.
- Re-run the three-leg method — records review, walkthrough, employee input — each cycle, rather than copying last year's report. (See how to conduct the assessment.)
- Carry the mitigation log forward so open findings from last cycle are visibly tracked, not reset.
- Minute the committee review, including the required RN who provides direct care under Chapter 331.
#How VIGILO helps
VIGILO keeps the worksite analysis on a defined cadence through the annual program review — re-running the assessment on the statutory and accreditor schedule, maintaining the mitigation log between cycles, and aligning it with the Chapter 331 annual plan evaluation reported to your governing body. The underlying assessment is delivered as a workplace violence risk assessment, and it ties to the HSC Chapter 331 requirements. For a snapshot of where your current cadence stands, start with the Chapter 331 compliance checklist.
Sources: The Joint Commission Workplace Violence Prevention requirements (Environment of Care chapter, effective Jan. 1, 2022 for hospitals); OSHA Publication 3148 (Components 2 & 5) and General Duty Clause §5(a)(1); Texas Health & Safety Code Chapter 331 (SB 240, 88th Leg., 2023) and 26 TAC §133.55. This article supports compliance and survey-readiness; it does not guarantee safety outcomes.