Program & Plan Development

How to Write a Facility-Specific WVP Plan

A definitive guide to writing a facility-specific workplace violence prevention plan that satisfies Texas HSC Chapter 331, the Joint Commission, and OSHA — and survives a survey.

VIGILO Compliance Editorial Team11 min

A facility-specific workplace violence prevention (WVP) plan is the written, board-adopted document that defines how your facility identifies, prevents, responds to, and learns from violence against staff. To satisfy Texas HSC Chapter 331, the Joint Commission, and OSHA, it must be built around your own units, risks, and incident history — not a generic template — and every required element must be present and findable.

The plan is the spine of your entire program. Every other artifact — the committee charter, training rosters, incident logs, the annual evaluation — hangs off it. When a surveyor opens your binder, the plan is the document that tells them whether you have a living program or a purchased PDF. This guide walks through how to write one that holds up.

#Why the plan is the spine of the program

Three regimes converge on a single written plan. Texas Health & Safety Code Chapter 331 (added by SB 240, 88th Legislature, 2023) and its hospital rule 26 TAC §133.55 (adopted in the Texas Register, Oct. 11, 2024) require a written, facility-specific WVP policy and plan. The Joint Commission's workplace violence prevention requirements (effective Jan. 1, 2022 for hospitals, spanning the EC, HR, and LD chapters) require a WVP program with a designated leader and supporting elements. OSHA Publication 3148 frames a healthcare program around its five components, enforced under the General Duty Clause §5(a)(1).

The good news for operators: one well-written plan can satisfy all three at once. The plan is where you map your committee, your worksite analysis, your reporting policy, your training cadence, your post-incident response, and your annual evaluation into a single evidence set. Our workplace violence prevention programs service is built around authoring exactly this document.

A note on urgency, stated honestly. Chapter 331 carries no dedicated fine schedule. The reason to get the plan right is twofold: it surfaces as a licensure-survey deficiency requiring a plan of correction, and it becomes the first document plaintiff's counsel requests in post-incident litigation discovery. The plan is your defense, not your fine-avoidance.

#The required elements: a writer's checklist

A defensible plan explicitly contains, and makes findable, every element a surveyor checks for. Use this as your table of contents.

Plan sectionPrimary-source basisWhat it must establish
Committee compositionHSC Ch. 331; 26 TAC §133.55Names the WVP committee and its required member categories
Worksite / risk analysisTJC EC chapter; OSHA Pub. 3148 Component 2How and how often the facility analyzes its own hazards
Prevention controlsOSHA Pub. 3148 Component 3Engineering, administrative, and work-practice controls tied to findings
Confidential reporting + anti-retaliationHSC Ch. 331How staff report, with non-discouragement of contacting law enforcement
Training cadenceHSC Ch. 331; TJC HR chapterAt-least-annual training; orientation and on-change for TJC
Post-incident responseHSC Ch. 331; TJC EC chapterAcute treatment offered; work-assignment adjustment; debrief
Annual plan evaluationHSC Ch. 331Committee evaluation reported to the governing body
Program leadershipTJC LD chapterA named, accountable program leader

If any one of these is missing or buried, a surveyor scores it. The plan is not a narrative essay — it is a navigable instrument.

#Step 1 — Confirm coverage and name your facility

Before you write a word, confirm your facility is covered and write the plan in your own name. Chapter 331 covers general and special hospitals (Ch. 241), mental hospitals (Ch. 577), nursing facilities (Ch. 242, if they employ two or more RNs), ambulatory surgical centers (Ch. 243), freestanding emergency medical care facilities, and home-and-community support services agencies — home health and hospice (Ch. 142, if they employ two or more RNs). Private physician practices are excluded.

The single most-cited deficiency is a plan that reads like a template: another facility's name in the header, generic "high-risk areas" language, no mention of your emergency department or behavioral health unit. The statute requires a facility-specific plan. From the first page, the document must be unmistakably yours.

#Step 2 — Build the committee section

The plan must establish a WVP committee that includes a registered nurse who provides direct patient care; a physician who provides direct patient care, if the facility employs any; and a security-services employee, if the facility employs any. The committee can be an existing committee that has been re-authorized for this purpose.

Write the committee section to name those required member categories and to define the committee's authority, cadence, and minute-keeping obligation. The committee is what turns the plan from a static document into a living program — which is why standing it up correctly deserves its own treatment. See our deep dive on standing up a WVP committee that actually functions.

#Step 3 — Write the prevention and response core

This is the operational heart of the plan, and the section most likely to drift into generic language. Anchor every clause to your own facility.

#Prevention controls

Map controls to the hazards your worksite analysis actually found, organized the way OSHA Publication 3148 expects:

  • Engineering controls — sightlines, egress, alarm and duress systems, controlled-access points, safe rooms.
  • Administrative controls — patient-risk flagging, visitor management, staffing patterns on high-risk units, behavioral-alert procedures.
  • Work-practice controls — de-escalation protocols, two-person procedures, communication of credible threats across shifts.

Avoid listing controls that are aspirational. A control written as "panic alarms planned" but not installed is read as an unabated hazard, not a control. The plan should describe what exists.

#Confidential reporting and anti-retaliation

Chapter 331 requires a confidential reporting policy that protects staff from discipline, discrimination, or retaliation for reporting in good faith — and that does not discourage employees from contacting law enforcement. This language is statutory and frequently missing. Write it explicitly into the plan and cross-reference the standalone reporting policy.

#Post-incident response

The plan must describe the facility's post-incident response: offering immediate post-incident services, including any necessary acute medical treatment, to staff directly involved, and adjusting work assignments as appropriate. Make this a documented sequence the facility runs every time, not a one-line promise.

#Step 4 — Write the governance and evaluation section

Two elements turn a document into a defensible program: formal adoption and a recurring evaluation.

Adoption. The plan must be formally adopted by leadership or the governing body, with a signature and date. A plan that exists but was never adopted is an unenforceable program — and a common citation.

Annual evaluation. Chapter 331 requires the committee to evaluate the plan at least annually and report the results to the governing body. This is the statute's built-in recurring obligation, and the section surveyors check to confirm the program is alive. Build the cadence into the plan and treat the annual WVP plan evaluation as a permanent agenda item with a paper trail.

#Step 5 — Add version control and cross-references

A stale plan with no revision history reads as a program nobody maintains. Establish:

  • A version-control block — version number, adoption date, review dates, and a summary of what changed and why.
  • Cross-references to operational policies (reporting, de-escalation, restraint where applicable) so the plan and the floor stay reconciled.
  • A clear statement of who owns the plan — the designated program leader, named.

#Common deficiencies to write against

The fastest way to write a defensible plan is to write against the findings surveyors actually issue.

DeficiencyHow to prevent it in the draft
Purchased template with another facility's contentWrite in your own name, units, and risks from page one
Plan never formally adopted by leadershipBuild in an adoption signature block and date
No revision history; plan is staleAdd a version-control block and a scheduled review
Omits a required element (e.g., anti-retaliation)Use the required-elements checklist as your outline
Plan contradicts floor practiceReconcile the draft against actual unit workflows
Doesn't name the leader or committee compositionName both explicitly inside the plan

#From draft to survey-ready

A finished plan is the beginning, not the end. It must be adopted, distributed, trained against, and then proven — which is the job of the survey-readiness binder, the single source of truth a surveyor navigates in minutes. And because every required element renews on an annual cadence, the plan only stays defensible inside a maintained WVP program of record that carries the work between surveys.

If your facility is starting from a template — or from nothing — a focused survey-readiness audit scores your current plan against the Chapter 331, 26 TAC §133.55, and PL 2024-10 checklist and flags every missing element before a surveyor does. VIGILO authors the facility-specific plan as a flat-fee engagement, formatted for the binder and ready for governing-body adoption.

For the statutory text behind every requirement above, see our Texas SB 240 compliance hub and the HSC Chapter 331 requirements breakdown.


Primary sources: Texas Health & Safety Code Chapter 331 (SB 240, 2023); 26 TAC §133.55 (Texas Register, Oct. 11, 2024); HHSC Provider Letter PL 2024-10; The Joint Commission workplace violence prevention requirements (EC/HR/LD, effective Jan. 1, 2022 for hospitals); OSHA Publication 3148 and General Duty Clause §5(a)(1).

From this article

Frequently asked questions

What must a facility-specific WVP plan include?

A facility-specific plan must name your committee and its required members, your prevention controls, a confidential reporting and anti-retaliation policy, an annual training requirement, a post-incident response process, and an annual plan evaluation reported to your governing body — all written around your own units, risks, and incident history rather than a generic template.

Why do generic WVP plan templates fail surveys?

Texas HSC Chapter 331 and 26 TAC §133.55 require a facility-specific plan. A purchased template that names another facility, omits your high-risk units, or contradicts floor practice fails the tracer because the documented program no longer matches what actually happens on the unit.

Who should own the WVP plan?

A designated workplace violence prevention program leader owns the plan as a Joint Commission Leadership (LD) requirement, while the Chapter 331 committee evaluates it annually and the governing body receives the evaluation. The plan should name that leader and committee composition inside the document itself.

Turn this guidance into a survey-ready program

VIGILO builds, documents, and maintains the workplace violence prevention program of record — committee, written plan, training, and binder — aligned to Chapter 331, the Joint Commission, and OSHA.

CallRequest an Audit