OSHA Compliance

OSHA Hazard Assessment for Healthcare WVP: A Method

A step-by-step OSHA hazard assessment method for healthcare workplace violence, structured to produce the dated worksite analysis an inspector reviews.

VIGILO Compliance Editorial Team9 min

An OSHA hazard assessment for workplace violence is the structured, dated review that identifies where violence could harm staff before an incident occurs. OSHA Publication 3148 calls it worksite analysis and builds it from three inputs — a records review, a physical walkthrough, and an employee survey. Done in that order, it produces the document an inspector opens first.

#Why the method matters as much as the finding

Under the General Duty Clause §5(a)(1), the contest in a healthcare violence case turns on whether you recognized the hazard and whether feasible abatement existed. A hazard assessment is the artifact that proves recognition — but only if it is methodical, dated, and reproducible. A one-page narrative that says "we walked the unit and it looked fine" is not an assessment; it is a liability that proves you looked and saw nothing.

OSHA's guidance, Publication 3148 ("Guidelines for Preventing Workplace Violence for Healthcare and Social Service Workers"), structures worksite analysis around three inputs (Source: OSHA 3148). The method below sequences them so each input feeds the next.

#Step 1 — Define scope and assemble inputs

Before any data is gathered, fix the boundaries. List every unit, department, and off-site setting in scope, including emergency departments, behavioral health, and any field-based staff. Decide the assessment period (most facilities use a rolling 12 months to align with the annual cadence) and identify who owns each input.

This step is also where worker participation begins. OSHA reads an assessment built without frontline involvement as a paper exercise, so seat direct-care staff on the review team from the start — a posture that also satisfies the committee-composition logic of Texas Chapter 331.

#Step 2 — Conduct the records review

The records review establishes what already happened. Pull and reconcile:

SourceWhat it reveals
Internal WVP incident logFrequency, type, and unit concentration of events
OSHA 300 Log and 301 reportsInjuries serious enough to be recordable
Security or call-for-assistance logsEvents that never reached a formal report
Prior worksite analyses and committee minutesOpen corrective actions and recurring themes

The single most common deficiency here is a mismatch between the internal log and the OSHA 300 Log — an injury recorded one place but not the other. Reconcile them now, because an inspector will. The output of this step is a quantified picture of where violence has clustered, which directs the walkthrough.

#Step 3 — Perform the walkthrough survey

The walkthrough examines the physical environment for conditions that enable violence or impede response. Walk each in-scope area the way a surveyor would and record findings against a consistent checklist:

  • Access and egress — uncontrolled entry points, staff with no second exit, doors that lock the wrong way.
  • Sightlines and isolation — blind corners, solo work areas, triage or registration positions with no line of sight to help.
  • Alarm coverage — panic-alarm presence, audibility, and whether staff know how to activate them.
  • Environmental risk factors — unsecured objects that can be used as weapons, long or unmonitored wait areas, inadequate lighting.

Record each finding with its location, the date observed, and a preliminary risk rating. Photographs are useful internally but the dated written finding is the survey evidence. A structured hazard walk-through checklist keeps the walkthrough consistent across units and across years, which is what lets you show a trend rather than a snapshot.

#Step 4 — Run the employee survey

The records review captures reported events; the employee survey captures everything that never became a report. Underreporting is endemic in healthcare, so this input frequently surfaces the highest-value findings — the near-misses, the "we just deal with it" behaviors, and the units where staff have quietly stopped reporting because nothing changed.

Keep the instrument short, confidential, and focused on three questions: what have you experienced, what have you witnessed, and where do you feel unsafe. Confidentiality is not optional — it ties directly to the anti-retaliation protections Chapter 331 requires, and a survey that staff believe is monitored produces sanitized data.

#Step 5 — Synthesize a dated hazard inventory

The three inputs converge into a single output: a written hazard inventory by area or unit, dated and signed. For each identified hazard, record the source that surfaced it, the affected staff, a severity and likelihood rating, and a priority. This inventory is the deliverable an inspector — and a Joint Commission surveyor reviewing the annual worksite analysis — actually reviews. One artifact satisfies both regimes.

Resist the urge to soften findings. An inventory that under-identifies hazards looks reassuring until an incident occurs in an area you rated low-risk, at which point the document works against you.

#Step 6 — Convert hazards into a corrective action plan

A hazard assessment that ends at identification is the worst position in a §5(a)(1) case: you have proven recognition without abatement. Every hazard in the inventory must become a tracked corrective action with an owner, a control, and a due date — the worksite-analysis-to-corrective-action handoff that closes the loop. Tying each control back to the specific hazard that prompted it is precisely what demonstrates feasible abatement, and it is the discipline that separates a real program from an aspirational one.

This handoff is also where the assessment connects to the broader five Publication 3148 components: the hazard inventory is Component 2, the corrective action plan is Component 3, and the dated review you just produced is half of Component 5.

#How often to repeat the method

OSHA expects worksite analysis to be a recurring practice, not a one-time project. Reassess at least annually, and additionally after any serious incident, a significant change to the physical environment or patient population, or a new service line. Running the same six-step method each cycle is what lets you demonstrate a trend over time — the most persuasive evidence that the program is alive rather than archived.

#One method, three regimes

For a Texas hospital, this single assessment answers the General Duty Clause, the Joint Commission's annual worksite-analysis expectation, and the worksite-analysis element embedded in Texas HSC Chapter 331 (the SB 240 mandate, effective September 1, 2024). Built once and dated, it is reusable across all three.

If you want the assessment produced in survey-defensible form, a workplace violence risk assessment runs this method end to end, and a flat-fee survey-readiness audit scores an assessment you already have against the Publication 3148 framework.


This article provides general compliance information, not legal advice or a guarantee of any safety or survey outcome; consult qualified counsel for your facility. Primary sources: OSHA Publication 3148; OSH Act §5(a)(1); 29 CFR 1904; Texas HSC Chapter 331.

From this article

Frequently asked questions

What is an OSHA hazard assessment for workplace violence?

It is the structured, dated review of records, the physical environment, and employee experience that identifies where workplace violence could harm staff. OSHA Publication 3148 calls it worksite analysis, and it is the document an inspector reviews to judge whether a healthcare employer recognized the hazard before an incident occurred.

What are the three inputs to an OSHA hazard assessment?

OSHA Publication 3148 names three: a records review of incident logs and injury data, a walkthrough survey of the physical environment, and an employee survey that captures near-misses and concerns the data never recorded. A defensible assessment combines all three rather than relying on any one source.

How is an OSHA hazard assessment different from a security risk assessment?

A workplace violence hazard assessment focuses on the risk of violent harm to employees and the controls that reduce it. A broader environment-of-care security risk assessment may cover theft, infant abduction, and access control. The two overlap on physical-environment findings but serve different documentation purposes.

Turn this guidance into a survey-ready program

VIGILO builds, documents, and maintains the workplace violence prevention program of record — committee, written plan, training, and binder — aligned to Chapter 331, the Joint Commission, and OSHA.

CallRequest an Audit