Risk & Worksite Analysis

Risk Assessment for Off-Site & Mobile Staff

How to run a workplace violence risk assessment for home health, hospice, and community-based clinicians who work in environments you don't control — a worksite-analysis method that satisfies PL 2024-10, Joint Commission, and OSHA.

VIGILO Compliance Editorial Team8 min

When the worksite is a patient's home, a car, or a community setting, a workplace violence risk assessment cannot just walk a building — there is no building to walk. The analysis shifts from a fixed environment to a moving target: the visit, the route, the conditions staff enter, and the systems that connect an isolated worker back to help. For home health, hospice, and community-based clinicians, this is the assessment that makes a distributed program defensible.

This is the hardest worksite analysis to run because the employer controls almost none of the environment. The compliance answer is to analyze what you can control — screening, communication, protocols, and training — and document how those controls address the hazards you can't engineer away. Below is the method.

#Why off-site staff need their own assessment

A facility-centered worksite analysis will quietly leave your field workforce uncovered, and that gap is a recognized one.

  • Texas HCSSA Provider Letter PL 2024-10 extends workplace violence prevention expectations to home and community settings, where the "two employed RNs" threshold brings many agencies under Chapter 331's framework.
  • OSHA Publication 3148 explicitly addresses community-based and home-care workers as a high-exposure group, and the General Duty Clause §5(a)(1) applies wherever a recognized hazard exists — including a patient's driveway.
  • The Joint Commission's home care workplace violence expectations (OME) reinforce that the requirement follows the worker, not the address.

A worksite analysis that stops at the facility's front door tells a surveyor you assessed the staff you can see and forgot the staff you can't. The off-site workforce is often the most exposed and the least protected.

#Reframe the "site" as the visit and the route

Translate each leg of the standard three-leg method into the mobile context.

Standard legOff-site translation
Records reviewField-incident and near-miss reports, missed check-ins, route/territory incident history
Physical walkthroughPre-visit environment screening; territory and travel-risk review; check-in/out and escalation systems
Frontline inputStructured input from field clinicians, who know which visits and areas feel unsafe

The full fixed-site method is in how to conduct a healthcare workplace violence risk assessment; the off-site version keeps the three legs but redefines the "site."

#Map the hazards you can't engineer away

Off-site work concentrates a distinct hazard set. Name each one in the analysis so the controls have something to attach to.

  • Isolation and no backup — the lone-worker problem. No colleagues, no facility duress system, delayed help.
  • Uncontrolled home environments — weapons, unrestrained animals, intoxication, and other household members the agency never assessed.
  • Travel and neighborhood risk — parking, walking to the door, and high-incident territories.
  • Information gaps — visits scheduled before anyone screens the household or the history.
  • Communication blind spots — areas with poor signal where check-in systems fail.

Because the employer cannot redesign a patient's living room, the control hierarchy shifts. Engineering controls give way to administrative controls — screening, scheduling, communication, and protocols — plus training and PPE-equivalents like communication devices.

#Document the controls that carry the weight

For each hazard, the analysis should point to a documented control, then track it to closure like any other finding.

  • Pre-visit risk screening — a structured process to flag a household before a clinician is sent, with a path to send two staff, reschedule, or decline. The screening mechanics are detailed in pre-visit risk screening for field staff.
  • Lone-worker protocols — check-in/check-out timing, GPS or location awareness where adopted, an escalation tree when a worker misses contact, and a "no-contact" response. See home health lone-worker safety.
  • Communication and duress — devices and procedures that reach an isolated worker, and a documented plan for dead-zone territories.
  • Training for the distributed workforce — de-escalation and exit-strategy training tailored to a home, not a unit.

#Carry it into the register and the loop

Every off-site finding enters the same risk register, ranked by likelihood and severity, then a mitigation log with a named owner and target date. Refresh it on a defined cadence and after any field incident — the territory, the patient mix, and the threat picture all move. The metric that gets scored remains closure, not count: a known unsafe territory with no documented response is the "recognized but not abated" exposure, carried into the field.

#A note on scope

A risk assessment for off-site staff is a compliance and documentation activity — it identifies the hazards of uncontrolled environments and documents the administrative controls that address them. It is not an escort, guard, patrol, or investigations service, and the agency's role is to assess and manage risk, not to guarantee a clinician's safety in a setting it does not control. The deliverable is a survey-defensible analysis and corrective-action log.

#How VIGILO helps

VIGILO builds the off-site leg of your workplace violence risk assessment for a distributed workforce: reframing the worksite as the visit and route, naming the uncontrolled-environment hazards, and tying them to documented screening, lone-worker, and training controls in your written plan. For Texas agencies it maps to PL 2024-10 and Chapter 331 and is kept current through an annual program review. To benchmark your field program against the requirements, start with the Chapter 331 compliance checklist.


VIGILO provides compliance, training, and consulting assistance and supports survey-readiness and preparedness; it does not guarantee safety outcomes and does not provide security guard, patrol, escort, or investigative services. Sources: OSHA Publication 3148 (community-based and home-care workers) and General Duty Clause §5(a)(1); Texas HCSSA Provider Letter PL 2024-10 and Health & Safety Code Chapter 331 (SB 240, 88th Leg., 2023); The Joint Commission home care workplace violence expectations.

From this article

Frequently asked questions

How do you do a worksite analysis when the worksite is someone's home?

You shift from analyzing a fixed building to analyzing the work pattern: where staff travel, the conditions they enter, the per-visit risk-screening process, and the check-in and escalation systems. The 'site' becomes the visit and the route. A defensible off-site analysis documents these moving-target hazards and the controls that address them.

Do home health and hospice agencies have to assess workplace violence risk?

Yes. Texas HCSSA Provider Letter PL 2024-10 extends workplace violence prevention expectations to home and community settings, and OSHA Publication 3148 specifically addresses community-based and home-care workers. A risk assessment that accounts for uncontrolled environments is the foundation of a defensible program for a distributed workforce.

What hazards are unique to off-site healthcare workers?

Isolation and lack of backup, unknown or uncontrolled home environments, weapons and unrestrained animals, neighborhood and travel risk, and the absence of facility duress systems. Because the employer cannot engineer the environment, the controls shift toward screening, communication, lone-worker protocols, and training.

Turn this guidance into a survey-ready program

VIGILO builds, documents, and maintains the workplace violence prevention program of record — committee, written plan, training, and binder — aligned to Chapter 331, the Joint Commission, and OSHA.

CallRequest an Audit