How to Create an Emergency Action Plan for Your Business: OSHA Guide
Updated: August 26, 2026
A fire alarm goes off. A chemical line ruptures. Severe weather rolls in with twenty minutes' notice. In the moment, your employees don't need a policy binder. They need to already know exactly what to do, where to go, and who's in charge. That knowledge doesn't happen by accident. It comes from a written, practiced, and genuinely usable emergency action plan (EAP).
If your business has more than ten employees, the Occupational Safety and Health Administration (OSHA) doesn't just recommend this it requires it. And even if you're a smaller operation that's technically exempt from the written-plan requirement, the businesses that recover fastest after a fire, flood, or workplace incident are almost always the ones that planned ahead.
This guide walks through exactly what OSHA requires in an emergency action plan, how to build one step by step, the mistakes that trip up most businesses, and free tools you can use to get started today.
What Is an Emergency Action Plan?
An emergency action plan is a written document that spells out what employees should do before, during, and after a workplace emergency - fires, chemical spills, severe weather, medical emergencies, active threats, and any other hazard specific to your industry. It's not a general safety manual. It's a focused, action-oriented protocol: who reports the emergency, how people evacuate, who accounts for everyone once they're out, and who's responsible for shutting down critical operations before they leave.
Done well, an EAP does two things at once. It satisfies a specific OSHA standard (29 CFR 1910.38), and far more importantly it gives your employees a rehearsed, muscle-memory response instead of a panicked guess when something goes wrong.
Does Your Business Need a Written EAP?
Under OSHA's Emergency Action Plan standard, the rule of thumb is straightforward:
- More than 10 employees: your emergency action plan must be in writing, kept in the workplace, and available for employees to review.
- 10 or fewer employees: you're permitted to communicate the plan orally, but you still need to have covered every required element and be able to demonstrate that every employee understands it.
In practice, "oral" plans are where most small businesses get exposed. Not because the owner didn't think about emergencies, but because nothing was ever written down, reviewed, or communicated to new hires. If you can't produce documentation of some form of plan during an OSHA inspection or after an incident, you're treated the same as a business with no plan at all.
Certain industries face additional layers on top of the base EAP requirement. Businesses with confined spaces such as breweries, tank farms, grain facilities, and similar operations need specialized rescue procedures and equipment for confined-space emergencies. Dental and medical practices need protocols that address chemical and bloodborne pathogen exposure incidents alongside standard fire and evacuation procedures. If your team isn't sure which additional standards apply to your industry, that's a good sign it's worth a conversation with an OSHA compliance consultant before you finalize your plan.
The 6 Elements OSHA Requires in Every EAP
Whether your plan is one page or twenty, OSHA's standard (29 CFR 1910.38) requires it to address six specific things:
1. Procedures for reporting a fire or other emergency. How does an employee alert others - pull station, phone tree, PA system and who do they notify first?
2. Evacuation procedures and exit route assignments. Not just "leave the building," but which exit each area/department uses, and how those routes are marked and kept clear.
3. Procedures for employees who must stay behind to operate critical equipment before evacuating. Some operations (certain machinery, utilities, chemical processes) can't simply be walked away from. Your plan needs to name who handles shutdown and how they safely exit afterward.
4. Procedures to account for all employees after an evacuation. This is the step most plans get wrong. A designated assembly point means nothing if nobody has a list of who should be there and a way to check names off it.
5. Procedures for employees assigned rescue or medical duties. If you have designated first-aid responders or fire brigade members, their responsibilities need to be spelled out, and they need training that matches those responsibilities.
6. Names and job titles of people employees can contact for more information about the plan - both during normal operations and during an actual emergency.
Notice what's missing from that list: a generic statement that you "have a safety culture" or "take emergencies seriously." OSHA doesn't grade intentions. Inspectors and, more importantly, your own employees in a real emergency need specific, assignable, repeatable procedures.
|
Free Download: Emergency Action Plan Checklist |
How to Build Your Emergency Action Plan:
A 4-Step Process
Knowing what OSHA requires is one thing. Actually building the plan is another. FEMA's planning framework for business and industry breaks the process into four manageable steps, and it works well as a starting structure regardless of your industry or company size.
Step 1: Establish a Planning Team
Emergency planning shouldn't live entirely in one person's head - including the owner's. Pull together a small team that represents different parts of the business: operations, facilities, HR, and anyone who already holds informal responsibility during a fire drill or incident. This team owns the plan going forward, not just the initial draft.
Step 2: Analyze Capabilities and Hazards
Before you can write procedures, you need an honest inventory of two things: what could actually go wrong at your specific location (fire, severe weather, chemical exposure, workplace violence, medical emergency, industry-specific hazards), and what you currently have in place to respond (alarm systems, trained staff, emergency equipment, mutual aid relationships with local responders). Most plans fail not because the procedures are wrong, but because the hazard analysis was too generic - copied from a template without asking "does this actually apply to our building, our shift patterns, our equipment?"
Step 3: Develop the Plan
This is where the six OSHA-required elements above get translated into your specific building, org chart, and shift schedule. Assign the chain of command by name and title (not just "the manager on duty" - name a primary and a backup). Map exit routes to actual floor plans. Decide on your alarm signals and make them distinctive for different emergency types (internal evacuation vs. security threat vs. external evacuation, for example). Post emergency contact numbers, including numbers beyond 911, in visible locations. Confirm exit signs are lit and unobstructed, and that emergency equipment is inspected on a documented schedule.
Step 4: Implement, Train, and Revise
A plan that lives in a binder nobody has opened is functionally the same as having no plan. Implementation means training every employee - not just new hires during onboarding, but existing staff on a recurring basis - and running drills often enough that the procedures become automatic. It also means treating the plan as a living document: revisiting it whenever you change locations, add equipment, change headcount, or simply on a set annual schedule, and updating it when a drill reveals a gap.
|
A Generic Template Only Gets You So Far. |
Mapping Evacuation Routes and Assembly Points
Two of the most overlooked pieces of an EAP are also two of the easiest to get right: exit route maps and assembly points.
Every department or work area should know, without hesitation, which exit route applies to them and where they gather afterward - both an outside assembly point for a full evacuation and, where relevant, an inside gathering point for shelter-in-place scenarios like severe weather. The most effective way to communicate this isn't a paragraph of text; it's a visual floor plan posted where employees will actually see it, with routes and assembly points marked clearly enough that a new hire understands it in under a minute.
|
Get a Professional Evacuation Map for Your Facility |
Don't Forget OSHA's Injury and Illness Reporting Timelines
An emergency action plan covers the moments during and immediately after an incident. But your compliance obligations don't end once everyone's accounted for. OSHA's recordkeeping rule sets specific reporting windows for serious incidents:
> Fatalities must be reported to OSHA within 8 hours.
> In-patient hospitalizations, amputations, or losses of an eye must be reported within 24 hours.
Build these timelines directly into your plan's chain-of-command section — name who is responsible for making that call, and make sure they have the reporting number and procedure on hand, not something they have to look up under pressure.
Common Mistakes That Undermine an Otherwise Good Plan
After years of reviewing emergency plans across industries such as dental practices, medical offices, and general industry clients, a handful of gaps show up again and again:
> The plan exists but was never actually communicated. Employees can't follow procedures they've never seen. Distribution and training aren't optional add-ons - they're part of the OSHA requirement itself.
> The plan hasn't been reviewed since it was written. Staff turnover, new equipment, remodeled floor plans, and added shifts all make an old plan inaccurate. If you can't remember the last time your plan was reviewed, that's your answer.
> No real accountability procedure. A meeting point without a headcount process means you have no way of knowing whether everyone made it out safely which is the entire point of an evacuation plan.
> Generic, templated hazard analysis. A plan copied wholesale from a generic template often misses hazards specific to your actual operations, like confined spaces, chemical storage, or after-hours staffing.
> Emergency equipment that isn't inspected. Fire extinguishers, alarms, and first-aid stations need a documented inspection schedule - "we have one somewhere" isn't a maintenance program.
Frequently Asked Questions
Does a small business with fewer than 10 employees need an emergency action plan?
Yes - the plan itself is still required. What changes is the format: businesses with 10 or fewer employees can communicate the plan orally instead of maintaining a written document, but every one of the six required elements still needs to be covered and understood by staff.
How often should an emergency action plan be updated?
At minimum, review it annually. You should also update it immediately after any change to your facility, staffing, equipment, or operations, and after any drill or real incident that reveals a gap in the current procedures.
What OSHA standard covers emergency action plans?
Emergency action plans fall under 29 CFR 1910.38. Related standards may also apply depending on your industry — for example, confined-space rescue requirements under 1910.146 for businesses with permit-required confined spaces.
Who should be responsible for maintaining our EAP?
Every plan should name specific individuals — by title, with a backup — responsible for reporting emergencies, coordinating evacuation, accounting for employees, and keeping the plan itself updated. Responsibility spread across "the team" generally means no one owns it.
Can I write my own EAP without a consultant?
Yes, and free templates are widely available online to help you get started. Where those templates usually fall short is the hazard analysis for your specific industry, aligning the plan with related OSHA standards as your operations change, and knowing whether it would actually hold up during an inspection - a generic template is written for no one in particular, which means it's not really written for you either. If you'd rather have your plan built around your actual business, that's what a custom-written Health & Safety Program does.
Is an emergency action plan the same as a written safety program?
No. An EAP covers one specific requirement - how your business responds to emergencies. OSHA expects most employers to also maintain a broader written Health & Safety Program covering additional standards specific to your industry. If you don't have one yet, that's worth addressing alongside your EAP, not after.
How SafeLink Consulting Can Help
The free checklist above is the fastest way to see where your current plan stands. But a checklist only tells you what's missing - it doesn't write the plan for you, and a free generic template won't reflect your specific building, equipment, or industry hazards. That's the gap a custom written Health & Safety Program closes: your emergency action plan, developed as part of a fully OSHA-compliant program built specifically for your business, not assembled from a boilerplate form. Our OSHA compliance consultants have built these tailored programs for general industry, dental, and medical practice clients since 1991.
Start with the free self-assessment checklist to see where your current plan stands, then reach out to our team whenever you're ready to have your plan built for you.
Get the Free EAP Checklist → | Contact SafeLink Consulting →
Is your Emergency Action Plan ready?
Get a free Emergency Action Plan Checklist to see where your plan has gaps, or let our team build a compliant EAP for your facility — including a custom emergency evacuation map.
Get the free EAP Checklist ↗ Mary A. Bartlett, Senior Vice President & Founder of SafeLink Consulting, has spent more than three decades at the forefront of dental industry compliance and safety. Since 1991, she has been a trusted presenter and on-site instructor for dental and general industry professionals across the United States, Canada, and Asia — delivering expertise on employee health and safety, patient safety, privacy, and quality assurance. She has authored content for numerous national publications, and her clients consistently benefit from her hands-on experience navigating OSHA, FDA, and State Board inspections.
