Workplace Violence Response and Communication
The most useful workplace violence plan is the one that starts long before a critical event. This guide organizes the program in five phases - prevention, reporting, intervention, communication, and recovery - so employers can build each in sequence rather than reactively after an incident.
Scope of this guide
This is a planning and communication guide. It does not provide behavioral diagnosis, mental-health assessment, legal advice, or tactical law-enforcement instruction. Coordinate with qualified HR, legal, mental-health, and law-enforcement partners for the specifics of your program.
Emergency Overview
Workplace violence, as defined by OSHA, ranges from verbal threats and harassment through physical assault. It includes threats from co-workers, current or former employees, customers or clients, intimate partners of employees, and strangers. What distinguishes it from a life-safety event like an active shooter is that most workplace violence never reaches the critical stage - if the organization has a working prevention, reporting, and intervention program.
Five-Phase Program
-
Prevention
Written policy, hazard assessment for your industry and roles, physical-security controls, hiring and separation practices, employee training, and a stated commitment to zero retaliation. Prevention is where most of the actual risk reduction happens.
-
Reporting
Multiple, low-friction paths for employees to report concerns - HR, security, an anonymous or third-party hotline, and supervisor escalation. Confidentiality protected to the extent possible; retaliation prohibited and enforced.
-
Intervention
A trained threat assessment team evaluates reports using an established framework, coordinates with EAP or external mental-health resources, and takes proportionate action - from support and monitoring through law-enforcement involvement.
-
Communication
Coordinated internal and external messaging during and after an incident, protecting privacy, respecting legal constraints, and giving employees what they need to stay safe and informed.
-
Recovery
Sustained support for affected employees, employee assistance access, appropriate updates on facility and personnel status, and program review so lessons are institutionalized.
Risks and Warning Indicators
Public guidance from OSHA, the FBI, and DHS describes categories of warning indicators. Employers should use those established frameworks rather than inventing their own. General risk indicators include:
- Direct or veiled threats of violence, in person or online
- Escalating conflict with co-workers, supervisors, or ex-partners
- Concerning statements about specific individuals or the workplace
- Boundary-crossing behavior, stalking, or persistent unwanted contact
- Presence of a weapon on premises outside of an approved policy
- Reported intimate-partner violence with potential to follow the employee to work
Planning Before an Incident
Written policy
Zero-tolerance statement, definitions, reporting paths, non-retaliation, and consequences.
Threat assessment team
Named, trained, with defined authority and escalation.
Access and physical security
Access control, visitor management, panic devices where appropriate, and site design considerations.
Contact readiness
Groups by site, role, and - for critical activations - a way to reach every affected employee including remote workers.
External partners
Relationships with local law enforcement, victim advocacy, mental-health providers, and outside counsel established before they are needed.
Templates and legal review
Approved communication templates that respect privacy and legal constraints.
Response Team
HR Lead
Owns policy, reporting intake, and coordination with the threat assessment team. Primary contact for affected employees.
Security Lead
Owns access decisions, coordination with law enforcement, and physical-security response.
Legal Counsel
Advises on privacy, employment law, restraining orders, and mandatory reporting.
Executive Sponsor
Provides authority for consequential decisions, including separations, closures, and public statements.
Communications Lead
Executes approved internal messaging and any external statements coordinated with legal.
EAP / Employee Support Lead
Coordinates mental-health resources, support services, and follow-up outreach.
Threat Assessment Team
Evaluates specific reports using an established framework and recommends proportionate action.
Confidentiality First
Protect the reporter, respect the subject
Confidentiality protects both the reporting employee and the individual whose behavior is being evaluated. Share information only with those who need it to keep people safe or to comply with legal obligations. Never discuss active reports in general channels or with coworkers who are not part of the response.
Communication Plan
- Activation authority: Security or HR lead for life-safety templates. All other communication routes through the response team with legal review.
- Audiences: Directly affected employees first; site or department next; whole-company only when needed for safety or coordination; external stakeholders only via approved statement.
- Primary channels: SMS + voice for urgent messages; email and Teams/Slack for follow-up detail; secure HR channels for anything involving the individual.
- Backup: Supervisor cascade and manager outreach for sensitive follow-up.
- Acknowledgement: Requested on protective-action and welfare check-in messages; not on informational updates.
- External statements: Only through a designated spokesperson, coordinated with legal and law enforcement.
Communication Sequence
- Immediate protective-action message if there is a life-safety threat (referenced separately in Active Shooter Response)
- Targeted notification to directly affected employees and their supervisors
- Situation update to the affected site or department with only necessary detail
- Welfare check-in and support-resource message
- Approved external statement, only if required
- Recovery communication about facility status, work arrangements, and continued support
Sample Alert Messages
Examples only. Customize with your organization's terminology and require HR + legal review before use.
Security notice (SMS)
Site restriction
Welfare check-in
Support resources
Facility status update
Approved external statement
Employee Protection and Accountability
Protection actions may include temporary access changes, adjusted work locations, remote-work arrangements, security escorts, and coordination with local law enforcement. Accountability communication is a welfare check, not a mandatory response - an employee dealing with a threat may not be able to answer immediately. Missing responses escalate to HR-led personal outreach.
Training and Exercises
- Employee orientation covers policy, reporting paths, and awareness of warning indicators.
- Supervisor training on receiving reports, non-retaliation, and escalation.
- Threat assessment team training on an established framework, refreshed regularly.
- Annual tabletop with HR, security, legal, communications, and executive leadership.
- Joint exercise with local law enforcement where feasible.
Recovery and Continuity
Recovery in workplace violence is longer than in most other incidents. Offer employee assistance proactively and repeatedly. Communicate facility and personnel status without graphic detail. Review physical-security controls, access decisions, and communication for any gaps. Support affected employees in returning to work at their own pace.
After-Action Review
Conduct the review with a limited team to protect privacy. Reconstruct the timeline from initial report through resolution. Evaluate whether warning indicators were acted on, whether the threat assessment framework was followed, and whether communication protected privacy while keeping people informed. Assign corrective actions. See How to Conduct an After-Action Review.
How Safeguard Signal Fits
For workplace violence programs, Safeguard Signal supports targeted communication to affected employees without broadcasting to the whole company, saved templates approved by HR and legal so wording is consistent under pressure, per-recipient acknowledgement for welfare check-ins, and multi-channel delivery when a single channel might be monitored or compromised. The platform coordinates messaging; the underlying decisions belong to HR, security, legal, mental-health, and law-enforcement partners.
Related Guides
- Safeguard Signal Resource Center
- Emergency Preparedness hub
- How to Build an Emergency Communication Plan
- How to Create an Emergency Response Team
- Active Shooter Response
- Healthcare Emergency Communication
- Safeguard Signal role-scoped alerting
Authoritative Sources
- OSHA - Workplace Violence (osha.gov/workplace-violence)
- FBI - Making Prevention a Reality: Identifying, Assessing, and Managing the Threat of Targeted Attacks (fbi.gov)
- CISA - Workplace Violence Prevention resources (cisa.gov)
- NIOSH - Occupational Violence (cdc.gov/niosh/topics/violence)
- Association of Threat Assessment Professionals - Standards and resources (atapworldwide.org)
- SAMHSA - Employee Assistance and Mental Health Resources (samhsa.gov)
Frequently Asked Questions
What counts as workplace violence?
Workplace violence includes any act or threat of physical violence, harassment, intimidation, or other threatening disruptive behavior that occurs at the worksite, according to OSHA. It ranges from verbal threats to physical assault, and includes intimate-partner violence that follows an employee to work.
How should employees report concerns?
Provide multiple, low-friction reporting paths: a named contact in HR, a security or ethics hotline, and a way to report to a supervisor. Confidentiality must be protected as far as possible, and retaliation must be prohibited in policy and practice.
Who evaluates a reported threat?
A threat assessment team drawing on HR, security, legal, and - where appropriate - external mental-health or law-enforcement expertise. The team is trained to follow established threat-assessment frameworks, not to invent an approach case by case.
When do we involve law enforcement?
Any credible threat of physical violence, weapons on premises, criminal conduct, or immediate danger requires immediate contact with law enforcement. Coordination with a local law-enforcement liaison should be established before an incident occurs.
How much do we tell coworkers about an ongoing situation?
Share only the information employees need to stay safe and cooperate with the response. Do not disclose personal information about the individual involved. Legal and HR review any employee-facing communication.
How do we support affected employees afterward?
Employee assistance programs, mental-health resources, flexible work arrangements, and clear, non-graphic updates about facility status. Support is offered proactively and repeatedly, not just once.
How do we protect remote employees?
Remote employees may be at risk from work-related threats even without shared physical space. Reporting paths, welfare check-ins, and - where appropriate - coordination with local law enforcement in the employee's location are part of the plan.