Workplace violence prevention and response readiness
Workplace violence readiness assessment for clearer response responsibilities
Give HR, security and operational leaders a shared basis for handling workforce concerns. ICA’s scoped review examines reporting, escalation and response planning, with recommendations to guide leadership action.
MIS
CISSP
CHISL
CPHIMS
CDH-E

Will Long Sr. · Founder
MIS · CHISL · CDH-E · CISSP · CPHIMS
Nearly 40 years in IT & cybersecurity
Former VP & CISO, Children’s Health System of Texas

Tim Pelikan · Co-Founder
Credential details pending confirmation
30 years in cybersecurity & data risk
Interviews & industry conversations
Coffee With Closers
Cybersecurity With Discern
“ICA provides distinctive security professionals who excel at building strong client relationships, demonstrate exceptional organization, and deliver practical, risk-based consulting recommendations to our clients.”
Michael Cox, CIPP/US
Chief Privacy Consultant & Founder, SoCal Privacy Consultants
Partner endorsement of ICA’s advisory work
Clarify who acts when a concern is raised
A workforce concern reaches HR, but security hears about it later. An incident exposes uncertainty about who can escalate a situation or coordinate the response. Leaders need to understand where the process stalled before deciding what to change.
This assessment supports HR, corporate security, general counsel and healthcare operations facing those decisions. It reviews how responsibilities connect across the organization. The aim is a documented basis for prioritizing prevention and response improvements, including clearer handoffs between the people receiving concerns and those responsible for action.
Follow the reporting and response process across teams
The agreed scope covers reporting channels, escalation procedures, coordination responsibilities and response plans for concerning behavior and workplace violence scenarios. It considers how employees raise concerns, how designated teams receive them and how information reaches the appropriate decision-makers.
Locations and operating arrangements matter. A central policy may be interpreted differently across sites or shifts. In healthcare settings, the review can consider how staff concerns connect with patient-facing operations and security coordination. Scoping identifies the policies, stakeholders and response processes to examine rather than assuming every location follows the same workflow.
Compare documented plans with the evidence of practice
The intended method is a specialist advisory review using stakeholder discussions and relevant process evidence. Interviews with designated owners help explain responsibilities. Policy review establishes the written expectations; selected records, where appropriate and authorized, help show how concerns have moved through the process.
Evidence may include reporting procedures, escalation guidance, response plans and suitably minimized incident summaries. The review looks for unclear ownership or inconsistent coordination. Missing records remain an evidence limitation. Assessment criteria and sample depth are agreed in advance. This approach evaluates readiness without staging a threatening encounter or conducting a live response drill.
Turn readiness findings into leadership decisions
Typical outputs are a readiness report, process recommendations and a leadership action plan. Their detail is established in the engagement scope.
The readiness report documents the processes reviewed, identified gaps and evidence limitations. Leaders can use it to understand where coordination needs attention.
Process recommendations explain practical changes to reporting, escalation or response planning. HR and security owners can use them when considering revisions to their procedures.
The leadership action plan organizes recommended priorities for management decisions. It provides a basis for discussing ownership and sequencing alongside operational constraints.
Define the review around your operating environment
Start by identifying the concern that prompted the assessment and the decisions leadership needs to make. Scope depends on the number of locations, policy coverage, stakeholder participation and complexity of response processes. Evidence availability and the agreed review depth also affect cost and timing. Specialist fit is part of engagement planning.
Your team identifies process owners and provides agreed materials. HR, security, counsel and operations should establish what may be shared, particularly where personnel or patient information is involved. Access and handling arrangements need agreement before records are exchanged. A program-level review should use only the sensitive detail needed to assess the process.
Keep readiness review distinct from operational response
This engagement provides assessment and planning advice. Clinical evaluation of an individual, a legal compliance opinion and hands-on tactical training fall outside its scope. Questions about a person’s clinical needs belong with appropriate clinical professionals; legal interpretation belongs with counsel.
The assessment does not provide guards, armed services or emergency deployment. It cannot guarantee that violence will be prevented. A facility threat and vulnerability assessment addresses site conditions and protective measures; an access and visitor controls assessment examines those systems and procedures. PHY-07 concentrates on how people report concerns, coordinate decisions and plan a response. Implementation requires action by your organization or separately agreed support.
Workplace violence readiness assessment FAQ
Who should consider this assessment?
HR, corporate security, general counsel and healthcare operations are the primary audiences. It is suited to organizations reviewing workforce concerns, learning from an incident or resolving unclear prevention and response responsibilities. It is a planning engagement rather than an emergency response service.
Can the review cover multiple locations?
Locations are defined during scoping. The review can consider shared policies alongside differences in local reporting and escalation. The agreed coverage identifies which sites, stakeholders and processes are included, with any sampling limitations made clear.
What evidence is needed?
Relevant evidence can include policies, reporting procedures, response plans and selected incident summaries. Stakeholder discussions explain how those materials are used. Agree appropriate access and minimize sensitive information before sharing records; individual clinical assessment is outside the review.
What determines cost and timing?
Location count, policy breadth, process complexity and the number of participating stakeholders shape the work. Evidence readiness and review depth also matter. Those details, together with specialist fit, establish the proposed engagement rather than a fixed package or turnaround promise.
How does this differ from a facility security assessment?
A facility assessment examines site conditions and protective measures. This review follows reporting, escalation, coordination and response planning across responsible teams. Physical conditions may provide context, but a detailed facility or protective-system assessment needs its own scope.
Does the action plan include implementation or training?
The action plan recommends leadership priorities. Changes to policies and operating procedures remain with your organization unless additional work is expressly agreed. Hands-on tactical training is excluded, and the report does not provide a clinical evaluation or legal compliance opinion.
Build a shared basis for prevention and response decisions
Use a scoped readiness review to identify where reporting and escalation responsibilities need attention. Discuss your locations, current processes and leadership concerns with ICA to define an assessment that supports practical decisions about coordination and response planning.
Clarify who acts when a concern is raised
A workforce concern reaches HR, but security hears about it later. An incident exposes uncertainty about who can escalate a situation or coordinate the response. Leaders need to understand where the process stalled before deciding what to change.
This assessment supports HR, corporate security, general counsel and healthcare operations facing those decisions. It reviews how responsibilities connect across the organization. The aim is a documented basis for prioritizing prevention and response improvements, including clearer handoffs between the people receiving concerns and those responsible for action.
Follow the reporting and response process across teams
The agreed scope covers reporting channels, escalation procedures, coordination responsibilities and response plans for concerning behavior and workplace violence scenarios. It considers how employees raise concerns, how designated teams receive them and how information reaches the appropriate decision-makers.
Locations and operating arrangements matter. A central policy may be interpreted differently across sites or shifts. In healthcare settings, the review can consider how staff concerns connect with patient-facing operations and security coordination. Scoping identifies the policies, stakeholders and response processes to examine rather than assuming every location follows the same workflow.
Compare documented plans with the evidence of practice
The intended method is a specialist advisory review using stakeholder discussions and relevant process evidence. Interviews with designated owners help explain responsibilities. Policy review establishes the written expectations; selected records, where appropriate and authorized, help show how concerns have moved through the process.
Evidence may include reporting procedures, escalation guidance, response plans and suitably minimized incident summaries. The review looks for unclear ownership or inconsistent coordination. Missing records remain an evidence limitation. Assessment criteria and sample depth are agreed in advance. This approach evaluates readiness without staging a threatening encounter or conducting a live response drill.
Turn readiness findings into leadership decisions
Typical outputs are a readiness report, process recommendations and a leadership action plan. Their detail is established in the engagement scope.
The readiness report documents the processes reviewed, identified gaps and evidence limitations. Leaders can use it to understand where coordination needs attention.
Process recommendations explain practical changes to reporting, escalation or response planning. HR and security owners can use them when considering revisions to their procedures.
The leadership action plan organizes recommended priorities for management decisions. It provides a basis for discussing ownership and sequencing alongside operational constraints.
Define the review around your operating environment
Start by identifying the concern that prompted the assessment and the decisions leadership needs to make. Scope depends on the number of locations, policy coverage, stakeholder participation and complexity of response processes. Evidence availability and the agreed review depth also affect cost and timing. Specialist fit is part of engagement planning.
Your team identifies process owners and provides agreed materials. HR, security, counsel and operations should establish what may be shared, particularly where personnel or patient information is involved. Access and handling arrangements need agreement before records are exchanged. A program-level review should use only the sensitive detail needed to assess the process.
Keep readiness review distinct from operational response
This engagement provides assessment and planning advice. Clinical evaluation of an individual, a legal compliance opinion and hands-on tactical training fall outside its scope. Questions about a person’s clinical needs belong with appropriate clinical professionals; legal interpretation belongs with counsel.
The assessment does not provide guards, armed services or emergency deployment. It cannot guarantee that violence will be prevented. A facility threat and vulnerability assessment addresses site conditions and protective measures; an access and visitor controls assessment examines those systems and procedures. PHY-07 concentrates on how people report concerns, coordinate decisions and plan a response. Implementation requires action by your organization or separately agreed support.
Workplace violence readiness assessment FAQ
Who should consider this assessment?
HR, corporate security, general counsel and healthcare operations are the primary audiences. It is suited to organizations reviewing workforce concerns, learning from an incident or resolving unclear prevention and response responsibilities. It is a planning engagement rather than an emergency response service.
Can the review cover multiple locations?
Locations are defined during scoping. The review can consider shared policies alongside differences in local reporting and escalation. The agreed coverage identifies which sites, stakeholders and processes are included, with any sampling limitations made clear.
What evidence is needed?
Relevant evidence can include policies, reporting procedures, response plans and selected incident summaries. Stakeholder discussions explain how those materials are used. Agree appropriate access and minimize sensitive information before sharing records; individual clinical assessment is outside the review.
What determines cost and timing?
Location count, policy breadth, process complexity and the number of participating stakeholders shape the work. Evidence readiness and review depth also matter. Those details, together with specialist fit, establish the proposed engagement rather than a fixed package or turnaround promise.
How does this differ from a facility security assessment?
A facility assessment examines site conditions and protective measures. This review follows reporting, escalation, coordination and response planning across responsible teams. Physical conditions may provide context, but a detailed facility or protective-system assessment needs its own scope.
Does the action plan include implementation or training?
The action plan recommends leadership priorities. Changes to policies and operating procedures remain with your organization unless additional work is expressly agreed. Hands-on tactical training is excluded, and the report does not provide a clinical evaluation or legal compliance opinion.
Build a shared basis for prevention and response decisions
Use a scoped readiness review to identify where reporting and escalation responsibilities need attention. Discuss your locations, current processes and leadership concerns with ICA to define an assessment that supports practical decisions about coordination and response planning.