What Gap Assessments Usually Find in an IIPP

When we walk a facility after a gap assessment (ours or another firm’s), the same handful of findings come up again and again. They look like specific line items in the report, but they cluster into five categories.

A sixth pattern shows up across all of these: the document exists, but nobody on the floor can describe it. That is the paper-compliance failure mode we cover in how to tell if your IIPP is actually working. A Cal/OSHA inspector compares what the binder says to what the floor does. When the two do not match, the binder loses.

How to Triage the Findings

Not every finding has equal weight. When we prioritize an IIPP punch list, we work through three filters.

• Regulatory exposure first. Findings on §3203(a)(1) (named responsibility) and §3203(a)(7) (training) are the ones an inspector touches first. If those two are broken, the rest of the program looks worse than it is.
• Implementation gap next. A finding that says “the program describes a process the facility no longer runs” or “the hazard assessment does not list the equipment in bay three” is not a wording problem. It is an operations-versus-document mismatch. These get fixed by re-walking the floor, then updating the program to match what is actually there.
• Structural problem last. If the IIPP is a 250-page or 600-page binder copied from a federal template, no amount of patching makes it implementable. The training requirement alone (every employee, on the actual content) breaks down when the document is unreadable. At that point the path forward is a rebuild, not a revision.

Two Paths Forward: Update or Rebuild

After the triage, the work usually falls into one of two scopes.

• A targeted update. The structure of the existing IIPP is sound, the length is reasonable, and the findings are specific: named responsibility, a hazard assessment refresh, a few code of safe practice updates, training record reconciliation. We rebuild the affected sections, refresh the appendix where it needs it, and bring the inspection and training logs current. This is the right path for facilities whose existing program was built well and has just drifted.
• A rebuild. The existing IIPP is federal-derived, oversized, or a generic template that does not reflect the facility. The findings are not isolated; they cluster across most of the eight elements. We build a new California-specific IIPP that covers §3203 in full, replaces boilerplate with codes of safe practice tied to your actual job classifications, and structures the appendix around the programs your operations actually need (rather than every section Cal/OSHA has ever published).

Either path starts the same way. We come to your facility, walk the operation with the person who runs it, and confirm what is real before we write. The gap assessment told you what is broken. The walk tells us what is true. For most facilities, what we find on the walk shapes the scope more than the report did.

From Findings to Fixed-Price Scope

Once the walk is done, we deliver a fixed-price quote tied directly to the gap assessment findings. The scope describes which sections are being rebuilt, which are being updated, what the deliverable includes, and how training will be handled. No time-and-materials, no scope creep mid-project.

If the gap assessment came from another firm, we can work from that report. If you do not have one yet, an EHS gap assessment is the usual first step. It surfaces the IIPP findings (and everything else attached to them) before any rewrite begins, so the scope reflects what your facility actually needs rather than a guess.