IIPP Templates: Why the Free Cal/OSHA Sample Isn’t Enough
If you searched for an IIPP template, you have probably already found one. Cal/OSHA publishes a free model Injury and Illness Prevention Program at dir.ca.gov.
If you searched for an IIPP template, you have probably already found one. Cal/OSHA publishes a free model Injury and Illness Prevention Program at dir.ca.gov. State Fund offers a free online IIPP builder. Workers’ comp carriers, trade associations, and university EHS departments all post downloadable Word documents.
These are real resources. For a small number of California facilities, a template completed honestly is enough. For most facilities we walk into, it isn’t. Here’s what the free templates actually contain, where they stop short, and what a usable IIPP looks like instead.
What the Cal/OSHA Template Gives You
The DIR/DOSH model program is structured around the eight elements Title 8 CCR §3203(a) requires: responsibility, compliance, communication, hazard assessment, accident investigation, hazard correction, training, and employee access, plus the recordkeeping required under §3203(b). Each section has placeholder language you fill in with your facility’s specifics. The State Fund builder does the same thing through a web form.
For a single-location office with two or three employees, no chemicals, no field work, and no equipment beyond standard office gear, the template can be completed in an afternoon and posted in a binder. Cal/OSHA designed it to meet the minimum letter of §3203.
That is where the usefulness usually ends.
Where Templates Stop Short
§3203 does not just require an IIPP. It requires an effective IIPP: one that reflects your actual operations and that your employees have been trained on. A blank template does not do either of those things on its own.
The most common gaps we find when reviewing template-based programs:
- Generic hazard assessment. The template asks you to identify hazards. It does not tell you what is in your forklift maintenance area, your acid storage room, or your stamping line. Most facilities fill this in with a few sentences that would not survive a serious inspection.
- No codes of safe practice by job classification. §3203(a)(2) requires a system for ensuring employees follow safe work practices, and job-specific safe work practices are one of the most practical ways to meet it and show the program is customized. A machine operator, a maintenance tech, and a shipping lead face different hazards. Templates almost never include job-specific content because the template author does not know your job titles.
- Communication and training language that does not match reality. The template says you will communicate hazards and train employees at hire, on new hazards, and after accidents. It does not say who runs your safety meetings, on what schedule, in what language, or how attendance is tracked.
- Recordkeeping forms left blank. For employers required to keep them, OSHA Forms 300, 300A, and 301 are injury and illness logs that are typically cross-referenced in the IIPP appendix. The template gives you the forms but doesn’t populate them with your facility’s injury history. (Employers with 10 or fewer employees and certain low-hazard industries are partially exempt from routine 300/300A/301 recordkeeping.)
- No designated person. §3203(a)(1) requires the program to identify the person (or persons) responsible for it. Templates leave that line blank, and the best practice is to fill it with a specific named individual and title rather than a bare job title.
Template vs. Facility-Specific IIPP
| Element | Cal/OSHA Free Template | Facility-Specific IIPP |
|---|---|---|
| §3203 eight elements | Section headings with prompts | Section content matching your operations |
| Hazard assessment | Generic checklist | Walk-down of your areas, equipment, chemicals, and processes |
| Codes of safe practice | Not included | Written per job classification at your site |
| Designated responsible person | Blank line | Named individual with backup and escalation |
| Training records | Empty log forms | Populated with actual training dates, topics, and attendance |
| Recordkeeping appendix | Forms provided, blank | OSHA 300/300A/301 logs (where the facility is required to keep them) with injury data and current postings |
| Implementability | Depends entirely on what you add | Designed to be trained on and followed |
The Other Failure Mode: Templates That Are Too Long
The opposite of a blank template is the 600-page binder nobody reads. We have walked facilities where the IIPP was over 250 pages, in one case over 600, bundling every Cal/OSHA program, every appendix, and every reference document into a single volume. The legal content is technically present. The usability is not.
Cal/OSHA requires you to train every employee on the program. If your program is 628 pages of federal-OSHA boilerplate, that requirement cannot be satisfied honestly. When we walk a facility and ask line employees what is in the IIPP, the answer is usually “I do not know what that is.” That is a finding, not a defense.
A usable IIPP is long enough to cover the eight required elements for your operations and short enough that a new hire can actually be trained on it. Specialty programs (confined space entry, lockout/tagout, hot work, respiratory protection, hearing conservation) belong in separate documents the IIPP references, not buried as appendices.
What a Facility-Specific IIPP Contains
The IIPPs we build start from the same §3203 structure as the Cal/OSHA template. The difference is what goes into each section:
Company profile with your NAICS or SIC code, employee count, hours, and a written description of what actually happens at your site.
Management commitment with a named responsible person, a written safety policy, and measurable program objectives.
Hazard assessment based on a walk-down of your facility, with findings tied to the hazards present in each area.
Codes of safe practice written for each job classification at your facility (operator, maintenance, shipping, lab, etc.).
Communication and training procedures that match how your facility actually runs safety meetings, distributes information, and documents attendance.
Accident investigation and hazard correction workflows that name who does what on what timeline.
Recordkeeping appendix with current OSHA Form 300/300A/301 logs, inspection checklists, training documentation, and required employee postings.
Cross-references to specialty programs (respiratory protection, hot work, heat illness prevention, hearing conservation, lockout/tagout) where applicable, instead of rebuilding those programs inside the IIPP.
For an overview of how this fits together, see our California IIPP services for industrial and commercial facilities.
When the Free Template Is Genuinely Enough
There are facilities where the Cal/OSHA template, completed honestly, will hold up:
- A single-location office under about five employees, no chemical handling, no equipment beyond standard office gear, and no field work.
- A facility where the operations manager has the regulatory knowledge, the time, and the discipline to fill in every section, write the codes of safe practice by job classification, complete the training records, populate the OSHA 300 logs, and update the program every time something at the site changes.
For most of the California manufacturers, chemical distributors, food processors, warehouses, labs, and property managers we work with, those conditions do not hold. The template is the outline. Building a custom IIPP for your facility is the actual work.
Trusted throughout California
BSY started working with CDMS last year after our in-house EHS person departed the company. CDMS reviewed our existing operational permits as well as any additional Federal, State and Local regulations that could apply and helped us to create a comprehensive compliance calendar to track regulatory deadlines and submittal due dates. The CDMS team does an excellent job of tracking everything and can be relied upon to complete the forms accurately and assist with submittals, allowing me to focus on our business.
Speak with a CDMS EHS expert
Tell us about your facility and your deadline. You’ll get a clear read on what applies and a scoped plan to handle it.