What a Template Actually Gives You

The Workplace Violence Prevention Plan required under SB 553 (Labor Code §6401.9) has a defined structure. Every compliant plan covers the same statutory elements:

• Management commitment and assignment of responsible persons
• Employee involvement procedures
• Methods for accepting and responding to reports of workplace violence
• Procedures to identify and evaluate workplace violence hazards
• Procedures to correct identified hazards
• Procedures for post-incident response and investigation
• Training requirements and recordkeeping
• Procedures for reviewing the plan, at least annually and after any incident
• A violent incident log

A good template gets the skeleton right. It lists the required sections, includes the four statutory categories of workplace violence (Types 1 through 4), and points to the recordkeeping rules (incident logs and hazard assessments kept at least 5 years; training records at least 1 year; the log made available to employees within 15 calendar days of a request).

That is real value. You should not write the structure from scratch. You should not invent your own taxonomy of violence types. You should not guess at the recordkeeping retention.

For a section-by-section walkthrough of what every plan must include, see our WVPP requirements checklist.

Where Stock Templates Fall Short

The reg does not ask whether your plan has the right table of contents. It asks whether your plan addresses the workplace violence hazards present at your facility, with your layout, your workforce, and your operating hours.

That is the part a template cannot give you, because the template’s author has never been to your site.

The site-specific elements that have to be tailored:

• Hazard identification for the four violence types as they apply to your operations. A warehouse with a customer pickup counter has Type 2 (public-facing) exposure most stock plans ignore. A manufacturing plant with a contractor parking area has Type 1 (criminal intent) and Type 3 (worker-on-worker) exposure that depends on access controls and lighting that a template can’t see. A property management office handling tenant disputes has Type 2 and Type 4 (personal relationship) exposure that flows from the way visits are scheduled.
• Designated responsible persons by name and title. SB 553 expects specific people to own specific responsibilities: implementing the program, accepting reports, conducting incident investigation, coordinating with outside employers on the site. “TBD” or “the Safety Manager” does not satisfy the standard.
• Coordination with outside employers. Tenant landlords, contractors, temp agencies, shared-loading-dock operators. A template does not know who else works on your property.
• Methods for accepting reports that match how your employees actually work. A field crew on a 7am start does not have the same reporting channel as an office shift. The plan has to fit the workforce.
• Site-specific training content. Cal/OSHA expects training that addresses the hazards present at the workplace. A generic online video alone does not meet the site-specific requirement built into the standard.

When we walk a facility, the first place a stock template breaks down is the hazard assessment. The boilerplate language is there, but the assessment itself reads as if it were written for a different building. That is the part an inspector reads carefully.

Template vs. Custom: Side by Side

The pattern is clear. The administrative scaffolding ports over. The substantive content does not.

The University and Out-of-State Template Trap

The reason free templates rank so well in search is that California universities post their plans publicly, and a few out-of-state employers do the same. They are real plans for real workplaces. They are also written for a campus, a hospital system, or an employer in a state without SB 553.

What that means in practice:

• A university plan is built around campus security, residence halls, and student-employee relationships. The Type 2 exposure for a public-facing tenant-services counter is not in there.
• An out-of-state sample may track federal voluntary guidance, which is not what Cal/OSHA enforces. California’s standard is more prescriptive about the log, the annual review cadence, and the site-specific training requirement.
• A peer’s plan from another industry was tailored to that peer’s operations. The portions you would actually want to keep (the hazard assessment, the reporting procedure, the responsible-person assignments) are the portions you cannot copy.

Adopting one of these as your facility’s plan is the most common deficiency we find when reviewing existing programs. The plan exists. It is in a binder. It does not describe the building the inspector is standing in.

Where DIY Works and Where It Doesn’t

A capable in-house safety lead can build a defensible WVPP using a template as the starting point. The places this approach tends to hold up are facilities with a single location, a stable workforce in one language, an HR or safety person with the time to do a real walkthrough, and a calendar discipline that triggers the annual review on schedule.

The places it tends to fail, in our experience:

• The annual review slips. The plan was written in 2024, training was delivered, and then it sat. The reg requires review at least annually, after any incident, and whenever a deficiency is identified. Late review is the single most common shortfall we find on existing plans.
• The violent incident log is empty when it shouldn’t be. Either nothing has happened (rare), or incidents happened and were not logged because the reporting form never reached the person responsible. SB 553 requires recording of every workplace violence incident, not just the ones that became citable events.
• Training was delivered once with a generic video. The reg requires initial training and annual refresher training, with content site-specific to the facility and delivered in language the workforce understands. A one-time video without a site-specific component does not meet the standard.
• The plan was never updated when the facility changed. A new tenant, a new shift, a new customer-facing operation. None of those triggers a calendar reminder, but each one changes the hazard picture the plan is supposed to describe.

For a step-by-step view of what a full compliance build looks like, see our guide on how to comply with SB 553.

How CDMS Approaches It

We do not hand out a downloadable template. We walk the facility, document the hazards across the four violence types as they actually apply to your operations, name the responsible persons by title and role, draft the plan with site-specific content, deliver initial training in English and Spanish as needed, and put the annual review on a calendar so it actually happens. The plan is yours. The work that makes it defensible is the part the template can’t do for you.