8.3 Safety, Security, and Workplace Violence Prevention

OSHA and the General Duty Clause

Workplace safety is governed primarily by the Occupational Safety and Health Act of 1970 (OSH Act), enforced by the Occupational Safety and Health Administration (OSHA). " The clause is OSHA's catch-all: it lets the agency cite hazards (such as workplace violence, ergonomic strain, or heat) even when no specific standard is on the books. Section 5(b) places a parallel duty on employees to comply with standards.

HR rarely owns every technical standard, but HR shapes reporting channels, training, discipline, job design, leave coordination, and manager behavior, which makes safety part of workplace governance. Key compliance facts SHRM-CP candidates should hold:

Because of Section 11(c), discipline timed shortly after a safety report is a retaliation risk signal HR must scrutinize, mirroring the EEO retaliation analysis in 8.1.

Building a Safety Culture

A strong safety culture treats employee reports as valuable data. If employees believe reports are ignored or punished, hazards stay hidden and near misses — events that could have caused injury but did not — go unexamined. Near misses are leading indicators; investigating them lets HR fix a hazard before someone is hurt. Training alone is not a safety program: employees must know how to report, managers must know how to respond, and leaders must act on patterns.

Workplace Violence Prevention

Workplace violence prevention should be handled with seriousness and discretion. HR should not diagnose individuals or dismiss concerns as "drama." Best practice uses a multidisciplinary threat-assessment team (HR, security, legal, leadership, sometimes mental-health resources) that gathers observable facts, weighs risk, and coordinates a protective response. The widely taught emergency response model for an active threat is Run–Hide–Fight. When there is immediate danger, emergency protocols take priority over routine HR review.

Use this safety-response sequence: (1) address immediate danger and employee care; (2) preserve facts and document the incident; (3) coordinate with safety, security, and operations; (4) identify root causes and corrective actions; (5) communicate expectations, train affected employees, and monitor for recurrence.

For the exam, do not pick an answer that waits for perfect information before addressing an urgent hazard, and do not overhandle a minor issue in a way that breaches privacy or creates panic. When an employee reports a credible threat, HR prioritizes immediate safety and threat-response coordination — never asking the reporter to confront the aggressor or deleting the report to avoid anxiety. HR's role is to keep the response proportional, documented, coordinated, and respectful of the reporter.

The Hierarchy of Controls

, rotation, training, signage), and finally personal protective equipment (PPE) as the last line. The exam logic mirrors real practice: redesigning the task to remove a hazard beats merely handing out PPE. HR supports the administrative layer heavily — scheduling, training, staffing, and policy — and helps fund or communicate the higher-order controls.

Investigation, Root Cause, and Programs

After an incident or near miss, a root-cause analysis asks why the event happened rather than who to blame. Techniques such as the "5 Whys" trace a surface symptom (an employee tripped) back to a systemic cause (poor lighting plus an unmarked walkway plus no reporting of the prior near miss). Blame-first responses suppress reporting and let the real cause persist. HR helps ensure investigations are factual, prompt, and tied to corrective action with an owner and a completion date.

A mature safety program also includes emergency action plans (EAPs), regular drills, a return-to-work process coordinated with workers' compensation and the ADA interactive process, and metrics. HR should know the difference between lagging indicators (injury rates, lost-time incidents — measuring past harm) and leading indicators (near-miss reports, training completion, audit findings — predicting and preventing harm). Leading indicators are where a proactive safety culture invests, because they catch problems before someone is hurt.

The General Duty Clause and the OSHA Recordkeeping Stack

The General Duty Clause, Section 5(a)(1) of the Occupational Safety and Health Act of 1970, requires every covered employer to furnish each worker "employment and a place of employment which are free from recognized hazards that are causing or are likely to cause death or serious physical harm." OSHA must prove four elements to cite it: a hazard existed, the hazard was recognized, it was likely to cause death or serious harm, and a feasible means of abatement existed. This four-part test is exactly why the clause reaches violence, heat, and ergonomic hazards that have no dedicated standard.

State-plan states (such as California with Cal/OSHA) may set rules at least as strict as federal OSHA, so HR in multi-state employers cannot assume one federal baseline. Recordkeeping is its own tested topic. The OSHA 300 Log records each work-related injury or illness; the 301 Incident Report captures the details of each case; and the 300A Annual Summary aggregates the year's totals and must be posted February 1 through April 30 even in years with zero recordable cases. Records are retained five years. Establishments above size thresholds also submit data electronically through OSHA's Injury Tracking Application (ITA).

The Hierarchy of Controls

NIOSH's hierarchy of controls ranks abatement strategies from most to least effective, and SHRM-CP answers should favor higher-order controls over personal protective equipment. From strongest to weakest: (1) elimination — physically remove the hazard; (2) substitution — replace it with something less dangerous; (3) engineering controls — isolate people from the hazard (guards, ventilation, barriers); (4) administrative controls — change how people work (rotation, training, signage, scheduling); and (5) personal protective equipment (PPE) — the last line of defense.

HR most directly influences the administrative layer through staffing, training, and policy, while helping fund and communicate engineering fixes.

Workplace-Violence Prevention Programs

Workplace violence is commonly classified into four types: Type I — criminal intent (perpetrator has no legitimate relationship, e.g., robbery); Type II — customer/client (patient, student, or customer harms a worker); Type III — worker-on-worker (current or former employee); and Type IV — personal relationship (domestic violence spilling into work). A formal prevention program names a policy, a reporting channel, a threat-assessment team, training, and an emergency response plan.

" Warning signs HR managers are trained to escalate include direct or veiled threats, fixation on grievances, intimidation, dramatic behavior or mood changes, talk of weapons, and statements of hopelessness. The team gathers facts, weighs risk, coordinates protective steps (such as increased security or a no-contact arrangement), and documents decisions. HR never asks a reporter to confront an aggressor.

Emergency action plans (EAPs) under OSHA's standard cover evacuation routes, alarm systems, accounting for employees, and roles for designated responders; drills keep them usable. For an active threat, the federally promoted response model is Run–Hide–Fight. HR's role across all of this is to keep the response proportional, factual, coordinated, documented, privacy-respecting, and protective of anyone who reports — addressing immediate danger first and routine review second.