Cal/OSHA Has Said It Directly: Copy-Paste Plans Generally Fail

There are dozens of free WVPP templates available online. Cal/OSHA itself publishes a model plan. Law firms post downloadable versions. HR software companies bundle them into compliance packages.

Most of them will not protect you during an inspection.

The Inspector Is Not Checking a Box

A common misconception about SB 553 is that compliance means having a document. It does not. Compliance means having a plan that is implemented, site-specific, and supported by documentation.

Cal/OSHA has been explicit about this. In guidance issued alongside the model plan, the agency stated that employers must customize the template to reflect their specific workplace conditions. Legal commentators, including attorneys at JMBM who have tracked workplace violence enforcement closely, have noted that inspectors are trained to look beyond the cover page. They read the plan. They compare it to what they observe on-site. They ask employees whether they have been trained on its contents.

A plan that reads identically to the Cal/OSHA model template, complete with bracketed placeholders and generic language, is not a plan. It is a downloaded file.

What "Site-Specific" Actually Means

When Cal/OSHA says a WVPP must be site-specific, they mean the document must reflect the reality of your particular worksite. Here is what that requires:

• Your physical address and worksite description. Not "the employer's worksite," but your actual address, building layout, entry points, parking areas, and any shared spaces.
• Your hours of operation. A business open until 2 AM faces different risks than one that closes at 5 PM. Your plan must reflect your actual schedule.
• Your job roles and staffing. The plan must identify which roles have customer-facing duties, which employees work alone, and which positions involve cash handling, home visits, or other elevated-risk activities.
• Your named administrators. SB 553 requires that specific individuals be designated as responsible for the plan. "The safety committee" is not sufficient. Names and titles are required.
• Your specific hazards. A retail store in a high-crime area has different hazards than a professional office in a suburban park. Your plan must identify the actual workplace violence hazards present at your worksite, based on your industry, location, client population, and operational characteristics.
• Your existing security measures. If you have cameras, alarm systems, controlled access, security personnel, or buddy systems, the plan must describe them. If you have none of these, the plan must explain what alternative measures are in place.
• Your reporting procedures. The plan must describe how employees report concerns at your workplace, not a generic hotline number, but your actual mechanism, whether that is a designated person, an anonymous form, or a digital reporting system.

What Passes vs. What Gets Cited

The difference between a compliant WVPP and a citable one is often surprisingly specific. Here are examples:

Passes inspection: "Employees who witness or experience workplace violence should report the incident to Maria Chen, Operations Manager, at extension 204 or via the anonymous reporting form posted in the break room and accessible at [company portal URL]. Reports may be made anonymously."

Gets cited: "Employees should report workplace violence to their supervisor or manager."

The first version names a person, provides a method, references a specific mechanism, and confirms anonymous reporting is available. The second version could appear in any plan at any company and tells the inspector nothing about whether a real system exists.

Passes inspection: "This worksite is a ground-floor retail location at 1847 Mission Street, San Francisco, CA 94103, operating Monday through Saturday from 10 AM to 9 PM and Sunday from 11 AM to 6 PM. The location has a single public entrance facing Mission Street with a glass storefront. Two employees are present during all operating hours. The neighborhood has experienced elevated rates of retail theft and aggressive panhandling."

Gets cited: "The employer's worksite is located in California and serves the public during regular business hours."

The Cal/OSHA Model Plan Is a Starting Point, Not a Finished Product

Cal/OSHA's model WVPP is 19 pages long. It contains extensive bracketed instructions, sections where the agency explicitly tells you to insert your own information. The instructions say things like "[Describe the method(s) the employer will use to obtain the active involvement of employees]" and "[Identify the person(s) responsible for the Plan]."

These brackets are instructions, not content. If your final plan still contains them, you have not completed the plan. You have printed out the assignment.

How Cynserus Solves This

Cynserus generates WVPPs that are specific to each client's worksite from the start. Our intake process collects the exact information Cal/OSHA expects to see in a compliant plan: your address, hours, staffing model, existing security measures, industry-specific hazards, and designated personnel.

The resulting plan is not a template with your name inserted. It is a document built from your specific inputs, structured to satisfy each element of Labor Code Section 6401.9, and formatted for immediate implementation.

A generic template costs nothing and protects nothing. A site-specific plan is what the law requires.