Audit & Enhance: Gap Assessment

---

• Facilities with an EAP that hasn’t been exercised or updated in the last 12–18 months.
• Organizations merging sites, changing layouts, or onboarding new supervisors.
• Teams preparing for insurance renewal, regulatory visits, or third-party audits.

• Standards-aligned EAP with required elements and plain-language communications (OSHA 1910.38; FEMA/NIMS). 
• Workplace Violence Prevention & Intervention (WVPI) uplift: roles, reporting channels, behavioral cues, and response options (ASIS WVPI/AA-2020). 
• ASHER alignment for Active Shooter/Hostile Event readiness (NFPA 3000). 
• Actionable fixes prioritized by risk, cost, and time to implement.
• Validation options: tabletop or live, culminating in BridgeShield™ Pro Day.

1) Assess (Current-State Audit)

• Document & site review (maps, alarms, call-down trees, muster/accountability, radios, access control).
• Gap analysis against OSHA EAP minimums: reporting, evacuation/lockdown, critical ops, headcount, medical/rescue, responsible roles. 
• Communications check: plain-language scripts; remove codes/jargon per NIMS guidance. 
• WVPI posture review (policies, reporting pathways, incident triage, threat indicators).
   

Deliverable: Findings & Risk Map (High/Med/Low) + prioritized remediation list.

2) Enhance (Design & Build)

• Revise the EAP: notifications, decision trees (evacuate vs. protect-in-place), 911 content checklist, and floor-level roles. CISA EAP templates referenced. 

• Micro-training: 10–15 minute supervisor briefs and job-aids 
• Desktop drills: two facilitated mini-tabletops to walk supervisors through new playbooks 
• WVPI/AA inserts: behavioral reporting flow, case logging, escalation criteria.
   

Deliverable: Updated EAP packet (PDF + source), quick-reference cards/posters, supervisor brief deck.

3) Validate (Exercise & Prove)

• Choice of Tabletop Exercise (discussion-based) or BridgeShield™ Pro Day (on-site, scenario-driven) to test alerts, decision-making, movement/room-hardening, and headcount accuracy; CISA checklists used for scoring. 
• After-action review (AAR) with metrics and a 30/60/90-day sustainment plan.
• Optional re-test to confirm closure of high-risk gaps.
   

Deliverable: AAR + Scorecard, updated training plan, and signed compliance attestation (internal).

• OSHA EAP minimums present and accurate (1910.38) 
• Notification paths & content (who calls 911, what they say; internal alerting and redundancy). 
• Evacuation maps, routes, areas of refuge, accountability method. 
• Lockdown/protect-in-place procedures and room-hardening cues (CISA).  
• Plain-language radio/PA scripts and PIO alignment (NIMS). 
• WVPI policies, reporting mechanisms, and intervention workflow (ASIS WVPI/AA-2020).  
• ASHER program linkages with local responders; competencies & communication to stakeholders (NFPA 3000). 

We integrate life safety, emergency management, and workplace-violence prevention into a single operational playbook, Occupational Security, so leaders have one plan, one language, and one set of drills.