ReadyOps AI

How to Write an Emergency Action Plan for a Small Business

A practical, OSHA-aligned Emergency Action Plan (EAP) for small businesses without a safety officer. The six procedures, the floor plan, and the one drill cadence that decides whether the plan is real on Day 1.

Take it further
Emergency Plan Bundle

Four ready-to-edit emergency plans in one bundle — Emergency Action, Business Continuity, Crisis Communication, and Disaster Recovery. Built so a small team can ship a complete program in a week, not a quarter.

$49one-time
View productAsk a question first

An Emergency Action Plan is the document you hand a supervisor at 7:45 AM and that supervisor uses at 7:46 AM when the alarm goes off. If a small business has any preparedness document, this is the one OSHA expects you to have on file — and the one your insurance carrier will ask for first after an incident. It is also the shortest plan to write, because it covers a narrow slice of events: fire, severe weather, active threat, hazardous-material release, and any situation where the right move is to leave the building in an orderly way.

What an EAP actually has to cover

OSHA 29 CFR 1910.38 is the standard. It requires a written plan, employee training, and a review whenever the workplace changes. The plan must include six procedures, in plain language. Most consultants bury these behind twenty pages of process — for a small team they fit on a single printable sheet pinned next to the fire panel.

The six required procedures

  1. How to report a fire or other emergency (one number, one phrase: "pull alarm, dial 911, then call the floor warden").
  2. Evacuation policy and route — primary exit, secondary exit, and the rally point at least 50 feet from the building.
  3. Procedures for employees who remain to operate critical operations before they shut down (most small businesses can write this as "everyone leaves; no one stays").
  4. Procedures to account for all employees after evacuation — headcount at the rally point by supervisor, missing names escalated to the incident commander.
  5. Procedures to be followed by employees performing rescue or medical duties — first-aid/CPR certified staff only, never a bystander with scissors.
  6. The name and job title of the person who can be contacted for more information about the plan (usually the owner, the ops lead, or a hired safety coordinator).

A floor plan that actually works

Get a one-line drawing of your space — walls, doors, the alarm pull stations, the AED, the fire extinguisher locations, the two exits, and the rally-point marker across the street. Print it at 11"x17". Hang one next to every exit and one in the break room. New employees take a five-minute walk-through with their supervisor on Day 1; HR keeps the signed walkthrough log. This is the entire review process OSHA wants — no binder, no binder index, no binder audit.

Drill cadence and the test that matters

OSHA requires drills "whenever the plan is initially introduced" and "whenever responsibilities or procedures change." For a small business that means a real evacuation walk-through twice a year, plus one announced tabletop once a year where the floor wardens practice calling the headcount and the missing-person escalation. The test that matters: time from alarm to all-clear at the rally point. If it takes more than six minutes for a single-floor office, the plan is fiction. If it takes less than three, the plan is probably rehearsed.

Common gaps on the first draft

  • A secondary exit that goes through a locked stockroom — every exit has to be unlocked from the inside during business hours.
  • A "muster point" at a parking spot that disappears when the dumpster is moved — pick a permanent landmark.
  • Floor wardens with day-job duties that conflict with the warden role — assign a deputy, never a single point of failure.
  • No procedure for visitors and contractors — visitor log on evacuation is the unblocker for the headcount.

When to write your own vs. buying a template

If your business occupies one floor, has fewer than 50 employees, and your local fire code does not require anything jurisdiction-specific, an editable EAP template is the right starting point. Customize it for your space, your exits, your warden names, and your alarm vendor. Reissue once a year, even if nothing changed — the act of reviewing it surfaces assumptions that have rotted. The companion Continuity Plan and Crisis Communication Plan cover what happens after the evacuation; without all three, you have a fire drill with no follow-through.

Read next

Related posts

The four emergency-preparedness posts work as a sequence. Most readers start with the Emergency Action Plan and add the rest as the program matures.

A working Business Continuity Plan for a small business — the risk register, the business-impact analysis, and the recovery-time targets that turn 'we should probably write that down' into a real document.
Read post
Who says what to whom in the first 72 hours of an incident — stakeholders, employees, customers, regulators, and the press. A small-team template for crisis communication that doesn't depend on a PR agency on retainer.
Read post
Practical disaster recovery for small businesses that can't afford enterprise DR. RTO/RPO targets, vendor redundancy, offsite backups, and the workbook decisions a small team can actually act on.
Read post

Close the loop

Turn the post into a plan.

Pick the matching editable template from the ReadyOps AI store and customize it for your team this week.