how-to
Emergency Preparedness Planning for Facilities: 2026 Guide
Table of Contents
- Emergency Preparedness Planning for Facilities: The Implementation Cycle
- Start With a Facility Emergency Risk Assessment
- Build the Emergency Operations Plan Around Four Phases
- Write an Emergency Evacuation Plan for Facilities That People Can Follow
- Plan Shelter-in-Place and Emergency Communication Together
- Your Facility Emergency Preparedness Checklist
- Run Emergency Drills for Facilities That Reveal Real Gaps
- Continuity, Accessibility and Plan Maintenance
- Frequently Asked Questions
Last Updated: October 18, 2026
Emergency Preparedness Planning for Facilities: The Implementation Cycle
Emergency preparedness planning for facilities is the ongoing process of identifying hazards, building a response plan, training people, running drills, and updating the plan after every test. This guide from Campus Pro covers the full cycle, from risk assessment to plan maintenance.
Most facility teams treat the emergency plan as a binder signed once a year. That fails: a plan nobody has tested is a guess, not a plan.
Start With a Facility Emergency Risk Assessment
A facility emergency risk assessment is a structured review of every hazard that could disrupt your site, scored by likelihood and impact, and tied to a mitigation action with an owner and a due date. It comes first because procedures, drills, supplies, and roles all depend on what you find here. The version that protects a building is a repeatable method you can hand to a new facility manager and get the same output.
Step 1: Build the hazard inventory from four sources
Do not brainstorm hazards from memory. Pull them from four concrete sources:
- A physical walk of the building, zone by zone, including mechanical rooms, loading docks, storage areas, and roof access. Note what you see, not what you assume.
- Incident history, the last three years of incident reports, insurance claims, and near-miss logs. Patterns hide in old reports.
- Utility and vendor dependency map, every utility feed (electric, gas, water, sewer, telecom) and every vendor whose failure stops your operation. Each dependency is a hazard.
Group the findings into the four standard categories so nothing gets missed:
- Natural hazards: severe weather, flooding, earthquakes, wildfire smoke, extreme heat or cold
- Human-caused hazards: workplace violence, theft, civil disturbance, cyber intrusion
- Technical hazards: fire, power loss, gas leak, system failure, elevator entrapment
Step 2: Score likelihood and impact with defined anchors
A 1-5 scale only works if everyone scores the same way. Define what each number means before anyone scores, or two people will produce two different plans from the same building:
| Score | Likelihood (within 3 years) | Impact (on people, operations, property) |
|---|---|---|
| 1 | Rare, no history, not expected | Minor, no injury, disruption under 1 hour |
| 2 | Unlikely, possible but not seen here | Moderate, first aid or disruption under 1 day |
| 3 | Possible, seen elsewhere in the sector | Significant, injury, or disruption 1-3 days |
| 4 | Likely, seen at this site or a sister site | Major, serious injury, or disruption over 3 days |
| 5 | Almost certain, recurring or seasonal | Severe, fatality, structural loss, or site closure |
Multiply likelihood by impact for a priority score between 1 and 25. Then apply a consistent action rule so the score produces a decision, not just a number:
- Score 15-25 (High): written procedure, named owner, drill at least annually, mitigation budget line
- Score 8-14 (Medium): written response note, assigned backup, reviewed each plan cycle
- Score 1-7 (Low): monitor only; revisit if the building or operations change
| Hazard | Likelihood | Impact | Score | Priority | Assigned mitigation |
|---|---|---|---|---|---|
| Extended power loss | 3 | 4 | 12 | Medium | Backup generator test schedule; UPS on life-safety circuits |
| Severe storm damage | 2 | 5 | 10 | Medium | Pre-season roof and drainage inspection; window film |
| Server room fire | 1 | 5 | 5 | Low | Suppression system inspection; offsite data backup |
| Workplace violence | 2 | 5 | 10 | Medium | Access control review; front-desk de-escalation training |
| Flooding at loading dock | 4 | 3 | 12 | Medium | Drain clearing schedule; flood barriers stored on site |
Step 3: Assign a mitigation action, owner, and due date to every High and Medium hazard
A risk assessment that ends at a score is a report, not a plan. Every hazard scoring 8 or above gets three fields: the mitigation action, the named person responsible, and the completion date. This is the step most facility assessments skip, and the one that makes the assessment auditable.
Step 4: Review on a fixed cycle and after any change
Re-score the full inventory at least once a year, and re-score affected hazards whenever the building changes, a renovation, a new tenant, new equipment, an occupancy change. Keep the scored assessment as a living document with a version date, not a PDF in a binder. The version date is what an auditor or insurer asks for first.
FEMA hazard mitigation planning resources
Build the Emergency Operations Plan Around Four Phases
An emergency operations plan assigns actions, people, and resources to each phase of an incident. Emergency management uses four phases: mitigation, preparedness, response, and recovery.
Most plans are strong on response and thin everywhere else, an imbalance that shows up when recovery drags on for weeks.
Mitigation, Preparedness, Response, Recovery
Each phase needs its own section in the plan:
- Mitigation: what you do now to reduce risk. Clearing drains, installing alarms, bracing shelving.
- Preparedness: what you do before an incident. Training, supplies, drills, contacts.
- Response: what happens in the first minutes and hours. Evacuation, shelter, calling emergency services.
Write a target recovery time for each critical operation. "Payroll resumes within 48 hours" is a plan. "Resume operations as soon as possible" is a wish.
Roles, Responsibilities and the Response Team
Name people, not job titles alone. A response team needs:
- An incident commander who makes the call to evacuate or shelter
- A communications lead who talks to staff, tenants, and families
- A floor warden for each zone who sweeps the area and reports clear
Every role needs a named backup so the plan still works when the primary is out sick or traveling. A small multidisciplinary committee meeting quarterly keeps these roles current.
Write an Emergency Evacuation Plan for Facilities That People Can Follow
An emergency evacuation plan for facilities works only when someone who has never read it can follow it under stress, short routes, clear signage, no ambiguity about where to go.
Build the evacuation procedure around these elements:
- Map primary and secondary evacuation routes from every zone
- Post the routes at each stairwell and elevator lobby
- Assign assembly points with a count method
- Define who sweeps each area and who reports clear
- Set a rule for when to evacuate versus shelter in place
Occupant accountability is the part most plans skip. Decide now how you will know who is missing. A sign-in sheet at the assembly point works for small sites.
Plan Shelter-in-Place and Emergency Communication Together
Shelter-in-place and emergency communication are one system, not two. The decision to shelter only works if the message reaches everyone in under a minute.
Your communication strategy needs pre-written templates for the most likely events:
- Evacuation order with assembly point
- Shelter-in-place order with which room to use
- All-clear with return instructions
Write these before you need them. During an incident, nobody composes clear sentences under pressure. For shelter-in-place, identify interior rooms with few or no windows, confirm each holds the expected headcount, and stock water, a radio, and a phone charger in each.
Your Facility Emergency Preparedness Checklist
This facility emergency preparedness checklist covers the core items. Work through it quarterly.
- Risk assessment scored and reviewed within the last 12 months
- Emergency operations plan written and signed off
- Evacuation routes mapped and posted at every stairwell
Run the checklist as a scored audit, not a yes/no pass. Note what is partial. Partial items are where plans break.
Run Emergency Drills for Facilities That Reveal Real Gaps
Most drills test whether people can walk outside. Good drills test whether the plan survives contact with reality. Emergency drills for facilities should surface problems, a drill with no findings was too easy.

Vary the conditions. Block a stairwell and see if people find the secondary route. Run a drill during a shift change. Time the full evacuation from alarm to assembly point count.
Tabletop Exercises and Measured Readiness
A tabletop exercise is a discussion-based drill where the response team talks through a scenario without leaving the room. It costs an hour and exposes gaps a fire drill never will.
Measure readiness with a few simple indicators:
| Indicator | Target | How to Measure |
|---|---|---|
| Evacuation time | Under 5 minutes | Time from alarm to full count |
| Notification reach | All staff | System delivery report |
| Role coverage | 100% with backup | Roster check |
| Open findings from last drill | Zero | Drill report review |
Track these across drills. If evacuation time creeps up, find out why before the next one.
Continuity, Accessibility and Plan Maintenance
Business continuity, accessibility, and plan maintenance are where facility plans most often fall short, and they determine whether a facility actually recovers. Each deserves its own treatment in the plan, not a paragraph at the end.
Operational continuity: set recovery targets for critical functions
Continuity planning starts by deciding which functions cannot stop and how long each can be down before impact becomes unacceptable. That number is the recovery time objective (RTO). Write it down per function, because "resume operations as soon as possible" is a wish, not a target. A workable method:
- List critical functions. Payroll, security access, HVAC for occupied spaces, IT and data, water, and any production or service line whose stoppage affects customers.
- Set an RTO for each. For example: security access restored within 2 hours; payroll processed within 48 hours; HVAC restored within 24 hours in occupied zones.
- Identify the dependencies behind each function. A function is only as resilient as its weakest dependency, power, water, telecom, a single vendor, a single server room.
- Name the workaround for each dependency. Generator, manual override, alternate vendor, offsite data, manual badge check at the door.
Facility systems fail together. A building that loses power and badge access at once has two problems, not one, and the access-control failure can lock out the very people trying to respond. Map the dependencies explicitly:
- Backup power: what the generator actually feeds, how long the fuel lasts, and when it was last load-tested under real conditions
- Building automation and access control: what happens on power loss, whether doors fail safe or fail secure, and who holds manual keys
- Communications: whether the notification system has battery backup and an alternate path if the primary network is down
Accessibility: plan for people with support needs before the incident
Accessible planning is the most commonly skipped part of facility preparedness, and it carries the highest human cost when it fails. Build it in from the start:
- Alerts: every notification channel must reach people who are deaf or hard of hearing (visual alerts, vibrating devices, text) and people who are blind or low vision (audible alerts, verbal instructions). One channel is not enough.
- Evacuation assistance: document the support needs of staff and regular visitors who may need help, and assign a specific named person to assist each one, plus a backup. Do not leave it to whoever is nearby.
- Areas of refuge: identify and mark spaces where people can wait safely for assistance, typically at stairwells or designated rooms, and make sure responders know where they are.
Plan maintenance: assign one owner and a fixed review cycle
A plan without an owner goes stale fast. Assign one named person accountable for the whole document, with a backup. Review the plan:
- After every drill, using the findings report
- After any real incident
- When the building changes, renovations, new tenants, new equipment, occupancy changes
Keep a version log at the front of the plan showing the date, the reviewer, and what changed. That log is the first thing an auditor, insurer, or new facility manager will look for.
Measure readiness, not just activity
A plan that is reviewed but never measured is a guess. Track a small set of indicators across drills and reviews to see whether readiness is improving or slipping:
| Indicator | Target | How to measure |
|---|---|---|
| Evacuation time | Under 5 minutes | Time from alarm to full count |
| Notification reach | All staff and occupants | System delivery report |
| Role coverage | 100% with named backup | Roster check |
| Corrective actions closed | 100% within 30 days | Findings log review |
| Plan review completed | Annual, on schedule | Version log date |
| Accessibility assistance assigned | 100% of documented needs | Roster cross-check |
If evacuation time creeps up or corrective actions sit open, find out why before the next drill, the trend matters more than any single result.
Frequently Asked Questions
What are the 5 P's of preparedness?
The five P's are prevention, protection, mitigation, response and recovery. In facility terms, prevention means removing hazards before they cause an incident, protection means hardening the building and its systems, mitigation means reducing the impact of what you cannot prevent, response covers what staff do in the first minutes, and recovery covers restoring critical operations. Mapping your emergency preparedness planning against all five keeps you from over-investing in response while neglecting mitigation and recovery.
How do you conduct a facility emergency risk assessment?
List every hazard that could affect the site, from fire and severe weather to utility failure and human-caused incidents. For each, score likelihood and consequence on a simple scale, then multiply the two to get a priority rank. Walk the building to confirm the scores against real conditions: blocked exits, single points of failure in power or IT, and areas where occupants cannot hear an alarm. Revisit the facility emergency risk assessment annually and after any layout change, tenant change or near miss.
How often should a facility review and update its emergency plan?
Review the full plan at least once a year and update it whenever something structural changes: a renovation, a new tenant, a shift in occupancy, a new critical system, or a change in local emergency services contacts. Treat the review as a scheduled task with an owner and a completion date, not an annual scramble. After every drill or real incident, log the gaps found and fold the fixes into the next revision so the document stays current rather than aspirational.
How should a facility plan for people who need assistance during an evacuation?
Ask occupants voluntarily to identify support needs and record them against a specific floor and work area, then assign a named buddy for each person rather than relying on whoever is nearby. Confirm that evacuation routes, alarms and assembly points work for people with mobility, hearing or vision needs, and check that refuge areas on upper floors have two-way communication. Review the list quarterly, because hybrid schedules mean the people on site change week to week.
Facilities that plan well still face one hard truth: a plan only works if the people running it have practiced it. Campus Pro supports that work through fractional facility leadership, emergency preparedness and business continuity consulting, staff training, and the Campus Pro-CFMS platform with its safety and inspections modules. Start with the free FM Health Score diagnostic, then get started with Campus Pro and build a plan your team can actually follow.