Emergency preparedness

Editorial approval scope: The team checked current source fidelity, scope boundaries, dates, arithmetic, reader usefulness, practical workflow, and general-information limitations.

Preparedness spans prevention through recovery

An emergency action plan focuses on immediate workplace actions such as reporting, evacuation, accountability, and contacts. Preparedness is broader. It includes mitigation, readiness, response, continuity, recovery, and learning.

A practice may need a fire EAP, clinical downtime process, severe-weather closure rule, cyber incident plan, continuity plan, infection response, workplace-violence protocol, and local emergency contacts. Keep the documents connected through shared roles, definitions, and escalation routes.

The OSHA healthcare page is a broad workplace-safety resource. It does not create one ABA emergency program, so owners must identify the standards and authorities that apply to actual hazards.

Start with hazard and impact analysis

List plausible natural, technological, health, human-caused, and facility events. Assess who or what may be affected, existing controls, warning time, likely duration, and dependencies.

Then map critical functions: immediate safety, client communication, clinical records, medication and health information, scheduling, staffing, supervision, payroll, claims deadlines, vendor access, and facility security. Define how harm changes with outage duration.

Prioritize life safety and essential communication. Financial and operational recovery follows. A broad risk score should never hide an urgent single-point failure such as one locked exit or one unavailable medical contact.

Plan for people, places, and communication

Each site and service setting needs primary and alternate actions. Include home and community staff, drivers, remote workers, visitors, contractors, and people present after hours.

Ask how each person receives alerts, communicates choices, moves, shelters, exits, obtains medication or medical support, and reconnects with caregivers. Keep AAC and backup communication available. Provide interpreters and accessible formats where needed.

Use current contact trees with primary and alternate owners. Store an approved secure copy outside the system whose failure could activate it. Test authorized access.

Prepare supplies and dependencies

Inventory alarms, emergency lighting, first-aid supplies, PPE, communication devices, batteries, water, sanitation items, weather supplies, keys, offline rosters, approved paper records, and transportation contacts according to actual hazards and guidance.

Record location, owner, quantity, inspection date, expiration, replacement point, and access restrictions. Supplies behind a locked door with no available key are unavailable.

Map utilities, landlord contacts, EHR, phones, internet, cloud platforms, pharmacies, payroll, banks, clearinghouses, and other vendors. Define outage contacts, fallback, data handling, and restoration acceptance.

A fictional nine-function storm test

North River ABA runs a tabletop for a severe storm that closes one site and disrupts internet access. Nine critical functions are due for recovery by their chosen targets.

Seven are restored and accepted. Client safety contacts, staff accountability, telehealth triage, approved downtime documentation, payroll time capture, vendor escalation, and facility security pass. Claims-deadline tracking and backup AAC-device charging fail.

Target recovery is 7 of 9, or 77.8%. The two failures remain visible. The team adds an offline deadline register and a tested charging kit, then repeats those steps with the primary leader unavailable.

The measure reports accepted functions by target divided by functions due. It does not call a platform “recovered” merely because a login screen appears.

Train and exercise without creating risk

Ready Business provides voluntary general planning resources across hazards, communications, IT recovery, continuity, training, and exercises. Use it as a starting point, then adapt to ABA operations and controlling requirements.

Mix orientations, contact tests, tabletops, walk-throughs, and technical recovery tests. Avoid surprise exercises that may create fear or unsafe movement. Define stop authority, accessible participation, and a route for dissent or distress.

Exercise nights, weekends, mobile services, unavailable leaders, and overlapping events. Record decisions, times, evidence, missed steps, and corrective owners.

Set return-to-service gates

Technical restoration is one milestone. Before services resume, confirm a safe and accessible setting, required client-specific information, qualified staff, supervision, communication, documentation, and applicable payer or legal authority.

Qualified clinicians decide case-specific clinical readiness within scope. Operations verifies administrative gates. Emergency responders and public authorities retain their own authority.

After the event, account for all people and expected records, route required reports, preserve evidence, reconcile services and payroll, support affected people, and close corrective actions. Review the plan after exercises, incidents, new sites, staffing changes, construction, vendors, or service-model changes.

The OSHA emergency-preparedness page explains the federal EAP trigger and broader planning value. It should be read with state-plan and local requirements.

Keep unresolved recovery tasks visible with an owner, due date, interim control, and documented release decision.

Make the return-to-service decision by site, function, and client need. Release only what has passed safety, authority, staffing, communication, record, facility, technology, payer, and continuity gates. If a public authority restricts access or a critical safeguard fails, that hold controls the timeline.