You wrote your IIPP. Or someone wrote it for you. You signed it, filed it, and moved on to the seventeen other things demanding your attention that day.
That was your first mistake. Not the writing — the moving on.
An Injury and Illness Prevention Program is not a document you create and shelve. It is an operating system for workplace safety. It requires inputs, maintenance, updates, and attention on a schedule that never stops. The moment you stop running the program, you stop having a program — regardless of what the binder on the shelf says.
Cal/OSHA does not inspect your binder. They inspect your operation. And when the operation does not match the document, you have two problems: the safety gap that exists in reality, and the compliance gap that exists on paper. Both carry penalties. Together, they carry credibility destruction that makes every subsequent interaction with the inspector harder.
This playbook gives you the operating rhythm. Month by month, quarter by quarter, year by year — what you need to do, when you need to do it, and what happens if you skip it.
The Monthly Rhythm: Inspections and Hazard Tracking
Every month, you have two non-negotiable obligations: conduct a workplace inspection and review your hazard correction log.
Monthly Workplace Inspections
California Code of Regulations, Title 8, Section 3203(a)(4) requires periodic inspections. "Periodic" is not defined by statute, which means Cal/OSHA has discretion to evaluate whether your frequency is adequate. For most workplaces, monthly is the defensible standard. If you are in construction, manufacturing, or any environment where conditions change frequently, you may need weekly.
Here is what a monthly inspection actually looks like when done correctly:
**Designate the inspector.** This is not a job for the newest employee or whoever drew the short straw. Your inspector needs to understand what they are looking at. Rotate among trained supervisors or safety committee members, but never assign someone who has not been trained on hazard recognition for your specific workplace.
**Use a site-specific checklist.** Generic checklists are marginally better than no checklist. Your checklist should reference the actual hazards identified in your IIPP hazard assessment — the specific equipment, the specific chemical storage areas, the specific egress routes, the specific ergonomic stations in your workplace. If your checklist could work at any company in your industry, it is not specific enough.
**Document everything.** Date, inspector name, areas inspected, hazards identified, hazards previously identified that have been corrected, hazards previously identified that remain uncorrected (with explanation). Every inspection creates a written record. That record goes into your IIPP file.
**The critical detail most employers miss:** documenting that no hazards were found is just as important as documenting hazards. An inspection with no findings documented looks like an inspection that was not conducted. Write "No new hazards identified" on the form. Date it. Sign it.
Hazard Correction Tracking
You identified a hazard during an inspection. Now what?
Section 3203(a)(6) requires timely correction of unsafe or unhealthy conditions, work practices, and work procedures. "Timely" is contextual — an imminent hazard requires immediate correction, while a long-term ergonomic improvement might have a reasonable implementation timeline.
Your hazard correction log tracks four things for every identified hazard:
- **What was found.** Specific description, location, date identified.
- **What interim protective measures were implemented.** If the permanent fix takes time, what did you do right now to protect employees? This is where most employers fail — they identify the hazard, schedule the repair, and do nothing in between.
- **What corrective action was taken.** The permanent fix, described specifically.
- **When it was completed.** Date, verified by whom.
An open hazard correction item is not inherently a violation. An open item with no interim protection and no documented timeline for correction — that is a violation. An open item that has been open for six months with no documented progress — that is a violation pattern that tells the inspector your entire program is performative.
The Quarterly Rhythm: Training and Communication
Quarterly Training Sessions
Section 3203(a)(7) requires training for all employees, including managers and supervisors. The regulation specifies training when the program is first established, for new employees, for employees given new job assignments, when new substances or processes are introduced, and when new hazards are recognized.
Here is what most employers miss: the regulation also requires training "for supervisors to familiarize them with the safety and health hazards to which employees under their immediate direction and control may be exposed." Your supervisors need different training than your line employees. They need to understand not just the hazards, but their responsibility for enforcement, inspection, and correction.
Quarterly training sessions accomplish three things:
**Reinforcement.** Safety training delivered once and never repeated creates a documentation artifact, not a behavioral change. Quarterly sessions keep hazard awareness current.
**New hazard communication.** Every quarter, review any new hazards identified through inspections, incident investigations, or changes in operations. This is your primary channel for communicating emerging risks.
**Documentation currency.** When Cal/OSHA reviews your training records, they want to see recency. Annual training is the minimum. Quarterly training demonstrates a program that is actively managed, not passively maintained.
**Training documentation requirements:**
- Date of training
- Topic(s) covered
- Trainer name and qualifications
- Attendee names and signatures
- Training materials used (keep copies)
- For new employees: date of hire, date of training, topics covered
If an employee cannot attend a scheduled session, document the absence and the makeup date. An employee who missed training is an employee who was not trained — and if they are involved in an incident related to the training topic, the documentation gap becomes a liability amplifier.
Safety Communication System
Your IIPP must include a system for communicating with employees about safety matters. Section 3203(a)(3) requires this, and it accepts multiple formats: safety meetings, written communications, a safety committee, or any other means that ensures effective two-way communication.
The key word is "two-way." Posting a notice on the break room bulletin board is one-way communication. It satisfies nothing. Your system must allow employees to report hazards and receive responses without fear of reprisal.
Quarterly is a natural cadence for formal safety communication reviews: Are employees using the reporting channels? Are reports being responded to? Are there patterns in the reports that indicate a systemic hazard?
The Annual Rhythm: Program Review and Update
Annual IIPP Review
Once per year, your entire IIPP gets a comprehensive review. This is not rereading the document and confirming it still exists. This is an operational audit of the program itself.
**Review the effectiveness of each program element:**
- **Responsibility.** Is the designated responsible person still in that role? Have their responsibilities changed? If you named "John Smith, Operations Manager" and John left the company six months ago, your IIPP has been operating without a designated responsible person for six months. That is not a documentation problem — it is a program failure.
- **Compliance.** Review your inspection records, training records, hazard correction logs, and incident investigations from the past year. Are they complete? Are there gaps? Where are the patterns?
- **Hazard assessment.** Has anything changed in your workplace? New equipment, new processes, new chemicals, new layout, new shifts, new locations? Every change requires a hazard reassessment. The annual review catches changes that slipped through the cracks during the year.
- **Investigation.** Review every incident investigation from the past year. Were root causes identified? Were corrective actions implemented? Were corrective actions effective — meaning the same type of incident did not recur?
- **Training.** Is your training program current? Does it reflect the actual hazards in your workplace today, or the hazards that existed when the program was written? Training content that references equipment you no longer use or processes you no longer perform is training content that needs updating.
**Document the annual review.** Date, reviewer(s), findings, corrective actions. This document becomes part of your IIPP file and is the first thing an inspector asks for when evaluating program currency.
Responsible Person Audit
At least once per year — and immediately whenever a personnel change occurs — verify that every named person in your IIPP is still in the role described. This includes:
- The person with authority and responsibility for implementing the program
- Supervisors responsible for specific program elements
- The person(s) responsible for conducting inspections
- The person(s) responsible for conducting training
- The person(s) responsible for hazard correction
When a named individual leaves the company, transfers to a different role, or is otherwise no longer performing the function described in the IIPP, you have a gap. Fill it immediately. Document the transition. Train the replacement on their IIPP responsibilities specifically — not just their job responsibilities generally.
New Employee Onboarding
Every new employee must receive IIPP training before they begin work that exposes them to hazards. Not during their first week. Not when you get around to scheduling a session. Before exposure.
Your onboarding checklist for IIPP compliance:
- **General IIPP orientation.** What the program is, where it is posted or accessible, who administers it, how to report hazards, how to report injuries, anti-retaliation policy.
- **Job-specific hazard training.** The specific hazards associated with their job assignment. Not the generic company hazard list — their hazards, in their work area, with their equipment.
- **Emergency procedures.** Evacuation routes from their work area, assembly points, alarm recognition, emergency contacts.
- **Documentation.** Signed acknowledgment that training was received, with date, topics covered, and trainer identified.
- **Supervisor notification.** The new employee's supervisor must be notified that IIPP onboarding is complete. The supervisor is responsible for ongoing safety communication and hazard awareness for that employee — they need to know the baseline.
**Temporary and seasonal employees receive the same onboarding.** There is no exemption for employment duration. A temp worker who is injured on day two because they did not receive hazard training creates the same liability as a permanent employee injured after ten years.
The Hazard Assessment Cycle
Your initial hazard assessment was a point-in-time evaluation. Your workplace is not a point in time. It changes — sometimes gradually, sometimes overnight.
**Triggers for hazard reassessment:**
- New equipment installed or existing equipment modified
- New substances introduced (chemicals, materials, biological agents)
- New processes or procedures implemented
- Workplace layout changes
- New job classifications created
- An incident, injury, or near-miss that reveals an unidentified hazard
- Employee reports of previously unrecognized hazards
- Changes in applicable regulations
- Seasonal changes (outdoor work, temperature extremes)
Each reassessment follows the same methodology as the original assessment: identify the hazard, evaluate the risk, determine controls, implement controls, document everything.
**Do not wait for the annual review to conduct reassessments.** The annual review catches what you missed during the year. Reassessments happen when the trigger occurs. Documenting a new piece of equipment in January and waiting until December to assess its hazards is eleven months of unmanaged risk — and eleven months of documentation that proves you knew about the change and did nothing.
Record Retention
Cal/OSHA requires you to maintain IIPP records. The retention requirements vary by record type:
- **Training records:** Maintain for at least one year. Best practice: maintain for the duration of employment plus three years.
- **Inspection records:** Maintain for at least one year. Best practice: maintain for three years minimum.
- **Hazard correction records:** Maintain for at least one year after correction is completed.
- **Incident investigation records:** Maintain for at least one year. Best practice: maintain for five years (aligns with statute of limitations for most workplace injury claims).
"Maintain" means accessible and organized. A box of unsorted papers in a storage closet is not maintained records — it is evidence of a disorganized program.
Digital records are acceptable provided they are backed up, accessible to employees upon request, and producible during an inspection. If your records are in a system that requires a password only one person knows, that is a single point of failure for your entire compliance documentation.
When the Inspector Arrives
If you have been running this playbook — monthly inspections, quarterly training, annual reviews, hazard correction tracking, current responsible persons, complete onboarding documentation — the inspector's visit is a process validation, not a crisis.
You can produce your records. You can name your responsible person. You can show your inspection history. You can demonstrate that identified hazards were corrected and that employees were trained on current hazards.
The inspector will still find things. They always do. But the difference between "inspector found an issue in an actively managed program" and "inspector found an issue that reveals the program exists only on paper" is the difference between a correctable citation and a systemic failure finding that triggers a comprehensive inspection of every element of your safety program.
Run the program. Document the program. Update the program. That is the playbook. It is not complicated. It is relentless.
Protekon Makes This Automatic
Everything in this playbook — the monthly inspections, the quarterly training tracking, the annual review scheduling, the hazard correction log, the responsible person tracking, the new employee onboarding documentation — Protekon manages it as a continuous operating system.
You do not track deadlines on a calendar. You do not wonder whether last month's inspection was documented. You do not discover during an inspection that your responsible person left the company four months ago and nobody updated the plan.
The program runs. The documentation accumulates. The gaps get flagged before the inspector finds them.
That is the difference between having a playbook and having someone run the playbook for you.