Every plant in your group has an emergency plan. The question a group HSE director has to answer is different: would every plant, on every shift, actually respond the way the plan says, and can you prove it? In a portfolio of factories, warehouses and offices across several countries, preparedness usually fails quietly. The plan exists, the drill is "done", and nobody notices that the night shift has no trained first aider or that the actions from last year's evacuation drill are still open.
This guide sets out a practical group model: what the main rules and ISO 45001 require, how to set one standard while keeping site-specific scenarios, how to plan drills and exercises, and what evidence and KPIs to collect from every site.
Why preparedness breaks at group level
- One template, many realities. A group template written for an office is copied into a chemical store, a boiler house or a multi-storey garment building. The plan looks complete but does not match the site's real scenarios.
- Drills that only test the day shift. Drills are run at a convenient time, with full management on site. The night shift, weekend crew and contractors are never tested.
- Paper evidence nobody can compare. Each site records drills in its own way: a photo in a chat group, a signed sheet, an email. The group cannot see which sites are overdue or what the drills found.
- Lessons that stay local. A drill finds a locked exit or a missing headcount list, the site fixes it (or not), and the 40 other sites with the same layout never hear about it.
What the rules and ISO 45001 ask
Requirements differ by country, so a group standard must sit on top of local law, never replace it. Still, the main frameworks point in the same direction:
| Source | What it asks for (summary) |
|---|---|
| ISO 45001:2018, clause 8.2 | Establish a planned response to emergencies, including first aid; train for it; periodically test and exercise the response capability; evaluate performance and revise the plan, including after tests and real emergencies; communicate duties to all workers and relevant information to contractors, visitors, emergency services and others; take the needs of interested parties into account; keep documented information. |
| EU OSH Framework Directive 89/391/EEC | Employers take the necessary measures for first aid, fire-fighting and evacuation of workers, and for action in the event of serious and imminent danger. |
| UK Management of Health and Safety at Work Regulations 1999, regulation 8 | Procedures for serious and imminent danger, enough competent persons nominated to carry out evacuation, and the right for exposed people to stop work and go to a place of safety. |
| US OSHA 29 CFR 1910.38 (where an OSHA standard requires an emergency action plan) | A written plan (oral allowed for 10 or fewer employees) covering reporting, evacuation routes, critical operations, accounting for everyone after evacuation, rescue and medical duties and contacts; an alarm system; trained people to help evacuation; review of the plan with each employee when it starts, when their duties change and when the plan changes. |
| Bangladesh | Fire safety duties sit in the Bangladesh Labour Act 2006 (section 62 covers fire precautions), the Labour Rules 2015 and the Bangladesh National Building Code. The Daily Star reports that the building code recommends fire drills quarterly, once or twice a year depending on building type, and a Dhaka Tribune commentary says factories with 50 or more employees must hold drills twice a year. Confirm the current wording for each site. |
The common core is clear: a written, site-specific plan; trained people with named roles; regular tests; learning from each test; and communication to everyone on site, including people who are not your employees.
Scenarios per site, standard per group
Set the structure at group level and let each site fill in the content. A workable split:
- Group sets: the list of scenario types every site must assess (for example fire, explosion, chemical release, structural failure, medical emergency, severe weather or flood, power loss, security threat); the plan format; the minimum drill programme; the roles; the records and KPIs.
- Each site decides: which scenarios apply and how severe they could be, based on its own hazard identification and risk assessment; exits, assembly points and shelter areas; local emergency services and how long they take to arrive; neighbours and the community who may be affected.
Link each scenario to the risk register. When a site adds a new hazard, such as a new solvent store or a new generator, the emergency plan should be reviewed as part of the same change.
Teams and cover on every shift
A plan only works if the people it names are on site. For each site, keep a roster of emergency roles: incident controller, fire wardens or evacuation marshals, first aiders, people who shut down critical operations, the person who does the headcount and the person who meets the emergency services. Then check cover by shift, not by site: every shift, including nights and weekends, needs enough trained people for each role.
Training records drive this. When a first aider's certificate expires or a warden leaves, the gap should be visible the same day, not at the next audit. Contractors and visitors need a short briefing on alarms, exits and assembly points when they sign in; our contractor safety guide covers the wider process.
A drill and exercise programme
An evacuation drill tests one thing. A full programme tests the whole response over a year. Emergency management agencies such as FEMA describe a range of exercise types, from discussion to full deployment:
| Type | What it is | Good for |
|---|---|---|
| Tabletop exercise | A facilitated discussion of a scenario using the existing plan, with no equipment or time pressure | Site leadership, testing decisions and communication, new scenarios |
| Drill | A supervised test of one function, such as evacuation, headcount, spill response or first aid | Every shift, often; building habits and timing |
| Functional exercise | A realistic simulation that tests several functions at once, without moving people and equipment to a real scene | Command, escalation and coordination with country or group |
| Full-scale exercise | A realistic exercise with real deployment of people and equipment, often with outside agencies | High-consequence scenarios at the highest-risk sites |
A sensible group standard sets a minimum, and local law or the site's risk level can only raise it. For example: evacuation and headcount drills on every shift at least as often as local law requires; at least one tabletop for the site leadership each year on the site's highest-risk scenario; functional or full-scale exercises at the sites where a major event would hit people, neighbours or the business hardest. Vary the timing and include unannounced drills where it is safe to do so.
Every drill should end with a short debrief: what worked, what did not, how long evacuation and the headcount took, and which actions follow. Those actions belong in the same action and CAPA process as incident findings (see our guide to incident investigation and CAPA at group level).
Evidence that holds up in an audit
ISO 45001 asks for documented information on the emergency process and plans. For a multi-site certificate, the auditor will sample sites and expect the central function to show it knows how each one performs (see ISO 45001 multi-site certification). Keep the same records everywhere:
| Record | What it shows |
|---|---|
| Site emergency plan with version and review date | The plan is current and matches the site's scenarios |
| Emergency team roster by shift | Named, trained people are available at all times |
| Training records for each role | Competence, with expiry dates |
| Drill and exercise records | Date, shift, scenario, participants, times, observations, photos |
| Actions from drills and real events | Owners, deadlines, closure and effectiveness check |
| Equipment and first-aid checks | Alarms, extinguishers, kits and exits checked and fit for use |
| Communication records | Briefings for workers, contractors and visitors; contacts with emergency services |
Group KPIs for preparedness
Preparedness is mostly measured with leading indicators (our guide to leading and lagging safety KPIs explains how to choose them). Useful group measures include:
- drills completed against plan, by site and by shift;
- share of sites that exercised their highest-risk scenario in the last 12 months;
- evacuation and headcount times against each site's own target;
- actions from drills closed on time, and actions overdue;
- shifts with full emergency role cover (first aiders, wardens) on the roster;
- equipment and first-aid checks completed on schedule.
Compare sites with care: a site that reports many drill findings may simply be running honest drills.
10-point checklist
| # | Check | Done? |
|---|---|---|
| 1 | Group standard sets scenario types, plan format, roles, minimum drills and records | ☐ |
| 2 | Each site's scenarios come from its own risk assessment and local law | ☐ |
| 3 | Plans are reviewed after changes, drills and real events | ☐ |
| 4 | Emergency roles are covered on every shift, including nights and weekends | ☐ |
| 5 | Role training is tracked with expiry dates | ☐ |
| 6 | Contractors and visitors are briefed on alarms, exits and assembly points | ☐ |
| 7 | Drill programme mixes tabletops, drills and larger exercises by risk | ☐ |
| 8 | Every drill has a debrief, timings and actions with owners | ☐ |
| 9 | Lessons from one site are shared with similar sites | ☐ |
| 10 | Group sees drill status, cover and overdue actions for every site | ☐ |
Frequently asked questions
What does ISO 45001 clause 8.2 require for emergencies?
Clause 8.2 asks the organization to establish, implement and maintain processes to prepare for and respond to potential emergency situations, including planned responses, first aid, training, periodic testing and exercises, evaluation of performance after tests and real events, and communication with workers, contractors, visitors and emergency services.
How often should a multi-site group run emergency drills?
Follow the legal minimum in each country first, then set a group minimum by risk, so that every site and every shift is covered over the year. Mix tabletop exercises, drills and larger exercises, and review each one with timings and actions.
Is emergency preparedness the same as business continuity?
No. Emergency preparedness protects people and controls the event in the first minutes and hours. Business continuity, the subject of ISO 22301, covers how the group keeps delivering its prioritized products and services afterwards. See our guide to ISO 22301 business continuity for multi-site groups.
How AccelSafety helps
AccelSafety, our enterprise HSE software, includes an emergency response module for teams, drills and first-aid checks, alongside training and competence, visitor control, risk assessment and actions and CAPA. Every site sits in one hierarchy from group to region, country, cluster and site, so the group can see drill status and open actions everywhere, and each number drills back to the source record. Work is grouped by ISO 45001 clause, and people can record drills and checks from a phone with photos. To see how your own sites would look, book a demo.
General information, not legal advice. Check the laws and fire authority requirements that apply at each of your sites.
Sources
- Auditor Training Online: ISO 45001 clause 8.2 Emergency preparedness and response
- ISO: ISO 45001 Occupational health and safety management systems
- EU-OSHA: The OSH Framework Directive (89/391/EEC)
- legislation.gov.uk: Management of Health and Safety at Work Regulations 1999, regulation 8
- OSHA: 29 CFR 1910.38 Emergency action plans
- FEMA Emergency Management Institute: Types of training and exercises
- The Daily Star: All you need to know about fire safety regulations in Bangladesh (30 March 2023)
- Dhaka Tribune: How to save lives (9 April 2019)
Accel Safety
