A procedure that has been written but not communicated to employees is not a procedure. It is a document that describes what would happen in an emergency if everyone already knew what to do.

What are workplace emergency procedures?

Workplace emergency procedures are the documented actions employees and managers are required to take when a specific type of emergency occurs. They cover what to do, in what order, and who is responsible for each step. They are the operational companion to an emergency communication plan: where the communication plan governs how alerts are sent, emergency procedures govern what people do when they receive them.

The legal basis for workplace emergency procedures in the UK is the Management of Health and Safety at Work Regulations 1999, which require employers to establish and maintain procedures for serious and imminent danger. The Regulatory Reform (Fire Safety) Order 2005 imposes specific requirements for fire evacuation procedures. Sector-specific obligations, including NHS major incident frameworks and Civil Contingencies Act requirements for public bodies, impose additional layers.

Procedures that exist on paper but are unknown to the employees they cover are not fit for purpose. The test of a workplace emergency procedure is whether the average employee, in the middle of an unfamiliar situation, knows what to do because they have been told, trained, and reminded.

Types of workplace emergency procedures

Fire evacuation procedures

Fire evacuation procedures are the most universal emergency procedure and the one most employees have some familiarity with. An effective fire evacuation procedure covers: the alarm signal and how to recognise it, the designated evacuation routes for each area of the building, the location of assembly points, the role of fire wardens and floor marshals, the procedure for accounting for all employees at the assembly point, and the criteria for re-entry.

Communication plays a critical role in fire evacuation, particularly in large or multi-site organisations. An alarm heard in one part of a building may not reach employees in another. Desktop alerts and SMS notifications can reinforce the physical alarm signal and provide specific instructions, including assembly point location and any hazard information relevant to the specific incident.

For more on structuring fire safety communication, see the Fire Evacuation Procedures guide.

Lockdown procedures

Lockdown procedures cover scenarios where employees must remain in place rather than evacuate: an external threat, a civil disturbance in the vicinity, or an active threat situation. The procedure should specify the signal or instruction that initiates lockdown, the actions employees should take to secure their immediate area, how to account for employees in common areas or in transit, and the communication channel through which updates will be received during the lockdown.

The communication requirements for a lockdown are distinct from a fire evacuation. Employees need to receive instructions without creating noise or movement that might attract attention. Silent full-screen desktop alerts and SMS are more appropriate than audible alarms or PA announcements in these scenarios.

Medical emergency procedures

Medical emergency procedures define the immediate response to a workplace health incident: who calls the emergency services, who provides first aid, how bystanders should respond, and how the scene should be managed until professional help arrives. They should also cover how employees in the vicinity are informed and, where relevant, how the organisation communicates with the broader workforce about what has occurred.

IT outage and cybersecurity procedures

IT and cybersecurity emergency procedures cover the actions employees should take when a critical system failure or security incident occurs. For a significant outage, this typically includes instructions to stop certain activities, save work, switch to manual or backup processes, and await further communication. For a cybersecurity incident such as a suspected ransomware attack, it may include instructions to disconnect devices from the network immediately.

The speed of communication is particularly important in cybersecurity scenarios, where the actions employees take in the first minutes of an incident can significantly affect the extent of damage. Full-screen emergency alerts that cannot be dismissed until acknowledged are the most effective channel for this type of notification. For more on managing communication during an IT incident, see the Incident Response Communication guide.

Severe weather and environmental procedures

Severe weather procedures cover how the organisation responds to conditions that affect the safety of travel, the operation of facilities, or the wellbeing of employees. This includes site closures, travel guidance, remote working instructions, and procedures for employees who are already on site when conditions deteriorate. The procedure should define the authority to declare a closure or travel advisory and the channels through which employees will be notified.

Hazardous material procedures

For organisations that handle or store hazardous materials, specific emergency procedures are required under the Control of Substances Hazardous to Health Regulations 2002 (COSHH) and, for higher-risk sites, the Control of Major Accident Hazards Regulations 2015 (COMAH). These procedures define the immediate response to a spill, release, or exposure, including evacuation or shelter-in-place instructions, decontamination procedures, and notification requirements.

Communication within workplace emergency procedures

Every workplace emergency procedure has a communication dimension. The procedure specifies what actions to take; the communication layer ensures employees know to take them. These two elements need to be designed together, not added sequentially.

The communication approach for each procedure should address four questions: which channel or channels will be used to initiate the procedure, what the initial message will say, how updates will be delivered during an active incident, and how the all-clear will be communicated.

For procedures that require employees across multiple locations or in different physical circumstances, the channel selection matters significantly. A desktop alert reaches employees at a computer. SMS reaches employees on the move. Voice alerts reach employees in environments without screen access. Digital signage reaches employees in shared spaces. An effective procedure uses the right combination for its specific employee population.

Heed's Emergency Alert System supports multi-channel delivery from a single platform, with acknowledgement tracking to confirm which employees have received and acted on the alert. For organisations with employees across multiple sites or in field-based roles, this provides the coverage that a single-channel approach cannot.

Making procedures work in practice

Communicating procedures to employees

A procedure that has been written but not communicated is not a procedure. Employees need to know what to do before the situation arises. This means induction training for new employees, regular refreshers for existing employees, and visible reminders in the physical environment, such as evacuation routes posted in corridors and assembly point signs in car parks.

Digital channels can support ongoing awareness. Corporate screensavers and desktop wallpaper can carry safety reminders and procedure summaries in a non-intrusive format that keeps information visible without interrupting work.

Roles and responsibilities

Each procedure should name the roles responsible for specific actions, not the individuals currently in those roles. Naming individuals creates a gap when the person changes. Naming roles, and ensuring those roles are maintained and communicated through the directory structure, creates a procedure that survives organisational change.

Testing

Procedures should be tested regularly. Fire evacuation drills are the most familiar form of testing, but the same principle applies to other procedure types. A desktop exercise or tabletop exercise can test the decision-making and communication elements of a procedure without requiring a full physical drill. The findings from any test should produce an action list that improves the procedure before the next test.

Review and update

Procedures should be reviewed at least annually and following any incident, near-miss, or significant change to the organisation's structure, premises, or systems. A procedure written for a different building layout, a different workforce size, or a different technology environment may fail in ways that are not immediately obvious until an incident exposes them.

Sector-specific requirements

Several sectors have obligations that go beyond the general Health and Safety at Work requirements.

Healthcare. NHS trusts operate under NHS England's Core Standards for Emergency Preparedness, Resilience and Response (EPRR), which require documented and tested major incident procedures that include staff communication. See the Hospital Emergency Codes guide for more on how emergency procedures work in a clinical environment.

Construction. The Construction (Design and Management) Regulations 2015 require principal contractors to have emergency procedures in place on site. These must cover welfare, first aid, and fire arrangements and must be communicated to all workers on site, including subcontractors.

Financial services. FCA and PRA operational resilience requirements include staff notification and communication arrangements that must be documented, tested, and capable of functioning during the types of disruption the firm is most exposed to.

For organisations in regulated sectors where the reliability of the communication system itself is part of the compliance requirement, on-premises deployment ensures the alert infrastructure operates within the organisation's own environment, independent of external connectivity.

Related guides

For the communication framework that governs how alerts are sent during an emergency, see the Emergency Alert System guide. For the planning document that defines trigger criteria, authorised senders, and message templates, see the Emergency Communication Plan guide. For health and safety communication more broadly, see the Workplace Safety Topics guide.

See Heed in Action

See how Heed streamlines internal communication across desktop, mobile, and shared screens - so every message gets noticed.

We’ll walk you through creating, targeting, and tracking notifications in real time, tailored to your organisation’s goals.

Schedule a Demo

Book a demo

See how Heed works across your channels, sites and shifts, and get answers to the questions specific to your industry and team size.

Schedule a Demo

Cta Image
Icon

FAQ

Common Questions

Common questions about workplace emergency procedures.

Contact Us

What is the legal requirement for workplace emergency procedures in the UK?
Faq Icon
How should organisations communicate emergency procedures to employees?
Faq Icon
How do fire evacuation and lockdown procedures differ in terms of communication?
Faq Icon
How often should workplace emergency procedures be tested?
Faq Icon
Trusted by leading enterprise organisations
Brand LogoBrand LogoBrand LogoBrand LogoBrand Logo

Let's have a chat

Talk to use about keeping your employees informed, engaged and inspired - book a call today!

Book a Call

Cta Image