Workplace safety solutions that actually work for small business

Last updated 2026-07-09

What does 'workplace safety solution' actually mean?

A workplace safety solution is any practice, program, tool, or piece of equipment that measurably reduces the likelihood or severity of a work-related injury, illness, or fatality. That's the whole definition. The phrase gets stretched to sell everything from hard hats to software subscriptions, so pin it to that test: does it measurably lower risk?

The order you attack hazards in matters. OSHA's preferred approach, the hierarchy of controls, puts engineering controls first (physically removing the hazard), administrative controls second (changing how the work is done), and PPE last. Most small businesses run it backwards. They buy gloves and helmets before asking whether the hazard can be designed out entirely. ^[1]

Here's the practical translation. Start with the hazards that could kill someone or cause permanent injury. Work down to the ones that produce recordable incidents. Build your program around that ranked list. Everything else follows from an honest hazard assessment, and if you skip that step, you're guessing.

What are the most common workplace hazards small businesses face?

Overexertion, slips and falls, and contact with equipment cause the bulk of nonfatal workplace injuries. The Bureau of Labor Statistics publishes this data by industry every year, and the pattern barely moves. In 2022, the leading causes of nonfatal injuries requiring days away from work were overexertion and bodily reaction (33.8% of cases), slips, trips, and falls (26.7%), contact with objects and equipment (23.9%), violence and other injuries by persons or animals (7.0%), and transportation incidents (4.7%). ^[2]

Where these land depends on your trade. Slips, trips, and falls dominate retail and food service. Contact with equipment dominates manufacturing, warehousing, and construction. Overexertion shows up everywhere, worst in healthcare and logistics.

Fatalities follow a different distribution. There were 5,486 fatal work injuries in the United States in 2022. Transportation incidents caused 37.7% of them, followed by falls (16.3%), contact with objects and equipment (15.0%), and violence (11.6%). ^[2] The deaths cluster in agriculture, construction, transportation, and roofing.

Your industry's actual risk profile tells you where to spend limited time and money. A 10-person landscaping crew and a 10-person accounting office share almost no priorities.

Which OSHA standards apply to most small businesses?

A handful of OSHA standards apply to nearly every employer regardless of trade: hazard communication, PPE, and recordkeeping, plus lockout/tagout and emergency planning if the work involves machines. OSHA's General Industry standards (29 CFR 1910) cover businesses outside construction, agriculture, and maritime. Construction runs on 29 CFR 1926 instead.

Hazard Communication (29 CFR 1910.1200) requires any employer whose workers are exposed to hazardous chemicals to keep Safety Data Sheets, label containers, and train workers. It's one of OSHA's most-cited standards every single year. Our hazard communication article walks through how SDS requirements work. ^[3]

Lockout/Tagout (29 CFR 1910.147) controls hazardous energy during equipment servicing. If workers clean, maintain, or unjam machinery, you need a written LOTO program. It stays in the top five most-cited standards. See our lockout tagout guide for the procedure requirements.

Personal Protective Equipment (29 CFR 1910.132) requires a written hazard assessment, documented PPE selection, and training before workers use PPE. The assessment must be certified in writing.

Emergency Action Plans (29 CFR 1910.38) are required in writing for employers with more than 10 employees. Under that threshold you can communicate the plan orally, but writing it down is smarter.

Recordkeeping (29 CFR 1904) requires employers with 11 or more employees in most industries to keep OSHA 300, 300A, and 301 logs. The 300A annual summary must be posted from February 1 through April 30 every year. ^[4]

The general duty clause, Section 5(a)(1) of the OSH Act, fills the gaps. If a recognized hazard exists that could cause serious harm and there's a feasible way to abate it, OSHA can cite you with no specific standard on the books. That clause has teeth.

What should a written workplace safety program include?

A written safety program should cover your hazard assessment process, emergency procedures, incident reporting, PPE selection and training records, any chemical-specific programs, equipment programs like LOTO, and a training schedule. OSHA doesn't require a single unified document called a 'safety program' for most employers. It does require written programs for a long list of specific standards: HazCom, LOTO, respiratory protection, bloodborne pathogens, fall protection, and more. The clean move is one binder or one digital file holding all of them under a single cover.

At minimum, include:

• A hazard identification and assessment process (who does it, how often)
• Emergency action procedures specific to your facility
• Incident reporting and investigation procedures
• PPE selection and training records
• Any chemical-specific programs required by 1910.1200
• Equipment-specific programs like LOTO where they apply
• A training schedule and its documentation

The usual failure is writing the program and filing it away forever. Inspectors need to find these documents. Your workers need to find them more. And they have to match what actually happens on your floor. A LOTO procedure describing a machine you sold two years ago is worse than useless, because someone might follow it.

If you need to build these fast without hiring a consultant, SafetyFolio's safety program generator produces a customized, OSHA-aligned written program in about 15 minutes from answers about your specific workplace. It won't replace legal review for complicated situations. For a 20-person shop it covers the core requirements.

Our osha overview explains how the agency structures its requirements if you want the full map first.

What training do workers legally need?

OSHA training is standard-specific, not general. There is no single 'OSHA certification' that satisfies every requirement. The OSHA 10 and OSHA 30 courses are orientation-level programs that show safety awareness; on their own they don't fulfill standard-required training. OSHA has said so plainly in letters of interpretation. ^[5]

These are the training requirements that surface most often in small business inspections:

Standard	Who Needs Training	Frequency
29 CFR 1910.1200 HazCom	Any worker exposed to hazardous chemicals	At hire, when new hazards introduced
29 CFR 1910.147 LOTO	Authorized and affected employees	At hire, when procedures change
29 CFR 1910.132 PPE	Any worker required to use PPE	At hire, when PPE changes
29 CFR 1910.178 Forklifts	Powered industrial truck operators	At hire, every 3 years, after incident
29 CFR 1910.1030 Bloodborne Pathogens	Workers with occupational exposure	Annually
29 CFR 1910.134 Respiratory Protection	Workers required to wear respirators	At hire, annually

Forklift training gets its own line because it requires evaluation by a qualified person and must be documented. Our forklift certification article covers what the evaluation has to include.

Training has to happen in a language and vocabulary workers understand. If part of your crew speaks Spanish or another first language, English-only training does not meet OSHA's requirements. That's not a gray area.

Our OSHA training guide goes deeper on how to structure and document programs that survive an inspection.

How do workplace inspections and walkthroughs reduce injuries?

Self-inspections are one of the highest-return safety activities a small business can run. You find problems before an OSHA inspector does, and before someone gets hurt. Preventing a single lost-time injury usually saves more than a full year of inspection effort costs.

The numbers behind that claim are real. OSHA estimates that for every $1 of direct injury cost, employers pay $3 to $10 in indirect costs: productivity loss, replacing and training workers, administrative time. The average workers' compensation lost-time claim cost $41,353 in 2020 to 2021, according to the National Safety Council. ^[6]

An inspection process that works has four parts. A checklist tied to your actual hazards, not a generic PDF off the internet. A named person accountable for completing it on a set schedule. A written, dated record of what was found. And a corrective-action system that tracks each finding to closure.

Monthly walkthroughs fit most small businesses. Higher-hazard operations like welding shops or chemical storage rooms need weekly checks of the specific risk areas.

When OSHA does arrive, inspectors follow a fixed sequence: opening conference, walkaround, closing conference. Knowing that order lets you participate instead of panic. Our incident report article covers what happens after an injury turns up during or after an inspection.

What PPE do workers actually need and how do you choose it?

PPE selection starts with a written hazard assessment, not a catalog. 29 CFR 1910.132(d) requires employers to assess the workplace for hazards that need PPE and to certify that assessment in writing with the date and the name of the person who performed it. ^[7]

The assessment answers three things: which body parts are at risk, from what hazard, at what severity. Eye and face protection (1910.133), hand protection (1910.138), foot protection (1910.136), and head protection (1910.135) each have their own standard with its own selection criteria.

The expensive mistake is buying generic PPE that doesn't match the real hazard. Chemical-resistant gloves rated for one substance can offer zero protection against another. Each chemical's Safety Data Sheet lists the recommended glove material. Buying the wrong gloves and filing paperwork that says you provided PPE does not meet the standard.

Training comes before workers use PPE. They need to know why it's necessary, when to use it, how to put it on and take it off, how to inspect and maintain it, and where it stops protecting them. Document all of that.

PPE is the last line of defense. If you're spending more on gloves and goggles than on guarding, ventilation, and better work practices, your priorities are upside down.

How does recordkeeping fit into a workplace safety program?

OSHA recordkeeping under 29 CFR 1904 does two jobs: it gives you data to spot trends in your own shop, and it lets OSHA track injury patterns nationally. If you have 11 or more employees and you're not in a partially exempt industry (certain retail, service, and finance sectors), you must keep OSHA 300, 300A, and 301 forms. ^[4]

The 300 Log records work-related injuries and illnesses across the year. The 301 form is the individual incident report for each case. The 300A summary totals the year, must be signed by a company executive, and hangs in the workplace from February 1 through April 30.

Electronic submission rules expanded in 2024. Establishments with 100 or more employees in designated high-hazard industries must now electronically submit their 300 and 301 data on top of the 300A. Establishments with 20 to 249 employees in designated high-hazard industries submit 300A data annually. ^[8]

Recordkeeping errors draw citations as fast as physical hazards do. The common ones: failing to record a case that should be recorded, recording a case that shouldn't be (which also poisons your own data), and posting the 300A late.

Good records are also how you find out whether your safety solutions work. Roll out a slip-prevention program, watch your recorded slip-and-fall count the next year. If it drops, that's real evidence. If it doesn't, something in the program is broken and you now know it.

What does a good safety culture look like and why does it matter?

A good safety culture is one where management and workers share a commitment to safety and where people report hazards without fear of getting punished for it. That's OSHA's own framing. It's the layer that decides whether your written programs and training actually change what people do. ^[9]

The research linking safety culture to injury rates is fairly consistent, even where effect sizes vary between studies. Workplaces where workers say they can raise safety concerns without punishment tend to have lower injury rates. The mechanism isn't a mystery. If people can report near-misses without getting in trouble, management hears about hazards before those hazards hurt someone.

Building this in a small business takes no consultants and no culture workshop. It takes a few behaviors from the top: take injury reports seriously instead of shrugging them off, fix reported hazards fast and where people can see it, never punish the worker who reported a problem, and show up for safety activities instead of delegating all of them.

Anti-retaliation protection is also law. Section 11(c) of the OSH Act bars employers from discriminating against workers who exercise their safety rights. Blanket post-incident drug testing that could scare people out of reporting injuries may violate this under OSHA's 2016 anti-retaliation rule. ^[10]

What does a workplace safety solution cost, and what does it save?

Cost swings wildly with your starting point and your hazards. Here's the honest range.

A written safety program with all required components: $0 if you build it yourself from OSHA's templates and guidance, roughly $500 to $2,000 with a software tool, and $3,000 to $10,000 or more if you hire a consultant to draft it. Complex operations can justify the high end. A straightforward retail or office operation cannot.

OSHA-required training: from free (OSHA's own publications and materials) to a few hundred dollars per worker for formal courses like OSHA 30 training. Forklift operator training usually runs $150 to $300 per person.

PPE: all over the map. A basic kit of hard hat, safety glasses, and work gloves runs $25 to $60 per worker. Respirators, chemical suits, and fall arrest systems cost far more and depend on the specific hazard.

The savings side is sharper. As of 2024, an OSHA serious citation can reach $16,550 per violation, and willful or repeated violations can hit $165,514 per violation. ^[11] One prevented lost-time injury saves tens of thousands in workers' comp, lost output, and administrative time.

The National Safety Council put the total cost of all work-related injuries in 2022 at $167 billion, counting wage and productivity losses, medical expenses, and administrative costs. That's roughly $1,040 per U.S. worker. ^[6] Even modest prevention pays back fast.

How do small businesses with limited resources prioritize safety improvements?

Start with what can kill someone. Falls from height, electrical hazards, hazardous energy (LOTO situations), confined spaces, and struck-by hazards from vehicles or forklifts cause the most fatalities. If any of those touch your operation, they come first no matter the budget.

Then attack your highest-frequency injury types using your own 300 log data. If overexertion from lifting drives half your recordable cases, a real lifting program with mechanical assists returns more than anything else on the shelf.

OSHA's free consultation program, which is completely separate from enforcement, sends trained safety consultants to small businesses at no cost and no penalty risk. Businesses with 250 or fewer employees at a site, or 500 or fewer company-wide, qualify. The consultant identifies hazards and suggests fixes, and the findings never reach OSHA enforcement. ^[12] Almost nobody uses this, which is a shame.

Other free OSHA resources: the Small Business Safety and Health Handbook, industry-specific compliance assistance guides, and the OSHA Training Institute Education Centers across the country. Not glamorous. Accurate and free.

For a first formal written program, SafetyFolio's safety program generator is built for exactly this spot. It produces a customized, OSHA-aligned set of written programs for your industry and hazards so you don't start from a blank page.

What are the most common OSHA violations and how do you fix them?

Fall protection, hazard communication, and ladders top OSHA's most-cited list nearly every year. The FY2023 top 10, in order, was fall protection in construction (1926.501), hazard communication (1910.1200), ladders in construction (1926.1053), scaffolding (1926.451), powered industrial trucks (1910.178), lockout/tagout (1910.147), respiratory protection (1910.134), fall protection training (1926.503), personal protective equipment for eye and face (1910.133), and machine guarding (1910.212). ^[13]

For general industry (non-construction) employers, here are the fixes worth doing first:

HazCom: Audit your SDS library. Every chemical on site needs a current SDS. Labels must follow the GHS format. Training records must exist for every exposed worker. Our hcl safety data sheet article shows what a properly formatted SDS looks like.

LOTO: Write machine-specific procedures for every piece of equipment under 1910.147. A generic 'de-energize before servicing' note doesn't meet the standard. Each procedure lists the specific energy sources and steps for that machine.

Forklifts: Document operator evaluations. Log pre-shift inspections. Run refresher training after any incident or observed unsafe operation.

Machine guarding: Point-of-operation guarding on presses, grinders, and saws is non-negotiable. 'We've never had an accident' is not a defense, and inspectors have heard it.

The thread through all of these is documentation. Often the physical conditions are fine, but the written program, training records, or inspection logs don't exist. An inspector can't see a safety talk you gave six months ago. They can see a signed training record.

How do you know if your safety solutions are actually working?

You measure it with leading indicators, because the thing you actually want to count (injuries that never happened) is invisible. The most common metric, total recordable incident rate (TRIR), has a real weakness for small shops. A 10-worker business with zero injuries in a year posts a TRIR of 0.0, which looks flawless and tells you nothing about whether your hazards are controlled.

TRIR is (number of recordable injuries x 200,000) / total hours worked. The 200,000 stands for 100 workers at 40 hours a week for 50 weeks, so the rate reads per 100 full-time equivalent workers. BLS publishes industry-average TRIRs every year, so you can benchmark against your own sector instead of a vacuum. ^[2]

Leading indicators serve small businesses better. They measure activity, not aftermath: percent of planned inspections done on time, percent of reported hazards fixed within 30 days, percent of workers with current required training, and near-misses reported per month. A rise in near-miss reporting usually means a healthier culture, not a worse workplace, because it means people feel safe enough to speak up.

Set a baseline in year one. Track it. Adjust the program based on what the numbers show. That's the whole feedback loop, and almost no small business runs it on purpose.

Frequently asked questions

What is the most effective workplace safety solution for a small business with no safety staff?

Start with a written hazard assessment and a basic written safety program covering the standards that apply to your industry. OSHA's free consultation program sends trained consultants to small businesses at no charge and without enforcement risk. Fix the hazards that could cause a fatality first, then work through your highest-frequency injury types. Consistency matters more than sophistication.

Do I need a safety manager or consultant to be OSHA compliant?

No. OSHA compliance doesn't require a safety professional on staff. The law requires safe conditions plus specific written programs, training, and records. Many small employers handle this internally using OSHA's published standards, free compliance guides, and the free consultation service. Consultants add value in complex or high-hazard industries, but they're not legally required for most small businesses.

What does OSHA require for a written safety program?

OSHA requires written programs for specific standards including hazard communication (1910.1200), lockout/tagout (1910.147), respiratory protection (1910.134), bloodborne pathogens (1910.1030), and fall protection (1926.502), among others. There is no single 'written safety program' standard, but employers must document procedures, training, and inspections for each applicable standard. The documents have to reflect actual workplace conditions.

How much does OSHA fine small businesses for safety violations?

As of 2024, OSHA serious citation penalties can reach $16,550 per violation. Willful or repeated violations can be penalized up to $165,514 per violation. OSHA can adjust penalties downward for small employer size, good faith, and history. But multiple citations from one inspection add up quickly, and penalty amounts are adjusted annually for inflation.

What safety training is legally required for all employees?

Required training depends on which OSHA standards apply to your workplace, not one universal list. HazCom training (1910.1200) is required if workers handle hazardous chemicals. LOTO training (1910.147) is required if workers service equipment. PPE training (1910.132) is required before workers use PPE. Forklift operators need evaluation-based training every three years. Each standard sets its own training content and frequency.

What is the hierarchy of controls and how does it apply to small businesses?

The hierarchy of controls ranks hazard-reduction methods from most to least effective: elimination, substitution, engineering controls, administrative controls, and PPE. OSHA endorses this framework. Small businesses often default to PPE because it's visible and cheap, but engineering controls like machine guards, ventilation, or safer chemical substitutes give far more reliable protection and are generally preferred in an OSHA inspection.

How often should I inspect my workplace for safety hazards?

OSHA doesn't set a universal frequency for self-inspections, but most safety professionals recommend monthly walkthroughs for general industry and weekly checks in higher-hazard areas. Some standards require specific intervals, such as pre-shift forklift inspections (1910.178) and monthly fire extinguisher checks (1910.157). Document every inspection with a dated, signed record and track corrective actions to closure.

What is OSHA's free consultation program and who qualifies?

OSHA's On-Site Consultation Program sends trained safety consultants to small businesses at no cost. Findings are confidential and never shared with OSHA enforcement. To qualify, your establishment must have 250 or fewer employees on site and 500 or fewer company-wide. Participants who implement all recommendations and meet program requirements can earn the Safety and Health Achievement Recognition Program (SHARP) designation, which exempts them from programmed OSHA inspections.

What industries have the highest workplace injury rates?

According to 2022 BLS data, industries with the highest total recordable injury rates include animal production and aquaculture, warehousing and storage, nursing care facilities, courier and express delivery services, and air transportation. For fatalities, construction, agriculture, transportation, and roofing consistently rank highest. Your industry's specific BLS incident rate is the right benchmark to compare against your own TRIR.

Does OSHA cover businesses with fewer than 10 employees?

Yes. OSHA's safety standards apply to almost all private sector employers regardless of size. The main break for very small employers is recordkeeping: businesses with 10 or fewer employees in any calendar year are exempt from routine OSHA 300 log requirements. They must still report severe injuries (hospitalizations, amputations, eye losses) to OSHA within 24 hours, and fatalities within 8 hours.

What's the difference between OSHA 10 and OSHA 30 for workplace safety compliance?

OSHA 10 is a 10-hour orientation course covering basic safety awareness. OSHA 30 is a 30-hour supervisory-level course with more depth on specific standards. Neither satisfies OSHA's standard-specific training requirements on its own. OSHA has stated in letters of interpretation that these courses supplement but do not replace required training such as HazCom, LOTO, or forklift operator training. See our full breakdown in the OSHA 30 article.

How do I build a safety culture in a small business where it doesn't exist?

Fix reported hazards promptly and visibly, so workers see that reporting leads to action. Don't punish workers for reporting injuries or near-misses, and review your post-incident drug testing policy against OSHA's 2016 anti-retaliation rule. Take part in inspections yourself instead of delegating all of them. Near-miss reporting is the leading indicator that your culture is working; a rise in near-miss reports is a good sign, not a bad one.

What records do I need to keep for OSHA compliance?

At minimum: OSHA 300 injury log, 300A annual summary, and 301 incident reports if you have 11 or more employees in a non-exempt industry. Written certifications of PPE hazard assessments (1910.132). Training records for every standard-required training event, showing date, content, and attendee signatures. Machine-specific LOTO procedures. An SDS library for all hazardous chemicals. Some records must be kept up to 30 years (exposure records under 1910.1020).

Can I use online safety training to satisfy OSHA training requirements?

Sometimes, not always. OSHA allows online or computer-based training when it covers the required content and gives workers a chance to ask questions, but some standards require hands-on or demonstrated competency. Forklift operator training under 1910.178 requires a hands-on evaluation in the truck types the operator will use. Respiratory protection under 1910.134 requires a fit test that can't happen online. Check each standard's specific language.

Sources

1. OSHA, Recommended Practices for Safety and Health Programs (hierarchy of controls): OSHA endorses the hierarchy of controls: elimination, substitution, engineering controls, administrative controls, and PPE as the preferred framework for hazard reduction
2. Bureau of Labor Statistics, Injuries, Illnesses, and Fatalities program (2022 fatal and nonfatal data): In 2022, there were 5,486 fatal work injuries; overexertion caused 33.8% of nonfatal cases, slips/trips/falls 26.7%, contact with objects 23.9%; TRIR industry benchmarks published annually
3. OSHA, Hazard Communication Standard 29 CFR 1910.1200: 29 CFR 1910.1200 requires Safety Data Sheets, container labeling, and worker training for employers whose workers are exposed to hazardous chemicals; it is one of OSHA's most-cited standards annually
4. OSHA, Recordkeeping Rule 29 CFR 1904: Employers with 11 or more employees in most industries must keep OSHA 300, 300A, and 301 forms; the 300A must be posted February 1 through April 30 annually
5. OSHA, Standard Interpretations (letters on OSHA 10 and 30-hour outreach courses): OSHA has stated in letters of interpretation that OSHA 10 and 30-hour courses supplement but do not replace standard-specific required training
6. National Safety Council, Injury Facts: The total cost of work-related injuries in 2022 was $167 billion; the average workers' compensation lost-time claim cost $41,353 in 2020-2021; indirect costs run $3-$10 per $1 of direct cost
7. OSHA, Personal Protective Equipment Standard 29 CFR 1910.132: 29 CFR 1910.132(d) requires a written hazard assessment certified in writing with the date and name of the person who performed it before PPE selection and use
8. OSHA, Injury and Illness Recordkeeping and Reporting Requirements (electronic submission): Since 2024, establishments with 100+ employees in designated high-hazard industries must electronically submit 300 and 301 data; those with 20-249 employees in designated high-hazard industries submit 300A data annually
9. OSHA, Safety and Health Programs (safety culture and worker participation): OSHA describes a positive safety culture as shared management and worker commitment to safety where workers report hazards without fear of retaliation
10. OSHA, Penalties: As of 2024, OSHA serious citation penalties can reach $16,550 per violation; willful or repeated violations up to $165,514 per violation, adjusted annually for inflation
11. OSHA, On-Site Consultation Program: OSHA's free consultation program sends trained safety consultants to small businesses with 250 or fewer site employees and 500 or fewer company-wide; findings are not shared with enforcement
12. OSHA, Top 10 Most Cited Standards FY2023: OSHA FY2023 top citations in order: fall protection (1926.501), hazard communication (1910.1200), ladders (1926.1053), scaffolding, powered industrial trucks (1910.178), LOTO (1910.147), respiratory protection, fall protection training, PPE eye/face (1910.133), machine guarding (1910.212)