How to write a site-specific safety plan for a construction project

Last updated 2026-07-11

What is a site-specific safety plan and when do you need one?

A site-specific safety plan (sometimes called a site safety plan, project safety plan, or SSSP) is a written safety program built for one job site. It is not your company's generic safety manual. It names the actual address, the actual superintendent, the real hazards on that site, and the specific procedures your crew will follow there.

Most general contractors need one for every project. Federal agencies, general contractors running design-build work, and most municipal public works owners want you to submit one before work begins. Even when no client asks, OSHA expects site-specific controls documented whenever serious hazards are present.

The legal hook is 29 CFR 1926.16, which says the prime contractor "shall assume the entire responsibility" for meeting Part 1926 on the contract, and that a prime who subcontracts work "shall assume responsibility for compliance" by its subs ^[1]. The rule never says "write a plan." But the moment you have multiple subcontractors, inspectors look for evidence that you coordinated hazard control. A written site-specific plan is the clearest evidence you can offer.

For single-employer sites, no OSHA rule says "write a site-specific safety plan" by that name. Dozens of standards still require written programs: fall protection (29 CFR 1926.502), hazard communication (29 CFR 1926.59), excavation (29 CFR 1926.651), cranes (29 CFR 1926.1430), and more ^[2][12]. Rolling those written requirements into one site-specific document is the most practical way to comply.

Here is the rule I use. If you are a prime contractor on any project with more than one employer present, write the plan. If you are a sub on a project where the GC never handed one down, write your own scope-specific version anyway. OSHA can cite subcontractors on their own.

What OSHA standards apply to a construction site safety plan?

OSHA's construction rules live in 29 CFR Part 1926. General industry standards in 29 CFR Part 1910 also apply on a construction site when Part 1926 does not cover a specific hazard ^[3]. That is how respiratory protection under 1910.134 reaches into construction work.

These are the standards that most often produce written documents that end up in, or referenced by, a site-specific plan:

Standard	Topic	Written requirement
29 CFR 1926.16	Multi-employer responsibility	No written plan required by name, but coordination responsibility is explicit
29 CFR 1926.502(k)	Fall protection	Written fall protection plan required when alternative measures are used
29 CFR 1926.59	Hazard communication	Written HazCom program required
29 CFR 1926.651/652	Excavation and trenching	Competent person designation and soil classification in writing
29 CFR 1926.1430	Crane operator training	Written training and qualification records
29 CFR 1926.103	Respiratory protection	Written program required per 29 CFR 1910.134
29 CFR 1926.64	Process safety (if applicable)	Full written PSM program
29 CFR 1926.35	Emergency action plan	Written plan required for 10+ employees

The emergency action plan rule in 29 CFR 1926.35 surprises a lot of small contractors. Ten or more employees on site at peak, and you need a written plan. Fewer than 10, and you can communicate the plan orally, but it still has to be communicated ^[4].

Federal construction adds a layer. The U.S. Army Corps of Engineers manual EM 385-1-1 and the Unified Facilities Guide Specifications (UFGS) Section 01 35 26 both require an Accident Prevention Plan (APP) with sections those documents define. Those requirements go past baseline OSHA. Bid federal work, and you read EM 385-1-1 before you submit your APP.

What are the required elements of a site-specific safety plan?

There is no single OSHA form. The required elements come from reading the applicable standards together. Below is what a complete plan needs. Treat it as a checklist, not an outline. Organize the document any way that makes sense for your project.

1. Project information. Site address, project name, owner, general contractor, contract number, anticipated duration. Simple. Inspectors use it to confirm the document is actually site-specific and not a recycled form.

2. Key personnel and responsibilities. Name the superintendent, the competent persons for each hazard category (fall protection, excavation, scaffold, and so on), the first aid responder, and the emergency coordinator. List their phone numbers. If a competent person works for a subcontractor, say so.

3. Scope of work summary. Two or three paragraphs on what is being built, the phases, and which trades are on site during each phase. This shapes every hazard section that follows.

4. Hazard identification and risk assessment. Walk the job in your head, or physically during pre-construction, and list every hazard by phase: excavation, concrete pours, steel erection, roofing, MEP rough-in, finishes. For each one, document the control using the hierarchy of controls: elimination, substitution, engineering controls, administrative controls, PPE last.

5. Site rules. Speed limits, PPE minimums (hard hat, high-vis, and steel toes are table stakes on almost every project), no-phone zones, drug and alcohol policy, visitor check-in. Post them. Enforce them.

6. Subcontractor coordination. Spell out how subs get the plan, how their own programs get reviewed, and who has authority to stop work. This is the heart of multi-employer compliance under 29 CFR 1926.16 ^[1].

7. Training requirements. List required training by trade. OSHA 30 for supervisors is a common owner requirement, OSHA 10 for craft workers, task-specific training for equipment operators. Document how training gets verified and recorded.

8. Inspections and recordkeeping. Who inspects daily? What form? Where do records live? OSHA sets no fixed inspection frequency for general site conditions, but regular documented inspections are strong evidence of a working program.

9. Incident reporting and investigation. Define what triggers a report (near miss, first aid, recordable injury, fatality), who investigates, and how findings get fixed. Spell out the incident report procedure here. Fatalities go to OSHA within 8 hours, inpatient hospitalizations within 24 hours, per 29 CFR 1904.39 ^[5].

10. Emergency action plan. Evacuation routes, rally points, who calls 911, nearest hospital address, and procedures for fire, collapse, chemical release, and severe weather. Required in writing at 10 or more employees per 29 CFR 1926.35 ^[4].

11. First aid and medical services. Per 29 CFR 1926.50, a person trained in first aid must be available when a medical facility is not near enough to the site ^[6]. Name that person. Say where the first aid kit is.

12. Hazard communication program. List the chemicals on site, confirm Safety Data Sheets (SDS) are accessible, and document how workers get informed. Our guide to hazard communication covers the full written program.

13. Site security and access control. Fencing, signage, visitor management. This matters most on urban sites, but every project earns a paragraph.

How do you identify hazards before writing the plan?

You cannot write an honest hazard section from your desk. The process has two parts: a pre-construction review of the project documents, and a physical site walk. Skip either one and the plan is guesswork.

Start with the drawings and specs. Hunt for confined spaces (vaults, crawlspaces, deep manholes), overhead work, work near energized utilities, heavy equipment travel paths, fall exposures above 6 feet (the construction trigger under 29 CFR 1926.502), and chemical storage ^[2]. Write down every hazard the documents reveal before you set foot on site.

Then walk the site with the person who will actually run the work. Not a safety officer in an office, your superintendent or lead foreman. Ask the real questions. Where does equipment stage? Where are the overhead lines? Is the soil already disturbed? Do existing structures carry lead paint or asbestos? That last one matters, because OSHA requires written programs for lead in construction (29 CFR 1926.62) and asbestos (29 CFR 1926.1101) whenever those exposures are anticipated.

Falls are the number to fear. The Bureau of Labor Statistics reports that falls, slips, and trips account for roughly 37% of construction fatalities ^[7]. That share has barely moved in a decade. Identify your fall exposures first, assign a competent person, and document the control before work starts. That single step addresses the hazard most likely to kill someone on your project.

After the walk, sort hazards by phase. A foundation pour carries different exposures than steel erection two months later. Phase-based lists beat a single catch-all list, and they help new workers see what is dangerous right now instead of in the abstract.

Who is responsible for writing and enforcing the plan?

On a multi-employer site, the prime contractor writes the site-specific plan and carries overall compliance under 29 CFR 1926.16 ^[1]. That does not mean the prime does everything. It means the prime sets the site rules, distributes the plan, verifies that subs have their own programs, and holds authority to stop work when a hazard goes uncorrected.

Subcontractors own their employees and their scope. A roofing sub needs a fall protection plan built for the roof work. An electrical sub needs a lockout/tagout program (see our lockout tagout guide) if it is de-energizing systems. Those sub-specific plans get written and submitted to the GC before that trade starts.

OSHA can cite both the creating employer and the exposing employer on a multi-employer site. This is the multi-employer citation policy, and it is real. An electrical sub whose workers are exposed to fall hazards created by the framing sub can be cited even though the framing sub is the one who never installed guardrails. The plan should name who created each hazard and who fixes it.

Day-to-day enforcement is the superintendent's job. A plan is only as good as the person running the morning toolbox talk and refusing to let anyone skip PPE. Designate a competent person for each major hazard by name. If that person leaves the project, update the plan the same week.

How do you format and write the actual document?

Keep it readable. A site-specific safety plan nobody reads is not a safety plan. It is a liability document that will look bad in a courtroom.

Use plain language. If your plan says "personnel shall adhere to all applicable personal protective equipment requirements," your workers tune out. "Everyone on this site wears a hard hat, safety glasses, high-vis vest, and steel-toed boots. No exceptions." That version gets read.

A format that works:

• Cover page: Project name, address, GC name, superintendent name, date written, revision number.
• Section 1: Project overview and scope
• Section 2: Key personnel and competent persons
• Section 3: Site rules
• Section 4: Hazard analysis by phase (the longest section)
• Section 5: Training requirements
• Section 6: Subcontractor requirements
• Section 7: Inspection and recordkeeping
• Section 8: Incident reporting and investigation
• Section 9: Emergency action plan
• Section 10: First aid and medical
• Appendices: Chemical SDS list, competent person certifications, subcontractor safety plan submissions

Length is a judgment call. A small residential remodel with one trade might run 8 pages. A 30-story commercial building with 20 subcontractors might run 80. The document has to cover every real hazard on the actual project. Anything under 5 pages probably missed something. Anything past 40 pages on a typical commercial project is probably padding.

Date every revision and keep the old versions. After an incident, OSHA wants to know what the plan said that day, not what you rewrote it to say the morning after.

Want a starting point without building from scratch? SafetyFolio's safety program generator can produce a structured, OSHA-aligned draft in about 15 minutes by asking project-specific questions. You still add the site-specific hazard details, but it gets the bones right.

How do you handle subcontractors in the plan?

This is where most GC plans fall apart. They say "all subcontractors shall comply with applicable OSHA standards" and stop there. That language does almost nothing.

A plan that actually manages multi-employer hazards does four specific things.

First, it requires each subcontractor to submit its own written safety program before mobilizing. You review it. If it is missing a written HazCom program or a fall protection plan, you tell them in writing to fix it before they start.

Second, it names a GC competent person with authority to stop any subcontractor's work. Name the person, not the title.

Third, it describes the coordination mechanism: daily superintendent meetings, weekly safety walks, pre-task planning for high-hazard work. Pre-task planning, where a foreman fills out a short hazard review before starting a task, is one of the cheapest and most effective moves in construction safety. It costs almost nothing and builds a paper trail.

Fourth, it addresses overlapping work. Two trades in the same area at the same time: who controls the space? Who keeps the roofers above from dropping debris on the MEP crew below? The plan answers this before the crews meet, not after.

OSHA's multi-employer worksite guidance, set out in compliance directive CPL 02-00-124, defines four employer categories: creating, exposing, correcting, and controlling ^[8]. Your plan should show you understand those categories even if it never uses the words.

What training do workers need, and how do you document it?

Training rules in construction are scattered across many standards. Your site-specific plan pulls them into one place so nobody has to hunt.

At minimum, document that workers received:

• Site-specific orientation (your plan, site rules, emergency procedures) before starting work
• Toolbox talks tied to current phase hazards, held at least weekly
• Task-specific training: scaffold assembly (29 CFR 1926.454), fall protection (29 CFR 1926.503), excavation (29 CFR 1926.651), powered industrial trucks (29 CFR 1926.602), cranes (29 CFR 1926.1430)
• OSHA training certifications required by the project owner

Many owners now require OSHA 30 cards for supervisors and OSHA 10 for craft workers. That is an owner requirement, not an OSHA rule, but it shows up in specs constantly. If your project requires it, list it and track compliance by name.

For equipment operators, note what qualifications are required. Forklift operator evaluation is required under 29 CFR 1926.602 and must be site-specific, so an operator trained elsewhere still gets evaluated on your equipment and your conditions ^[9]. Our forklift certification guide walks through that.

Keep the records. A sign-in sheet with date, topic, trainer name, and employee signatures is the baseline. Fall protection training in particular must be documented under 29 CFR 1926.503 ^[13]. Digital records are fine. Store them somewhere you can pull up fast if OSHA shows up. The plan states where training records live and who maintains them.

What should your emergency action plan section cover?

The emergency action plan (EAP) section has to be concrete. "In case of emergency, call 911" is not an EAP.

Per 29 CFR 1926.35, a written EAP for construction sites with 10 or more employees must include procedures for reporting emergencies, evacuation routes and rally points, a way to account for all employees after evacuation, rescue and medical duties for designated employees, and a way for workers to get more information about the plan ^[4].

For construction, add these.

Nearest hospital. Write the name, address, and phone number. Do not assume workers know it.

Site address for 911. Rural sites and sites with access road names that do not match GPS confuse dispatchers. If that is you, include instructions for giving directions.

Utility shutoffs. Where is the main electrical disconnect? The gas shutoff? The water main? Who is authorized to operate them?

Crane or equipment collapse. If a crane is on site, describe what workers do during a structural failure, beyond a generic evacuation.

Severe weather. At what wind speed does work at height stop? Who watches the weather? Where do workers shelter? These are judgment calls. Pre-decide them and write them down instead of improvising during a thunderstorm.

Communication. Who contacts the owner? Who contacts OSHA? (The 8-hour fatality reporting rule under 29 CFR 1904.39 ^[5] does not wait.) Who handles media if a serious incident draws attention?

Post the EAP in the job trailer and cover it during orientation. Most workers never read the full plan cover to cover. They will sit through a 10-minute orientation if you make it worth their time.

How do you keep the plan current as the project changes?

A site-specific safety plan written at kickoff is wrong by week three. Scope shifts, new subcontractors arrive, unexpected site conditions surface. The plan has to keep up or it becomes fiction.

Build review triggers into the plan itself. The common ones:

• A new subcontractor mobilizes
• A scope change adds a hazard category (the job picks up a confined space, or a design change adds rooftop equipment)
• A near miss or recordable incident happens
• One phase ends and a new phase begins
• A named competent person leaves the project

Assign one person to own the updates. On a small project, that is the superintendent. On a larger one, a safety manager or coordinator. Give that person authority to update the document without a long approval chain. Fast updates beat perfect formatting.

Version control is simple. Put a revision log table at the front: revision number, date, short description of the change, name of who made it. Save each version as its own file. Never overwrite the current version with a revision. Save the old one first.

Subcontractors need the updates too. Add a new excavation area in week six, update the plan, and the subs working near that trench have to hear about it. A weekly superintendent meeting where plan updates get reviewed handles this well. Document attendance.

What are the most common mistakes in site-specific safety plans?

Site-specific plans fail in a handful of predictable ways. Every one of them is avoidable.

The copy-paste plan. Someone swaps the address and project name on last year's plan and calls it done. The hazard list describes a different kind of project, the competent persons are wrong, and the emergency section names a hospital across the state. Inspectors and sharp owners spot this in about 30 seconds.

No competent person named. The standard requires competent persons for excavations, scaffolds, fall protection, and more. The plan says "a competent person will be designated" and names nobody. OSHA asks who the competent person is, and the room goes quiet.

Missing subcontractor requirements. The plan says subs must comply with OSHA but never describes how compliance gets verified. A sub does something unsafe and the GC has no documented process to step in.

Training not tracked. The plan says workers will be trained. No sign-in sheets, no records, nothing. OSHA asks for proof, and there is none.

Emergency procedures that are generic. "Evacuate to the designated assembly area" without saying where that area is, by name or coordinates, is useless when a wall comes down.

Never updated. The plan from pre-construction is identical at closeout a year later, after five scope changes and eight new subs.

The fix for all of them is the same. Treat the plan as a living document that tracks actual site conditions, not a form you submit to the owner and forget.

Does a small contractor really need a formal written plan?

Yes, with some nuance.

If you are a sole proprietor doing a small remodel by yourself, the multi-employer coordination sections do not apply to you. You still need written programs for any standard that requires them: HazCom if you handle hazardous chemicals, respiratory protection if the work calls for a respirator, fall protection if you are working above 6 feet ^[2].

With even two employees, you need to show OSHA a system for managing safety. There is no small business exemption for most construction hazards. OSHA does run a free On-site Consultation Program that helps small employers find and fix hazards without citations, and it is separate from enforcement ^[10]. That program does not change the underlying standards.

The cost-benefit is not close. According to OSHA's penalty schedule, the maximum for a serious violation is $16,550 per violation in 2024, and a willful or repeat violation reaches $165,514 per violation ^[11]. Writing a plan takes hours. An OSHA citation, or worse, a worker fatality, does not compare.

Small contractors also run into owner and GC requirements for written safety plans before they can set foot on a project. No plan, no bid. For a lot of small operators, that market pressure motivates more than the citation risk does.

SafetyFolio can generate a baseline written program quickly, but any tool only gives you structure. The site-specific hazard details, the named competent persons, the real emergency procedures: those come from you and your knowledge of the actual project.

Frequently asked questions

Is a site-specific safety plan legally required by OSHA?

OSHA does not require a document called a 'site-specific safety plan' by that exact name, but dozens of construction standards require written programs: fall protection plans, HazCom programs, emergency action plans, and more. On multi-employer sites, 29 CFR 1926.16 puts overall compliance on the prime contractor, which makes a unified written plan the practical way to show compliance. Federal owners like the Army Corps of Engineers add explicit written plan requirements through EM 385-1-1.

How long should a site-specific safety plan be?

There is no required length. A small residential project with one or two trades might run 8 to 12 pages. A large commercial project with 20 subcontractors and complex hazards might run 40 pages or more. The right length covers every real hazard on the actual project. Plans under 5 pages almost always have gaps. Plans much past 50 pages on a typical project usually carry filler that workers never read.

What is the difference between a site-specific safety plan and a company safety program?

A company safety program describes your organization's general policies across all the work you do. A site-specific safety plan is written for one project at one address. It names the actual personnel, lists the hazards present during each phase of work, and includes emergency procedures for that location. The company program is the foundation; the site plan applies it to a specific job.

Who should sign or approve the site-specific safety plan?

At minimum, the project superintendent or project manager signs it, confirming they read it and accept responsibility for putting it into practice. On larger projects, a safety manager, the owner's representative, and the prime contractor's leadership might also sign. Some owner contracts require owner approval before work begins. Subcontractors should sign an acknowledgment that they received and reviewed the plan.

Do subcontractors need their own safety plan or can they just follow the GC's plan?

Both. Subcontractors follow the GC's site-specific plan and site rules. They also need their own written programs for standards that require them: their own HazCom program, fall protection plan, and lockout/tagout procedure for their scope. OSHA can cite subcontractors independently for their own violations even when a GC plan exists. The GC's plan should require subs to submit their safety programs before mobilizing.

What is a competent person and how many do you need on site?

OSHA defines a competent person as someone who can identify existing and predictable hazards and has authority to correct them. Construction standards require a competent person for specific hazards: excavations, scaffolds, fall protection, cranes, demolition, and more. One person can cover multiple hazards if they are actually qualified for each. You need at least one competent person present whenever the work requiring that designation is active.

How often should you update the site-specific safety plan?

Update whenever a material change occurs: a new subcontractor mobilizes, the scope adds a new hazard, a competent person leaves the project, an incident reveals a gap, or a new phase of work begins. At minimum, review it at each major phase transition. Keep a revision log with dates and descriptions. Archive old versions rather than deleting them, because OSHA may ask what the plan said on the day of a specific incident.

What happens if OSHA finds you do not have a site-specific safety plan?

OSHA cannot cite you solely for lacking a document by that name, but it can cite you for every underlying standard that requires a written program: no written fall protection plan, no written HazCom program, no written emergency action plan, and so on. Each is a separate citation. The maximum serious violation penalty is $16,550 in 2024. Several missing written programs can total tens of thousands of dollars from a single inspection.

Does a site-specific safety plan cover confined space entry in construction?

Yes, it should. Construction confined spaces are governed by 29 CFR 1926.1200 through 1926.1213. If your project has permit-required confined spaces, the plan must identify them, document entry procedures, list required equipment, and designate a qualified person to supervise entries. The confined space section is often a separate appendix or sub-plan. A rescue procedure and coordination with local emergency services is also required when workers may need rescue from a permit space.

Can I use a template or software to write my site-specific safety plan?

Templates and software are fine starting points, but they need real customization. A template gives you the right sections and reminds you what to cover. It cannot fill in the actual hazards on your site, name your competent persons, or write emergency procedures for your project's real location. OSHA inspectors recognize generic plans immediately. Whatever tool you use, the site-specific details, personnel, hazard analysis, and local emergency information have to reflect your actual project.

What training records should be kept with or alongside the safety plan?

Keep sign-in sheets for every toolbox talk (date, topic, trainer, employee signatures), site orientation records for every worker, task-specific training documentation (scaffold, fall protection, excavation, equipment operation), and any OSHA 10 or OSHA 30 card copies the owner requires. Store these with the plan or reference where they live. OSHA may request them during an inspection, and they are essential in any incident investigation or litigation.

Do federal construction projects have different safety plan requirements?

Yes. Federal projects typically require an Accident Prevention Plan (APP) that meets the U.S. Army Corps of Engineers EM 385-1-1 standard or an equivalent agency requirement. The APP is more detailed than a typical commercial site-specific plan and must be approved by the contracting officer before work begins. Activity Hazard Analyses (AHAs) are also required for each phase of work. These go past baseline OSHA requirements, so read the project specs carefully before bidding.

How do you communicate the safety plan to workers who speak limited English?

OSHA requires training to be understandable to workers. If workers speak limited English, training must happen in their language or through a qualified interpreter. The plan itself does not have to be translated, but the key content, site rules, emergency procedures, and hazard controls have to be communicated in a way workers actually understand. Many contractors post bilingual site rules, run bilingual orientations, and use bilingual toolbox talk materials. This is part of the training requirement, not optional.

Sources

1. OSHA, 29 CFR 1926.16 Rules of Construction: The prime contractor assumes entire responsibility for compliance with Part 1926 and for compliance by its subcontractors on multi-employer construction sites
2. OSHA, 29 CFR 1926.502 Fall Protection Systems Criteria: Written fall protection plan required when alternative fall protection measures are used; 6-foot trigger for construction fall protection
3. OSHA, Construction Industry Standards (29 CFR Part 1926) overview: General industry standards 29 CFR Part 1910 may apply on construction sites when Part 1926 does not address a specific hazard
4. OSHA, 29 CFR 1926.35 Employee Emergency Action Plans: Written emergency action plan required for construction sites with 10 or more employees; fewer than 10 may communicate the plan orally
5. OSHA, 29 CFR 1904.39 Reporting Fatalities, Hospitalizations, Amputations, and Losses of an Eye: Employers must report work-related fatalities to OSHA within 8 hours and inpatient hospitalizations within 24 hours
6. OSHA, 29 CFR 1926.50 Medical Services and First Aid: A person trained in first aid must be available on construction sites when a medical facility is not in near proximity
7. Bureau of Labor Statistics, National Census of Fatal Occupational Injuries: Falls, slips, and trips account for approximately 37% of construction fatalities based on the BLS census of fatal occupational injuries
8. OSHA Directive CPL 02-00-124, Multi-Employer Citation Policy: OSHA's multi-employer citation policy identifies four employer categories: creating, exposing, correcting, and controlling employers
9. OSHA, 29 CFR 1926.602 Material Handling Equipment: Powered industrial truck operators in construction must be evaluated on the specific equipment and conditions at the current site
10. OSHA, On-Site Consultation Program: OSHA's free On-Site Consultation Program helps small employers identify and fix hazards without citation risk, separate from enforcement
11. OSHA, Penalties page: Maximum penalty for a serious OSHA violation is $16,550 per violation in 2024; willful or repeat violations reach $165,514 per violation, adjusted annually
12. OSHA, 29 CFR 1926.59 Hazard Communication: Written hazard communication program required for construction employers whose workers may be exposed to hazardous chemicals
13. OSHA, 29 CFR 1926.503 Fall Protection Training Requirements: Employers must train each employee who might be exposed to fall hazards, and the training must be documented