Planning workbook · Healthcare edition

One incident, seven departments. Who owns the handoff?

Map how one incident reaches every department that shares responsibility for patient and staff safety, before it happens for real. Seven worksheets and RACI handoff grids, built for how a hospital is actually organized.

NPG 2aNPG 11Effective January 1, 2026Seven department worksheetsRACI handoff grids

Free download

Get the healthcare edition.

Seven department worksheets and a workflow example you can fill in with your own teams.

One incident, every department.

Security is usually the department that first logs an incident, but in a hospital the response rarely stays there for long. A workplace violence event can become an Employee Health case within the hour. A behavioral flag on a patient’s chart can pull in nursing and IT before security finishes the write-up. A contractor incident can reach Compliance, Risk, and Facilities the same day.

Joint Commission’s National Performance Goals 2a and 11, effective January 1, 2026, raise the bar on that coordination directly. NPG 2a requires a documented, multidisciplinary workplace violence prevention program with trend analysis, corrective action, and governing-body reporting. NPG 11, now largely folded into the new Physical Environment standard, covers monitoring, reporting, and investigation of security incidents.

This workbook adapts the cross-functional incident planning model to a hospital’s real structure and the departments that actually show up when an incident happens.

An unnamed person or role marks a real gap to close, one your next survey may ask about directly.

From the RACI instructions inside the workbook

Inside the workbook

Seven worksheets, one communication plan.

01

Human resources

When the incident involves a person on staff, including a credentialed practitioner whose path is different.

02

Nursing and clinical leadership

When the people who report the incident need to see what happens next.

03

Information technology

When a physical incident touches badge access, EHR credentials, or clinical technology.

04

Compliance and accreditation

When an incident becomes something a surveyor or governing body will ask about.

05

Risk management, quality and patient safety

When incident data becomes the evidence for a staffing, budget, or corrective action decision.

06

Facilities and physical environment

When security and the new Physical Environment program share the same risk.

07

Employee and occupational health

When an incident becomes an injury, a record, and a regulatory clock.

Every worksheet carries the same four parts: why the department belongs in your workflow, what it needs to know in the first hour, the incident triggers that should route there, and a RACI grid naming who is responsible, accountable, consulted, and informed.

One hour

The window in which a single workplace violence event can become an Employee Health case, an HR matter, and a risk review at the same time.

Most hospitals can name the departments involved. Far fewer can name the person in each one who owns the handoff, or say how fast that notification is supposed to land.

That is the gap this workbook is built to surface, department by department, before an actual incident forces the conversation.

Workflow example

One incident, one workflow, seven departments notified.

The last pages of the workbook walk through a workplace violence report from the emergency department, routed to everyone who owns a piece of the response, with an audit record proving each notification landed.

Step 1

Report submitted at the point of care

Type, severity, location, injury detail, witnesses, and timestamp captured at source.

Step 2

A routing rule evaluates the report

Workplace violence, severity 3 or higher, emergency department: notify four teams, escalate at 15 minutes.

Step 3

Four departments act in parallel

Employee health, nursing leadership, HR, and risk each get what they need, at the detail their role allows.

Step 4

The audit trail closes the loop

Every notification, acknowledgement, and corrective action timestamped and exportable as evidence.

What you’ll have when you’re done

A first draft of your cross-functional incident communication plan.

  • Your own response-time thresholds for what each department needs to know in the first hour
  • The incident triggers that route to each department, in your facility’s own codes and terms
  • A completed RACI grid per department, with every blank Accountable column surfaced as a gap
  • The disagreements worth resolving now, like who follows up with an affected staff member
  • Documentation you can fold into your workplace violence program and annual worksite analysis

Most hospital security and safety leaders find at least one department where the grid has a real gap, or two teams who both assumed the other would follow up. It’s easier to find that gap on paper than to explain it to a surveyor.

Want to see it configured? Request a demo of incident routing in TrackTik

Keep going

Industry

Healthcare security operations

How health systems run security across units, shifts and facilities.

Product

Incident reporting

Consistent documentation and trend analysis, retrievable on demand.

Product

Reporting for the board

Program health in the language your governing body uses.

A completed grid is a plan. A configured workflow makes it operational.

Fill in the worksheets first. When you’re ready, each row can become a routing rule on the incident report itself in TrackTik, timestamped for the audit, the survey, and the board.

Sources: The Joint Commission, National Performance Goals (NPG 2a, Preventing Workplace Violence; NPG 11, Creating a Secure and Safe Physical Environment) and the Physical Environment standards, effective January 1, 2026.