Compliance that goes beyond the checkbox

A trusted advisor, not a vendor

We start by understanding what actually applies to your organization, then assess your current program honestly against it, so you know exactly where you stand and what to prioritize.

For healthcare organizations, that often means aligning with the CMS Emergency Preparedness Rule and survey expectations. For businesses, it means OSHA Emergency Action Plans and workplace-safety readiness. For agencies, it means grant and EMAP requirements.

Whatever the standard, you get plain-language guidance and inspector-ready documentation, and a partner who genuinely wants your organization to be ready.

Standards & frameworks we work in

The standards we work in

CMS Emergency Preparedness Rule. Applies to seventeen Medicare and Medicaid provider types. Four core elements — risk assessment and planning, policies and procedures, communication plan, training and testing — with requirements that vary by provider type. See our healthcare page for a full walkthrough.

OSHA. Emergency action plans under 29 CFR 1910.38 for employers whose circumstances require them, fire prevention plans, and the general duty clause obligations that come with recognized workplace hazards — including workplace violence, which OSHA has increasingly treated as within scope.

EMAP. The Emergency Management Accreditation Program, the national standard for emergency management programs at state and local level. Assessment involves documenting compliance across dozens of standards covering program management, planning, resource management, training, exercises, and communications. Our founder led a state's accreditation effort as both manager and assessor.

Joint Commission. Emergency management chapter requirements for accredited healthcare organizations, which overlap with but are not identical to the CMS rule.

NIMS and ICS. Not a compliance regime in itself for most organizations, but the framework your plans need to be compatible with if you will ever coordinate with public agencies during an incident — and a condition of some federal preparedness grant funding.

Grant application support

Federal preparedness funding — PHEP, HPP, CRI, EMPG, and the Homeland Security Grant Program family — carries planning, training, exercise, and reporting obligations that agencies often underestimate at application time. We help with narrative development, aligning proposed activities to allowable costs, and building the documentation practices that survive an audit later.

This is practical rather than theoretical: we have built and defended grant-funded preparedness programs, including budget oversight, performance reporting, and the audit-ready documentation reviewers expect to see.

Program assessment

The most common starting point. A structured review of where your preparedness program stands against whichever standards apply to you, delivered as a findings document that ties each gap to its specific compliance risk and a recommended corrective action, prioritized by severity.

It is deliberately useful on its own. If you take the findings and close the gaps with your own staff, that is a good outcome — and it is a far better position than discovering the same gaps during a survey.