Most businesses have an emergency plan in the sense that a document exists somewhere. Almost none have a plan in the sense that matters: a clear, rehearsed set of actions their people will actually execute when seconds count and panic is in the air. The gap between those two things is where preventable tragedies happen.
A real plan is built around a few specific scenarios, not vague intentions. Medical emergency. Fire and evacuation. Active threat. Severe weather. Each one needs the same skeleton: who is in charge, what the first three actions are, how people communicate, where they go, and how you account for everyone afterward. If your plan can't answer "what are the first three things that happen," it isn't a plan yet.
Assign roles, not hopes. Someone calls 911. Someone directs evacuation. Someone meets responders at the entrance to guide them in — a step that routinely saves minutes that save lives. Someone accounts for staff at the rally point. When everyone knows their job in advance, you get coordinated action instead of a crowd of people independently panicking.
The plan is short enough to remember and specific enough to follow. It's drilled — not lectured, drilled — at least twice a year, so the actions are muscle memory. Exits, AEDs, alarm pulls, and shelter locations are known to everyone, not just the safety committee. After every drill, the plan gets updated based on what actually went wrong, because something always does.
A 40-page binder no one has opened. A plan that's never been practiced, so the first time anyone executes it is the real thing. Roles that live in one person's head — the person who's on vacation the day it matters. Treating the fire drill as a smoke break instead of a rehearsal.
The test of a plan isn't whether it exists. It's whether a new employee, three weeks in, would know what to do when the alarm goes off. Build to that standard, drill to that standard, and you've built something that will hold when everything else is falling apart.