In this article
- Why This Matters — Three Reasons That Precede Any "Obligation"
- Three Scenarios — Three Different Action Logics
- The Written Emergency Procedure — What It Must Include
- Escape Routes — the Detail That Decides
- Division of Roles — Who Does What During an Event
- Coordination with the Safety Systems — the Procedure Does Not Live in a Vacuum
- The Evacuation Drill — Why the "Before" Is Precisely What Decides
- The Connection to a Risk Survey — Where Your Building Is Vulnerable
- How to Start — Five Practical Steps
- Frequently asked questions
Most emergency procedures in office buildings in Israel are written after something has happened — a small fire in the storeroom, a real alarm that caught everyone unprepared, or an inspection that found there was no evacuation plan at all. That is exactly the mistake. An emergency procedure is the one document in building management that, if you touch it only when you need it — it will already be too late. In a real emergency there is no time to read, decide or look for the exit; you act according to what was drilled in advance, or you don't act correctly at all.
Why This Matters — Three Reasons That Precede Any "Obligation"
In Israel there is a tendency to deal with emergencies only when an authority demands it. But three real reasons precede any regulatory requirement, and are worth understanding before the inspector arrives.
1. Life Safety
An office building houses dozens and sometimes hundreds of people who are not deeply familiar with the structure. When an alarm sounds, a fire breaks out or an earthquake begins, the difference between an orderly evacuation and panic is measured in seconds. People who do not know where to go instinctively return to the way they came in — usually the elevator or the main entrance — and not to the nearest emergency exit. From experience in managing buildings, in the first drills there is always someone who walks right up to the elevator. This is not a lack of sense — it simply was not drilled otherwise. A drilled procedure is what directs people correctly when the brain is no longer thinking logically.
2. Legal Obligation and Personal Liability
The building owner and his manager owe a duty of care toward everyone present in the structure. The Occupational Safety Law, the Business Licensing Law and the Fire Department regulations require the party holding the property to ensure sound escape routes, fire detection and extinguishing. The absence of an emergency procedure, blocked escape routes or the absence of drilling are among the first findings that come up in any inquiry after an event — and they are what turns an "accident" into "negligence." Responsibility does not end with installing systems; it includes the human preparedness to operate them.
3. Business Continuity
A poorly managed emergency event does not harm only safety — it shuts down the building for days or weeks, harms tenants and puts the leases and the value of the property at risk. A building that recovers quickly from an event, because it knew in advance what to do, preserves the trust of the tenants and the business activity within it.
Three Scenarios — Three Different Action Logics
The most common mistake is to treat "emergency" as one thing. In practice there are three main scenarios, and each has a different — and sometimes opposite — action logic from the other. A procedure that does not distinguish between them is a procedure that may lead to a wrong action.
Fire — Evacuate Outward and Downward, and Fast
In a fire the rule is rapid evacuation via the escape routes to the assembly point, while absolutely avoiding elevators. Occupants descend the protected stairwell, close fire doors behind them to slow the spread of smoke, and gather at a defined point outside the building so that everyone can be counted and it can be confirmed no one remained inside. Here the fire detection systems, the PA system and the release of smoke doors are the central axis.
A practical point that is sometimes overlooked: when the PA system is activated automatically and people do not know whether it is a drill or the real thing — they hesitate. A clear distinction between a drill alarm and a real alarm (for example, an immediate verbal announcement) saves precious seconds.
Earthquake — Stay and Take Cover, Then Evacuate
In an earthquake the logic is reversed: during the tremor you must not run down stairwells, but take cover ("drop, cover, hold on") away from windows and cabinets that may fall. Only after the tremor has ceased is an orderly evacuation carried out, assuming the structure is stable, while moving away from the building for fear of aftershocks. Someone who learned only a fire procedure may act opposite to what is required — and endanger himself precisely by running to evacuate.
National Emergency — Go Inward, Not Outward
In a missile launch or a Home Front Command alert, the logic flips again: you don't go outside but enter the protected space — a shelter, a residential protected space (mamad) or a floor protected space — within the time window the Home Front Command allots to each area. In an office building this means you need to know in advance where the protected spaces are, what their capacity is, and who directs the occupants to them.
The three scenarios illustrate one point: you cannot improvise in real time. This distinction must be drilled, not just written.
The Written Emergency Procedure — What It Must Include
An emergency procedure is not a general instruction sheet; it is a document tailored to the specific building, its floors, its systems and its population. A proper procedure includes at the very least:
- Floor plans with escape routes: every exit, every protected stairwell and the direction of movement — clearly marked and visible on every floor.
- Assembly points: a defined location outside the building to which people gather after evacuation, where a headcount is conducted. Important: the point must be far enough from the building so as not to block access by rescue forces.
- Location of protected spaces: shelters, residential protected spaces (mamads) and floor protected spaces, with their capacity and accessibility — including for people with disabilities.
- Location of shut-off and safety means: main electrical panels, gas and water shut-off valves, fire-fighting stations and extinguishers — marked on the floor plan.
- Named division of roles: who is responsible for what during an event — not a general description but names, contact details and substitutes for each role.
- Emergency numbers and reporting chain: whom to call, in what order, and who coordinates with the rescue forces (police, MDA, fire department).
- Separate procedures for each scenario: fire, earthquake and national emergency — each with its own action logic.
- Procedures for special populations: employees with disabilities, visitors, suppliers — who assists them and by which route.
The procedure should be accessible, up to date and short enough to be learnable. A fifty-page document that no one has read is worth less than a single page everyone knows.
Escape Routes — the Detail That Decides
A sound escape route is a route that is clear, lit and obvious — always. The most common failure is not the absence of a route but its blockage: boxes in the stairwell, an emergency door locked "so no one gets in," signage that has gone out, or furniture blocking passage. During routine inspections in commercial buildings, actual blockages in the stairwells are a finding that recurs again and again — and people are entirely unaware that they did it.
Three things must exist at all times:
- Emergency lighting that lights the way even in the absence of electricity — in the stairwells, the corridors and the entrances to the stairwells.
- Visible directional signage leading to the exit — per Israeli standard, "emergency exit" signs must be green and illuminated by emergency lamps.
- A completely clear passage from the door to the street — including outside the building, so that rescue forces can enter comfortably.
These are not a "nice to have" item — they are a necessary condition for any safety approval, and what the routine maintenance systems must ensure is in place. The connection between fire safety and escape routes is tight; we expanded on it in the guide to the fire safety law and Directive 5210.
Division of Roles — Who Does What During an Event
A procedure without defined role-holders is a procedure that will not be activated. During an event, when everyone is under pressure, someone must hold the picture and manage. In an office building, at the very least the following are required:
- Chief emergency officer: the party that makes decisions, declares an evacuation and coordinates with the rescue forces. In a multi-story building this is usually the building manager or the safety officer on his behalf.
- Floor wardens / evacuation leaders: people on each floor who direct the occupants to the exits and confirm that no one is left behind — including in restrooms, conference rooms and equipment rooms.
- Headcount officer at the assembly point: the one who confirms that everyone who was in the building came out, and reports missing persons to the rescue forces.
- Substitutes for each role: the defined person may be absent on the day of the event — this always happens. Without a substitute defined in advance, a critical role will remain empty.
In a building with multiple tenants, the division of roles crosses organizations: each tenant has internal responsibility, but the building management party is the one that coordinates the overall picture. Without a coordinating party, each tenant evacuates its people on its own — and there is no one who knows whether the entire building has been emptied.
A further practical consideration: in buildings where external suppliers or maintenance personnel operate (who change from day to day), it is mandatory to make sure they too receive a basic instruction upon entering the building — not just the tenant's permanent employees.
Coordination with the Safety Systems — the Procedure Does Not Live in a Vacuum
A good emergency procedure relies on systems that work. The fire detection system that activates the PA, smoke doors that close automatically, emergency lighting that ignites in the absence of electricity, and the elevator-release system that lowers them to the ground floor — all of these are the links the procedure relies on. A procedure that assumes the systems are sound, without checking this, builds on sand.
This is exactly the connection point between emergency procedures and preventive maintenance: every periodic check of the detection, extinguishing and emergency-lighting systems is also a check of emergency readiness. We expanded on this cycle in the annual preventive maintenance checklist. A system that has not been checked is an open question on the day of the event — and the event is not the time to discover that the detector did not work.
A point that is sometimes overlooked: the PA system must be heard clearly on all floors, including in restrooms and windowless rooms. Testing the sound volume at every point in the building is part of preparing the procedure, not just of the installation.
The Evacuation Drill — Why the "Before" Is Precisely What Decides
This is the most important point in the entire article: a written procedure that has not been drilled is not a procedure but an intention. Evacuation drilling is the only thing that turns a document into an automatic response.
A drill reveals the gaps you cannot see on paper:
- A route that looks short on the plan but is actually blocked by equipment
- An assembly point that is too narrow for all the building's people
- A floor warden who did not know his role on the day of the event
- An evacuation time far longer than estimated
- Floors whose floor warden left the organization and no one appointed a substitute
An organization that has drilled once always discovers things it did not expect — and that is exactly the goal: to discover them in a drill, not in an event.
Beyond exposing the gaps, drilling builds muscle memory. An occupant who drilled descending the protected stairwell will do it automatically even in smoke and under pressure. An employee who drilled entering the protected space during an alarm will not start looking for it while the clock is ticking. Repetition is what enables correct action when the brain is no longer free to think.
A drill is not a one-time event. The building's population turns over, tenants come and go, and the floor layout changes. Periodic drilling — coordinated with Home Front Command procedures where relevant — is what keeps the readiness alive. The team that drilled last year is not necessarily the team that will be in the building tomorrow.
After every drill it is important to hold a gap review: what we discovered, what was fixed, and what remains open. A short documentation of this review is part of the procedure itself, and serves as proof to the authorities that the building not only wrote a procedure but also implemented it.
The Connection to a Risk Survey — Where Your Building Is Vulnerable
A good emergency procedure is not a copied template but a product of understanding the specific risks of the building: where the concentrations of people are, which materials are stored, what the bottlenecks in evacuation are, and which populations require special assistance. Such mapping is exactly what a proper risk survey does, and it is the basis on which a tailored — not generic — procedure is built. See more in the security risk survey guide.
The connection works in both directions: the survey identifies the vulnerabilities, and the procedure translates them into action. Without the survey, the procedure guesses; without the procedure, the survey remains a diagnosis that no one acted on.
How to Start — Five Practical Steps
- Mapping the structure: every floor, every exit, every protected space, every safety system — documented in one diagram. Including accessibility for people with disabilities.
- Writing a tailored procedure: three scenarios (fire, earthquake, national emergency), each with its own action logic, tailored to the specific building — not a copy-paste from a generic template.
- Defining role-holders: chief officer, floor wardens, headcount officer — by name, with contact details and substitutes defined in advance.
- Verifying routes and systems: escape routes clear, emergency lighting and signage sound, detection and extinguishing systems tested and documented.
- Drilling and control: periodic evacuation drilling, documenting the gaps discovered, and updating the procedure accordingly.
The difference between a procedure "on paper" and a procedure that works is the fifth step. Without periodic drilling and control, even an excellent procedure becomes outdated within months: people change, routes get blocked, and systems wear out. A management party that holds the entire fabric — from the diagram to the drill — is the best protection. See more about the service in comprehensive property management.
Frequently asked questions
Is it a legal obligation to hold an emergency procedure and evacuation plan in an office building?
Yes. The Occupational Safety Law, the Business Licensing Law and the Fire Department regulations require the party holding the property to ensure sound escape routes, fire detection and extinguishing. In addition, the building owner and his manager owe a duty of care toward all present in the structure. The absence of a procedure, blocked escape routes or the absence of drilling are among the first findings that come up in any inquiry after an event — and what turns an 'accident' into 'negligence'.
How often should an evacuation be drilled in an office building?
It is recommended to drill periodically rather than one-time, because the building's population turns over and routes can get blocked. Regular drilling — coordinated with Home Front Command guidelines where relevant — keeps the readiness alive and ensures that new employees and tenants know the procedure. After every drill it is recommended to hold a gap review and document the findings and the corrections made.
What is the difference between a fire, an earthquake and a national emergency procedure?
The logic is entirely different among the three scenarios. In a fire: rapid evacuation outward and downward via the protected stairwell, without an elevator. In an earthquake: taking cover in place ('drop, cover, hold on') during the tremor, and only afterward evacuation. In a national emergency (Home Front Command alert): you don't go outside but enter the protected space. A procedure that does not distinguish among the three is dangerous, because a person under pressure performs only what was drilled.
What makes an escape route 'unsound' in a safety inspection?
The most common failure is blockage — not the absence of a route. Boxes in the stairwell, a locked emergency door, signage that has gone out or furniture blocking passage are findings that recur again and again in inspections. A sound escape route must be completely clear, lit by emergency lighting that works even in the absence of electricity, and marked with visible green signage — at any given moment, not just on inspection day.
Who should be the emergency officer in a building with several tenants?
Each tenant has internal responsibility for its people, but a building management party is required to coordinate the overall picture: a chief emergency officer who declares an evacuation and coordinates with the rescue forces, alongside floor wardens and a headcount officer. Each role must also have a substitute defined in advance, because the primary person may be absent precisely on the day of the event. Without a coordinating party, each tenant evacuates on its own and there is no one who knows whether the entire building has been emptied.
What should an emergency procedure for an office building include?
A full procedure includes: floor plans with escape routes, positioned assembly points, the location and capacity of protected spaces, the location of shut-off and safety means, a named division of roles with substitutes, emergency numbers and a reporting chain, and separate procedures for each scenario (fire, earthquake, national emergency). It is important that the procedure be short and learnable — a long document that no one has read is worth less than a single page everyone knows.
