For multi-site healthcare & human-services organizations

Your safety and readiness obligations — completed, documented, provable.

Northlight operates the recurring work your organization is already accountable for: workplace-violence prevention governance, annual worksite analysis, emergency-preparedness maintenance, exercises and after-action follow-through, corrective-action tracking, and board-ready reporting.

Request a 25-minute readiness conversation   See the 30-day baseline
The executive problem

Real safety work is happening in your organization. Nobody can prove it.

Safety obligations are split across security, HR, facilities, compliance, and quality — and each fragment is someone's second job. When a surveyor, board member, insurer, or attorney asks for evidence, the scramble begins.

What your teams say

  • “Incidents are up, but not every one gets reported.”
  • “The emergency plan was current… in 2023.”
  • “The drill happened. The follow-up items didn't.”
  • “Everyone owns a piece. No one owns the program.”
  • “The evidence exists. Somewhere. In three systems and a binder.”

What leadership must be able to show

  • Foreseeable hazards were identified — this year, not once.
  • Workers participated; incident data was reviewed and trended.
  • Findings became corrective actions — and the actions closed.
  • The right roles were trained; the governing body was briefed.
  • And every one of those statements has a document behind it.

The gap between those two columns is where survey findings, claims, litigation exposure, and board embarrassment live.

Why now

The obligations repeat. The evidence must, too.

Joint Commission — Jan 2026

The National Performance Goals chapter makes workplace-violence prevention a governance obligation: a designated program leader, annual worksite analysis, incident-data trending, governing-body oversight, and recurring training.

It consolidates standards in force since 2022 — surveyors now probe whether the program is visible, documented, and operating.

CMS — condition of participation

Emergency-preparedness requirements apply to 18 provider and supplier types: risk-based planning, policies and procedures, a communication plan, and training and testing.

Not discretionary — tied to Medicare / Medicaid participation.

States — the direction of travel

New York requires at least annual hospital safety and security assessments with employee involvement from January 1, 2027. Boards, insurers, and labor ask for the same evidence today.

No federal OSHA standard yet — enforcement rides the General Duty Clause. Boards and insurers are not waiting.

The first engagement

The 30-Day Safety & Readiness Baseline

One fixed price. Thirty days. A single, evidenced answer to the question your board will eventually ask: are our obligations actually being completed, documented, and reported — and can we prove it?

$18,500
fixed price · up to five sites
  • Half on execution, half at the readout
  • Fixed scope, in writing — change orders only
  • No unquoted charges, ever
  • Stands alone — no obligation beyond day 30
Days 1–5Intake, document collection, scheduling
Days 6–12Evidence review · executive and operating-leader interviews
Days 13–17Structured site-observation day · corrective-action inventory
Days 18–25Analysis · register and roadmap · quality review
Days 26–3090-minute executive readout · full deliverables transmitted
Governance & accountability mapWho owns what — mapped to reality, not the org chart
WPV program evidence reviewWhat exists, what's current, what's missing
Worksite-analysis baselineSite-level risk observations with staff input
Incident-reporting & trend reviewOne picture from your three reporting systems
Emergency-preparedness gap reviewPlans, annexes, drills, after-action follow-through
Exercise & AAR maturity reviewDo findings become fixes? Evidence either way
Corrective-action registerLive Excel register — owners, dates, status. Yours to keep
12-month prioritized roadmap30 / 60 / 90 / 365-day horizons, costed where possible
Board-ready executive briefOne page your governing body can act on — presented in person
Proposed annual plan (optional)Only if the findings earn it — no obligation
The ongoing relationship

Your readiness program, operated annually.

The baseline tells you where you stand. The annual service keeps you there — scheduled analyses, exercises with closed after-action loops, live corrective-action management, quarterly governance reviews, and one maintained evidence file.

CORE
≈ $60,000/yr
  • Annual worksite analysis
  • Quarterly governance review
  • Corrective-action tracking
  • One exercise + after-action report
  • Annual board brief
  • Policy & evidence maintenance
MULTI-SITE
≈ $96,000/yr
  • Everything in Core
  • Additional facilities
  • Quarterly incident-trend review
  • Two exercises
  • Physical-security capital prioritization
  • Executive dashboard & quarterly briefings
ENTERPRISE
$150,000+/yr
  • Larger site portfolios
  • Monthly program management
  • Multiple exercises
  • Leadership & board support
  • Vendor-neutral capital planning
  • M&A / new-site integration

Priced to site count and cadence. Renewal is earned quarterly: you always see what is open, what closed, and what it costs to fix what remains.

Boundaries & trust

Credible because it is limited.

What Northlight is not

  • Not legal advice or a compliance opinion
  • Not engineering certification
  • Not clinical care or patient-safety determinations
  • Not emergency response — no 24/7 pager, by design
  • Not individual behavioral-threat assessment
  • Not a guarantee of compliance or incident prevention

Where those disciplines are needed, the report says so — and points you to qualified professionals.

How your information is handled

  • Access-controlled workspace; encrypted in transit and at rest
  • No patient-identifiable information requested — ever
  • Interviews attributed by role, never by name
  • Materials returned or destroyed at your election within 30 days
  • Engagement through counsel available where your GC prefers
  • Vendor-neutral: no hardware commissions, no training quotas, no software to buy
Who is behind this

Built by an operator, not a brochure.

Northlight was founded by Christopher Maher, a healthcare security and public-safety executive and former Massachusetts State Police trooper with two decades across emergency management, workplace-violence prevention, physical security, investigations, policy, training, interagency coordination, and healthcare operations. Northlight exists because the recurring work behind those obligations is real, unglamorous, and routinely left to committees — and because organizations deserve to be able to prove what they have actually done.

[Founder biography to be finalized — credential-focused, no war stories.]

Next step

The next step is small and honest.

  1. A 25-minute conversation about who owns readiness at your organization today.
  2. If a real gap exists: the 30-Day Baseline — $18,500, fixed, contracting this month.
  3. At the readout, you decide — continue annually, act internally, or stop.

If the work is genuinely covered internally, we will tell you so and leave you alone.

Request the conversation

Christopher Maher · Founder & Principal · [phone] · hello@northlightreadiness.com (domain placeholder — to be registered)