Most workplace violence does not start with a punch. It starts with a pattern.

Managers are often surprised when an incident finally erupts. In our experience training venue, retail, casino and corporate teams across California, the surprise is rarely justified. Long before anyone raises a hand, there are usually weeks of smaller signals: a tone that keeps hardening, a grievance that never gets resolved, a boundary that gets tested again and again. The problem is not that managers do not care. It is that nobody taught them what to watch for — or what to do once they see it.

That gap is exactly what California's SB 553 was designed to close. Under Labor Code Section 6401.9, covered California employers must maintain a written Workplace Violence Prevention Plan, train employees, and — critically — identify, evaluate and correct workplace violence hazards. Cal/OSHA is directed to adopt a formal general-industry workplace violence standard by December 31, 2026, so the bar is about to get more specific, not less. A plan that lists generic risks ("angry customers," "robbery") but never names the real behavioral warning signs in your own workplace is a plan that will not survive an inspection — or protect your people.

This article is not a checklist to file away. It is the trainer's view: what law-enforcement veterans actually look for when they walk into a workplace, and how a manager can act early, lawfully and without turning the office into a place of suspicion.

1. Escalation is a pattern, not a single bad day

Everyone has a bad day. A warning sign is a direction of travel. Watch for a person whose behavior is getting worse over time: complaints that grow more personal, language that grows more absolute ("you always," "nobody ever"), and a shrinking willingness to accept any outcome short of total victory. One heated argument is a management conversation. A month of steadily rising hostility is a hazard to document and address.

Ask yourself a simple question: if I charted this person's last five interactions, would the line go up or down? If it goes up, do not wait for the sixth data point to be an incident.

2. Grievance collecting: when every slight gets stored, not solved

Some employees and customers move on from a disappointment. Others file it away. Over time they build a case — in their own mind — that the system is rigged against them. They retell old incidents as if they happened yesterday. They bring up a scheduling decision from March in an October argument about something else entirely.

Grievance collecting matters because it changes how a person interprets the next event. A neutral decision ("we cannot approve that shift swap") is no longer heard as neutral. It is heard as one more proof. Managers miss this because each individual complaint sounds small. The pattern is the point.

What helps: close the loop. When a complaint is resolved, say so clearly, in writing where appropriate, and name what will happen next. Unresolved ambiguity is fuel for grievance collecting.

3. Boundary testing: small rules broken on purpose

Before a person breaks a big rule, they usually test a small one. They linger after being asked to leave. They raise their voice to see whether anyone pushes back. They ignore a "staff only" sign, then argue about it. Each test is also a question: will anyone enforce this?

In casinos, retail floors and venues, our trainers see this constantly. A patron who is told "no" politely and firmly — and sees that the boundary holds — usually recalibrates. A patron who learns that persistence moves the boundary will keep pushing. The same is true for worker-on-worker conflict: an employee who learns that intimidation gets a schedule changed will use intimidation again.

Boundary testing is not a reason to overreact. It is a reason to be consistent. Calm, early, documented enforcement of small boundaries prevents the large confrontation later.

4. Fixation and personalization: when it stops being about the issue

Pay close attention when a dispute stops being about a policy, a refund or a schedule and starts being about a person. Warning language includes threats framed as predictions ("you'll regret this"), personal targeting of one manager or coworker, showing up at times or places where that person is expected, or repeated unwanted contact after a matter is closed.

This is the point where a manager should stop handling it alone. Escalate internally, document dates, exact words and witnesses, and follow your reporting channel. Under SB 553, employees must be able to report threats and hazards without fear of retaliation — and reports must actually go somewhere. A report that disappears into an inbox is worse than no reporting channel at all, because it teaches people not to bother next time.

5. The quiet ones: withdrawal, not just aggression

The most dangerous missed sign is not loud at all. A normally engaged employee goes quiet. They stop eating with coworkers, stop answering messages, or start giving away personal items. A customer who used to argue loudly suddenly becomes eerily calm and compliant — while still returning, still watching.

Withdrawal is easy to misread as "the problem solved itself." Often it means the person has stopped seeking a resolution inside the system. Managers should check in, privately and without accusation: "I've noticed a change, and I wanted to see how you're doing." That conversation, handled with respect, sometimes surfaces a problem that can still be solved.

What managers should actually do: five practical steps

• Write down behavior, not labels. Record dates, exact words, who was present and what happened next. "He was aggressive" helps no one. "On October 14 at 3:10 p.m., he raised his voice, pointed at the cashier and said..." is a record a trainer, an investigator or Cal/OSHA can actually use.
• Use the reporting channel every time. SB 553 requires a way for employees to report workplace violence hazards without retaliation. Make sure your team knows the channel, and show them — by acting on reports — that using it is safe.
• Respond early and proportionally. Most situations are solved by a private conversation, a clear boundary and a documented plan. Waiting until a situation is a crisis leaves only bad options.
• Build a see-something-say-something culture without paranoia. The message is not "suspect everyone." It is "if something feels off, tell someone early, and we will take it seriously." Train the team on what to report and what happens next, so reporting feels normal, not dramatic.
• Feed what you learn back into the plan. Every incident and near-miss should change something: a staffing pattern, a physical layout, a script for a common trigger, a training topic. That is what hazard identification actually means — not a binder on a shelf, but a loop between what happens on the floor and what the plan says.

The trainer's bottom line

Workplace violence prevention is not about predicting the future. It is about noticing the present. Managers do not need to become psychologists or security experts. They need a trained eye for escalation patterns, grievance collecting, boundary testing, fixation and withdrawal — and a system that turns an early observation into an early, lawful response.

That is what our on-site training teaches: how to recognize the signs in your specific workplace, how to de-escalate before words become a physical incident, and how to document and report in a way that protects both people and the business. Our instructors are law-enforcement veterans who have handled these situations in real life, not just in a slide deck, and they consult on the legal aspects of security work — the boundaries of force, detention and documentation — from that experience.

One honest note: Blue Diamond Protection Consulting is an elite training company, not a law firm, and this article is general education, not legal advice for a specific case. For a specific incident or legal question, consult a licensed attorney.

To bring this training to your team, explore our on-site training programs, read our earlier guide to SB 553 training requirements and verbal de-escalation techniques, or call us at +1 (530) 650-6306 to schedule on-site training for your staff.