; (ii) be tailored and specific to conditions and hazards for the covered facility or the covered service, including patient-specific risk factors and risk factors specific to each work area or unit; and (iii) be suitable for the size and complexity of operations at the covered facility or for the covered service, and remain in effect at all times. (B) Plan content Each Plan shall include procedures and methods for the following: (i) Identification of the individual responsible for implementation of the Plan. (ii) With respect to each work area and unit at the covered facility or while covered employees are performing the covered service, risk assessment and identification of workplace violence risks and hazards to employees exposed to such risks and hazards (including environmental risk factors and patient-specific risk factors), which shall be— (I) informed by past violent incidents specific to such covered facility or such covered service; and (II) conducted with, at a minimum— (aa) direct care employees; (bb) where applicable, the representatives of such employees; and (cc) the employer. (iii) Hazard prevention, engineering controls, and work practice controls to correct hazards in a timely manner applying industrial hygiene principles of the hierarchy of controls, which— (I) may include security and alarm systems, adequate exit routes, monitoring systems, barrier protection, established areas for patients and clients, lighting, entry procedures, staffing and working in teams, and systems to identify and flag clients with a history of violence; and (II) shall ensure that employers correct, in a timely manner, hazards identified in the annual report described in paragraph (5). (iv) Reporting, incident response, and post-incident investigation procedures, including procedures— (I) for employees to report workplace violence risks, hazards, and incidents; (II) for employers to respond to reports of workplace violence