1
Identify the specific conduct categories your policy covers
Before editing the template, list every behavior you intend to prohibit β physical violence, harassment, discrimination, weapons, substance use, or others. The policy's credibility depends on naming them explicitly rather than relying on catch-all language.
π‘ Review any past incidents, HR complaints, or near-misses in your organization. The categories that have actually occurred in your workplace should be named first.
2
Define the scope of covered parties and locations
Enter all parties the policy covers β employees, contractors, vendors, volunteers β and all settings, including remote work, company events, and digital communication channels. Gaps in scope are gaps in protection.
π‘ If your workforce is fully or partly remote, add explicit language covering conduct in video calls, messaging platforms, and email, not just physical premises.
3
Write specific definitions for each prohibited behavior
For each conduct category, write a definition precise enough that a reasonable employee understands what is and is not covered. Use examples where helpful, and include an 'including but not limited to' clause to preserve flexibility.
π‘ Test each definition by asking: 'If a manager asked whether a specific behavior falls under this rule, does the definition give a clear answer?' If not, tighten the language.
4
Set up at least two reporting channels
Name a primary contact (typically HR), a secondary contact (e.g., a senior executive or ombudsperson), and, where feasible, an anonymous reporting option. Record contact details β name, email, phone β directly in the policy.
π‘ For organizations under 25 employees where everyone knows everyone, an anonymous third-party hotline is worth the $50β$100/month cost to ensure staff actually report.
5
Define the investigation timeline and process
Set a realistic acknowledgment window (e.g., 2 business days) and a target investigation completion period (e.g., 15 business days for standard cases). Name who conducts investigations and when a third party is called in.
π‘ Add a clause reserving the right to extend the investigation timeline for complex cases with written notice to the complainant β this protects you without locking in an unrealistic deadline.
6
State consequences in mandatory, not discretionary, language
Write consequences as 'will result in termination' rather than 'may result in termination' for the behaviors your policy treats as zero tolerance. Reserve discretionary language only for conduct categories outside the zero tolerance core.
π‘ If your legal counsel insists on 'may' language for liability reasons, create a two-tier structure: a zero tolerance tier with mandatory termination and a standard misconduct tier with progressive discipline.
7
Add manager-specific obligations and the anti-retaliation clause
Give managers a dedicated section with explicit reporting timelines and a prohibition on informal resolution. Place the anti-retaliation clause in its own numbered section β not buried in a paragraph β so employees can find and cite it.
π‘ Train managers on these obligations separately from the all-staff distribution. A policy managers haven't internalized is a policy they won't follow.
8
Distribute and collect signed acknowledgments
Send the finalized policy to all staff, collect signed acknowledgment forms, and file them in each employee's personnel record. Set a calendar reminder to re-distribute and re-collect acknowledgments any time the policy is revised.
π‘ Use your HRIS or document management system to track acknowledgment status β chasing paper signatures delays compliance and creates gaps in your records.