Every year OSHA publishes its Top 10 Most Frequently Cited Standards. And every year, the same handful of programs dominate the list: fall protection, hazard communication, respiratory protection, lockout/tagout, and personal protective equipment. These aren't obscure regulations — they're the day-to-day fundamentals of running a safe industrial or construction operation. When employers get cited, it's almost never because the rules were secret. It's because a written program was missing, a document wasn't updated, or training wasn't documented.
This guide is the pillar reference our Certified Safety Professionals use when we build a compliance program from scratch. It covers the seven focus areas we assess in every Baseline Blueprint engagement. Each focus area links to a dedicated deep-dive with the standard citations, employer duties, documentation checklists, and the common mistakes that turn a routine inspection into a five- or six-figure penalty.
Why these seven focus areas?
OSHA has hundreds of standards, but a small set drives most enforcement activity. Looking at recent citation data, the following seven categories consistently generate the highest volume of citations, the largest median penalties, and the highest rate of repeat offenses. Employers that get these seven right are dramatically less likely to face willful or serious citations — and dramatically more likely to prevent the injuries those standards were written to address.
The seven focus areas
Hazard Communication (HazCom)
29 CFR 1910.1200
Chemical labeling, Safety Data Sheets, and the written HazCom program that every employer with hazardous chemicals must maintain.
Fall Protection
29 CFR 1926.501 & 1910.28
The #1 most-cited OSHA standard year after year. Trigger heights, systems, training, and rescue planning for construction and general industry.
Lockout/Tagout (LOTO)
29 CFR 1910.147
Controlling hazardous energy during service and maintenance — energy control procedures, authorized-employee training, and periodic inspections.
Respiratory Protection
29 CFR 1910.134
Written program, respirator selection, medical evaluations, annual fit testing, and cartridge change-out schedules for airborne hazards.
Personal Protective Equipment (PPE)
29 CFR 1910.132
Written hazard assessments, PPE selection, employer-paid PPE, training, and documentation covering eyes, face, head, hands, feet, and body.
Emergency Action Plans
29 CFR 1910.38
Written EAPs, alarm systems, evacuation routes, employee roles, and coordinating with fire prevention plans and OSHA's PSM standard.
Recordkeeping & Reporting
29 CFR 1904
OSHA 300 Log, 301 Incident Report, 300A Annual Summary, electronic submission (ITA), and 8-hour fatality / 24-hour hospitalization reporting.
How to use this guide
Read the pillar (this page) first for context, then drill into each focus area in the order that best matches your operation. If you're a construction contractor, start with fall protection. If you're a manufacturer with rotating equipment, start with lockout/tagout. If you handle chemicals of any kind — cleaning solvents, paints, fuels, lubricants — start with hazard communication.
Every sub-guide follows the same structure so you can navigate it quickly:
- What the standard requires — the specific paragraphs of the CFR.
- Who it applies to — general industry, construction, maritime.
- Employer duties — what you must do, not just what you can't.
- Common citations — the paragraph numbers OSHA cites most often.
- Documentation checklist — the records that prove compliance.
- How CSPC helps — where our services fit.
The compliance mindset
A compliant program is not a binder on a shelf. It is a living system of hazard identification, controls, training, documentation, and continuous improvement. Compliance and safety performance move together — companies with mature programs have fewer injuries, lower workers' comp premiums, and fewer citations, because the same practices that reduce risk also generate the paperwork OSHA expects.
Three principles guide everything in this guide:
- Written programs matter. Many OSHA standards require a written program — HazCom, respiratory protection, LOTO, bloodborne pathogens, PSM, EAP (for larger employers). "We do it, we just don't have it written down" is not a defense.
- Training must be documented. If it isn't signed, dated, and filed, it didn't happen. Include content, duration, trainer credentials, and employee acknowledgment.
- Reassess when things change. New equipment, new chemicals, new processes, new job titles — each triggers a review of the affected programs.
Where to go from here
Pick a focus area above and dive in. When you're ready to see how your program measures against these standards, our free online self-assessment takes about 10 minutes and gives you a personalized gap report. For a deeper analysis, the Baseline Blueprint engagement walks a Certified Safety Professional through your site, your paperwork, and your training records to produce a prioritized remediation roadmap.