4.6 Emergency Preparedness & the Infection Preventionist's Disaster Role
Key Takeaways
- Emergency management has four phases: mitigation, preparedness, response, and recovery, and infection prevention strategies must be built into the emergency operations plan at every one of them.
- The CMS Emergency Preparedness Rule requires a facility-based and community-based risk assessment, policies and procedures, a communication plan, and a training and testing program with two exercises annually.
- The infection preventionist typically functions as a technical specialist or subject matter expert within the Hospital Incident Command System rather than as incident commander.
- Surge capacity is planned across the four S's (staff, stuff, space, and systems), and CDC's contingency and crisis capacity strategies define when extended use and limited reuse of respirators become acceptable, always by policy rather than improvised at the unit level.
- In a mass casualty incident, infection prevention supports hand hygiene and sharps container deployment to improvised care spaces, real-time staff exposure tracking, and the surgical site infection surveillance burden that follows weeks later.
4.6 Emergency Preparedness & the Infection Preventionist's Disaster Role
Quick Answer: The four phases are Mitigation → Preparedness → Response → Recovery. The Emergency Operations Plan (EOP), built from a Hazard Vulnerability Analysis (HVA), is the governing document. Under 42 CFR §482.15 facilities must maintain a risk assessment, policies and procedures, a communication plan, and a training and testing program with two exercises per year. The IP usually serves as a technical specialist / subject matter expert in the Hospital Incident Command System (HICS).
The blueprint requires candidates to integrate infection prevention strategies into the four phases of emergency/disaster response and to identify infection prevention's role in emergency/disaster management. Disasters do not suspend infection risk; they amplify it. Crowding, loss of water and power, improvised care spaces, unfamiliar staff, supply shortages, and delayed waste removal each degrade a control that normally works.
The Four Phases
graph LR
A["1. MITIGATION<br/>Reduce risk before<br/>anything happens"] --> B["2. PREPAREDNESS<br/>Plan, train, stockpile,<br/>exercise"]
B --> C["3. RESPONSE<br/>Execute during<br/>the event"]
C --> D["4. RECOVERY<br/>Restore, restock,<br/>learn"]
D --> A
| Phase | Definition | Infection prevention contribution |
|---|---|---|
| Mitigation | Actions taken before an event to reduce its likelihood or impact | Vaccinating staff, building redundancy into water and air systems, designing convertible negative-pressure capacity, maintaining MDRO control so a surge does not begin from a bad baseline |
| Preparedness | Planning, training, stockpiling, and exercising | Writing the infection control annex of the EOP, defining cohorting and isolation surge plans, sizing PPE stockpiles against burn-rate estimates, fit-testing programs, participating in drills, joining the regional healthcare coalition |
| Response | Actions during the event | Advising incident command on precautions, triage and cohorting design, PPE conservation decisions, screening protocols, alternate care site layout, decedent management, active surveillance for outbreaks among evacuees or shelterees |
| Recovery | Restoring operations and learning | Water and air system remediation and flushing, terminal cleaning of surge areas, restocking, restoring elective services, staff health monitoring and mental health support, after-action report and improvement plan |
Exam Tip: Two easily confused pairs. Mitigation reduces risk before the event; preparedness builds the capability to respond. Response is during; recovery is after. Stockpiling N95 respirators is preparedness. Installing a redundant water loop is mitigation.
The Regulatory Framework
CMS Emergency Preparedness Rule (42 CFR §482.15)
Four required elements for participating providers:
- Risk assessment and emergency plan — an all-hazards approach using a facility-based and community-based risk assessment, reviewed at least every two years for hospitals
- Policies and procedures — including subsistence needs, patient tracking, evacuation, sheltering in place, medical documentation, and volunteer use
- Communication plan — contacts for staff, other facilities, and federal, state, tribal, regional, and local emergency management, plus a means of sharing patient information
- Training and testing program — initial and annual training, and two exercises per year, one of which should be a full-scale, community-based exercise where available
The Hazard Vulnerability Analysis is the analytic engine underneath: hazards are scored for probability × severity × preparedness gap, producing a ranked list that determines what the facility actually plans for.
Incident Command and the IP's Place In It
The Hospital Incident Command System (HICS) provides a standard structure that scales up and down and interoperates with community responders.
| Section | Function |
|---|---|
| Incident Commander | Overall authority and accountability |
| Operations | Delivers the response — clinical care, security, infrastructure |
| Planning | Situational awareness, the Incident Action Plan, documentation |
| Logistics | Supplies, staffing support, facilities, communications equipment |
| Finance/Administration | Cost tracking, procurement, claims |
The infection preventionist is normally a technical specialist / subject matter expert, most often supporting Planning or Operations, and may also work through the Medical/Technical Specialist role for infectious disease. The IP does not run incident command; the IP supplies the evidence base that lets it decide. Practical asks during activation include precaution recommendations for an unfamiliar pathogen, layout of cohort zones, PPE selection and conservation, screening criteria at entry points, and clearance criteria for reopening space.
Surge Capacity: The Four S's
| S | Question | IPC implications |
|---|---|---|
| Staff | Who will deliver care? | Redeployed staff need just-in-time training on precautions and PPE; fit-testing capacity; competency verification; tracking of staff exposures |
| Stuff | What supplies are needed? | PPE burn-rate calculation, disinfectant and hand hygiene product supply, substitution plans when a preferred product runs out |
| Space | Where will care occur? | Cohort zones, negative-pressure conversion, alternate care sites in lobbies, tents, or gymnasiums with no handwashing sinks, no negative pressure, and shared restrooms |
| Systems | What processes and policies govern? | Altered documentation, crisis standards of care, waste management, laundry, morgue capacity, visitor restriction policy |
Mass casualty incidents
A mass casualty incident (MCI) — a bus crash, a structural collapse, an active-shooter event — is not usually thought of as an infection problem, but it is one. Many patients arrive at once with contaminated traumatic wounds, care is delivered in hallways and lobbies without handwashing sinks, aseptic technique degrades under time pressure, blood and body fluid exposure risk for staff rises sharply, and redeployed personnel are performing unfamiliar tasks. Infection prevention's contributions during an MCI are concrete: ensure hand hygiene product is deployed to every improvised care space, ensure sharps containers accompany every treatment area, brief on tetanus prophylaxis and wound management, track staff blood and body fluid exposures in real time rather than retrospectively, and plan for the downstream surgical site infection surveillance burden that follows within 30 to 90 days.
PPE conservation strategy
CDC frames respirator supply in three tiers, and the transition between them is a policy decision made by incident command with IP input, never an improvisation at the unit level:
| Capacity | Practice |
|---|---|
| Conventional | Normal single-use practice per standard policy |
| Contingency | Extended use — wearing the same respirator for repeated encounters with multiple patients without removing it between them (preferred over reuse, since doffing is when contamination occurs) |
| Crisis | Limited reuse with defined donning limits, use of respirators beyond manufacturer-designated shelf life, or use of alternatives not NIOSH-approved as a last resort |
Surge planning should also address decedent management — refrigerated capacity, handling of bodies with transmissible infection, and coordination with the medical examiner — which is routinely omitted from plans until it is urgently needed.
Recovery: The Phase Programs Forget
Recovery carries genuine infection risk that outlasts the event:
- Water systems stagnate when a building is closed or occupancy collapses, promoting Legionella growth in the plumbing. Restarting requires a documented flushing and remediation protocol under the facility water management program.
- Air handling disturbed by roof damage, power loss, or filter saturation must be verified — pressure relationships and filtration confirmed before reopening protective environments and operating rooms.
- Terminal cleaning of alternate care spaces, and restoration of those spaces to their original use.
- Staff health: exposure follow-up, immunization catch-up, and mental health support. Burnout and moral injury after prolonged response are documented and undermine the next response.
- After-Action Report and Improvement Plan (AAR/IP): what worked, what failed, and specific assigned corrective actions with dates. The improvement plan is what converts a bad experience into a better plan; without it, the same failures recur.
Continuity of operations (COOP) planning underpins the whole cycle, identifying essential functions — including infection prevention surveillance itself — that must continue when normal operations cannot.
A hospital installs a redundant water supply loop and convertible negative-pressure capacity during a renovation, years before any emergency. Which phase of emergency management does this represent?
Under the CMS Emergency Preparedness Rule, how many emergency exercises must a hospital conduct each year, and what should one of them be?
During activation of the Hospital Incident Command System for an infectious disease surge, what is the infection preventionist's typical role?
During a severe respiratory pathogen surge, N95 supply falls to a two-week reserve. CDC's contingency capacity strategy calls for which practice, and why is it preferred over the crisis-level alternative?