3.1 Preventive Maintenance Program Design, Risk Scoring, & Scheduling

3.1 Preventive Maintenance Program Design, Risk Scoring, & Scheduling

Quick Answer: A robust Preventive Maintenance (PM) program uses objective risk classification—most notably the Fennigkoh & Smith model (Equipment Management number = Function + Physical Risk + Maintenance Requirements + Incident History)—to decide which devices warrant scheduled intervals (traditionally EM ≥ 12). Procedures follow manufacturer recommendations or an approved AEM strategy, use calibrated test equipment, and apply NFPA 99 electrical safety limits: ground resistance below 0.50 ohm and chassis leakage of no more than 100 µA with the ground intact (500 µA with the ground open).

---

Strategic Objectives of Preventive Maintenance in HTM

In healthcare technology management, Preventive Maintenance (PM) represents a planned, systematic program of scheduled inspections, functional testing, cleaning, lubricating, and replacing worn components. The overarching mission of the hospital's Medical Equipment Management Plan (MEMP) is to minimize equipment downtime and safeguard clinical users and patients from equipment malfunction.

An effective PM program serves five foundational objectives:

1. Failure Prevention & Reliability Engineering: Addressing component degradation before functional failure occurs. Electromechanical components (such as pneumatic valves, compressor diaphragms, O-rings, and roller pump heads) follow predictable wear curves. Timely replacement shifts the maintenance posture from reactive firefighting to proactive availability.
2. Performance Optimization & Calibration Accuracy: Ensuring clinical outputs match therapeutic and diagnostic parameters. Infusion pumps must deliver accurate flow rates, electrosurgical units must deliver calibrated radiofrequency power, and physiological monitors must accurately detect minute bioelectric potentials.
3. Patient, Operator, and Environmental Safety: Verifying structural integrity, electrical insulation, radiation shielding, and safety interlocks. Currents of only tens of microamperes delivered directly to the heart through a catheter or pacing wire can cause ventricular fibrillation (microshock).
4. Regulatory & Accreditation Compliance: Meeting the Centers for Medicare & Medicaid Services requirement that equipment be maintained to ensure an acceptable level of safety and quality (42 CFR §482.41(d)(2)), The Joint Commission (PE.04.01.01 EP 2 since January 2026; formerly EC.02.04.01/EC.02.04.03), DNV (NIAHO PE.7 Medical Equipment Management), and state health department rules.
5. Asset Life Cycle Extension: Mitigating premature wear, preserving capital investment, and maximizing equipment useful life to control the institutional Total Cost of Ownership (TCO).

Preventive maintenance must be clearly distinguished from Corrective Maintenance (CM) (unscheduled restoration following breakdown), Predictive Maintenance (PdM) (condition-based monitoring using real-time sensor telemetry), and simple Electrical Safety Testing (EST-only).

---

Equipment Risk Classification Models

Historically, hospital clinical engineering departments attempted to perform comprehensive preventive maintenance on every piece of equipment in the facility. As technology inventories expanded to tens of thousands of assets, this approach proved operationally unsustainable and clinically unnecessary. Low-risk devices (such as otoscopes, patient scales, and exam lights) rarely experience failures that compromise patient safety or that can be prevented by calendar-based PM.

To establish a defensible, risk-based maintenance inventory, HTM leaders utilize quantitative risk classification algorithms.

The Fennigkoh & Smith Model (1989)

The most widely recognized risk classification system in clinical engineering was published by Larry Fennigkoh and Bradley Smith in the Journal of Clinical Engineering (1989). It produces an Equipment Management (EM) number from four criteria: equipment function, physical risk, maintenance requirements, and an incident-history adjustment:

$\text{EM} = \text{Equipment Function} + \text{Physical Risk} + \text{Maintenance Requirements} + \text{Incident History}$

Incident history adjusts the score from −2 (insignificant history) to +2 (significant history), with 0 for an average record. The traditional threshold for inclusion in scheduled maintenance is EM ≥ 12. Devices scoring 12 or more go on the scheduled PM inventory; devices below 12 are typically managed through incoming inspection and corrective maintenance, unless manufacturer requirements, regulations (for example, imaging, lasers, or new equipment that cannot be placed in an AEM program), or clinical factors dictate otherwise.

Refining the Model with Local Evidence

Category-based scores can overestimate risk for very reliable solid-state devices and underestimate it for heavily used transport equipment. Later clinical engineering authors proposed refinements — for example, replacing generic equipment function with mission criticality, weighting by utilization, or scoring from actual failure and incident data. No single refined formula is required by CMS or accreditors; what surveyors look for is a documented, consistently applied method. A simple illustration of adding local evidence:

$\text{Adjusted Score} = \text{Base Risk Score} \times \text{Local Failure-History Factor (illustrative)}$

This dynamic scoring allows HTM managers to adjust inspection frequencies based on actual empirical failure modes documented in their Computerized Maintenance Management System (CMMS).

---

PM Procedure Development & Scheduling Paradigms

Creating an authoritative PM protocol requires synthesizing Original Equipment Manufacturer (OEM) service literature with consensus standards published by the Association for the Advancement of Medical Instrumentation (AAMI) and the ECRI Institute.

Every standardized PM procedure checklist must incorporate five structural components:

1. Qualitative Physical & Visual Inspection: Housing integrity, power cord strain reliefs, display readability, cable insulation, and label legibility.
2. Mechanical Cleaning & Preventive Part Replacement: Cleaning internal cooling fan intake filters, replacing pneumatic elastomeric seals, lubricating drive gearboxes, and cycling mechanical valves.
3. Battery Management: Inspecting and testing main internal backup batteries and real-time clock (RTC) lithium coin cells. Capacity and impedance tests ensure uninterruptible power during clinical transport or utility power loss.
4. Quantitative Performance Verification: Verifying operational parameters using calibrated biomedical test tools (e.g., measuring joule output on defibrillators, pressure and volume delivery on ventilators, and RF wattage into non-inductive dummy loads on electrosurgical units).
5. Safety Interlock & Alarm Verification: Challenging high- and low-priority auditory and visual alarms, fail-safe optical interlocks, and emergency cutoff switches.

Maintenance Scheduling Strategies

HTM managers deploy three distinct scheduling methodologies:

• Calendar-Based Scheduling: Inspections occur at fixed calendar intervals (e.g., monthly, quarterly, semi-annually, annually). This is the traditional standard mandated for life-support assets.
• Runtime/Usage-Based Scheduling: Inspections are triggered by operational run hours (e.g., replacing CT tube vacuum bearings after specified megawatt-seconds or overhaul of ventilator compressor turbines at 5,000 hours). This prevents premature teardowns of low-use reserve units while protecting heavily utilized clinical workhorses.
• Condition-Based Monitoring: Real-time diagnostics and continuous telemetry flag component degradation (such as motor bearing vibration or optical sensor attenuation) before functional failure occurs.

---

Electrical Safety Inspection Protocols (NFPA 99)

Electrical safety testing is an essential component of clinical equipment maintenance. The National Fire Protection Association publishes NFPA 99: Health Care Facilities Code, whose Chapter 10 governs electrical equipment in patient care areas.

Patients in intensive care units, operating rooms, and cardiac catheterization suites may have catheters or pacing wires that conduct directly to the heart. Current delivered this way can cause ventricular fibrillation at levels on the order of tens to a few hundred microamperes (microshock), which is why direct-cardiac applied parts are designed to a 10 µA limit. Current through intact skin (macroshock) is perceptible at about 1 mA, reaches the "let-go" range around 10–20 mA, and can cause ventricular fibrillation at roughly 100 mA.

All electrical safety testing must be conducted with a calibrated electrical safety analyzer traceable to the National Institute of Standards and Technology (NIST), with the analyzer asset ID and calibration expiration date recorded on the CMMS work order.