7.1 Accreditation Standards: The Joint Commission, CMS & State Licensing

Accreditation Standards: The Joint Commission, CMS & State Licensing

Healthcare risk managers operate at the complex intersection of federal regulations, voluntary accreditation standards, and state licensing laws. Navigating this multi-layered framework requires an in-depth understanding of how regulatory bodies interact, how compliance is evaluated during unannounced surveys, and how institutional noncompliance is remediated. Mastery of accreditation readiness and regulatory enforcement protocols is a core competency evaluated on the CPHRM examination.

---

The Tripartite Healthcare Regulatory Architecture

Regulatory oversight of U.S. healthcare facilities is structured as a tripartite architecture comprising federal oversight, private accreditation, and state licensure. Each arm of this architecture possesses distinct legal authority, survey methodologies, and enforcement mechanisms.

---

CMS Conditions of Participation (CoPs) and Deemed Status

The Conditions of Participation (CoPs) established by CMS constitute the mandatory baseline standards that hospitals and healthcare entities must satisfy to receive reimbursement under Medicare and Medicaid programs. Key CoP chapters heavily tested on the CPHRM exam include:

• Governing Body (§482.12): Holds ultimate legal responsibility for total hospital conduct, quality of care, medical staff credentialing, and fiscal management.
• Patient Rights (§482.13): Establishes enforceable standards for informed consent, privacy, freedom from improper restraint/seclusion, and grievance resolution.
• Quality Assessment and Performance Improvement - QAPI (§482.21): Mandates an ongoing, hospital-wide, data-driven program to monitor performance and prevent adverse events.
• Emergency Preparedness (§482.15): Requires an all-hazards emergency plan, risk assessment, communication plan, and annual training/testing exercises.

The Mechanics of Deemed Status

Under Section 1865 of the Social Security Act, a healthcare facility can fulfill CMS CoP requirements through accreditation by a CMS-approved independent accrediting organization, such as The Joint Commission (TJC), DNV GL Healthcare, or the Accreditation Association for Hospitals and Health Care (AAHF). This mechanism is known as deemed status.

While deemed status relieves hospitals from routine, scheduled inspections by State Survey Agencies acting on behalf of CMS, it does not grant total immunity. CMS routinely conducts:

1. Validation Surveys: Random, unannounced surveys performed by state surveyors within 60 days of an accrediting organization's survey to evaluate the accrediting body's rigor.
2. Complaint Investigations: Targeted surveys initiated in response to credible allegations of severe noncompliance, patient harm, or immediate jeopardy.

---

The Joint Commission (TJC) Standards & Survey Protocols

The Joint Commission accredits over 80% of U.S. hospitals. TJC standards emphasize continuous operational readiness rather than episodic survey preparation.

Critical Standard Domains for Risk Managers

• Environment of Care (EC): Focuses on six operational risk areas: safety, security, hazardous materials, emergency management, medical equipment, and utility systems.
• Life Safety (LS): Enforces compliance with the NFPA 101 Life Safety Code, covering fire barriers, smoke compartments, means of egress, and suppression systems.
• Leadership (LD.03.01.01): Mandates that hospital leadership build and sustain a just safety culture, regularly measure safety performance, and allocate resources for error prevention.
• National Patient Safety Goals (NPSGs): Annually updated clinical directives targeting high-risk failure modes:
  • NPSG.01.01.01: Use at least two patient identifiers when administering medication or blood products.
  • NPSG.02.03.01: Report critical results of tests and diagnostic procedures on a timely basis.
  • NPSG.03.04.01: Label all medications, medication containers, and solutions in perioperative and procedural settings.
  • NPSG.15.01.01: Reduce the risk for suicide among patients in psychiatric and general medical units through environmental risk assessment and validated screening.

Survey Methodology & The SAFER Matrix

TJC employs the Tracer Methodology, where surveyors select actual patients and follow their care pathway chronologically across departments to evaluate interdisciplinary handoffs, infection control, medication administration, and recordkeeping.

Deficiencies identified during survey are scored using the SAFER (Survey Analysis for Evaluating Risk) Matrix, a 3x3 grid that plots findings based on Likelihood to Harm Patient/Staff/Visitor against Scope of Noncompliance:

Findings placed in the high-risk or widespread quadrants require a 60-day Evidence of Standards Compliance (ESC) submission detailing operational corrective actions and sustained audits.

The TJC Sentinel Event Policy

A Sentinel Event is defined by TJC as a patient safety event (unrelated to the natural course of the patient's illness) that reaches a patient and results in death, permanent harm, or severe temporary harm requiring life-sustaining intervention. Examples include wrong-site surgery, retained surgical sponges, suicide of a patient in a 24-hour care setting, or infant abduction.

Upon identifying a reviewable Sentinel Event, the risk manager must:

1. Take immediate clinical measures to stabilize the patient and secure the environment/equipment.
2. Formulate a multidisciplinary team to perform a Root Cause Analysis (RCA).
3. Submit a thorough, credible comprehensive systematic analysis and Corrective Action Plan to TJC within 45 business days of the event or its discovery.

---

State Department of Health (DOH) Licensing & Immediate Jeopardy (IJ)

State licensure is mandatory; a hospital cannot operate legally without a valid state health department license, regardless of its accreditation status. State surveyors hold broad enforcement powers under state public health statutes.

The Statement of Deficiencies (CMS Form 2567)

When state or federal surveyors identify noncompliance during an inspection, findings are formally cited on CMS Form 2567 (Statement of Deficiencies and Plan of Correction). The facility has 10 calendar days from receipt of Form 2567 to submit a detailed Plan of Correction (PoC).

An acceptable PoC must address four specific elements:

1. How corrective action will be accomplished for affected patients.
2. How the facility will identify other patients having the potential to be affected by the same deficient practice.
3. What systemic measures and operational changes will be implemented to prevent recurrence.
4. How performance will be monitored through audit metrics to ensure sustained compliance.

Immediate Jeopardy (IJ) Citations & Abatement

An Immediate Jeopardy (IJ) citation represents the most grave regulatory emergency. Defined by CMS, IJ exists when facility noncompliance has caused, or is likely to cause, serious injury, harm, impairment, or death to a patient.

Three core components must be present for surveyors to declare IJ:

• Harm / Threat: Actual or potential serious injury, harm, impairment, or death.
• Immediacy: The harm or threat is present or imminent.
• Culpability: The facility created the systemic condition or failed to implement known safeguards.

+-----------------------------------------------------------------------------------+
|                         IMMEDIATE JEOPARDY ABATEMENT TIMELINE                     |
+-----------------------------------------------------------------------------------+
| DAY 0: IJ Citation Issued by Surveyors (Survey Stops; Notification to CMS)        |
| DAY 1-2: Risk Manager Coordinates Rapid Abatement Plan Draft                      |
| DAY 2-3: Implementation of Immediate Removal Measures & Staff Education            |
| DAY 3-5: Surveyors Re-enter Facility to Verify Abatement Plan Execution            |
| DAY 23: Fast-Track Medicare Termination Deadline if IJ Not Successfully Abated    |
+-----------------------------------------------------------------------------------+

When IJ is cited, CMS places the facility on a 23-day fast-track Medicare termination schedule. The risk manager must immediately convene executive leadership, draft an Immediate Abatement Plan, remove the immediate threat within 24–48 hours, re-train frontline staff, and request surveyor re-entry to lift the IJ before the 23-day clock expires.

---

Real Clinical Accreditation Scenario: Handling an Unannounced Survey & IJ Citation

Scenario: During an unannounced state survey agency inspection of a 400-bed regional hospital, surveyors enter the Emergency Department (ED) and inspect resuscitation equipment. Surveyors discover that three code carts contain expired epinephrine and defibrillators with missing daily inspection logs spanning 45 consecutive days. In addition, telemetry nursing staff are unable to demonstrate competency in critical arrhythmia alarms. Surveyors immediately issue an Immediate Jeopardy (IJ) citation for failure to maintain emergency equipment and nursing competency, threatening Medicare termination within 23 days.

Risk Management Protocol & Action Plan:

1. Immediate Containment: The risk manager immediately locks down all ED code carts, replaces expired drugs, and performs 100% operational testing and calibration of all defibrillators across the hospital within 4 hours.
2. Systemic Audit: Audit 100% of code carts and crash cart daily logs across all inpatient units to verify scope.
3. Draft Abatement Plan: Author an Immediate Abatement Plan requiring mandatory, documented hands-on defibrillator and medication check re-education for 100% of ED and ICU nursing personnel prior to their next shift.
4. Submission & Verification: Submit the Abatement Plan to CMS/DOH within 24 hours. Surveyors conduct a re-visit on Day 4, verify staff competency and equipment logs, and formally remove the Immediate Jeopardy finding, downgrading the citation to a Condition-Level deficiency subject to a standard 60-day PoC monitoring plan.