IBFCSM CHSP cheat sheet

Safety program accountability runs through a written statement of authority: the governing body delegates safety oversight to a designated safety officer and a multidisciplinary safety committee that meets at least quarterly and documents minutes.

Hierarchy of controls, strongest to weakest: elimination, substitution, engineering controls, administrative controls, then personal protective equipment; PPE is the last line of defense and never a substitute for higher-level controls.

Sentinel event review follows a defined sequence: stabilize and disclose, contain the risk, convene root cause analysis within a set interval (commonly 45 days), then build a measurable action plan with owners and due dates.

Failure Mode and Effects Analysis (FMEA) is prospective: score each failure mode as severity x occurrence x detectability on 1-10 scales; risk priority number (RPN) ranges 1-1000, and the highest RPNs drive redesign.

Root cause analysis is retrospective and assumes systems, not individuals, produce most adverse outcomes; findings must trace to latent conditions such as staffing, design, policy, and communication rather than blaming a single caregiver.

Leading indicators (hand hygiene compliance, safety huddle completion, near-miss reports, training currency) predict future harm; lagging indicators (falls with injury, hospital-acquired pressure injuries, needlestick rates) measure harm already occurring.

Just culture distinguishes human error (console), at-risk behavior (coach and remove incentives), and reckless behavior (sanction); the classification drives the response, not the severity of the outcome alone.

Safety committee quorum, membership, and reporting timelines are set in the organization's own charter and bylaws; the charter is the controlling document when policies conflict.

CMS Conditions of Participation set the legal floor for Medicare/Medicaid participation; Joint Commission accreditation can serve as deemed status satisfying most CoPs, but CMS retains enforcement authority and can cite directly.

Joint Commission standards are organized by chapter (e.g., Environment of Care, Life Safety, Infection Prevention and Control); survey findings are scored as Requirements for Improvement, and a Pattern or Conditional accreditation level follows clustered or severe deficiencies.

The Environment of Care chapter requires a documented management plan, an annual risk assessment (hazard vulnerability analysis), measurable objectives, and an annual evaluation for each of the seven EC focus areas.

OSHA healthcare priorities include the Bloodborne Pathogens Standard (29 CFR 1910.1030), Hazard Communication (1910.1200), Respiratory Protection (1910.134), and the Emergency Temporary Standard-derived COVID-19 log requirements where still applicable.

The Bloodborne Pathogens Standard requires an exposure control plan reviewed at least annually, hepatitis B vaccination offered within 10 working days of assignment, post-exposure evaluation, and sharps injury log maintenance.

NFPA 101 Life Safety Code and NFPA 99 Health Care Facilities Code are adopted by CMS through reference; compliance with the edition adopted by the authority having jurisdiction is mandatory, and edition year matters.

Documentation must be contemporaneous and retrievable: policies, drills, inspections, training records, and corrective actions are the evidence surveyors request; an unwritten practice is treated as no practice.

Plan of Correction responses require a corrective action, an owner, a completion date, and a validation method; repeat deficiencies at the same standard escalate scrutiny and can trigger additional surveys.

Standard precautions apply to all patients regardless of diagnosis: hand hygiene, gloves, gown, mask, eye protection based on anticipated exposure, safe injection practices, and respiratory hygiene/cough etiquette.

Transmission-based precautions add to standard precautions: Contact (MRSA, C. difficile, scabies), Droplet (influenza, pertussis, meningococcus; mask within 3-6 feet), Airborne (tuberculosis, measles, varicella; N95 or PAPR plus negative-pressure AII room).

Hand hygiene follows the WHO Five Moments: before touching a patient, before aseptic procedure, after body fluid exposure risk, after touching a patient, and after touching patient surroundings.

C. difficile requires soap-and-water handwashing rather than alcohol-based rub because alcohol does not reliably kill spores; contact precautions plus sporicidal environmental cleaning are required.

Central line-associated bloodstream infection prevention bundles: hand hygiene, maximal sterile barrier during insertion, chlorhexidine skin antisepsis, optimal site selection, daily review of line necessity, and prompt removal.

Surgical site infection prevention includes appropriate timing of prophylactic antibiotics (within 60 minutes before incision for most agents), glucose control, normothermia, and avoidance of unnecessary hair removal; if hair removal is needed, use clippers.

The infection preventionist reports surveillance data to the safety/infection committee and uses standardized definitions (e.g., NHSN) so rates are comparable; device-day denominators are used for CLABSI, CAUTI, and VAP rates.

Outbreak investigation steps: confirm the cluster, define cases, establish the baseline rate, generate hypotheses, implement control measures, and communicate; do not wait for complete identification before acting.

OSHA Hazard Communication requires a written program, a chemical inventory, Safety Data Sheets (SDS) accessible in every work area, and container labeling; the 16-section SDS format replaced the older MSDS.

The NFPA 704 diamond rates Health (blue), Flammability (red), Instability (yellow), and Special hazards (white) on 0-4 scales; 4 is the most severe, and the white quadrant flags oxidizers, water reactivity, or other special hazards.

Hazardous waste is characterized by ignitability, corrosivity (pH <=2 or >=12.5), reactivity, and toxicity; healthcare-specific streams include regulated medical waste, pharmaceutical waste, and RCRA-listed or characteristic hazardous chemical waste.

Regulated medical waste includes blood and other potentially infectious material, sharps, pathological waste, and microbiological cultures; it must be segregated at the point of generation, labeled, and stored per state rules.

Sharps containers must be closable, puncture-resistant, leak-proof, labeled or color-coded, and replaced when three-quarters full; overfilling is a common citation.

Spill response follows a defined sequence: alert and evacuate the area, protect yourself with appropriate PPE, contain the spill, absorb or neutralize, clean, and dispose per waste stream; mercury spills require special handling and never a standard vacuum.

Formaldehyde, ethylene oxide, and glutaraldehyde are high-hazard healthcare chemicals with specific exposure limits and monitoring requirements; ethylene oxide requires medical surveillance and a dedicated sterilizer area with exhaust ventilation.

Waste minimization and segregation reduce cost and risk; mixing hazardous waste into the general stream creates a regulatory violation, and mixing non-hazardous waste into hazardous streams increases disposal cost without benefit.

R.A.C.E. sequence: Rescue anyone in immediate danger, Alarm (activate the fire alarm and notify), Contain (close doors), Extinguish or Evacuate; P.A.S.S. for extinguisher use: Pull, Aim, Squeeze, Sweep.

Fire drills must be documented with date, time, participants, scenario, and critique; the Life Safety Code requires drills at defined frequencies, and healthcare occupancies typically require quarterly drills on each shift.

Defend-in-place is the primary strategy in healthcare: horizontal relocation to a smoke compartment precedes vertical evacuation, and full building evacuation is a last resort.

Smoke compartments must resist smoke for a rated period (commonly 30 minutes in sprinklered healthcare occupancies) and are the unit of horizontal evacuation.

Fire doors must self-close and latch; wedging or propping fire doors is a Life Safety Code violation, and door hold-open devices must release on alarm.

Sprinkler systems require documented weekly/monthly inspections, annual flow tests, and clearance of at least 18 inches below deflectors; storage in sprinklered areas is limited by NFPA 13.

Fire extinguishers require monthly visual inspection, annual maintenance, and hydrostatic testing at the interval stamped on the unit; the inspection tag is the surveyor's evidence.

Interim life safety measures (ILSM) are required when a Life Safety Code feature is impaired during construction or repair; the ILSM plan addresses fire watch, extinguishers, exit routes, and notification.

The occupational health program includes pre-placement assessment, immunization (hepatitis B, MMR, varicella, influenza, Tdap), TB screening, and post-exposure follow-up; records are confidential and stored separately from personnel files.

Needlestick and sharps injuries require immediate first aid (wash with soap and water, do not squeeze or scrub), source evaluation, and post-exposure prophylaxis decisions within hours for HIV and hepatitis B.

The Bloodborne Pathogens Standard requires the employer to offer hepatitis B vaccination free of charge within 10 working days of assignment and to document acceptance or declination.

Respiratory protection program elements: written program, medical evaluation, fit testing (annual, and for each respirator model), training, and recordkeeping; users must be clean-shaven at the face seal.

Safe patient handling programs use mechanical lifts and algorithms to reduce musculoskeletal injury; OSHA general duty clause and state safe-patient-handling laws may apply where no specific standard exists.

Workplace violence prevention includes a written program, hazard assessment, reporting system, training, and post-incident review; healthcare is among the highest-risk industries for nonfatal assault.

Latex allergy prevention uses non-latex alternatives, low-protein gloves, and identification of sensitized employees; powder-free gloves reduce airborne latex protein exposure.

Employee injury and illness recordkeeping (OSHA 300 log) applies to recordable cases: death, days away, restricted work, medical treatment beyond first aid, loss of consciousness, or significant diagnosis.

The Hazard Vulnerability Analysis (HVA) ranks each hazard by probability, human impact, property impact, business impact, and preparedness; the resulting risk score drives planning and resource allocation.

CMS Emergency Preparedness Rule requires four elements: risk assessment and emergency plan, policies and procedures, communication plan, and training and testing (two exercises per year, one community-based).

The Hospital Incident Command System (HICS) provides a scalable command structure with Incident Commander, Operations, Planning, Logistics, Finance/Administration, and Public Information; it integrates with community NIMS/ICS.

Surge capacity planning addresses beds, staffing, supplies, and space; the four S's (staff, stuff, space, systems) frame surge gaps, and crisis standards of care define care under extreme scarcity.

Decontamination planning includes a dedicated decontamination area with separate entry and exit, PPE for staff, and a process to triage contaminated patients before entry to the emergency department.

Communication plans must address redundant systems (landline, cellular, radio, satellite), backup power for communications, and interoperable communication with public health and emergency management.

Evacuation planning covers horizontal, vertical, and full-building evacuation, plus relocation to alternate care sites; transportation and tracking of patients and staff are documented.

Recovery planning addresses restoration of utilities, resumption of services, staff support and psychological first aid, and after-action review with corrective actions tracked to completion.

The Joint Commission National Patient Safety Goals include patient identification (two identifiers), improved communication (read-back), medication safety, health care-associated infection, and clinical alarm safety.

Two-patient-identifier rule: never use room number or bed as an identifier; use name plus date of birth or medical record number, and verify at every handoff and before every procedure.

High-alert medications (concentrated electrolytes, anticoagulants, insulin, neuromuscular blockers) require independent double checks, standardized concentrations, and separate storage.

Look-alike/sound-alike medications require tall-man lettering, physical separation, and auxiliary labels; the organization must maintain its own list based on its formulary.

Sentinel events are unexpected occurrences involving death or serious harm; the organization conducts a root cause analysis, and reporting to The Joint Commission is voluntary but expected.

Failure to rescue, falls with injury, and hospital-acquired pressure injuries are nurse-sensitive indicators tracked through quality dashboards and benchmarked against national data.

Disclosure of harm to patients and families is an ethical and accreditation expectation; it includes an apology, an explanation of what happened, and a plan to prevent recurrence.

Risk management uses a reporting system for events, near misses, and unsafe conditions; near-miss reporting is a leading indicator and should be encouraged without punitive response.

The Environment of Care plan covers safety, security, hazardous materials and waste, fire safety, medical equipment, utilities, and construction; each area has a written plan and annual evaluation.

Security risk assessment identifies assets, threats, vulnerabilities, and consequences; the security management plan addresses access control, identification badges, and response to security incidents.

Workplace violence prevention program elements: management commitment, worksite analysis, hazard prevention and control, safety and health training, and recordkeeping and evaluation.

Violence risk factors in healthcare include working alone, late-night shifts, uncontrolled public access, behavioral health units, and handling of valuables or drugs.

Environmental rounding checks for slip/trip/fall hazards, blocked exits, improper storage, unsecured oxygen, and damaged flooring; findings are logged and corrected with a completion date.

Construction and renovation require an Infection Control Risk Assessment (ICRA) and an Interim Life Safety Measures (ILSM) plan; barriers, negative air pressure, and dust control protect patients.

Utility system management includes evaluation of utility failures, maintenance and testing of critical systems (electrical, water, HVAC, medical gas), and contingency plans for loss of each.

Security incidents and workplace violence events are reported through the same event reporting system as patient safety events and reviewed by the safety committee for trends.

Medical equipment management includes an inventory, a scheduled maintenance program, and a process for identifying and acting on equipment hazards and recalls; the program is evaluated annually.

Equipment is classified by risk: high-risk (life support, defibrillators, anesthesia machines) receives more frequent inspection; the classification drives the maintenance interval.

Preventive maintenance must be documented with date, technician, findings, and corrective action; documentation is the survey evidence, and missed PMs are a common finding.

Electrical safety includes leakage current testing, grounding, and inspection of cords and plugs; equipment with damaged cords is removed from service immediately.

Medical gas systems require verification of pressure, flow, and alarm function; cylinders are stored secured and segregated full from empty, and oxygen is kept away from grease and heat.

Utility failure contingency plans cover loss of electricity, water, HVAC, medical gas, and steam; critical care areas require generator-backed power and tested emergency receptacles.

Alarm safety: clinical alarms must have a documented policy addressing default settings, customization, and who can change them; alarm fatigue is a recognized patient safety hazard.

Equipment recalls and hazard alerts require a process to receive, evaluate, and act on them, with documentation that affected equipment was identified and corrected.