The Copied Test Values
You are the clinical engineering director at a 340-bed community hospital. A nurse reports that an infusion pump did not alarm during an occlusion. Pulling service records, you find the 41-pump fleet is maintained by a single certified biomedical equipment technician with 22 years of service, and that his pressure and occlusion test entries for the last 14 months appear to be copied - the same three numeric values recur across dozens of serial numbers, and 11 pumps have maintenance entries with no corresponding time on the shop calendar. Confronted informally, he says he has been running the pumps through a quick check because the department is short-staffed and nobody else is trained. He is the only person who can service the fleet until a second technician finishes training in nine weeks. A state survey is scheduled in three weeks, and the vice president of operations tells you to reconstruct the records and keep the matter in-house.
1. What do you do in the first 72 hours? State explicitly what you will not do, and why.
Read the worked answer
Sequence: patients, evidence, records, message.
- Bound the exposure. Pull the asset list and flag every pump whose maintenance cannot be verified - the 11 with no shop time plus any pump carrying a recurring copied value. Locate all of them, including storage, the emergency department, and any units out on rental.
- Remove them from clinical use without stopping infusion therapy. Rent an equivalent fleet or redistribute from low-acuity areas. A pump returns to service only after a genuine pressure and occlusion test by a qualified person, documented on a form dated the day it is performed.
- Do not reconstruct anything. The VP's instruction is the point at which you put your refusal in writing. Backfilling test results is falsification of a maintenance record: it converts a quality failure into a fraud and accreditation problem, it destroys your credibility with the surveyors, and it leaves unverified pumps in patients. A record created today that describes today's test is honest; a record created today that claims last March is not.
- Preserve the originals. Do not edit, delete, or re-print the suspect logs. Copy them, keep the originals under your control, and log the chain of custody. The copied values are the evidence that proves the scope of the problem.
- Escalate internally the same day to risk management, the chief nursing officer, the chief medical officer, and compliance - not to protect yourself, but because each of them has an obligation that starts the moment you know.
- Interview the technician once, formally, with HR present, and ask for a written statement. This is an HR and licensure matter, not something you resolve by reassigning him quietly.
2. Who must be told, in what order, and what do you disclose about the records?
Read the worked answer
Internal first, because the clock on external reporting depends on facts you do not yet have.
- Day 1: risk management, CNO, CMO, compliance officer, HR. Provide the factual finding, the containment steps, and the list of affected assets. Do not characterize intent.
- Days 1–5: determine whether any patient was injured by a pump that failed and had unverified maintenance. Interview the reporting nurse and review the event. This single question drives everything external.
- External, if there was a serious injury or death: under the FDA user-facility reporting rule, a device-related death goes to FDA and the manufacturer within 10 working days; a serious injury goes to the manufacturer within 10 working days. If no injury has been identified, there is no user-facility report to file - but you still notify the manufacturer in writing of the maintenance finding, because it may bear on their own complaint handling.
- Accreditation and survey: answer the state surveyors truthfully if the topic arises; do not volunteer a narrative you have not verified, and do not conceal it. Many accreditation programs expect self-reporting of sentinel events - check your program's requirement rather than assuming.
- The records themselves: disclose that maintenance documentation was not reliable for a defined period and that the affected devices have been re-verified, with the verification log attached. Do not present reconstructed entries as history. Regulators and surveyors routinely accept a bad fact honestly discovered; they do not accept a cleaned-up record.
- The technician's certification body: route this through HR and legal. Your obligation is to report factually internally; the employer, not you individually, normally makes the external report about an employee.
3. How do you close the staffing gap without recreating the conditions that caused the failure?
Read the worked answer
The copied values are a symptom; the workload standard is the cause.
- Bridge the nine weeks with contracted or OEM service, not with an untrained person signing forms. Price a short-term service agreement for the infusion fleet and treat it as a patient-safety expenditure, not a discretionary one. Bring the business case to the CMO in risk terms.
- Re-scope the technician's duties immediately. He can perform work under direct supervision and with second-person verification, but he does not sign maintenance completion until the investigation closes. Removing him entirely on day one may be neither possible nor fair; removing his signature authority is both.
- Rebuild the control, not just the trust. Institute second-person verification on safety-critical tests, a 10% random audit of completed work orders each month, and periodic reconciliation between work-order timestamps and shop access or calendar data. A control that depends on one person's integrity is not a control.
- Fix the time standard. If the allocated minutes per pump are below the manufacturer's actual procedure time, every technician will eventually shortcut. Measure the real procedure time on three pumps and rewrite the standard.
- Accelerate the second technician and cross-train a third person for the top three device families so no fleet has a single point of failure.
- Do not let the survey deadline drive the plan. The survey is an inspection of the system you actually have; the remediation plan with dates and owners is what you show, and it is more persuasive than a perfect-looking log.