The CMS survey process is a rigorous, multi-phase review designed to verify that healthcare organizations meet the Medicare and Medicaid Conditions of Participation (CoPs). Knowing what to expect at each stage is one of the most effective ways to protect patient safety, safeguard revenue, and maintain provider status. With more than 50% of many hospitals’ total revenue tied to the Centers for Medicare and Medicaid Services (CMS), the stakes could not be higher.
The CMS certification process is governed by Title 42 of the Code of Federal Regulations and administered by State Survey Agencies, the designated state-level bodies that operate under agreements with the Department of Health and Human Services. These agencies conduct initial surveys, periodic resurveys, complaint investigations, and validation surveys on behalf of CMS. Their findings are then submitted to CMS Regional Offices, which hold the authority to approve or deny participation in Medicare and Medicaid programs.
Surveys are conducted by qualified health professionals who evaluate whether a provider meets each applicable Condition of Participation. A healthcare organization cannot participate in Medicare unless it meets every condition or attains substantial compliance with the relevant requirements. Unlike accreditation surveys that follow a predictable cycle, CMS surveys can be triggered by complaints, identified patterns of non-compliance, or as validation checks on accredited entities. In fact, CMS investigates 100% of complaints, 90% of allegations, and conducts approximately 5% of surveys as look-back or validation reviews.
It is also worth noting that CMS surveys are not limited to hospitals. Providers such as critical access hospitals, hospices, home health agencies, and ambulatory surgery centers are all subject to the certification process, each governed by their own applicable CoPs. Regardless of setting, the underlying expectation is the same: organizations must demonstrate that safe, high-quality care is consistently delivered and documented in a way that surveyors can verify.
State Survey Agencies also play a broader role beyond standard certification reviews. They are authorized to perform additional functions, including proficiency testing oversight for laboratories, nurse aide training program review, and participation in validation surveys of accredited entities. These validation surveys are specifically designed to monitor whether accrediting bodies are appropriately determining that organizations meet the CoPs. For organizations already holding accreditation through bodies like The Joint Commission (TJC) or Det Norske Veritas (DNV), this means a CMS validation survey can still occur independently and without advance warning.
Knowing that a survey can arrive without notice means that readiness must be maintained every single day across every department, every shift, and every level of staff.
When surveyors arrive, the first order of business is the opening conference. During this meeting, the survey team introduces itself, outlines the scope and purpose of the visit, and requests key documentation. Surveyors will typically ask for a list of current patients, staffing records, recent quality data, infection control logs, and emergency management plans. Being organized and responsive during this initial phase sets the tone for the entire survey.
Healthcare leaders should have a survey command center ready to go at a moment’s notice. Designated staff should know their roles, documents should be retrievable quickly, and leaders should be prepared to answer questions calmly and accurately.
One of the most intensive phases of a CMS survey involves tracers, a methodology in which surveyors follow the care experience of individual patients through the organization. They review medical records, observe care being delivered, interview staff at all levels, and assess whether policies and actual practices are aligned.
Surveyors are looking for consistency. A policy that exists on paper but is not reflected in bedside practice is a significant red flag. Staff education and ongoing competency assessment are critical here. Every team member, from physicians and nurses to environmental services personnel, may be interviewed. Surveyors pay close attention to how staff respond under pressure, whether they can articulate their roles in patient safety, and whether the organization’s stated values are visible in day-to-day operations.
CMS surveyors conduct a thorough review of the physical environment, including fire safety systems, hazardous materials management, utility systems, and infection control practices. They evaluate whether safety committee structures are functioning, whether fire drills include all required personnel, and whether equipment maintenance is properly documented.
The physical environment is one of the most commonly cited areas during CMS surveys, and many findings stem not from unsafe conditions but from incomplete or poorly organized documentation. Maintaining well-structured records of preventive maintenance, safety committee meeting minutes, and drill participation is just as important as having the physical systems in place.
Throughout the survey, surveyors request and review a wide array of documents, including policies and procedures, governing body meeting minutes, quality improvement data, staff credentialing files, and patient rights information. Every document must align with current CMS Interpretive Guidelines, which clarify and explain the regulatory requirements without imposing additional mandates.
Organizations should conduct regular internal audits of their policy libraries to ensure documents are current, reflect actual practice, and are written in language that is clear and actionable. Outdated policies that no longer match operational reality are a frequent source of avoidable citations.
At the conclusion of the survey, the team holds an exit conference with organizational leadership. During this meeting, surveyors share preliminary findings, known as deficiencies, which represent violations of the statute or regulations observed during the visit.
Deficiencies are categorized by scope and severity. In the most serious cases, a finding may rise to the level of Immediate Jeopardy, meaning there is a credible threat of serious harm or death to patients. An Immediate Jeopardy finding requires rapid corrective action and direct engagement with surveyors to demonstrate that the threat has been removed. Failure to resolve an Immediate Jeopardy finding can place an organization’s Medicare Provider status at serious risk, making advance preparation and a practiced response plan absolutely essential.
CMS surveys consistently reveal patterns in the types of deficiencies cited across healthcare organizations. Knowing where findings most commonly occur gives leaders a practical starting point for targeted improvement.
Infection prevention and control remain a top area of concern, from hand hygiene compliance to sterilization processes and isolation precautions. A single surgical site infection can cost a healthcare organization anywhere from $25,000 to $90,000 when implants are involved, making prevention both a patient safety and financial imperative.
Medication management is another frequent area of finding, particularly around storage, labeling, and reconciliation. Patient rights violations, including failure to properly inform patients of their rights or to document informed consent, also appear regularly in survey reports.
Staff competency documentation is a common gap, especially in organizations that have experienced leadership transitions or role redesigns. Surveyors look for evidence that staff are not only trained but that their competency has been assessed and documented on a regular basis. When organizations are in flux, whether due to mergers, retirements, or restructuring, these documentation gaps tend to widen quickly and quietly.
Emergency management planning, including hazard vulnerability analyses, after-action reports, and resource planning for vulnerable populations, is an increasingly scrutinized area. Organizations that have not revisited their emergency management programs in light of lessons learned from recent years may find themselves unprepared.
Deficiencies in fire drill documentation, equipment maintenance records, and utility management plans continue to appear across CMS surveys with striking regularity. Addressing these areas proactively through focused internal assessments, regular mock surveys, and real-time corrective action is far more effective than scrambling after a finding is issued.
Post-survey work carries its own significant demands. After receiving findings, organizations must develop and submit POCs that demonstrate how deficiencies will be resolved, how compliance will be sustained, and what monitoring will be in place. A well-constructed POC addresses the root cause of each finding, not just the surface symptom. The quality and specificity of a POC can influence how CMS evaluates an organization’s commitment to genuine, lasting improvement rather than a reactive, quick fix.
No organization should walk into a CMS survey without a trusted partner in their corner. At Courtemanche & Associates, we have been helping healthcare organizations achieve and maintain CMS compliance since 1994, bringing decades of combined healthcare expertise to every engagement.
Our CMS Compliance services are designed to support your organization before, during, and after a survey. We conduct customized CMS mock surveys, provide post-survey corrective action guidance, deliver staff and leadership education on the latest Interpretive Guidelines, and offer crisis response support when Immediate Jeopardy situations arise. Whether you need on-site support or the flexibility of virtual consulting, we’re here to support you every step of the way.
Request a proposal today, and let us build a plan tailored to your organization’s unique compliance needs.
