These are the findings that show up in every setting, from a 500-bed hospital to a two-room clinic, and they are the ones most often owned by nobody in particular.
OSHA
- Bloodborne pathogens — exposure control plan reviewed and updated annually, sharps injury log, engineering controls with documented frontline input into their selection, hepatitis B vaccination records and declinations, post-exposure procedure.
- Hazard communication — chemical inventory, safety data sheets, labelling, and training people can actually recall.
- Respiratory protection, including fit testing records and the medical evaluation that has to precede it.
- Workplace violence prevention, now an explicit expectation in healthcare settings and an increasingly common citation.
- Recordkeeping — the 300 log, the 300A posting and the reporting timelines for hospitalizations and amputations.
Infection prevention
Instrument reprocessing is where ambulatory settings get hurt most often: sterilization monitoring and biological indicators, high-level disinfection of endoscopes and probes, single-use device handling, and staff competency documented for each specific process rather than in general. We also cover hand hygiene monitoring that produces usable data, injection safety, and the construction risk assessment requirements that catch organizations mid-renovation.
Environment of care and life safety
Life Safety Code compliance, fire drills documented by shift and location, medical gas and equipment management, utility systems, and the interim life safety measures that construction triggers.
Emergency preparedness
The CMS Emergency Preparedness Rule applies across provider types with setting-specific requirements: risk assessment, communication plan, training and the exercise requirement — including the documented after-action improvement that most organizations skip.