This article is for the agency administrator with an initial certification or recertification survey on the calendar, the compliance lead running mock surveys against an EHR-driven workflow, and the new owner who has just inherited a Medicare-certified agency and wants to know where past surveys went wrong. It assumes a reader who already knows how the CoP framework fits — for the section-by-section walkthrough of 42 CFR Part 484 itself, including the post-2018 numbering and the CY 2025 and CY 2026 Home Health Final Rule changes, start with our working guide to the CMS Conditions of Participation. For the day-by-day operational sequence between state license issuance and a clean initial certification survey, the First 90 Days operational playbook is the companion read.

How CMS Surveys Map to 42 CFR Part 484

A CMS home health survey — initial certification, recertification, complaint, validation, or revisit — is conducted under section 1891 of the Social Security Act and 42 CFR Part 488 by a State Survey Agency on CMS's behalf, or, where the agency has elected accreditation, by a CMS-approved Accrediting Organization (ACHC, CHAP, or The Joint Commission). The surveyor does not invent a checklist. Every probe, every record review, every interview, and every observation is driven by the State Operations Manual Appendix B, "Guidance to Surveyors: Home Health Agencies," which sits inside CMS Pub. 100-07 and is updated through periodic transmittals as the underlying CoPs change. Appendix B walks the surveyor Subpart by Subpart, Standard by Standard, and identifies the artifacts the surveyor is supposed to look for: the policy in the manual, the chart entry in the clinical record, the credential in the personnel file, the minute in the governing-body folder.

When the surveyor finds a gap between what Appendix B requires and what the agency has produced, the gap becomes a deficiency on the CMS-2567 Statement of Deficiencies and Plan of Correction. The deficiency is cited at the Standard level, identified by a G-tag — the alphanumeric code in Appendix B that maps to the specific § and Standard — and assigned a Scope and Severity rating from A (isolated, no actual harm with potential for minimal harm) through L (widespread, immediate jeopardy to patient health or safety). A pattern of Standard-level deficiencies under the same Condition can be elevated to a Condition-level deficiency, which is the trigger for the more serious enforcement remedies under 42 CFR Part 488 Subpart I — directed plans of correction, denial of payment for new admissions, civil money penalties, and ultimately termination from the Medicare program.

Two operating realities follow. First, the surveyor is reading Appendix B; the agency that has read only the regulation is at a disadvantage. Second, the deficiency is almost always a documentation gap, not a practice gap. Most agencies do the right thing clinically and lose points for not producing the artifact that proves it. The fixes in this article are mostly fixes to the documentation pipeline, not to the underlying clinical or administrative practice.

The G-Tag System in Plain English

"G-tag" is shorthand for the CMS deficiency code used in home health surveys. The letter prefix identifies the provider type — "G" for home health agency, "F" for nursing home, "L" for hospice — and the number identifies the specific Standard inside Appendix B. The G-tag numbering was rewritten when the 2017 final rule renumbered Part 484, and CMS continues to refresh G-tag numbers through SOM transmittals as it updates interpretive guidance. Two practical consequences: agencies should always verify the current G-tag for a Standard against the most recent transmittal of Appendix B before mock-surveying against an old version, and CMS-2567 forms always cite both the § and the G-tag, so the corrective-action plan can reference either authority safely.

The aggregate deficiency tables CMS publishes through Quality, Safety & Education Portal (QSEP) and through the QCOR (Quality, Certification, and Oversight Reports) site show that the same handful of CoP § citations dominate the most-cited list year over year. The ten clusters below are the ones a 2026-vintage operator should expect a surveyor to probe most aggressively. Within each cluster, the article identifies the § citation, the Appendix B probe path, the failure mode the agency typically presents, and the operational fix that closes the gap.

Deficiency 1 — § 484.50 Patient Rights Notice and Documentation

What the Standard requires. § 484.50 is the patient rights CoP. The agency must provide each patient with a verbal notice of rights in the patient's primary language, in a form and manner the patient understands, no later than the second visit. A written notice of rights must be provided in advance of furnishing patient care and must include the patient's right to participate in the plan of care, the right to receive all services in the plan, the right to confidentiality, the agency's complaint procedure, the toll-free state Home Health Hotline phone number and hours of operation, the contact information for the state's protection-and-advocacy network, and the OASIS privacy notice. The patient or representative signs and dates an acknowledgment that the agency retains in the clinical record.

Failure mode. The most cited failure is timing. Surveyors find the verbal notice documented at the third or fourth visit instead of the second, the OASIS privacy notice missing entirely, the state hotline number stale, or the protection-and-advocacy contact omitted. A second cluster of failures hits transfer and discharge — the agency stopped servicing the patient without the § 484.50(d) advance notice, or notified the patient of the discharge without documenting the reason in the clinical record.

The fix. A one-page intake packet, structured Standard-by-Standard against § 484.50(c), is the simplest control. Every required element appears in fixed order with a signature block at the bottom. The EHR start-of-care workflow forces the visit-2 deadline by surfacing a hard stop until the signed acknowledgment is uploaded. The agency revisits the state hotline number and the protection-and-advocacy contact every twelve months — both change more often than operators expect — and rolls a fresh PDF into the EHR template so every new admission picks up the current version automatically.

Deficiency 2 — § 484.55 Comprehensive Assessment and Drug Regimen Review

What the Standard requires. § 484.55 requires that each patient receive a patient-specific comprehensive assessment that accurately reflects current health, psychosocial, functional, and cognitive status; the patient's strengths, goals, and care preferences; the patient's continuing need for home care; medical, nursing, rehabilitative, social, and discharge planning needs; a review of all medications the patient is currently using; the primary caregiver if any; and the patient's representative if any. The initial assessment visit must be completed within 48 hours of the referral, within 48 hours of the patient's return home, or on the physician-ordered start-of-care date. The comprehensive assessment must be completed within five calendar days after the start of care. Reassessment must occur at least every 60 days, on a significant change in condition, and at discharge. § 484.55(c)(5) carries the explicit drug regimen review requirement.

Failure mode. Three timing rules — the 48-hour initial visit, the five-day comprehensive completion, and the 60-day reassessment cadence — all slip in agencies that are not running a deadline-driven EHR workflow. The drug regimen review is frequently documented as a list of medications without evidence of the review against significant adverse effects, drug-drug interactions, ineffective drug therapy, duplicate therapy, or noncompliance — the very review elements the OASIS data items and the HH QRP "Drug Regimen Review with Follow-up for Identified Issues" measure are designed to capture. Surveyors who pull a sample of charts and find a medication list without an associated clinician-signed review note will tag the chart at Standard level, and a pattern across the sample escalates.

The fix. Lock the EHR start-of-care workflow so the chart cannot close without the timed initial visit, the day-five comprehensive, and the OASIS submission stamp. Build the drug regimen review as a discrete clinician-signed note tied to the medication list — not a checkbox on the medication reconciliation form. Run the OASIS-derived "issues identified at SOC/ROC" report weekly and confirm that every issue triggered a documented physician contact and follow-up note within the timeframe the OASIS guidance manual describes. The OASIS-E1 instrument's M2003/M2004/M2005 drug-regimen-review items are the surveyor's roadmap; build the chart to answer those items completely. Our OASIS-E documentation guide walks the SOC/ROC/Recert/Transfer/Discharge timepoints in detail.

Deficiency 3 — § 484.60 Plan of Care Signature, Content, and 60-Day Review

What the Standard requires. § 484.60 requires that the plan of care be established and periodically reviewed by a doctor of medicine, osteopathy, or podiatry — or, since the CARES Act of 2020 codified the change, by a nurse practitioner, clinical nurse specialist, or physician assistant working in accordance with state law. The POC must specify the care and services necessary to meet the patient-specific needs identified in the comprehensive assessment, identify the responsible discipline(s), and address the frequency, type, amount, and duration of services. The POC must be reviewed and revised by the responsible practitioner and the HHA as frequently as the patient's condition or needs require, but no less frequently than once every 60 days, beginning with the start-of-care date. Verbal orders must be authenticated and dated by the practitioner who gave the order, and the agency may not provide services without an order.

Failure mode. Plans of care that lack signed orders from the responsible practitioner, that omit specific frequency-and-duration language for each discipline, or that fail to reflect changes from the most recent reassessment. Surveyors find verbal orders that were documented at the visit but never authenticated by the practitioner inside the chart's audit log. They find recertification POCs that are signature-stamped on the same date as the original certification, suggesting a clerical signature workflow rather than a clinical review. They find frequency language ("PT 1-3x weekly") that is inconsistent with the visits actually furnished, exposing both a documentation gap and a billing risk.

The fix. An EHR plan-of-care template with required-field validation against § 484.60(a)(2) — orders, allergies, prognosis, mental status, types of services and equipment required, frequency of visits, prognosis, rehabilitation potential, functional limitations, activities permitted, nutritional requirements, all medications and treatments, safety measures, instructions for timely discharge or referral, and any additional items the agency or practitioner chooses to include. A pre-signature checklist that the clinical manager runs against the template before the POC is sent to the practitioner. A verbal-order workflow with a hard 30-day authentication window measured from the order date, surfaced in the EHR audit log so unauthenticated verbal orders generate a daily exception report. A recertification trigger that fires at day 50 of the certification period and routes the chart through the responsible discipline before the day-60 deadline.

Deficiency 4 — § 484.65 QAPI Evidence and Performance Improvement Projects

What the Standard requires. § 484.65 requires the agency to develop, implement, evaluate, and maintain an effective, ongoing, HHA-wide, data-driven Quality Assessment and Performance Improvement program. The Standards within § 484.65 require the program to use quality-indicator data, including measures derived from OASIS, to design and implement performance improvement projects (PIPs); to focus on indicators related to improved outcomes, including the use of emergent care services, hospital admissions and re-admissions, and the prevention and reduction of medical errors; to address adverse patient events; and to take actions aimed at performance improvement and to track the actions taken to ensure that improvements are sustained. The governing body is responsible for ensuring that an ongoing QAPI program is defined, implemented, maintained, and evaluated annually.

Failure mode. QAPI is the most frequently elevated Standard-to-Condition-level deficiency in initial certification surveys. The pattern is consistent: the agency has a QAPI policy, an indicator dashboard somewhere, and a PIP idea — but no governing-body minutes documenting oversight, no measurable indicator targets tied to OASIS or claims data, no completed PIP cycle with documented analysis and sustained improvement, and no annual evaluation. The surveyor asks for the artifacts and the agency cannot produce them; the regulation has been satisfied on paper and the survey result is failure.

The fix. A written QAPI program description signed and dated by the governing body. A current set of measurable indicators tied to OASIS (acute-care hospitalization, emergency department use, improvement in ambulation, improvement in dyspnea, drug regimen review with follow-up, discharge function score) and to claims data, with quarterly thresholds and target trajectories. At least one PIP in process with a written charter, root-cause analysis, intervention design, monitoring plan, and outcome assessment. Governing-body meeting minutes that explicitly reference the indicator dashboard and the PIP roster. An annual QAPI program evaluation memorandum approved by the governing body and dated within the past twelve months. None of this requires more clinical work than the agency is already doing — it requires documenting the work in a place a surveyor can find on the day of the survey.

Deficiency 5 — § 484.70 Infection Prevention Surveillance, Education, and Vaccination Documentation

What the Standard requires. § 484.70 requires the HHA to follow accepted standards of practice, including the use of standard precautions, to prevent the transmission of infections and communicable diseases. The agency must maintain a coordinated agency-wide program for the surveillance, identification, prevention, control, and investigation of infectious and communicable diseases that is an integral part of the HHA's QAPI program. Patients, caregivers, and staff must be educated on current infection prevention and control practices. The COVID-19 vaccination education and offer requirement for HHA staff, codified at the § 484.70 Standard level through interim final rules and carried forward through the CY 2026 cycle, sits inside this CoP.

Failure mode. Many agencies operate against an infection-control program that is functionally adequate and documented inadequately. Aggregate infection logs are out of date, patient and caregiver education on standard precautions is implied rather than evidenced, staff competency on hand hygiene and PPE use is verbalized rather than recorded, the COVID-19 vaccination education and offer is delivered verbally without a signed acknowledgment, and the surveillance reports the QAPI committee is supposed to review do not exist as written products. Each gap is a Standard-level finding; patterns across the IC program elevate.

The fix. A monthly infection log with a clinician-owner, a quarterly surveillance summary that feeds the QAPI dashboard, an annual standard-precautions competency for every clinical and field staff member documented in the personnel file, a patient-and-caregiver education record completed at start of care and refreshed at significant change, and a COVID-19 vaccination education-and-offer document signed by every staff member at hire and at the annual education cycle. Pull a sample of personnel files monthly and confirm the IC artifacts are in place; pull a sample of clinical records and confirm the education record is current.

Deficiency 6 — § 484.75 Skilled Professional Services and Supervision

What the Standard requires. § 484.75 requires that skilled professional services — skilled nursing, physical therapy, speech-language pathology, occupational therapy, and medical social work — be authorized, delivered, and supervised only by health care professionals who meet the appropriate qualifications specified in § 484.115 and who practice according to the HHA's policies and procedures. Each skilled professional is responsible for providing services in accordance with the plan of care, providing ongoing interdisciplinary assessment, developing and evaluating the plan of care in partnership with the patient and representative, providing services that are ordered by the physician or allowed practitioner as indicated in the POC, patient and caregiver education, communication with the physician, preparation of clinical and progress notes, and participation in the HHA's QAPI program.

Failure mode. Surveyors find PT or OT services delivered by an assistant under the supervision of a therapist who has not co-signed the assistant's notes within the timeframe the therapy practice act and the agency's policy require. They find medical social work services with no documented care-plan integration. They find LPN/LVN visits provided to patients whose care plan complexity actually requires RN-level skilled nursing under state nurse-practice-act scope rules. The deficiency rarely involves a clinician practicing outside scope; it usually involves a documentation gap that makes it appear so.

The fix. A discipline-by-discipline supervisory matrix that maps each role to the supervisory cadence required by Part 484, the agency's P&P, and the relevant state practice act. A co-signature workflow inside the EHR that surfaces unsigned assistant notes daily and routes them to the supervising therapist with a 14-day clearance target. A clinical-manager case-conference cadence that documents IDT participation by every involved discipline. A clinical-record audit that samples a percentage of charts each month and confirms the supervisory documentation is in place before a surveyor pulls the same sample.

Deficiency 7 — § 484.80 Home Health Aide Supervision, Training, and Registry

What the Standard requires. § 484.80 is the longest and operationally heaviest CoP in the Subpart B set. It establishes the federal 75-hour minimum training program with at least 16 hours of supervised practical training; the competency evaluation that has to be completed before the aide independently furnishes services to a patient; the annual 12-hour in-service requirement; placement on the State Nurse Aide Registry where applicable, with verification before the first patient assignment; the supervisory visit cadence (an on-site visit by a registered nurse at least every 14 days when the aide is furnishing services to a skilled-care patient, and at least every 60 days for personal-care services in the absence of skilled services); and the documentation that the aide assignment is consistent with the plan of care.

Failure mode. The largest single source of survey deficiencies for any home health agency that staffs aides. Surveyors find aide personnel files missing the 75-hour training transcript or the competency-evaluation skills checklist; an aide on the schedule whose state-registry status has lapsed; supervisory-visit notes documented at intervals longer than 14 days during a skilled-care episode; in-service hours that fall short of the 12-hour annual minimum or that are documented for the calendar year rather than the agency's defined education cycle. Many of these gaps are administrative and inexpensive to close — but the survey scores the documentation that exists, not the documentation that could exist.

The fix. A pre-hire control that verifies State Nurse Aide Registry status the same day the offer goes out, captures a screenshot or PDF of the registry record, and stores it in the personnel file. A 75-hour training transcript with the trainer's signature, the dates of the didactic and clinical components, and the competency-evaluation skills checklist for every required skill. A supervisory-visit workflow that fires automatically at day 13 of the supervisory cycle and routes the patient to the assigned RN. An in-service tracker tied to the aide's hire-date anniversary so the 12-hour annual requirement is unambiguous. A monthly registry-status re-verification for every active aide, captured as a one-line entry in the personnel file. The full aide-hiring sequence, including the OASIS-E1 § 484.80(g)(2)(ii) supervisory-visit timing rules, is walked in our hiring your first 5 home health caregivers reference.

Deficiency 8 — § 484.102 Emergency Preparedness Training, Exercises, and After-Action Reports

What the Standard requires. § 484.102 cross-references the all-provider emergency preparedness rule at 42 CFR Part 482 and 484. Each HHA must develop and maintain an emergency preparedness program that meets the requirements of paragraphs (a) through (e) of the cross-referenced rule, including a written risk assessment using an all-hazards approach, written policies and procedures based on the risk assessment, a written communication plan that complies with federal and state law, and a training and testing program that includes initial training of all new and existing staff at hire and annually thereafter. The exercise requirement is two exercises per year — at least one full-scale community-based exercise, with the second being either a full-scale exercise or a tabletop exercise — and the most recent annual exercise documentation must be in the file at the time of the certification survey.

Failure mode. Many agencies run the exercises and never produce the after-action report. Surveyors expect a written document for each exercise that summarizes the scenario, the participants, the observed strengths and weaknesses, and the corrective actions assigned with target completion dates. Where the agency cannot produce the after-action report, the exercise effectively did not happen for survey purposes. A second cluster of findings hits the patient-population-by-acuity tracking the rule requires — the agency must be able to identify, on demand, which patients are dependent on electricity, which require oxygen, and which need transportation in the event of an evacuation. Operators who maintain the data inside the EHR but cannot produce the snapshot during the survey lose points on the production side, not the practice side.

The fix. An emergency preparedness binder (digital or physical) that contains the current risk assessment, the policies and procedures, the communication plan, the training roster with annual completion dates, the two most recent exercise scenarios with after-action reports, and a daily-refreshed acuity-and-dependency report from the EHR. A training calendar that fires the annual exercise and the annual training on a defined date each year, with a clinical-manager owner and a fallback if the date slips. A tabletop-exercise template that the agency can run in 90 minutes and that produces a complete after-action report by the end of the session.

Deficiency 9 — § 484.110 Clinical Records: Authentication, Retention, and Audit Trail

What the Standard requires. § 484.110 requires that the HHA maintain a clinical record containing past and current information for every patient that is accepted by the HHA and receiving home health services. Standards address record content (the comprehensive assessment, the plan of care, all interventions, all progress notes, contact information for the patient, the representative, the primary caregiver, and the primary care practitioner, and discharge or transfer summary documentation), authentication (every entry signed and dated by the practitioner who authored it), retention (at least five years after the discharge of the patient unless state law stipulates a longer period), and protection from loss, damage, and unauthorized use.

Failure mode. New agencies running paper records or hybrid paper-and-EHR systems frequently miss the authentication and retention rules. Late-signed entries — entries signed weeks after the visit — generate findings even when the agency's policy permits a longer authentication window than the regulation does. Retention failures show up as charts of long-discharged patients that are no longer accessible to the agency because a prior EHR vendor relationship ended without a complete data export. The audit-log probe — the surveyor asks the EHR to produce a record of who accessed which chart when — is a probe many agencies fail because the audit-log capability is built into the EHR but has never been turned on.

The fix. A single EHR with a five-business-day signature-deadline policy, an audit log that is turned on and tested before the survey, and a documented backup-and-recovery process that is exercised annually and produces a written confirmation. A retention schedule that survives EHR transitions: a complete, exported copy of every chart older than three months held in a format the agency owns and can read independently of the active EHR vendor. A weekly EHR exception report for unsigned visits older than five days, routed to the clinical manager with a hard close-out target.

Deficiency 10 — § 484.115 Personnel File Completeness and Qualifications

What the Standard requires. § 484.115 specifies the minimum qualifications for every role the agency staffs — administrator, audiologist, clinical manager, home health aide, licensed practical or vocational nurse, medical social worker, occupational therapist and assistant, physical therapist and assistant, registered nurse, and speech-language pathologist. The Standard for each role specifies the credential, the supervisory or training pathway, and the documentation the personnel file must contain. The administrator qualifications carried forward from the 2017 final rule (effective July 13, 2018) require an administrator who is licensed or registered in accordance with state laws and regulations governing administrators of HHAs, with degree or training-and-experience requirements specified in the Standard.

Failure mode. The personnel file probe is the highest-volume probe in any home health survey because the surveyor pulls a sample of files and looks at every required element in every file. Missing items in even one file generate a Standard-level finding; patterns elevate. The most consistent gaps: a missing or expired professional license; a missing competency evaluation for an aide; an annual evaluation that lapsed; an in-service hour total that is short for the year; a health screening or TB assessment that is missing or out of date; a federal-plus-state background-screening artifact that is not in the file. The full screening stack — OIG LEIE, SAM.gov exclusions, the State Nurse Aide Registry, the state criminal-history check, and the state abuse-and-neglect registry — has to be in the file at hire and re-verified on the agency's defined cadence. Our background check compliance reference walks the federal-plus-state stack in detail.

The fix. A personnel file checklist tied to the role, with every required artifact listed in the order the surveyor will look for it. A pre-hire control that blocks the start date until every checklist element is signed, dated, and uploaded. A monthly personnel-file audit on a sample of three to five files, with a written exception report to the administrator. A license-expiration tracker that fires 60 days before any required license, certification, or registration expires. A pre-survey personnel file readiness pass on every active employee at the time the survey window opens.

Mock Survey Methodology — How to Self-Audit Before CMS Arrives

The single highest-leverage survey-prep activity is a complete mock survey conducted against the same Appendix B probe path the State Survey Agency uses. The mock survey is not a quality assurance review, not a chart audit, and not a compliance-plan checklist — it is a simulation of the actual survey, conducted by someone whose role is to find deficiencies, not to defend the agency.

Run the mock against Appendix B, not the regulation. The surveyor reads Appendix B; the mock has to read Appendix B too. Walk every probe in every Subpart Standard and identify the artifact the probe is asking for: the policy in the manual, the chart entry in the clinical record, the credential in the personnel file, the minute in the governing-body folder. If the agency cannot produce the artifact in the time the surveyor will allow, the probe is a deficiency.

Use a sample, not a complete review. Surveyors pull a small sample of clinical records and a small sample of personnel files. The mock should mirror the methodology — pull five to ten clinical records distributed across active patients, recently discharged patients, and patients with significant change in condition; pull five to ten personnel files distributed across role types with at least one home health aide, one RN, one therapy clinician, and one administrative role. A sample that mirrors the surveyor's sample produces results that mirror the surveyor's findings.

Time the probes. Surveyors give the agency a short window to produce each artifact. The mock should use the same window. An artifact that exists but takes 45 minutes to retrieve from a non-EHR file system is functionally a deficiency, because the surveyor will move on before the agency can produce it.

Score the findings against the Scope and Severity grid. Distinguish between an isolated finding in a single chart (Scope: isolated; Severity: no actual harm with potential for minimal harm) and a pattern across the sample (Scope: pattern or widespread; potential elevation to Condition level). The Scope and Severity score determines the enforcement risk; the mock that ignores it is incomplete.

Drive the corrective actions through QAPI. Mock findings should not flow directly into a Plan of Correction; they should flow into the QAPI program, generate root-cause analyses, drive interventions, and be measured for sustained improvement. A mock survey that produces a clean QAPI cycle of its own is a survey-prep activity and a § 484.65 compliance artifact in one motion.

Repeat the mock at half the recertification cycle. A 36-month recertification cycle calls for an 18-month mock. Agencies that run mocks only in the months immediately before the survey miss the long arc of documentation drift that happens between surveys and that produces the patterns surveyors actually find.

Documentation That Should Be Ready Day 1 of Any Survey

The surveyor's first morning is heavy on document requests. The agency that has the documents queued and labeled finishes the morning earlier and steers the rest of the survey toward the records the agency knows are clean. The artifacts to have at the front desk on Day 1:

  • The agency's current state license (where the state requires one) and the CMS Certification Number letter.
  • The current organizational chart, governing body roster with terms, administrator job description and credentials, and clinical manager job description and credentials.
  • The active patient roster with patient identifiers, start-of-care date, primary discipline, primary diagnosis, and acuity-and-dependency markers (oxygen, dialysis, mobility).
  • The active staff roster by role, FTE status, and license-expiration date, with the personnel-file index showing where every required artifact lives.
  • The current policy-and-procedure manual, indexed by 42 CFR Part 484 Subpart and Standard.
  • The QAPI program description, current indicator dashboard, current PIP roster with status and target dates, and the most recent annual QAPI evaluation.
  • The infection prevention surveillance summary (most recent quarter) and the COVID-19 vaccination education-and-offer roster.
  • The emergency preparedness binder: risk assessment, policies, communication plan, training roster, two most recent exercise scenarios with after-action reports, and the current acuity-and-dependency snapshot.
  • The clinical record sample the agency expects the surveyor to pull (admissions, recerts, discharges, complaints) — the agency should anticipate the sample and pre-audit it before the surveyor arrives.
  • The HH QRP submission history and the most recent OASIS data-quality report from iQIES.
  • The HHCAHPS vendor contract and the most recent quarterly HHCAHPS report (where the patient volume threshold is met).
  • The most recent CMS-2567 from the prior survey (if any), the accepted Plan of Correction, and evidence of sustained correction.

The list is not exhaustive — Appendix B will drive additional requests in real time — but an agency that has these twelve artifacts queued on Day 1 has covered most of the morning's surveyor demand. The Day-1 readiness check belongs in the agency's standing P&P manual section on survey preparation; many agencies tag this section as the "Survey Greeter" or "Day-1 Concierge" workflow and assign it to the administrator or the compliance lead.

The Plan of Correction — How to Write One CMS Will Accept

When the survey produces deficiencies — and the typical initial certification survey produces several — the agency receives the CMS-2567 Statement of Deficiencies with an attached Plan of Correction (POC) form. The POC is the agency's written commitment to fix every cited deficiency, and the State Agency or AO has to accept the POC before the agency's certification can move forward. A poorly written POC is the single fastest way to extend the survey window from weeks to months, to trigger a directed plan of correction, or to invite an enforcement remedy.

The structural elements every accepted POC contains:

1. The corrective action for the specific deficiency cited. Not a general policy change. The POC has to address the actual finding — the chart that lacked the OASIS privacy notice, the personnel file that lacked the registry verification, the unsigned verbal order — and describe what the agency did to correct that specific instance.

2. The corrective action for any other patients or staff who could have been affected. The "look-back." The agency identifies every other patient or employee who could have been subject to the same gap and confirms either that the gap did not exist for them or that the gap has been corrected.

3. The systemic change that prevents recurrence. The policy update, the EHR workflow change, the training, the supervisory cadence change, or the audit cycle that the agency has implemented to make the deficiency operationally impossible to repeat. This is the element that converts a one-off finding into a sustained correction.

4. The monitoring plan. How the agency will measure that the corrective action is sustained, who is responsible for the monitoring, what the threshold for an acceptable finding is, and how often the QAPI committee reviews the result.

5. The completion date. The date by which every corrective action will be in place. The completion date has to be realistic — a date that is too short reads as superficial, a date that is too long reads as evasion — and it has to be backed by the monitoring plan that demonstrates the action is sustained from that date forward.

POCs that are accepted on first submission share a few characteristics. They are written deficiency-by-deficiency in the order the CMS-2567 cited them. They quote the specific CFR § and G-tag. They identify by name the agency role responsible for each corrective action. They reference the policy section, the EHR workflow, the training module, and the QAPI indicator the corrective action ties to. They are signed by the administrator and the governing-body chair (where the deficiency touches a Condition the governing body owns) and dated within the timeframe the cover letter from the State Agency or AO requires. The agency that treats the POC as a piece of governance documentation rather than a formality routinely closes the survey window in a single resubmission cycle.

The revisit survey, if one is ordered, will probe the corrective actions described in the accepted POC. The agency that wrote the POC against artifacts the agency could actually produce — a real EHR change, a real personnel-file audit cycle, a real QAPI indicator — passes the revisit cleanly. The agency that wrote the POC against aspirational language fails the revisit and inherits a directed plan of correction or a more serious enforcement remedy.

Authoritative Sources

The primary regulatory and official sources every survey-preparing HHA should bookmark:

Verify the version current at your survey date. Appendix B is updated through periodic SOM transmittals, the CY 2026 Home Health Final Rule continues a multi-year pattern of measure and rate updates, and G-tag numbers themselves can shift when CMS reorganizes interpretive guidance. The CFR § citation is the durable authority; every G-tag in this article should be cross-checked against the most recent Appendix B transmittal before mock-surveying against it.

The Bottom Line

The deficiencies that show up in CMS home health surveys cluster into a narrow set of CoP Standards. § 484.50 patient rights, § 484.55 comprehensive assessment, § 484.60 plan of care, § 484.65 QAPI, § 484.70 infection control, § 484.75 skilled professional services, § 484.80 home health aide services, § 484.102 emergency preparedness, § 484.110 clinical records, and § 484.115 personnel qualifications produce most of the citations. The deficiencies are mostly documentation gaps, not practice gaps. The fix is mostly a documentation pipeline that the agency can drive through its EHR, its personnel-file system, and its QAPI program — not a clinical or administrative rebuild.

Operators who succeed at survey treat Appendix B as the survey rulebook, run mock surveys against the same probe path the State Agency or AO uses, queue the Day-1 documentation set so the surveyor's first morning closes quickly, and write Plans of Correction that describe specific corrective actions, real systemic changes, and monitoring plans the QAPI committee actually reviews. Operators who stumble are usually the ones who treated the regulation as the survey, the policy manual as the proof, and the deficiency as a writing exercise.

If you want a structured way to assess your survey readiness against the same logic a State Survey Agency or AO surveyor uses, start with our compliance readiness assessment. It walks the same Subpart B and Subpart C Standards a surveyor would, scores your gaps, and produces an action list ordered by deficiency-tag risk. For the section-by-section walkthrough of 42 CFR Part 484 itself, the CMS Conditions of Participation working guide is the underlying reference. For the day-by-day operational sequence between state license issuance and a clean initial certification survey, the First 90 Days operational playbook is the companion read. For the OASIS-driven measures that anchor most QAPI indicators a surveyor will inspect, see our OASIS-E documentation guide and our Home Health Compare star ratings guide. For the federal-plus-state background-screening stack the personnel file is supposed to evidence under § 484.115, our background check compliance reference walks every layer. For the aide hiring sequence behind every § 484.80 finding, the hiring your first 5 home health caregivers reference walks the federal 75-hour training program, the State Nurse Aide Registry verification, and the 14-day RN supervision rule. And once the survey is closed and the workforce side begins, our resources on reducing caregiver turnover, becoming an employer of choice, and the credentialing compliance checklist describe the post-certification operating reality every Medicare-certified HHA inherits.