The Uncomfortable Truth About Infection Prevention
Every year, millions of patients in the United States acquire infections as a result of receiving healthcare. These healthcare-associated infections — HAIs — cause significant harm, extend hospital stays, generate enormous costs, and in too many cases, cause death. The CDC estimates that on any given day, approximately 1 in 31 hospitalized patients has a healthcare-associated infection.
These infections are largely preventable.
That is the uncomfortable truth about infection prevention in healthcare: the scientific evidence for preventing the most common and most serious HAIs is robust, well-established, and widely available. We know how to prevent central line-associated bloodstream infections. We know how to prevent catheter-associated urinary tract infections. We know how to prevent the spread of Clostridioides difficile. We know how to prevent surgical site infections.
The gap is not scientific knowledge. The gap is implementation — consistent, sustained, system-supported implementation of evidence-based practices across every shift, every unit, every patient encounter.
And this is precisely why infection prevention tops the deficiency list in surveys across virtually every healthcare setting. Not because the standards are unclear or the practices are unknown — but because maintaining consistent implementation is genuinely difficult, and most organizations have not built the systems, culture, and accountability structures that make consistent implementation possible.
Why Infection Prevention Keeps Topping the Citation List
Understanding why infection control deficiencies persist requires understanding the specific conditions that make consistent IP practice difficult.
The visibility problem. Infection prevention practices — hand hygiene, PPE use, isolation precautions, surface disinfection — are largely invisible in their correct performance. A nurse who performs hand hygiene correctly every time draws no attention. A nurse who skips hand hygiene under pressure draws no attention either — until a patient develops an infection that may or may not be traceable to that specific missed opportunity. This low visibility makes it easy for compliance to drift without anyone noticing until a survey finding or an outbreak makes it visible.
The compliance paradox. Studies consistently show that healthcare worker hand hygiene compliance rates improve dramatically when workers know they are being observed. This means that organizations which measure compliance only through direct observation are measuring performance — not practice. The gap between observed compliance and actual compliance is the infection prevention risk that surveys reveal.
The staffing crisis reality. The healthcare workforce challenges of recent years have made infection prevention more difficult across every care setting. Short-staffed units under pressure make shortcuts — including infection prevention shortcuts — more likely. New or agency staff who have not been trained to the organization’s specific IP protocols present additional risk. And supervision capacity to monitor and reinforce correct practice has been reduced in many settings at precisely the moment when it is most needed.
The regulatory complexity. Infection prevention standards have grown significantly more complex in recent years. The COVID-19 pandemic produced waves of updated CDC guidance that organizations had to absorb and implement rapidly. Antibiotic stewardship requirements have expanded. NHSN surveillance requirements have been updated. Organizations that were compliant two years ago may have significant gaps today — not because their practices deteriorated, but because the standards moved and they did not keep pace.
The Full Spectrum of Infection Prevention Requirements
Healthcare organizations navigating infection prevention compliance often focus on the most visible elements — hand hygiene and PPE — while underestimating the breadth of what a comprehensive IP program requires.
A fully compliant, survey-ready infection prevention program addresses all of the following elements.
Surveillance and NHSN Reporting. Enrollment in the CDC’s National Healthcare Safety Network (NHSN) is required for most healthcare organizations that receive Medicare funding. Accurate, timely HAI surveillance data — including CLABSI, CAUTI, MRSA, C. diff, and SSI rates — is a fundamental program requirement and the data on which CMS quality measures are based. Inaccurate or incomplete NHSN data is both a survey finding and a quality improvement blind spot.
Standard and Transmission-Based Precautions. Every clinical staff member in every care setting must understand and consistently apply both standard precautions — which apply to every patient encounter — and the transmission-based precautions appropriate to specific pathogens (contact, droplet, and airborne). The distinction matters: applying only contact precautions to a patient who requires airborne precautions is a serious deficiency with direct patient safety implications.
Hand Hygiene. The evidence base for hand hygiene as the single most effective infection prevention intervention is overwhelming. Yet hand hygiene compliance challenges persist across every care setting. An effective hand hygiene program requires more than alcohol-based hand rub dispensers and signs. It requires a monitoring system, a feedback mechanism, a culture that supports compliance even under pressure, and leadership that models correct practice.
Environmental Cleaning and Disinfection. The physical environment is a reservoir for healthcare-associated pathogens. Inadequate environmental cleaning — surfaces not cleaned at appropriate frequency, cleaning products used incorrectly, high-touch surfaces overlooked — contributes directly to pathogen transmission. Survey reviewers evaluate cleaning protocols, product selection, staff competency, and monitoring systems.
Antibiotic Stewardship. Antimicrobial resistance is one of the most significant public health challenges of our time — and healthcare organizations play a direct role in either mitigating or exacerbating it through their antibiotic prescribing practices. CMS and TJC both require healthcare organizations to have antibiotic stewardship programs. The specific requirements vary by care setting, but the core elements — prescribing accountability, culture and sensitivity data use, and resistance monitoring — apply broadly.
Outbreak Preparedness and Response. The COVID-19 pandemic demonstrated at enormous scale the consequences of inadequate outbreak preparedness. Healthcare organizations must have documented outbreak response plans, staff trained in outbreak recognition and response, communication protocols, and relationships with public health authorities. These plans must be tested and maintained — not filed and forgotten.
Infection Prevention Across Different Care Settings
While the core principles of infection prevention apply across all care settings, the specific risk profile, regulatory requirements, and implementation challenges vary significantly by organization type.
Acute Care Hospitals face the broadest range of IP requirements and the highest-acuity patient populations. The HAIs of greatest concern — CLABSI, CAUTI, MRSA, C. diff, and SSI — are primarily acute care concerns, and NHSN reporting requirements are most extensive in this setting. TJC’s Infection Control chapter and CMS Conditions of Participation both apply comprehensively.
Long-Term Care and Skilled Nursing Facilities face CMS infection control requirements under F880 — consistently the most cited deficiency in the nursing home survey process. The long-term care setting presents unique IP challenges: residents with compromised immune function sharing common spaces, high staff turnover creating ongoing education demands, and the complexity of managing both infectious and non-infectious disease in the same environment.
Ambulatory Surgery Centers face SSI prevention as their primary IP focus, alongside the environmental cleaning and instrument reprocessing requirements that apply to all surgical settings. AAAHC and TJC both scrutinize ASC infection prevention programs, with particular attention to sterile processing practices.
Home Care Agencies face the unique challenge of infection prevention in an environment they do not control. Field staff who visit multiple patients in multiple homes must maintain rigorous hand hygiene and PPE practices without the environmental supports available in a clinical facility. CMS Conditions of Participation require home health agencies to have infection prevention programs — and CHAP and ACHC accreditation standards add further specificity.
Federally Qualified Health Centers and Community Clinics face OSHA bloodborne pathogen standards, state licensing requirements, and — in accredited organizations — PCMH and AAAHC infection prevention standards. Clinic-based IP programs must address sharps safety, environmental cleaning, vaccine storage and handling, and respiratory illness prevention.
Building an Infection Prevention Program That Works
An infection prevention program that passes a survey and an infection prevention program that actually prevents infections are not always the same thing. The difference lies in whether the program is built around documentation or around practice.
Documentation-driven IP programs produce policies, training records, and compliance percentages. Practice-driven IP programs produce lower HAI rates, fewer citations, and — most importantly — healthier patients.
Building a practice-driven infection prevention program requires several elements that documentation-driven programs typically lack.
A qualified and empowered infection preventionist. The IP professional — whether full-time, part-time, or virtual — must have both the competency and the organizational authority to drive practice change. An IP who lacks either the knowledge or the organizational standing to change clinical practice is a compliance function, not a prevention function. For organizations that cannot support a full-time IP, a virtual IP consulting model provides expert oversight at a cost structure that works for smaller organizations.
A surveillance system that informs practice. NHSN data is most valuable not as a regulatory reporting requirement but as a practice improvement tool. Organizations that use surveillance data to identify where HAIs are occurring, which units and which practices are associated with higher rates, and whether interventions are producing measurable change are using their IP program as it is intended. Organizations that view NHSN as a reporting burden and nothing more are missing its most important function.
A competency-based education program. IP education for clinical staff must go beyond awareness to demonstrated competency. Staff must be able to correctly perform hand hygiene, correctly don and doff PPE in the appropriate sequence, correctly implement isolation precautions, and correctly identify when each element applies. These are skills, not knowledge — and they require skills-based assessment, not just test scores.
A monitoring system with feedback loops. Organizations that monitor IP compliance and share the results with the teams being monitored consistently achieve better outcomes than those that monitor without feedback. The feedback must be specific, timely, and connected to visible leadership response — praise for good performance and visible follow-through when gaps are identified.
The Outbreak Scenario: When Prevention Fails
Even well-designed infection prevention programs experience outbreaks. The COVID-19 pandemic demonstrated this at global scale — organizations with exemplary IP programs were tested severely. The defining characteristic of high-performing organizations in outbreak situations is not immunity to outbreaks but capability to respond.
Outbreak response capability requires preparation that most organizations underinvest in until an outbreak is underway. Key elements include documented outbreak response protocols that are tested before they are needed, established relationships with state and local public health authorities, communication systems that can rapidly reach all affected staff and patients, enhanced environmental cleaning protocols for specific pathogens, and stockpile management systems for PPE and other critical supplies.
The organizations that manage outbreaks most effectively are those that have practiced responding to them — through tabletop exercises, through regular protocol review, and through drills that identify gaps in their response capability before those gaps are exposed under real outbreak conditions.
Starting Where You Are
For healthcare leaders who recognize that their infection prevention program has gaps — whether revealed by a survey finding, an adverse event, or an honest internal assessment — the most important starting point is an accurate picture of where you currently stand.
A comprehensive IP program assessment maps your current policies, practices, surveillance systems, and staff competencies against current CDC, APIC, and accreditation standards. It identifies where you are compliant, where you are compliant on paper but not in practice, and where genuine gaps exist. It gives you a prioritized roadmap for improvement that distinguishes between the changes that will have the greatest impact on patient safety and regulatory performance.
For organizations that lack the internal IP expertise to conduct this assessment and drive the resulting improvements, a virtual IP consulting partnership provides access to that expertise at a cost structure designed for healthcare organizations of every size.
The good news about infection prevention — unlike some clinical quality challenges — is that the evidence base is strong and the interventions that work are known. The challenge is implementation. And implementation, with the right systems, the right culture, and the right support, is achievable for every healthcare organization that commits to it.