CMS is launching a streamlined review process for higher-performing nursing homes and making them easier for consumers to find on Medicare.gov. A new Quality, Safety, & Oversight memo outlines the risk-based survey process, which helps state agencies focus limited resources on facilities where residents’ health and safety are at greater risk. CMS will identify qualifying facilities with an icon on the Care Compare tool. CMS Modernizes Nursing Home Oversight with New Risk-Based Survey Approach Designed to Highlight High Performance, Encourage Improvement | CMS
Based on a successful 22-state pilot, the risk-based survey process aims to make nursing home oversight more efficient and effective. It reduces the time and staff needed for standard recertification surveys at higher-performing facilities, while all facilities will still be surveyed at least every 15 months. State agencies and CMS may still use the traditional long-term care survey process when health and safety concerns arise, such as complaints.
CMS says the change will help state survey agencies focus limited resources on complaints and higher-risk facilities, citing survey backlogs, rising complaint workloads, and flat federal funding.
A facility would not qualify for a Risk-Based Survey for reasons such as:
- Below a 5-Star Overall Rating
- Below a 3-star Staffing Rating
- Any Actual Harm, Immediate Jeopardy, or Substandard Quality of Care citation in the last survey cycle
- More than 18 months since the last standard survey
- Active staffing waivers
- Failed Payroll-Based Journal staffing data audit
- Failed Minimum Data Set resident assessment audit
- Health Inspection Score above the state’s 50th percentile
- Two or more residents age 65+ newly coded with schizophrenia after admission
- Ownership change since the last standard survey
- Special Focus Facility Candidate status
Why risk-based oversight changes the operating equation
Traditional recertification surveys created a degree of predictability. Facilities knew the broad survey cycle, understood the standard areas likely to receive attention, and often organized preparation around documentation reviews, mock surveys, and last-minute remediation. Those disciplines still matter. But a risk-based approach changes the question from, “Are we ready for the next survey?” to, “What is our operating data telling regulators before they arrive?”
CMS can use a growing universe of information to identify potential risk: staffing submissions, quality measures, complaint histories, facility-reported incidents, hospitalization patterns, ownership and operational changes, prior deficiencies, and signals from other government agencies. None of these data points alone proves poor care. Together, however, they can create a risk profile that directs surveyor attention.
That distinction matters. A facility with a clean physical plant and well-organized binders may still face a difficult survey if its staffing data, resident outcomes, and complaint patterns point to instability. Conversely, an operator with a past compliance history but demonstrably improving performance may have an opportunity to show that its corrective actions are real, sustained, and measurable.
Risk-based oversight is not simply more regulation. It is more targeted regulation. For well-run organizations, that can be preferable to broad, duplicative inspection activity. For organizations that have treated quality reporting, staffing operations, and compliance as separate silos, it can expose weaknesses that were previously easier to compartmentalize.
The real target is not paperwork
The nursing home sector has learned, sometimes painfully, that documentation is necessary but not sufficient. A policy may be complete, a care plan may contain the right language, and a training record may be current, yet residents may still experience missed care, delayed changes in condition, avoidable injuries, or poor communication with families.
Compliance is always a function of understanding the desired outcomes behind the regulatory requirements (survey conditions). This in turn, leads to an organizational focus on being compliant as a function; a constant state. https://rhislop3.com/five-quality-and-compliance-tips/
A more risk-oriented survey process is designed to get closer to that gap between stated practice and actual resident experience. Surveyors may use facility-level indicators to decide where to probe, then validate what they find through observations, interviews, clinical record review, and workforce evidence. The strategic implication is straightforward: the safest compliance posture is an operation whose daily practices can withstand triangulation from multiple sources.
That places particular pressure on three interconnected areas. First is staffing, not just in reported hours but in the consistency of coverage, supervision, competence, and assignment continuity. Second is clinical surveillance, especially a facility’s ability to recognize and act on changes in condition before they become serious events. Third is governance, including whether leadership sees emerging patterns early enough to intervene.
The industry should resist the simplistic view that risk-based surveys are an effort to punish facilities with difficult resident populations or constrained labor markets. Risk adjustment, data quality, and the contextual interpretation of performance measures remain essential. A facility caring for a clinically complex population will naturally present different indicators than one serving a less acute population. CMS must apply its models carefully or risk creating incentives to avoid residents with greater needs.
Still, complexity cannot become a blanket defense. The question regulators, families, and increasingly investors will ask is whether an organization understands its risk and has built systems proportionate to it.
Data integrity becomes a board-level issue
For years, many providers viewed required reporting as a back-office task. That view is obsolete. In a risk-based oversight environment, the accuracy, consistency, and timeliness of data are operational and reputational issues.
A discrepancy between payroll-based staffing data and the lived experience described by residents and staff is not a minor reporting concern. Neither is a quality measure that appears anomalous without a credible clinical explanation. These discrepancies invite scrutiny because they suggest either unreliable information or unreliable operations. Neither conclusion helps a provider during a survey.
Boards and executive teams should expect regular reporting that connects workforce stability, quality indicators, complaints, adverse events, survey history, and corrective-action progress. The goal is not to create another dashboard for its own sake. It is to identify the relationships that frontline managers may not see in isolation.
For example, a rise in agency utilization may be manageable in the short term. When it coincides with increased falls, missed documentation, family complaints, and higher turnover among unit-level leaders, it becomes a risk pattern. The executive response should not wait for a surveyor to connect those dots.
Operators should also examine whether their internal data governance matches the seriousness of external reporting. Who validates submissions? Who challenges unexpected results? How quickly can leadership reconcile a reported measure with resident-level records? The answers will increasingly separate organizations that can explain their performance from those that merely react to it.
What operators should do now
The strongest response is not a survey-preparation sprint. It is a disciplined, ongoing risk-management process that treats resident harm, compliance exposure, and operational instability as linked concerns.
Leadership teams should begin by building a unified view of their facility or portfolio risk. At a minimum, that view should bring together four categories:
- Workforce indicators, including turnover, agency dependence, open shifts, overtime, competency gaps, and leadership vacancies.
- Resident safety and clinical signals, including falls, pressure injuries, infections, transfers, weight loss, medication-related events, and changes in condition.
- Regulatory indicators, including complaints, allegations, prior citations, plans of correction, and repeat findings.
- Experience indicators, including resident and family concerns, grievance trends, call-light responsiveness, and staff engagement.
The value is in the discussion that follows, not in the color coding of a dashboard. An executive team should be able to identify its highest-risk units, understand why they are vulnerable, name the accountable leaders, and specify what evidence will demonstrate improvement.
This work must also occur at the facility level. Corporate compliance programs can establish standards and identify patterns, but survey risk often emerges in the details of a particular building: an unstable director of nursing position, inconsistent weekend coverage, weak infection-prevention practices, or a care-plan process disconnected from actual care delivery. Portfolio-level governance is useful only when it helps local leaders resolve local problems faster.
There is also a legitimate trade-off. More monitoring can become performative if every variance triggers another meeting, another spreadsheet, and another demand on already overextended clinical leaders. The better model is selective escalation. Focus attention on trends with plausible resident impact, not every operational imperfection. A risk-based regulatory framework should encourage providers to become more clinically intelligent, not merely more administratively busy.
CMS’s risk-based survey approach will reward evidence of control
The central question for nursing home leaders is no longer whether oversight will intensify. In many areas, it already has. The more consequential question is whether the organization can demonstrate control over the conditions that produce poor outcomes.
Control does not mean perfection. Skilled nursing facilities operate in a labor market and reimbursement environment that leave little margin for error. Unplanned absences happen. Acuity rises. A new administrator or director of nursing may inherit problems that took years to develop. Regulators should recognize those realities.
But credible organizations respond to volatility with evidence: documented leadership rounding, rapid review of adverse events, targeted staff education, verified competency, root-cause analysis that changes practice, and follow-up data that show whether the intervention worked. Plans of correction without operational proof will carry less weight as oversight becomes more data-driven.
For investors and owners, the message is equally direct. Quality risk cannot be isolated from financial performance. Facilities with chronic staffing instability, unresolved citations, and deteriorating resident experience may generate short-term savings by deferring investment, but they accumulate regulatory, legal, reputational, and transaction risk. Risk-based oversight makes that accumulated exposure harder to ignore.
The industry should welcome a survey system that is better at finding real resident risk and less dependent on ritualized inspection. But providers should be clear-eyed about what it demands: a shift from preparing for a visit to managing the operation as if every data point, resident interview, and clinical outcome will be examined together. That is not an unreasonable standard. It is the standard residents and their families have every right to expect.