Home health · CMS survey prep

Home Health Emergency Preparedness Survey: What CMS Requires and How to Prepare

By Dr. Arzoo Salami, physician & founder, SurgeReady · Updated July 23, 2026 · 7 min read

If you administer a home health agency, you already know the recertification survey touches nearly everything: patient rights, infection control, skilled nursing documentation, and somewhere on the list, emergency preparedness. For an administrator or director of nursing without a dedicated emergency manager on staff, that section can feel like the one nobody trained you for. This guide walks through what the CMS Emergency Preparedness Rule requires of a home health agency, what a surveyor looks for when they get to that part of the visit, and where I see agencies get tripped up even when everything else in their operation is running well.

The Regulation Behind the Survey Question

The requirement lives at 42 CFR §484.102, part of the Medicare Conditions of Participation for home health agencies. It's one piece of a larger CMS rule covering 17 provider and supplier types, from hospitals to hospices to home health agencies, all built around the same four core elements. The details vary by provider type, since a hospital doesn't discharge patients into their own kitchens and hallways during a hurricane the way a home health agency does. The four-element structure is consistent across every provider type, though, and it's the language your surveyor will use, so it helps to know it by name rather than by feel.

The Four Core Elements CMS Requires

CMS organizes the rule around four pieces. A gap in any one of them can turn into a deficiency citation, even when the other three are in strong shape.

1. Risk Assessment and Emergency Plan

Your agency needs a documented, all-hazards risk assessment that considers both your facility and the community you serve: severe weather patterns typical to your region, power and utility failures, disruptions to your supply chain, loss of access to your office, and interruptions to communication systems, including cyber incidents. The risk assessment feeds directly into your emergency plan, and since the 2019 burden-reduction rule, CMS requires both to be reviewed and updated at least every 2 years. I'd still do it annually: most accreditors expect an annual review, and a plan that sat untouched for two years tends to show it on survey day. A generic hazard list pulled from a template online rarely survives a surveyor's follow-up questions. Yours should reflect your actual service area and your actual patient population.

2. Policies and Procedures

These translate your risk assessment into operating instructions: how staff track and reach patients in their homes when phone lines or cell towers go down, how the agency decides whether a patient needs a higher level of care during an emergency, how staff cover their own subsistence needs during an extended response, arrangements for essential services if your agency can't operate, and how the agency would function under a declared emergency waiver. Home health's version of this element looks different from a hospital's. You're not managing shelter-in-place for an inpatient unit; you're managing a caseload spread across a service area who may lose power, oxygen concentrators, or refrigerated medication all at once.

3. Communication Plan

This is the piece surveyors probe hardest, because it's the piece that fails first in a real event. Your plan needs current contact information for staff, contracted providers, patients' physicians, and other home health agencies you might coordinate with; a primary and a backup method of reaching staff and local emergency management; and a system for tracking where your patients are and whether they've been reached. If your only communication plan is a phone tree that assumes everyone has cell service, that's the gap a surveyor will find.

4. Training and Testing

Every new staff member needs initial training on your emergency procedures, and CMS requires refresher training at least every two years for a provider type like home health. Testing has two parts: at least one exercise a year, generally alternating between a full-scale or community-based exercise one year and an exercise of your choosing, a tabletop works, the next. If your agency activated its plan for a real event and documented the response properly, that documentation can stand in for one required exercise. What can't stand in for it is a memory of handling the last storm fine. If it isn't written down, with dates, participants, and what you'd change next time, it doesn't count on survey day.

What a Surveyor Looks For

Surveyors aren't testing whether you can recite the regulation. They're testing whether your program is real: current, specific to your agency, and something your staff can speak to without reading from a binder. Expect them to ask a random staff member what they'd do if they couldn't reach a patient by phone during a declared emergency, to check the date on your risk assessment and your plan, to ask for the sign-in sheet and after-action notes from your last exercise, and to check that your training records cover every current employee, not only the ones who were around for the last drill. Surveyors tend to be patient with agencies that show honest effort and a few gaps. They're far less patient with a binder that looks complete but nobody on staff has opened.

The Gaps I See Most Often

After looking at a lot of home health emergency preparedness programs, the same handful of gaps show up again and again, and none of them come from a lack of effort. They come from working off a template that wasn't built for how home health operates.

The risk assessment was written once, years ago, and never revisited. The emergency plan was adopted, but nobody scheduled the periodic review it needs. Training happened for the staff who were around a few years back, but the roster doesn't reflect who's on payroll now. The required exercise happened, but nobody wrote up an after-action review, so on paper it didn't happen at all. And the communication plan still lists a former office manager's personal cell number as the primary contact.

None of these are complicated to fix. They're easy to let slide when preparedness is one more item on a long list and nobody owns it full time, which describes most small agencies.

A Practical Checklist Before Your Survey

If your survey window is open, or you'd rather get ahead of it now, work through this in order:

1. 1Pull your current risk assessment and check the date. CMS wants it no more than 2 years old; if it's been more than a year, update it before anything else.
2. 2Confirm your emergency plan reflects that updated risk assessment, not last year's version.
3. 3Check your training roster against your current staff list. Anyone missing needs initial training scheduled.
4. 4Confirm your last exercise has a signed sign-in sheet and a written after-action review with specific follow-up actions, not a note that says only "exercise completed."
5. 5Call the numbers in your communication plan. If even one is wrong, fix it now, not during survey week.
6. 6Walk through your patient-tracking process with a staff member who wasn't involved in writing it. If they can't describe it, it isn't ready.
7. 7Put every document in one place, physical or digital, so nothing needs searching for when the surveyor asks.

Where to Start

If you're starting from nothing, or you're not confident your current risk assessment would hold up, start there. I built a free All-Hazards Risk Assessment Worksheet that walks through the hazards a home health agency needs to consider, written for home-based care rather than borrowed from a hospital's plan.

This article is general information, not legal or regulatory advice. Verify current federal requirements at 42 CFR §484.102 and check your state's additional requirements before your survey.