You got your Medicare certification. The state survey is behind you, the CMS-855A is processed, and your agency is live in the provider enrollment system. It feels like the finish line.
It's not. It's the starting line.
The day your certification is effective, the compliance clock starts. CMS expects every requirement under 42 CFR Part 484 — the Conditions of Participation — to be in place and functioning. Not in progress. Not planned. Functioning. And your first full survey could come within 36 months, sometimes sooner.
According to CMS public data, 771 new home health agencies have been certified since 2024. Most of them are small, owner-operated, and building their compliance infrastructure from scratch. If that's you, here's what to prioritize in the first 60 days.
Days 1–14: Get Your Policy Foundation in Place
Your initial certification survey confirmed you had policies. But having policies and having a policy management system are two different things.
Build your policy index. Create a master list of every policy your agency has, mapped to the specific Condition of Participation it satisfies. At minimum, you need policies covering patient rights (§ 484.50), care planning (§ 484.60), quality assessment and performance improvement (§ 484.65), infection prevention (§ 484.70), skilled services (§ 484.75), home health aide services (§ 484.80), emergency preparedness (§ 484.102), and organizational governance (§ 484.105).
Set review dates. Every policy needs an annual review date. Don't set them all for the same month — stagger them so you're reviewing a few policies each quarter instead of everything at once. Under § 484.105, the advisory group review requires at least one physician and one registered nurse. Schedule that now, not the week before a survey.
Distribute and document acknowledgment. Every staff member needs to acknowledge the policies that govern their role. An e-sign attestation with a timestamp is the cleanest evidence. A binder with signature pages works, but it's harder to track and easier to lose. For a detailed breakdown of how to structure this, see our post on the staff acknowledgment workflow that protects you during a survey.
Days 15–30: Build Your Staff Credential Tracking System
Credential tracking is where new agencies get cited most often. Not because they hire unqualified staff — but because they can't prove qualification when the surveyor asks.
Create a credential file for every clinician. Under § 484.80 and § 484.115, you need to document licensure, certifications, background checks, health screenings, and competency evaluations. For each credential, track the type, issuing body, issue date, expiration date, and uploaded proof.
Set expiration alerts. A license that expires without renewal is a scheduling and compliance emergency. You need alerts at 90 days, 60 days, and 30 days before expiration — at minimum. If a credential lapses, that clinician cannot see patients until it's renewed. Document the gap. Document the resolution.
Don't forget aides. Home health aides require competency evaluations covering 17 specific skill areas per § 484.80(h). If you employ aides, those evaluations need to be completed, documented, and filed before the aide delivers care independently. For a deeper dive on what to track, see our guide on staff credential tracking for home health agencies.
Days 15–30: Start Your QAPI Program
QAPI isn't something you build later. CMS expects it from day one.
Under § 484.65, your agency must maintain a Quality Assessment and Performance Improvement program with five elements: a data-driven program, monitoring quality indicators, performance improvement projects, governance oversight, and an agency-wide scope.
Start with your data sources. You probably don't have OASIS outcome data or HHCAHPS results yet. That's fine. Use what you have — incident reports, staff credential compliance rates, patient complaints, and policy review completion. Those are all valid QAPI data inputs.
Launch one Performance Improvement Project. You don't need five PIPs running. You need one active PIP with a measurable goal, a defined intervention, and documented results. Pick something concrete: reducing the time between referral and start of care, improving aide competency evaluation completion rates, or closing credential gaps within 48 hours of identification.
Schedule regular QAPI meetings. Monthly or quarterly — pick a cadence and stick to it. Document the meeting: date, attendees, data reviewed, decisions made, action items assigned. Those minutes are primary survey evidence. For a complete breakdown of what CMS requires, see our plain-language guide to QAPI in home health.
Days 30–45: Set Up Incident and Corrective Action Tracking
CMS doesn't expect agencies to have zero incidents. They expect agencies to have a system for capturing incidents, investigating root causes, implementing corrective actions, and documenting resolution.
Create an incident intake process. Define what constitutes a reportable incident at your agency. Patient falls, medication errors, missed visits, complaints, and infection exposures are common categories. Every incident needs a written record within 24 hours.
Link incidents to corrective actions. Each incident should trigger a corrective action plan with specific tasks, assigned owners, and deadlines. When the surveyor asks how your agency handles incidents, "we investigate and take corrective action" is the wrong answer. The right answer is showing them the documentation — the incident report, the investigation, the corrective action plan, and the evidence that the corrective action was completed.
Feed incident data into QAPI. This is where the system connects. If your QAPI meetings aren't reviewing incident trends, the program isn't functioning the way CMS expects. Incident patterns should inform your PIPs.
Days 45–60: Prepare Your Emergency Preparedness Program
Emergency preparedness is one of the most commonly cited CoP areas — and one of the most straightforward to address.
Under § 484.102, your agency needs four things: a risk assessment based on your geographic area, written policies and procedures addressing the identified risks, a communication plan for staff and patients during an emergency, and documented training and testing.
Conduct your risk assessment. Identify the natural and man-made hazards relevant to your service area. Hurricanes, tornadoes, severe winter weather, power outages, cyberattacks — whatever applies to where you operate.
Run at least one drill per year. A tabletop exercise counts. Gather your team, walk through a scenario, document who participated and what you learned. The documentation is the evidence. No drill, no compliance — it's that simple. For a complete guide, see our post on emergency preparedness and infection control for home health.
The System Matters More Than the Content
Every requirement listed above is manageable. None of it is conceptually difficult. The agencies that struggle aren't struggling because the regulations are too complex. They're struggling because they don't have a system to track it all.
Spreadsheets work until they don't. Shared drives work until someone saves over the wrong file. Memory works until the person who remembers everything leaves. The first 60 days is the best time to set up a system — before the volume of compliance data makes it unmanageable.
How Ordo Helps
Ordo Compliance gives new agencies a functioning compliance system on day one. The platform includes pre-built compliance packs mapped to every Condition of Participation, staff credential tracking with automated expiration alerts, policy management with annual review workflows and e-sign acknowledgment, incident tracking with corrective action plans, and one-click audit packet generation for when the surveyor arrives. You don't start from a blank canvas. You start from a system that already knows what Medicare requires.
Start your free 14-day trial at ordocompliance.com.
This content is for informational purposes only and does not constitute legal, medical, or regulatory advice. Consult your agency's compliance officer or legal counsel for guidance specific to your situation.
