Your answer, filtered to your question — and kept current
You’ve got a specific question, and the right answer depends on where you sit. The citation that governs a facilities director isn’t the one a pharmacy director answers for — same building, different accountability. So there are two ways in: filter by setting to find the rule that governs your space, or filter by domain to find what you’re on the hook for. Either way, you land on your material without wading through anyone else’s — and every article here is dated, because a compliance citation that’s quietly gone stale is worse than none at all, so every article shows the date it was last verified — you can always see how current it is.
Your garage is a different building than your lot.
Everything a hospital hardens is inside: the units, the cabinets, the record. The property is where that stops.
Read the article →Reviewed Jul 2026Hospital & CAHAccess Control & AttributionWho decided how open the door is?
Access is not one of your security problems — it runs through nearly all of them. The badge on the pharmacy door, the reader on the behavioral-health unit, the alarm on the maternity exit: those belong to specific areas, and each has its own page.
Read the article →Reviewed Jul 2026Hospital & CAHLife Safety & EgressThe holes your system will need are being drilled right now.
You commissioned a good building. The architect is competent, the code is being followed, and the project is on track — none of that is in question.
Read the article →Reviewed Jul 2026Hospital & CAHWorkplace ViolenceThe corridor your policy exempts.
Your emergency department screens for weapons, and it should. The carve-out that lets a patient with an obvious life-threatening emergency bypass the metal detector unchallenged — and that leaves ambulance arrivals unscreened — is clinically correct and legally required; no ED can delay care to screen, and no security director should want it to.
Read the article →Reviewed Jul 2026Hospital & CAHBehavioral Health EnvironmentsNo minimum height.
Your behavioral-health unit was assessed, the hardware was specified, and the people who did the work were competent, and all of that is true. Then the regulator’s own language: any apparatus protruding from a wall is a ligature risk if a sustainable point of attachment can be created, with no minimum height.
Read the article →Reviewed Jul 2026Hospital & CAHLife Safety & EgressThe door can’t know what the door needs to know.
Your elopement perimeter works: the exits are alarmed, the badge readers read, the system was specified correctly and does what it was bought to do, and all of that is true — so set it aside, because the door was never the problem. The same physical act, a person walking out, is routine paperwork or a sentinel event depending on a capacity judgment made hours earlier, by someone else, possibly on another floor.
Read the article →Reviewed Jul 2026Hospital & CAHPharmacy & Controlled SubstancesEverything worked. The drugs are gone.
Walk the sequence: the badge works, the reader logs it, the cabinet opens for the person authorized to open it, and the camera records exactly what it was installed to record — an authorized employee, doing an authorized thing, correctly. Every control performed.
Read the article →Reviewed Jul 2026Hospital & CAHMaternity & PediatricIt’s been quiet for four years. That’s not evidence.
The infant-protection system on your maternity unit was specified correctly, installed correctly, and everyone on the floor is aligned behind it — there is no argument about it, and there never has been. That is exactly the problem.
Read the article →Reviewed Jul 2026Hospital & CAHLife Safety & EgressThe camera that’s “recording” but isn’t — the coverage gap nobody sees.
It is the oldest gap in the book, and the calmest to fix once you look for it: a camera that shows “recording” on the wall display, that no one has a reason to doubt, and that has quietly written nothing to disk for weeks. Every individual system passed its own check.
Read the article →Reviewed Jul 2026Hospital & CAHWorkplace Violence“What did our systems actually capture?” A lobby shooting, seventeen seconds, and what the record had to answer.
In November 2023, a gunman opened fire in the lobby of a New Hampshire hospital. A weapons detector was in place.
Read the article →Reviewed Jul 2026Hospital & CAHAccess Control & AttributionEC.02.06.01 no longer governs your hospital. Here is what replaced it.
Effective January 1, 2026, the Joint Commission consolidated its Environment of Care and Life Safety chapters into a new Physical Environment chapter and added a National Performance Goals chapter — and a compliance page still leading with EC.02.06.01 is demonstrably behind the current manual..
Read the article →Reviewed Jul 2026Hospital & CAHMaternity & PediatricThe Joint Commission does not require infant abduction drills. It requires something harder.
The obligation is real, but it is not a drill mandate and it is not a system mandate — and stating it precisely is what separates a page a children’s-hospital security director trusts from one he closes..
Read the article →Reviewed Jul 2026All settingsAccess Control & Attribution“Addressable” does not mean optional — and almost nobody documented the rationale.
The single most misread word in healthcare physical security is “addressable,” and reading it correctly makes the accountability stronger, not weaker..
Read the article →Reviewed Jul 2026Hospital & CAHPharmacy & Controlled SubstancesHospitals are practitioners. The safe specifications everyone quotes are for someone else.
The man-minute safe ratings that fill vendor pages are real — they just do not govern a hospital, and importing them is the error an integrator makes by reading the first search result..
Read the article →Reviewed Jul 2026Hospital & CAHBehavioral Health EnvironmentsNon-psychiatric units do not need to be ligature resistant. That is not the same as no obligation.
The framework the whole field repeats comes from a memorandum that was stamped DRAFT and never finalized; the current, operative guidance says something more careful..
Read the article →Reviewed Jul 2026Hospital & CAHWorkplace Violence“Our staff don’t feel safe.” The physical layer that answers “can I get help here, now?”
The dominant workplace-violence pattern in healthcare isn’t the intruder at the entrance — it’s the daily reality of assault by patients and visitors, on every kind of unit; healthcare workers face intentional-injury workplace violence at roughly 10.4 per 10,000 full-time workers, about five times the 2.1 rate for workers overall (BLS, Workplace Violence in Healthcare, 2018). When it happens, your nurse has exactly one question: can I get the right help to this room, now? This is the physical layer that answers it..
Read the article →Reviewed Jul 2026Hospital & CAHWorkplace ViolenceWorkplace violence prevention is now a National Performance Goal. Its first element is a report to your board.
The obligation is not new in spirit, but its home and its language are — and the language routes accountability to the governing body, not just to security..
Read the article →Reviewed Jul 2026Hospital & CAHMaternity & PediatricYour surveyor asks two questions about the arm bands. The second is the one you have to be able to answer.
It is the single best citation in the vertical, because it is our entire thesis printed in a surveyor’s own checklist..
Read the article →Reviewed Jul 2026Behavioral HealthBehavioral Health EnvironmentsBehavioral health organizations are still under NPSG 15. Here is why that will change.
Getting the citation format right here is itself a competence signal..
Read the article →Reviewed Jul 2026Hospital & CAHLife Safety & EgressCMS enforces the 2012 Life Safety Code. Your state fire marshal may enforce the 2024. You comply with both.
The single most consequential door a security integrator installs on a maternity unit is governed by a fire code — NFPA 101 — that CMS froze at its 2012 edition by regulation, even as your state adopts newer ones. Getting that relationship right is the difference between an egress conversation a facilities director trusts and one he closes, because a security integrator rarely calls him about it..
Read the article →Reviewed Jul 2026Compliance & currency
What the 2026 regulations actually require — kept current and dated, sitting under the articles as the reference layer rather than the lead.
Rather see where your own program stands?
The self-assessment turns the reading into your own result across the healthcare security zones — where you can and can’t yet prove the program functions. No email, nothing stored.