How to write a Plan of Correction that gets accepted the first time

A Plan of Correction is not a form. It’s an argument addressed to your state survey agency that you understand what went wrong, that you’ve fixed it for the resident who was harmed, that you’ve checked every other resident who could have been, that you’ve built a system to keep it from recurring, and that you can prove compliance by a specific date. If any one of those is missing or soft, the PoC gets returned. A returned PoC means a revisit, and a revisit that finds the same deficiency means escalating enforcement — Civil Money Penalties, denial of payment for new admissions, or, in the worst case, termination from Medicare and Medicaid.

This guide walks through what surveyors actually accept on the first review. It covers the four required elements, the specific phrasings that get a PoC across the line, the common mistakes that send it back, and a sample structure you can adapt for any F-tag.

What a PoC has to do (per CMS)

CMS guidance in Appendix P of the State Operations Manual lays out what every PoC must address, regardless of F-tag. Each deficiency cited on the CMS-2567 needs a response that does five things:

Correct for the resident(s) found affected.What did you do for the specific resident or residents the surveyor identified? Names aren’t in the PoC (residents are referenced by number from the CMS-2567), but the corrective action is concrete and specific.
Identify others who could be affected. Every resident with the same potential exposure has to be reviewed. If the deficiency was about pressure injury prevention, every resident at risk for skin breakdown is audited. The PoC names the audit, the population audited, and the result.
Make systemic changes to prevent recurrence. This is where the PoC becomes an argument about your facility. New policy? Revised policy? Training? Workflow change? Equipment? Staff assignment change? The systemic change has to be plausibly capable of preventing recurrence — not just paper. Surveyors read this section to decide whether to trust the rest of the document.
Monitor that the change holds.You can’t just fix it and walk away. The PoC must name the person responsible for monitoring, the frequency, the sample size, and where the findings go — usually into your Quality Assurance and Performance Improvement (QAPI) committee. “The DON will monitor” is not enough. “The DON will audit 10% of records weekly for 90 days, with results reported to the QAPI committee monthly,” is.
Propose a compliance date.The date by which the facility certifies that all corrective action will be complete and the systemic change in place. This is the date the revisit team will measure you against. A compliance date that’s too soon looks unrealistic; one that’s too far out invites enforcement. Most accepted PoCs propose compliance within 30–45 days of the survey exit conference.

Most facilities and surveyors compress 1–4 into “the four elements” — the compliance date being treated as a separate signature line. Either way, all five pieces have to be present.

The 10-day clock

You have 10 calendar days from receipt of the CMS-2567 to submit a PoC. Not 10 business days — 10 calendar days, including weekends and holidays. A PoC submitted late triggers an automatic referral for enforcement, even if the underlying corrective action is complete. States vary on whether they grant short extensions; most do not.

Practical implication: the work of writing the PoC has to start at the survey exit conference, not when the formal 2567 arrives. The surveyor tells you the deficiencies at exit. Read your existing policies and your correction history for that F-tag family the same day. If you wait for the 2567 to arrive in the mail or via iQIES, you’ve already burned 3–5 of your 10 days.

Per-tag structure that surveyors expect

Each deficiency on the CMS-2567 gets its own PoC entry. The state wants them in the same order the CMS-2567 lists them, with the F-tag and the surveyor’s deficiency narrative in plain view. For each tag, your response should follow the same five-part structure every time:

What was done for the resident(s) cited. Specific intervention. Date completed. Staff responsible.
How other residents were identified and reviewed. Audit description, population scope, date completed, findings.
What systemic change was made. Policy revision, training, workflow change, equipment. Name the policy by number if you have one. Attach training rosters if relevant.
How compliance will be monitored. Named monitor, named audit tool, frequency, sample size, duration, escalation path to QAPI.
Compliance date. A specific calendar date.

Surveyors read dozens of PoCs a month. A predictable structure makes their job easier and signals that your facility has a system, not a scramble. The exact same scaffolding can be used for F-689 (free of accident hazards), F-684 (quality of care), F-880 (infection prevention and control), or any other tag — only the content changes.

Phrasings that work — and phrasings that don’t

The difference between an accepted PoC and a returned one is frequently in the verbs. Surveyors are trained to look for action verbs with measurable outcomes. Vague verbs trigger doubt.

Returned phrasings (too soft):

“Staff will be re-educated on...”
“The facility will work to ensure...”
“Compliance will be monitored on an ongoing basis.”
“The DON will review charts as needed.”

Accepted phrasings (specific, measurable):

“All licensed nursing staff completed a 30-minute in-service on pressure injury risk assessment on [date]; attendance roster attached.”
“The DON audits 20 medication administration records per week for the next 12 weeks, then 10 records per week thereafter, with results reported monthly to the QAPI committee.”
“The Infection Preventionist will observe 5 hand hygiene opportunities per shift across all three shifts daily for 30 days, then weekly for 60 days.”

Specificity is not optional. It is the document.

The systemic change is what they’re really reading

Surveyors expect that a single resident’s corrective action is straightforward — you cleaned the room, you re-positioned the resident, you updated the care plan. What they’re actually evaluating is your systemic change. The question they’re asking: “Will this happen again at this facility in three months?”

Strong systemic changes share a few features:

They change a workflow, not just a policy.A new policy that doesn’t change how staff actually work is a paper change. Surveyors see this constantly and discount it. A new assignment, a new handoff form, a new shift-change checklist — those change behavior.
They name a clinical owner, not a committee. “The Quality Committee will review” is weaker than “The DON will review.” A named owner is accountable.
They tie back to QAPI.Phase 3 Requirements of Participation expect QAPI to be the central nervous system of your compliance work. A systemic change that doesn’t flow into QAPI reporting looks orphaned. Tie monitoring results to a recurring QAPI agenda item, by name.
They acknowledge what wasn’t working.The strongest PoCs say plainly: “The pre-existing skin assessment workflow relied on the night-shift CNA to flag changes, which did not consistently reach the DON. We have revised the handoff so flags now go to the charge nurse on each shift, who is required to document review.” Naming the gap shows the surveyor you understand the failure.

The monitoring plan is what holds the line at the revisit

The revisit team has one question for your monitoring plan: did you actually do it, and what did you find? If your PoC said “The DON will audit 20 records per week for 12 weeks,” and the revisit team asks for the audits, they expect to see twelve weeks of audit logs. If you have eight, your PoC was aspirational and the deficiency stands.

Build the monitoring plan around what you can sustain. A weekly audit you actually run is more credible than a daily audit you skip half the time. Surveyors would rather see realistic monitoring than ambitious monitoring that wasn’t executed.

How root cause analysis fits in

Root cause analysis (RCA) is not a CMS-required section of every PoC, but for higher-severity deficiencies (Level G and above, and anything at the Immediate Jeopardy level), expect that the surveyor will look for evidence of RCA in your systemic change. A surface fix in response to a Level J deficiency reads as denial.

A workable RCA for a PoC doesn’t need to follow a specific methodology. It needs to:

Identify the immediate cause of the resident outcome.
Identify the contributing factors — staffing levels, workflow gaps, training gaps, equipment issues, communication breakdowns.
Identify the system-level cause — the policy, structure, or incentive that allowed the contributing factors to converge.
Tie each system-level cause to a specific corrective action in your PoC.

The PoC doesn’t need to recite the RCA verbatim. It needs to reflect that one happened — the systemic change reads like it addresses something specific, not generic.

Common reasons PoCs get returned

Missing one of the five elements.Most often, the “identify others potentially affected” audit is missing or wrapped vaguely into the resident-level corrective action. Treat it as a separate paragraph every time.
Generic systemic change.“Re-educated all staff on policy” without naming the policy, the training date, the duration, or how comprehension was verified.
Unrealistic compliance date. A compliance date inside the 10-day PoC window is suspicious unless the deficiency was a paperwork issue. Allow time for the systemic change to be real.
Monitoring that doesn’t escalate.A monitoring plan that doesn’t feed into QAPI or doesn’t define what happens if the monitoring uncovers a recurrence reads as unmoored. Spell out the escalation.
Repeat language from a prior PoC for the same F-tag. Surveyors check correction history. If you submitted the same corrective action language for the same tag last cycle, the systemic change clearly didn’t hold. Reset.

The revisit window

The state survey agency conducts a revisit between roughly 45 and 60 days after the original survey, depending on the deficiency severity. Immediate Jeopardy revisits happen much sooner — often within days of an IJ removal plan being accepted. The revisit team is checking that your PoC was executed, not re-reading the deficiencies.

Practical implication: the work after the PoC is submitted matters more than the document itself. Run the audits. Hold the QAPI meetings. Keep the rosters. The PoC is the promise; the revisit is the proof.

Common questions

Can I dispute the deficiency itself instead of submitting a PoC?

You can do both. Filing an Informal Dispute Resolution (IDR) request does not pause the PoC clock — you still submit a PoC within 10 days. The PoC can note that IDR is in progress, but the state expects a corrective response regardless of the dispute outcome. Dropping the deficiency through IDR is uncommon; getting the Scope and Severity reduced (e.g., from G to E) is more frequent.

What if the surveyor cited something we genuinely didn’t do wrong?

Submit the PoC anyway, addressing the deficiency as cited. In parallel, file IDR within your state’s window (10 days in most states, sometimes shorter). The PoC and IDR run on separate tracks. Failing to submit a PoC because you disagree with the citation gets you a worse enforcement outcome than submitting one and disputing.

How long should a PoC be?

Long enough to address the five elements specifically for each deficiency. For a single E-level deficiency, two pages is normal. For a multi-tag survey with several G or J deficiencies, ten pages is normal. Brevity for its own sake reads as under-treatment.

Who signs the PoC?

The Administrator is the legal signatory. In practice, the Administrator and the DON jointly own the document; the Administrator signs and the DON co-signs or initials each entry. Some states require the corporate officer for the licensee to sign as well.

Can we use a template?

Use a template for the structure — the five elements, the per-tag scaffolding. Never use a template for the systemic change language. The systemic change is the part the surveyor is reading carefully; if it looks templated, the PoC reads as insincere. Templates produce returns.

The pattern, summarized

Accepted PoCs share a structure: per-deficiency, five-element, specific verbs, named owners, plausible systemic change, monitoring that flows into QAPI, realistic compliance date. The 10-day clock forces the work to start at the exit conference. The revisit window is what actually tests whether the PoC was real.

A PoC that gets accepted the first time isn’t a writing achievement. It’s a sign that the facility had its system ready before the surveyor walked in.