From Attestation to Action: Why Policies Must Match Practice to Protect Patients and Reduce Liability Risk

Now that healthcare organizations have implemented patient safety policies and completed attestation for the CMS Patient Safety Structural Measure (PSSM), the focus must shift from documentation to execution.

Attesting to compliance is only the starting point. Organizations must follow through to ensure that daily practices, frontline behaviors, and leadership actions consistently align with their reported practices. True patient safety improvement depends not on what is written in policy, but on whether those expectations are reliably carried out in real time across the organization.

What Is the CMS Patient Safety Structural Measure?

At its core, PSSM was designed to improve patient safety by strengthening the systems, leadership behaviors, and structures that prevent harm before it occurs. But these benefits are only realized when policies are consistently practiced. When there is a disconnect between policy and practice, the very safeguards meant to protect patients begin to break down.

Where Policy Gaps Happen

Healthcare organizations may have well-developed patient safety policies and procedures addressing critical areas such as event reporting, escalation, communication, safety huddles, and just culture. However, having a policy in place does not necessarily mean the process is consistently followed.

Policy-practice gaps can develop when written procedures do not reflect what actually happens at the bedside or when staff are unclear about expectations, lack the resources or training to follow a process, or have developed workarounds over time. These gaps can occur at any level of an organization, from frontline clinical workflows to leadership oversight and quality improvement processes.

For organizations participating in the CMS Patient Safety Structural Measure (PSSM), this distinction is particularly important. Patient safety structures are most effective when they are integrated into everyday operations rather than treated as a compliance exercise. Regularly comparing written policies with actual workflows can help healthcare leaders identify weaknesses before they contribute to patient harm or liability exposure.

Policy-practice gaps often arise from broader organizational challenges, including:

• Inadequate training
• Ineffective oversight
• Cultural barriers to reporting
• Workflow misalignment
• Inconsistent execution of established safety processes

How Policy-Practice Gaps Increase Healthcare Liability Risk

As described in the PSSM framework, safety systems are intended to ensure that risks are identified early, leaders are informed, and learning occurs continuously. When policies are not reliably executed, those systems fail, and patients are exposed to preventable harm.

The gap between policy and practice becomes a significant driver of professional liability exposure. In many malpractice claims, one of the most damaging findings is not simply that harm occurred, but that:

• A policy or standard existed and was not followed
• A required process was inconsistently applied
• Documentation reflects deviation from established protocols

When organizations attest to having specific safety structures in place but cannot demonstrate consistent execution, it creates vulnerability in litigation. Plaintiff's arguments often center on:

• Failure to follow internal policies
• Inadequate implementation of safety systems
• Lack of accountability or monitoring

It is important to acknowledge, however, that the existence of a policy does not automatically establish or confirm that a deviation from that policy caused patient harm or constitutes negligence. But internal policies can become important evidence when evaluating whether an organization followed its own established safety processes and whether reasonable safeguards were in place.

When a written policy describes a specific safety expectation, but records or testimony show that the process was not consistently followed, that discrepancy may become an important issue in a liability claim.

Organizations must move beyond policy development and focus on operational reliability by:

• Validating processes at the frontline to ensure staff understand and consistently follow expectations
• Monitoring compliance in real time, not just retrospectively
• Holding leaders accountable for both outcomes and process reliability
• Ensuring feedback loops are closed, so identified issues lead to meaningful change

These actions confirm that systems are not just in place, but working as intended. The LHA Trust Funds provide a comprehensive suite of toolkits designed to help hospitals successfully address these challenges. Through extensive resources, education, and practical guidance, organizations can strengthen alignment between policy and practice. These toolkits offer actionable strategies in areas such as high reliability, culture of safety, event reporting, communication, and performance improvement—helping hospitals move beyond compliance to build systems that truly reduce harm and liability risk.

Make Sure Your Policy and Practice Tell the Same Story

A strong patient safety program is not defined by what is written in a policy manual but rather by what happens when that policy meets the real world.

At LHA Trust Funds, we offer practical patient safety, risk management, and culture of safety resources to help healthcare organizations identify policy-practice gaps, strengthen frontline processes, and turn compliance requirements into meaningful safety improvements.

Reach out to one of our Patient Safety Consultants to perform a structured patient safety risk assessment focused on high-risk clinical and operational processes. Through policy review, staff interviews, workflow observations, chart audits, and gap analysis, consultants evaluate whether current clinical practices align with organizational policies, regulatory requirements, and industry best practices.

Particular attention is given to key processes that carry significant patient safety and liability exposure. The assessment helps organizations identify areas where practice has drifted from policy, uncover opportunities for process improvement, and prioritize corrective actions. 

By partnering with LHA Trust Funds Patient Safety Consultants, healthcare organizations can proactively strengthen patient safety systems, reduce risk, and ensure that written policies accurately reflect the care being delivered at the bedside.