Compliance & Certification Glossary

Certification tracking is the systematic process of monitoring, recording, and managing employee certifications, licenses, training completions, and their associated expiration dates. Effective tracking ensures that every employee maintains current credentials required by regulatory agencies, industry standards, and employer policies. Modern certification tracking uses software-based systems with automated expiration alerts, document storage, and compliance reporting to replace manual methods like spreadsheets and paper files.

Clinical competency is the demonstrated ability of a healthcare practitioner to perform specific clinical skills, procedures, and tasks safely and effectively according to established standards of care. Healthcare organizations are required to assess and validate clinical competency at hire and periodically thereafter, typically annually, under CMS Conditions of Participation, Joint Commission standards, and state regulations. Competency assessment includes direct observation, skills testing, simulation, and review of clinical outcomes.

CMS Conditions of Participation are the health and safety standards that healthcare organizations must meet to participate in the Medicare and Medicaid programs. Administered by the Centers for Medicare & Medicaid Services, the CoPs establish minimum requirements for hospitals, home health agencies, hospices, ambulatory surgical centers, and other provider types. Facilities are surveyed for compliance by state survey agencies or CMS-approved accreditation organizations such as The Joint Commission.

Under OSHA regulations, a Competent Person is an individual who is capable of identifying existing and predictable hazards in the workplace and has the authority to take prompt corrective measures to eliminate them. Multiple OSHA construction standards (including scaffolding, excavation, and fall protection) specifically require a designated competent person on the jobsite. The competent person must have both training and the empowerment to stop work when unsafe conditions are found.

A compliance audit is a systematic review of an organization's adherence to regulatory requirements, industry standards, and internal policies. In regulated industries such as trucking, construction, healthcare, and food service, compliance audits may be conducted by federal agencies (FMCSA, OSHA, CMS, FDA), state regulators, accreditation bodies, or internal audit teams. The audit evaluates whether the organization maintains required records, follows mandated procedures, and employs properly qualified and certified personnel.

Confined space entry refers to the regulated process of entering and working in a space that has limited openings for entry and exit, is not designed for continuous worker occupancy, and is large enough for a worker to enter and perform work. Under OSHA's construction standard for confined spaces (29 CFR 1926.1200-1213), employers must evaluate the workplace for permit-required confined spaces, develop entry procedures, and train workers in hazard recognition and emergency response before any entry occurs.

Continuing Education credits — referred to as CEUs (Continuing Education Units), CMEs (Continuing Medical Education), or CE hours depending on the profession — are standardized units of learning that healthcare professionals must complete to maintain their licensure and certifications. State licensing boards, professional organizations, and credentialing bodies require practitioners to complete a specified number of approved CE credits during each renewal cycle to ensure they maintain current knowledge and competency.

Credentialing is the formal process of verifying that healthcare practitioners possess the required qualifications, education, training, licensure, and competency to provide patient care within a healthcare organization. The process involves primary source verification of medical school graduation, residency completion, board certification, state licensure, malpractice history, and work history. Credentialing is required by CMS, The Joint Commission, and state regulations before a practitioner can be granted privileges to practice at a facility.

A Critical Control Point is a step in the food handling or production process at which control can be applied to prevent, eliminate, or reduce a food safety hazard to an acceptable level. CCPs are a core component of the HACCP system and must have established critical limits, monitoring procedures, corrective actions, and verification activities. Common CCPs in food service include cooking temperatures, cold holding temperatures, hot holding temperatures, and receiving inspections.

A CSA score is a safety measurement system used by the FMCSA to identify high-risk commercial motor carriers and drivers. The system evaluates seven Behavior Analysis and Safety Improvement Categories (BASICs) using data from roadside inspections, crash reports, and investigation results. Carriers with scores exceeding intervention thresholds face alerts, warning letters, or targeted investigations.

A DOT audit, formally known as a compliance review, is an on-site examination of a motor carrier's operations conducted by FMCSA or state safety investigators. The audit evaluates compliance with federal safety regulations covering driver qualifications, hours of service, vehicle maintenance, drug and alcohol testing, and financial responsibility. Audits can be triggered by poor CSA scores, complaints, crashes, or new carrier status.

A Driver Qualification File is a mandatory personnel record that every motor carrier must maintain for each driver who operates a commercial motor vehicle. Required under 49 CFR Part 391, the DQ file must contain specific documents proving the driver is qualified and medically fit to operate a CMV. Missing or incomplete DQ files are among the most frequently cited violations during DOT audits.

Entry-Level Driver Training is a federally mandated training program required for all first-time CDL applicants and drivers seeking to upgrade their CDL class or add certain endorsements. Effective February 7, 2022, the ELDT rule (49 CFR Part 380) requires completion of both theory and behind-the-wheel training through a provider registered on the FMCSA Training Provider Registry. Training results must be reported electronically before a driver can take the CDL skills test.

Expiration management is the practice of proactively monitoring credential expiration dates and initiating renewal processes well before deadlines are reached. Effective expiration management uses escalating reminder sequences — typically at 90, 60, 30, and 7 days before expiry — to give organizations and individuals sufficient lead time to complete renewal requirements. The goal is to eliminate compliance gaps caused by expired certifications, licenses, or training records.

The FDA Food Code is a model set of guidelines published by the U.S. Food and Drug Administration that provides a scientifically sound technical and legal basis for regulating the retail and food service industries. Updated every four years, the Food Code covers food safety practices including employee hygiene, food temperature controls, equipment standards, and facility sanitation. While not federal law itself, the Food Code is adopted in whole or in part by state and local jurisdictions as the basis for their food safety regulations.

The FMCSA is the federal agency within the U.S. Department of Transportation responsible for regulating and overseeing the safety of commercial motor vehicles (CMVs). It establishes rules for driver qualifications, vehicle maintenance, hours of service, and carrier operating authority. The agency was created by the Motor Carrier Safety Improvement Act of 1999.

HACCP is a systematic, science-based food safety management system designed to identify, evaluate, and control hazards that are significant to food safety. Developed originally for NASA's space program and endorsed by the FDA and USDA, HACCP focuses on prevention rather than end-product testing. The system is built around seven principles that guide food establishments in identifying biological, chemical, and physical hazards and establishing controls at critical points in the production process.

HIPAA compliance refers to adherence to the regulations established by the Health Insurance Portability and Accountability Act of 1996, which sets national standards for the protection of individually identifiable health information. The law includes the Privacy Rule (governing uses and disclosures of protected health information), the Security Rule (requiring safeguards for electronic PHI), and the Breach Notification Rule (mandating reporting of data breaches). Compliance is enforced by the HHS Office for Civil Rights.

Hours of Service regulations are federal rules established by the FMCSA under 49 CFR Part 395 that limit the number of hours a commercial motor vehicle driver may drive and work before taking mandatory rest breaks. The rules are designed to prevent fatigue-related crashes by ensuring drivers get adequate rest. HOS compliance is monitored through Electronic Logging Devices (ELDs) and is one of the most frequently inspected areas during roadside stops and DOT audits.

A Job Hazard Analysis is a systematic process for identifying potential hazards associated with each step of a work task and determining the best way to eliminate or control those hazards. Also known as a Job Safety Analysis (JSA), the JHA breaks a job into individual steps, identifies the hazards at each step, and prescribes preventive measures. OSHA recommends JHAs as a key component of an effective safety and health program under its Recommended Practices for Safety and Health Programs.

Joint Commission accreditation is a voluntary quality and safety evaluation process for healthcare organizations conducted by The Joint Commission (TJC), the largest and most recognized healthcare accreditation body in the United States. Accreditation demonstrates that a facility meets rigorous performance standards and is committed to continuous improvement. TJC accreditation provides "deemed status" for Medicare certification, meaning accredited facilities are presumed to meet CMS Conditions of Participation without a separate government survey.

Lockout/Tagout refers to safety procedures used to ensure that machines and equipment are properly shut down, de-energized, and secured before maintenance or service work is performed. Governed by OSHA standard 29 CFR 1910.147 (General Industry) and applied in construction through 29 CFR 1926 Subpart K, LOTO procedures prevent unexpected startup or release of stored energy that could cause injury or death. Workers must be trained in both lockout and tagout procedures specific to the equipment they service.

The Medical Examiner's Certificate, commonly called the DOT medical card, is a federally required document certifying that a commercial motor vehicle driver meets the physical qualification standards established by the FMCSA under 49 CFR Part 391. The examination must be performed by a certified medical examiner listed on the FMCSA National Registry. A driver cannot legally operate a CMV in interstate commerce without a valid, unexpired medical card.

OSHA Recordkeeping refers to the federal requirements under 29 CFR Part 1904 that obligate employers to record and report work-related injuries and illnesses. Covered employers must maintain OSHA Form 300 (Log of Work-Related Injuries and Illnesses), Form 300A (Summary), and Form 301 (Injury and Illness Incident Report). The annual summary must be posted in the workplace from February 1 through April 30 each year.

Regulatory compliance is the process by which an organization adheres to the laws, regulations, guidelines, and specifications relevant to its industry and operations. In the United States, regulated industries must comply with federal standards set by agencies such as OSHA, FMCSA, CMS, the FDA, and the EPA, as well as state and local regulations that may impose additional requirements. Non-compliance can result in fines, operational restrictions, loss of licensure, and criminal penalties.

Scope of practice defines the procedures, actions, and processes that a licensed or certified healthcare professional is permitted to perform based on their education, training, credentials, and state law. Each healthcare profession has a scope of practice established by the relevant state practice act and licensing board. Practicing beyond one's scope — or employing someone to practice beyond their scope — can result in disciplinary action, criminal charges, and malpractice liability.

Respirable crystalline silica exposure refers to the inhalation of fine silica dust particles generated by cutting, grinding, drilling, or crushing materials containing crystalline silica such as concrete, brick, stone, morite, and sand. OSHA's silica standard for construction (29 CFR 1926.1153) sets a permissible exposure limit (PEL) of 50 micrograms per cubic meter of air over an 8-hour time-weighted average. Overexposure can cause silicosis, lung cancer, chronic obstructive pulmonary disease, and kidney disease.

Time-temperature abuse occurs when food is allowed to remain in the temperature "danger zone" between 41 degrees F and 135 degrees F for longer than the time allowed by food safety standards. This condition promotes the rapid growth of pathogenic bacteria that can cause foodborne illness. The FDA Food Code establishes specific time and temperature requirements for cooking, cooling, reheating, hot holding, and cold holding to prevent abuse. Time-temperature abuse is one of the leading contributing factors in foodborne illness outbreaks.

A toolbox talk is a short, focused safety meeting conducted at the jobsite, typically at the start of a work shift or before beginning a specific task. Lasting 5 to 15 minutes, toolbox talks address a single safety topic relevant to the day's work, such as fall protection, heat illness prevention, electrical safety, or proper lifting techniques. While not explicitly mandated as a standalone OSHA requirement, toolbox talks fulfill multiple OSHA training obligations and are considered an industry best practice.

The Transportation Worker Identification Credential is a tamper-resistant biometric card issued by the Transportation Security Administration (TSA) that grants unescorted access to secure areas of maritime facilities and vessels regulated under the Maritime Transportation Security Act (MTSA). TWIC cards are required for port truck drivers, longshoreworkers, and other workers who need access to secure port and maritime areas. The program is administered jointly by the TSA and the U.S. Coast Guard.