ECRI’s 2019 Top 10 Patient Safety Concerns: A Survey-Readiness Crosswalk for Compliance Leaders

September 28, 2026

Ready to be survey-ready?

See how AccrediCulture turns compliance into an operating system across every facility.

The direct answer: treat ECRI's Top 10 as your annual risk map, then crosswalk it to surveyor tracer questions

Accreditation leaders should read ECRI’s Top 10 Patient Safety Concerns as a predictive risk map. Pull the current-year list, pair it with the 2019 edition for a multi-year trend line, and use both to prioritize root cause analyses, tune your incident-management taxonomy, and align corrective action plans with the exact domains The Joint Commission (TJC), DNV Healthcare, and CARF surveyors are already probing. ECRI publishes the list annually with the Institute for Safe Medication Practices (ISMP), and the two organizations build it from millions of reported patient safety events plus expert panel judgment.

The 2019 edition is worth revisiting because it led with diagnostic stewardship and test result management using EHRs, followed by antimicrobial stewardship, burnout, and mobile health. Those same themes reappear in modified form on later lists. When a topic surfaces two or three years running, surveyors have already built tracer questions around it.

What the 2019 list said, and what the 2024 list changed

The 2019 Top 10 was built from a sizable evidence base. ECRI compiled it from more than 2.8 million patient safety events collected in its PSO database since 2009, along with expert opinion. That’s not a top-of-mind list. It’s a signal.

By 2024, the concerns shifted to reflect workforce reality. ECRI named challenges transitioning newly trained clinicians from education into practice as the #1 concern, with workarounds on barcode medication administration systems close behind. ECRI cited a survey showing 30% of nurses with less than two years’ experience feel ill-prepared to practice on their own. Marcus Schabacker, ECRI’s president and CEO, put it this way: “Many of our patient safety concerns for 2024 are exacerbated by a shortage of prepared healthcare clinicians.”

Read side by side, the 2019 and 2024 lists tell you where diagnostic, medication, and workforce risk has migrated. That’s the trend line your surveyors will follow.

How TJC Sentinel Event data confirms where surveyors probe hardest

ECRI tells you where risk is heading. TJC tells you where it’s already landing. From January 1 to December 31, 2024, The Joint Commission received 1,575 reports of sentinel events, with patient falls accounting for 776 events (49%). The remaining leading categories were wrong surgery, delay in treatment, patient suicide, unintended retention of foreign objects, and workplace violence-related events. Together, these categories comprised 85% of reported sentinel events in 2024.

The harm profile is sobering. Of the 1,575 events, 21% were associated with patient death, 49% with severe harm, and 21% with moderate harm. TJC also notes that most reports are voluntary and represent only a slice of actual events. In 2023, the accrediting body received 1,411 reports of sentinel events, on par with the volume reported in 2022, and communication, teamwork, and inconsistently followed policies were leading contributing factors.

Map those categories to your operations. If falls, delay in treatment, and workplace violence are showing up in TJC’s data every year, your incident-management categories, your environment of care rounds, and your emergency management drills need to reflect that. Surveyors read the same annual report you do.

Building the ECRI-to-CAPA crosswalk inside your compliance system

Here’s the operator-level workflow we recommend at AccrediCulture. It works whether you’re accredited by TJC, DNV under NIAHO, CARF, AAAHC, or COA, and it maps cleanly to CMS Conditions of Participation at 42 CFR §482.

Pull the current ECRI Top 10 and the 2019 list. Identify overlapping themes. Diagnostic error, medication safety, workforce, and behavioral health have carried across editions.
Cross-reference the TJC annual Sentinel Event Review. If a theme appears in both ECRI and TJC data, elevate it in your RCA calendar.
Align incident taxonomy to AHRQ Common Formats. This gives you PSO protection under the Patient Safety and Quality Improvement Act of 2005 and produces data your surveyors already know how to read.
Write each CAPA against a specific standard. A CAPA that names the TJC element of performance, DNV NIAHO clause, or CARF standard it addresses is easier to defend during an Evidence of Standards Compliance (ESC) submission or follow-up survey.
Store the evidence in one place. Policy version, staff attestation, training completion, mock survey tracer notes, and outcome metric. That’s what a surveyor asks for on day one.

When your compliance officer can open one screen and show ECRI concern → RCA → CAPA → standard → evidence artifact, tracer conversations become straightforward. A single source of truth is what makes that possible.

Frequently asked questions

What was on ECRI’s 2019 Top 10 Patient Safety Concerns list, and which items still appear on recent lists?
The 2019 list opened with diagnostic stewardship and test result management in EHRs, antimicrobial stewardship, burnout, and mobile health. Medication safety, workforce well-being, and diagnostic accuracy themes have carried into later editions, including the 2024 list where transitioning new clinicians and BCMA workarounds took the top slots.

How do TJC surveyors use patient-safety event data during an on-site survey?
Surveyors use tracer methodology. They pick a patient or a process and follow the record through your organization. They’ll ask how you knew about an event, how you investigated it, what you changed, and how you verified the change worked. The TJC Sentinel Event Policy defines a sentinel event as a patient safety event that reaches a patient and results in death, severe harm, or permanent harm, and organizations are expected to complete a comprehensive systematic analysis (typically an RCA) and action plan.

Should our RCA template map to ECRI’s annual concerns or to AHRQ Common Formats?
Both. Use AHRQ Common Formats for the structural fields (event type, harm, contributing factors) so your data is portable and PSO-protected. Then tag each RCA with the relevant ECRI theme so you can trend against the annual report and show surveyors you’re paying attention to national signals, not just your own inbox.

What’s the difference between a sentinel event under TJC and a reportable event under CMS CoPs?
TJC’s Sentinel Event Policy is a voluntary reporting framework tied to accreditation. CMS Conditions of Participation at 42 CFR §482 impose separate reporting obligations, and states layer their own requirements on top. An event can be reportable to your state, reviewable by CMS under CoPs, and a sentinel event under TJC all at once. Your incident-management workflow should route each event through all three lenses.

How do we build a CAPA that will survive a follow-up survey or ESC submission?
Name the standard. State the finding. Describe the root cause in plain language. List the specific action, the owner, the due date, and the measure you’ll use to verify sustained compliance. Attach the evidence: revised policy, training roster, audit result at 30, 60, and 90 days. If you can show a surveyor that same package six months later without hunting for files, you’re in good shape.

References