TL;DR: An IPC (Infection Prevention and Control) audit evaluates how well a healthcare organization prevents and manages infections. To prepare effectively, organizations should review hand hygiene compliance, PPE protocols, environmental cleaning, waste management, staff training records, and documentation systems before the audit date.
Infection Prevention and Control audits can feel like high-stakes events—and in many ways, they are. An IPC audit doesn’t just assess paperwork. It evaluates whether your organization is genuinely protecting patients, staff, and visitors from preventable infections. The stakes are clinical, legal, and reputational.
Yet many organizations only begin preparing once the audit is imminent. By that point, gaps that could have been addressed weeks earlier become urgent problems. The better approach is systematic, proactive review—working through the key areas of IPC practice before an auditor ever walks through the door.
This guide covers the critical areas healthcare organizations and care settings should examine ahead of an IPC audit. Whether you’re a dedicated IPC lead, a facilities manager, or a senior clinical leader, this breakdown will help you identify where to focus your preparation efforts.
What Does an IPC Audit Actually Assess?
Before diving into preparation, it’s worth being clear about what IPC audits typically measure. Auditors assess whether an organization has effective systems in place to prevent the transmission of infection. This includes both the physical environment and the behaviors of staff working within it.
Audits generally align with national or regional standards—such as those set by the Care Quality Commission (CQC) in the UK, the Centers for Disease Control and Prevention (CDC) in the US, or equivalent bodies elsewhere. The specific criteria vary, but most audits examine a consistent set of domains: hand hygiene, personal protective equipment, environmental cleanliness, safe waste handling, isolation procedures, staff competency, and documentation quality.
Understanding which framework governs your audit will shape exactly which standards you’re expected to meet. Confirm this early.
Hand Hygiene: Still the Foundation of Infection Prevention
Hand hygiene remains the single most effective measure for preventing healthcare-associated infections (HCAIs). According to the World Health Organization (WHO), hand hygiene compliance in healthcare settings averages just 38.7% globally—making it one of the most audited and most challenged areas in IPC practice.
Before your audit, conduct internal hand hygiene audits across all clinical and care areas. Observe staff technique directly, not just whether they use gel or soap. Correct technique—covering all surfaces of the hands, for the right duration—matters as much as frequency.
What to check before the audit:
- Are hand hygiene stations stocked and accessible at the point of care?
- Is alcohol-based hand rub available at every bed space or care station?
- Are sink facilities in good working order, with soap, paper towels, and clinical waste bins accessible?
- Do staff demonstrate the correct five moments of hand hygiene (as defined by WHO)?
- Are hand hygiene audit results documented and trended over time?
If compliance rates are below your organization’s target, investigate the root cause. Is it a training issue? A resource issue? A cultural issue? Each requires a different response—and auditors will want to see that you’ve identified and acted on the gap.
Personal Protective Equipment: Availability, Use, and Disposal
PPE protocols protect both patients and staff, but they only work when used correctly and consistently. Auditors will assess not just whether PPE is available, but whether staff know when and how to use it.
Review your PPE supply chain and stock levels across all care settings. Check that PPE is stored correctly—away from sources of contamination, within expiry dates, and in appropriate quantities to meet demand. Assess whether staff can articulate the donning and doffing sequence without prompting.
One area that frequently draws audit findings is inappropriate PPE use—either under-use in high-risk situations or over-use that leads to waste and complacency. Your pre-audit review should identify whether staff are applying the risk assessment process accurately before selecting PPE.
Also confirm that clinical waste bins for used PPE are present at the point of use, clearly labeled, and not overfilling. This crosses into waste management territory but is directly relevant to PPE audit criteria.
Environmental Cleaning: Standards, Schedules, and Evidence
The physical environment is a transmission route for infection. Surfaces, equipment, and shared spaces all require routine and enhanced cleaning protocols—and auditors will want to see documented evidence that these are being carried out.
Work with your facilities and domestic services teams to review cleaning schedules before the audit. High-touch surfaces (door handles, call bells, IV poles, over-bed tables) should be cleaned frequently and on a documented schedule. Deep cleaning protocols for isolation rooms, discharge cleaning procedures, and terminal cleans should all be clearly defined and auditable.
Common gaps to look for:
- Outdated or unsigned cleaning checklists
- No system for escalating concerns when cleaning standards aren’t met
- Inadequate cleaning of shared equipment (hoists, blood pressure cuffs, commodes)
- Unclear responsibility for who cleans what—particularly in areas used by multiple teams
Audit tools such as ATP (adenosine triphosphate) testing or visual inspection checklists can provide objective evidence of cleanliness standards. If your organization uses these, ensure results are documented and any follow-up actions are recorded.
Isolation Procedures and Transmission-Based Precautions
The ability to isolate infectious patients quickly and effectively is a critical IPC function. Before your audit, review whether your organization has clear, accessible guidance on when isolation is required and what type of precautions apply (contact, droplet, or airborne).
Walk through your isolation facilities. Are negative pressure rooms functioning correctly? Are side rooms available and allocated appropriately? Are isolation signage systems consistent, clear, and understood by staff across all shifts?
Review recent cases where isolation was initiated. Were decisions made promptly? Was documentation completed accurately? Auditors may examine case-specific records to assess the real-world application of your isolation policy, not just the policy document itself.
Staff Training, Competency, and Supervision Records
An IPC audit will scrutinize whether staff have been adequately trained and whether that training is current. This goes beyond mandatory e-learning completions. Auditors look for evidence that staff can apply IPC knowledge in practice—and that supervision structures exist to identify and address competency gaps.
Before the audit, run a training compliance report across all staff groups. Identify anyone whose IPC training is overdue and prioritize refresher delivery. Pay particular attention to bank, agency, and locum staff, who are often missed in training compliance reporting but are subject to the same IPC expectations.
Review supervision records to confirm that IPC competency has been assessed directly, not just inferred from e-learning completion. If your organization uses competency frameworks or clinical observation tools, ensure these are up to date and stored accessibly.
Waste Management: Classification, Segregation, and Safe Handling
Incorrect clinical waste segregation is a frequent audit finding—and one that carries significant regulatory risk. Before your audit, walk through waste management practices across all areas.
Check that staff can correctly classify waste types (infectious, offensive, pharmaceutical, sharps) and that the correct colored bags and containers are used consistently. Sharps bins should be assembled correctly, stored at a safe height, and closed and replaced when three-quarters full—not overfilled.
Review your organization’s waste management policy and check that it reflects current national guidance. Confirm that staff training on waste management is recorded and current.
Documentation, Policies, and Governance Evidence
The quality of an organization’s IPC documentation tells auditors a great deal about its governance culture. Before the audit, conduct a systematic review of your key IPC documents.
Core documents to review:
- IPC policy (is it current, ratified, and accessible?)
- Standard infection control precautions (SICPs) guidance
- Outbreak management protocol
- Decontamination and cleaning policies
- Hand hygiene policy
- ANTT (Aseptic Non-Touch Technique) procedures
Confirm that all policies have been reviewed within the required timeframe—typically every one to three years—and that review dates are clearly recorded. Check that policies are version-controlled, that older versions have been removed from circulation, and that staff know where to access current guidance.
Beyond policies, auditors will often request evidence of IPC governance activity: committee meeting minutes, audit results, incident reports, and action plans. Gather these ahead of time and ensure they demonstrate a cycle of audit, action, and re-audit rather than just isolated data collection.
IPC Link Practitioners and Leadership Visibility
Auditors increasingly focus on IPC culture—not just systems. One indicator is the visibility and activity of IPC link practitioners or champions at the ward or department level. Before your audit, confirm that your link practitioner network is active, that roles are clearly defined, and that practitioners have dedicated time to carry out IPC responsibilities.
Review minutes from IPC link practitioner meetings. Are they held regularly? Are action items followed up? Is there clear escalation from ward level to the IPC team when concerns arise?
Senior leadership engagement is also scrutinized. Evidence that IPC performance is reviewed at board or executive level—through dashboards, board papers, or designated IPC reporting structures—demonstrates organizational commitment to infection prevention beyond the clinical frontline.
Preparing Your Team for the Audit Process Itself
Even organizations with strong IPC practices can underperform in audits because staff are unprepared for the process. Conduct a mock audit or structured walkthrough before the formal review. Brief staff on what to expect, and reassure them that auditors are there to support improvement, not just identify failings.
Encourage staff to speak confidently about their own practice and to direct specific questions to the IPC lead or relevant specialist. Inconsistent answers from different team members—even where practice is actually good—can create unnecessary audit findings.
Turn Preparation Into Continuous Improvement
The organizations that perform best in IPC audits aren’t those that scramble to prepare at the last minute. They are organizations where IPC governance is embedded into daily practice—where hand hygiene compliance is monitored monthly, where cleaning checklists are completed and reviewed routinely, and where training records are maintained as a matter of course.
Treat your pre-audit review not as a one-time exercise, but as a prompt to strengthen the systems that should already be in place. Every gap you identify and address before the audit is a patient safety improvement as much as it is an audit preparation step.
Use your findings with Koh Lim Audit to build a structured action plan. Assign clear ownership to each item, set realistic timescales, and schedule a follow-up review to confirm completion. Share the results with your IPC committee and leadership team. That cycle of review, action, and verification is precisely what auditors are looking for—and more importantly, it’s what keeps patients safe.
Frequently Asked Questions
What is an IPC audit?
An IPC (Infection Prevention and Control) audit is a formal review of an organization’s practices, systems, and environments to assess compliance with infection prevention standards. Auditors evaluate areas including hand hygiene, PPE use, environmental cleanliness, staff training, waste management, and documentation quality.
How often are IPC audits conducted?
The frequency depends on the regulatory body and the type of organization. Many healthcare settings conduct internal IPC audits quarterly or annually, while external inspections may occur every one to three years. High-risk or underperforming settings may be audited more frequently.
What happens if an organization fails an IPC audit?
Failing an IPC audit typically results in a formal improvement notice, a requirement to submit an action plan, and a follow-up inspection. In serious cases—particularly where patient safety is at risk—regulatory bodies may impose restrictions on operations or escalate enforcement action.
Who is responsible for IPC audit preparation?
Responsibility typically sits with the designated IPC lead or IPC team, but effective preparation requires input from clinical leaders, facilities managers, training teams, and frontline staff. Senior leadership should be actively involved in reviewing audit findings and supporting corrective action.
What’s the difference between an IPC audit and an IPC risk assessment?
An IPC audit measures current compliance against defined standards through observation, record review, and staff interviews. An IPC risk assessment identifies potential infection risks in a specific setting or situation before they occur. Both are important tools in IPC governance, but they serve different purposes.
How can organizations improve IPC audit outcomes over time?
Sustained improvement comes from embedding IPC into routine governance—conducting regular internal audits, acting promptly on findings, maintaining up-to-date training records, and fostering a culture where staff feel empowered to raise IPC concerns. Organizations that treat audit preparation as an ongoing process consistently outperform those that treat it as a periodic event.