"CBAHI requirements" is asked far more often than it is answered. This page does not reproduce standards text — that belongs to the issuing body — it explains what actually has to be in place in a facility, how a surveyor reads evidence, and where points are usually lost.
The Saudi Central Board for Accreditation of Healthcare Institutions is a national body established in 2005 to define, promote and enforce quality and safety standards across Saudi healthcare.
The critical difference from most accreditation programmes elsewhere: this one is not optional. National policy requires public and private healthcare facilities to comply with CBAHI standards, and hospital accreditation is explicitly linked to operating-licence renewal. In a Saudi hospital the question is not whether to apply, but when — and how ready.
The Board oversees seven national programmes:
When a quality manager searches for "CBAHI requirements", they usually mean one of two things — and confusing them costs a team months.
Purely procedural — a valid licence, actual operation, a complete application file. It is published by CBAHI, usually settled in weeks, and it is not what causes facilities to fall short.
This is what the survey actually measures: are policies practised, not merely written? Is the workforce qualified and documented? Are incidents reported and analysed? Are indicators measured and improving? This is what takes months — and what the rest of this page is about.
A facility is assessed against three kinds of standard: structural, procedural and outcome-based. The distinction is not academic. It is the difference between a file that passes and a file that does not.
| Kind | What it measures | What the surveyor asks for |
|---|---|---|
| Structural | Does it exist? | An approved policy · a structure · equipment · a contract · a standing committee |
| Procedural | Is it practised? | A record proving practice, and a staff member who knows and performs the procedure |
| Outcome | Did it work? | An indicator with a baseline and later measurements showing real effect |
Conventional preparation spends ninety per cent of its time on the first layer alone: policies written, approved and collected into tidy folders. Then the survey arrives, the surveyor asks about layers two and three, and there is no answer.
The working rule that compresses all of this into two lines: a policy with no record of practice is a document, not a system. And an indicator with no baseline is a number, not evidence.
Within the standards is a set marked as the minimum mandatory patient-safety requirements. They are treated differently from the rest: other standards aggregate into a score, these behave as a condition.
The planning consequence is plain — this set closes first, whatever your schedule says. There is no sense raising your score in an administrative domain while an essential safety item is still open.
The right way to handle them is to assess yourself first and honestly, and log every open item as a corrective action with an owner and a closing date — not as a note in meeting minutes.
A surveyor does not read your folder cover to cover. They pick a trace — a patient, a medication, a staff member — and follow it across departments. At each stop they ask for one of three things:
| Layer | What the surveyor says | Where it usually fails |
|---|---|---|
| The document | "Show me your high-alert medication policy" | The policy exists but its review cycle has lapsed |
| The record | "Show me the last ten doses given under it" | The record is complete in one unit and missing in another |
| Field evidence | "Ask the nurse how she verifies the dose" | The nurse attended the training but was never assessed as competent |
A document with no record means a system on paper. A record with no understanding among staff means a system that gets filled in but not followed. An experienced surveyor is not looking for the document at all — they are looking for consistency across all three.
Which is why the most useful exercise before a survey is not reviewing folders. It is sending someone from your team into a unit they do not work in to ask a real staff member: how do you do this? The gap that surfaces in ten minutes is the same gap the surveyor will find.
Written once, then forgotten. The cover says 2022 and the review cycle is two years. The surveyor sees a document outside its cycle, which in their reading is uncomfortably close to no document at all.
A single month's number proves nothing. Improvement is proven by a measurement before, a documented intervention, and a measurement after. One good figure may be chance, and the surveyor knows it.
The action was closed because the cause was addressed — and never measured again three months later. That is precisely what a surveyor asks: did the improvement hold, or did things drift back once attention moved on?
A signature sheet proves the person attended, not that they are able. What is required is the second. The distance between them is the distance between a training file and a competency file.
The single most avoidable finding there is, and simultaneously among the most frequent. It is solved by an alert ninety days before expiry, not by an annual review that notices too late.
A facility that has reported no incident and received no complaint is not a safe facility; it is a facility that does not report. An experienced surveyor reads a zero as a warning, not an achievement. A high reporting rate with good closure is far stronger than silence.
One note on this table: the last two weeks are the most valuable part of it. Nothing exposes the gap between written and practised like asking a real staff member, in their own unit, without warning.
| Period | Focus | Required output |
|---|---|---|
| Days 1–30 | An honest self-assessment | A numbered gap list per domain, each gap with an owner and a date |
| Days 31–60 | Close essential safety items first, then lapsed documents | No open essential safety item · every policy inside its review cycle |
| Days 61–75 | Build the record and competence layers | A practice record for every critical policy · documented competence for high-risk roles |
| Days 76–90 | An internal mock trace | Your team questioned the way the survey will question them, and every gap closed |
Ninety days is enough for a facility with a foundation that needs gaps closed. A facility starting from nothing — no policy library, no indicators with a time series, no incident reporting — usually needs nine to twelve months, for a simple reason: the outcome layer cannot be compressed. You cannot demonstrate six months of improvement in six weeks.
Yes. National policy requires public and private healthcare facilities to comply with CBAHI standards, and hospital accreditation is explicitly linked to operating-licence renewal.
A facility with an existing foundation needs roughly ninety days to close its gaps. A facility starting from nothing usually needs nine to twelve months, because outcome standards require a series of measurements that cannot be compressed.
CBAHI is a Saudi national programme tied to operating licensure; JCI is an international programme sought voluntarily. Many facilities hold both, and the evidence file is built once for both, because what is fundamentally asked — a practised policy, a record proving it, an outcome that improves — is closely aligned.
Nobody requires software. The practical difference is that spreadsheets succeed at the document layer and collapse at the record and outcome layers: tracking expiry dates for hundreds of staff, a time series across dozens of indicators, closing actions with sustainability checks — work that loses items when it is run by hand.
With an honest self-assessment. Honest is a condition here, not a courtesy: a self-assessment that comes back all green gives you nothing to work on, and defers finding the gap to the day when finding it no longer helps.
A week-by-week plan: who does what, what each week must produce, and how to reorder priorities when time runs short.
Two programmes that differ in obligation and structure yet converge on what they ask of the field. When you need both, and why the evidence file is built once.
Every recurring finding has a systemic cause, not an individual one. Ten findings by domain, each with its root cause, its fix, and how closure is proven.
Twenty-four questions answered in five minutes give you your facility's readiness by domain and where improvement starts. No account, no commitment.
Start the readiness check