Most dental offices believe their infection control is fine. Most are mostly right. The gaps are almost never dramatic: it is the internal indicator that goes in some packages but not others, the waterline test that was last logged 14 months ago, the second assistant who touches the keyboard with contaminated gloves, and the written policy that was printed in 2016 and never opened again.
An internal audit finds those things while they are still yours to fix. The good news is that you do not need to design one, because CDC already published the instrument: the Infection Prevention Checklist for Dental Settings, a companion to CDC's Summary of Infection Prevention Practices in Dental Settings. Many state boards incorporate CDC guidance into their rules or use it as the standard of care during inspections, so auditing against it puts you in the same frame as the person who might inspect you.
This article turns that checklist into a process: who runs it, how often, how to observe without theater, how to score it, and how to make corrective actions actually close. It builds on Chapter 6: Compliance and the Sterilization and Compliance course.
Key takeaways
- The CDC checklist has two parts, and the second one is where the real findings are: Section I reviews written policies and documentation, Section II is direct observation of what people actually do.
- CDC expects at least one trained person to coordinate the infection prevention program, written policies based on evidence-based guidelines reassessed regularly (for example annually), and training at orientation, when new tasks or equipment are introduced, and at least annually.
- Run the full audit twice a year and spot-observe monthly. Announced for the document review, unannounced for observation.
- Score every item pass, fail, or not applicable, and write a specific corrective action with an owner and a due date for every fail. An audit without a closed loop is a diary.
- Do not audit your own area. Trade with a colleague practice or rotate the auditor internally.
- Your state board's rules are the enforceable floor and can be stricter than CDC. Audit against both.
Who runs it, and how often
CDC's administrative expectations start with a designated person: at least one individual with training in infection prevention responsible for coordinating the program. In a small practice that is usually a lead assistant or the office manager, with the owner accountable. Name them in writing, give them time on the schedule to do the work, and pay for their training.
| Activity | Frequency | Who |
|---|---|---|
| Full audit: Section I documents plus Section II observation | Twice a year | Infection prevention coordinator, with the owner present for the findings review |
| Spot observation of one or two practices | Monthly | Coordinator, 15 minutes, rotating focus |
| Sterilization log review | Weekly | Whoever runs the sterilizer, countersigned monthly by the coordinator |
| Waterline testing | Per the manufacturer's instructions | Assigned clinical staff, logged |
| Written policy review and update | Annually, and whenever a product, device, or procedure changes | Coordinator with the owner |
| Corrective action follow-up | 30 days after each audit | Coordinator |
| Outside review (consultant or peer practice) | Every 2 to 3 years, and before a sale | External |
Trade audits with a nearby practice. You will catch things in each other's offices that you are both blind to in your own, and it costs nothing but an afternoon. Agree in advance that findings stay between the two practices, and swap written reports. If you are part of a group or a study club, build it into the rotation.
Section I: the document review
CDC's Section I covers the administrative policies and practices that should appear in your written, site-specific infection prevention program, with supporting documentation. Its subsections run: administrative measures; education and training; dental health care personnel safety; program evaluation; hand hygiene; personal protective equipment; respiratory hygiene and cough etiquette; sharps safety; safe injection practices; sterilization and disinfection of patient-care items; environmental infection prevention and control; and dental unit water quality.
Do this part announced, with the binder or shared drive open, and score it item by item. What "pass" requires is not that a document exists but that it is current, specific to your office, and matched by records.
Section I audit: documents and records
- Written infection prevention policies and procedures, site-specific, with a review date within the last 12 months
- A named infection prevention coordinator, in writing, with documented training
- Supplies and equipment available to follow every written policy (no policy that requires a product you do not stock)
- Training records: at orientation, when tasks or equipment change, and at least annually, job-specific, with dates and topics
- Written exposure control plan, reviewed annually, with the safer-device evaluation documented and non-managerial employee input recorded
- Immunization policy and records, including hepatitis B status and signed declinations; TB screening at hire per your policy
- A named occupational health referral arrangement and a written post-exposure procedure
- Policy on personnel with potentially transmissible conditions and work restrictions
- Exposure incident records and any sharps injury log you maintain
- Program evaluation: evidence of periodic observational assessment and feedback to staff (this audit is that evidence)
- Hand hygiene products available at every point of care; policy covers surgical hand antisepsis if you perform surgical procedures
- PPE available in the right sizes for everyone, including protective eyewear with side shields and heavy utility gloves for processing
- Respiratory hygiene supplies and signage at entry, and a written policy
- Sharps safety policy including device selection and handling; safe injection practices policy covering single-dose vials and aseptic technique
- Instrument reprocessing procedures written per device, with manufacturer instructions for use on file for every instrument, sterilizer, and cleaning product
- Sterilization monitoring records: mechanical every load, chemical indicators, and biological (spore) testing at least weekly per sterilizer and with every implantable load
- A written failed spore test protocol, and documentation of any failures and the corrective action taken
- Sterilizer and ultrasonic maintenance records, plus ultrasonic or washer function testing
- Environmental cleaning policy naming the products used, their contact times, and the surfaces and barriers used
- EPA registration confirmed for every surface disinfectant in use, with the label on file
- Waterline treatment protocol per the device and product manufacturers, with test results logged and action documented for any result over 500 CFU/mL
- Written boil-water advisory procedure
- Sterile water or sterile saline delivery available for surgical procedures
- Regulated waste handling procedure consistent with your state's rules
Templates help here. Our sterilization monitoring log gives you a log format that satisfies the mechanical, chemical, and biological columns, and the annual compliance calendar holds the recurring review dates. For the underlying detail on monitoring and failures, see Lesson 2: Monitoring, Logs, and Failed Spore Tests and the sterilization monitoring equipment guide.
Section II: direct observation
CDC's Section II is direct observation of personnel and patient-care practices, organized around hand hygiene, PPE use, respiratory hygiene, sharps safety, safe injection practices, sterilization and disinfection of patient-care items, environmental infection prevention and control, and dental unit water quality.
This is the half that produces real findings, and it only works if the observation is honest. Rules that make it honest:
- Unannounced, but not secret. Tell the team in advance that observation happens periodically and explain why. Do not announce the specific day.
- Observe complete cycles. Watch a full operatory turnover from the moment the patient leaves to the moment the next one sits, and watch an instrument cassette travel from the operatory through the ultrasonic, packaging, sterilizer, and storage.
- Stand where you can see hands and surfaces. Most breaks in technique are a glove touching a keyboard, a drawer handle, a phone, or a chair control.
- Record behavior, not people. The finding is "gloves were not changed between operatory cleanup and handling the computer in three of five observations," not a name.
- Observe more than one person and more than one shift. A single observation of one assistant tells you about that assistant.
- Count. Numerators and denominators turn impressions into trends you can show improving.
Section II audit: what to watch for
- Hand hygiene performed before and after patient contact, before donning and after removing gloves, and after touching contaminated surfaces or equipment
- Correct product and technique, and hands free of artificial nails per policy where surgical procedures are performed
- PPE selected correctly for the task, donned before contact, and removed in the right order before leaving the operatory
- Masks changed between patients and when wet; eye protection with side shields worn during aerosol-generating procedures
- Protective clothing removed before leaving the work area, not worn out of the building
- Heavy utility gloves and eye protection worn during instrument processing
- Gloves not washed and reused; gloves changed when torn and between patients
- Respiratory hygiene signage, tissues, and hand hygiene products present and used at entry
- Sharps containers at the point of use, upright, below the fill line, closable, and not overfilled
- No hand recapping, bending, or breaking of needles; safety features activated
- Single-dose vials and cartridges used for one patient only; syringes and needles never reused between patients
- Medication preparation performed in a clean area away from contaminated items
- Instruments cleaned before sterilization; heavy soil removed; cassettes not overloaded
- Ultrasonic lid kept closed during operation; solution changed on schedule
- Internal chemical indicator in every package, external indicator where the internal is not visible
- Packages allowed to dry before handling and stored so integrity is maintained
- Loads not released before mechanical and chemical results are verified; implantable items held for the spore test result
- Clean and dirty areas physically separated, with a one-directional workflow that is actually followed
- Clinical contact surfaces cleaned then disinfected with the correct contact time observed, or barriers changed between patients
- Barriers placed on surfaces that are hard to clean: chair controls, light handles, tubing, keyboards, cameras
- Housekeeping surfaces cleaned on a schedule, with a separate procedure from clinical contact surfaces
- Waterline treatment product used per instructions; lines flushed as directed; sterile irrigant used for surgical procedures
- Regulated waste segregated correctly, containers closed, and non-regulated waste not over-classified
- Handpieces and other devices that attach to air and waterlines heat sterilized between patients per the manufacturer
The last item catches practices more often than any other: handpieces must be heat sterilized between patients, and high-volume days are when shortcuts happen. Count your handpiece inventory against your busiest day. If the math does not work, the problem is inventory, not discipline. See high-speed handpieces and automated maintenance systems.
Scoring and reporting
Score each item pass, fail, or not applicable. Resist partial credit; "mostly" is a fail with a note. For observation items, record the count (for example, 7 of 9 observations compliant) so you can trend it.
Then write a one-page report with four parts:
- Scope and date. Who audited, which sections, how many observations, over how many days.
- Findings by risk, not by checklist order. Put anything with direct patient-harm potential first: sterilization failures, unheat-sterilized handpieces, waterline results over the limit, reuse of single-use items, missed spore testing.
- Corrective action table. Finding, root cause, action, owner, due date.
- Trend. How each repeat finding compares to the last audit.
| Finding | Likely root cause | Corrective action that actually works |
|---|---|---|
| Spore test skipped some weeks | No named owner; done "when someone remembers" | Assign a day and a person; add a recurring reminder; coordinator reviews the log monthly and initials |
| Internal indicator missing from some packages | Indicators stored away from the packaging station | Move the supply to the wrapping station; restock as part of the daily close |
| Waterline testing lapsed | Test kits expired and were never reordered | Put kits on the standing supply order; log with the sterilization log so a gap is visible |
| Gloved hands touching keyboards and drawer pulls | Layout forces it; no barriers available | Add barrier film or a cleanable keyboard cover; reposition the mouse; make overglove use the default for charting |
| Contact time for surface disinfectant not observed | Nobody knows the product's contact time | Post the contact time on the dispenser; verify the product is appropriate for your turnover interval; retrain |
| Handpieces not heat sterilized between every patient | Insufficient inventory on busy days | Buy more handpieces; this is a purchase, not a policy problem |
| Annual training not documented | Training happened; nobody signed anything | Standard sign-in sheet with date, topics, trainer; file immediately after |
| Manufacturer instructions for use not on file | Nobody collected them | One afternoon gathering current IFUs into a labeled digital folder; add to the purchasing checklist for every new device |
A finding you cannot fix with training is not a training problem. When the same observation fails audit after audit, the cause is almost always inventory, layout, time, or an unclear product instruction. Retraining people to do something the physical setup makes difficult produces frustration and nothing else.
Closing the loop
The corrective action table is the audit. Three habits make it real:
- Owners and dates on every item, with the owner being a person, not "the team."
- A 30-day follow-up that verifies each action by looking at the evidence, not by asking whether it was done. Re-observe the behavior, look at the new log, open the new folder.
- Carry-forward. Anything not closed at 30 days appears at the top of the next audit report with the original date attached. Age is the most useful metric in the whole process.
Share results with the team in a short meeting, framed as system findings. If the audit becomes a performance review, staff will manage the audit rather than the risk, and you will lose the only honest picture you have. Mention improvements explicitly, because trend lines that move are what keep people participating.
Your state board is the enforceable floor
CDC is not a regulator. Your state dental board is, and its infection control rules are what you can be disciplined under. State rules commonly go beyond CDC guidance on:
- Spore testing frequency and how long the results must be retained
- Specific waterline testing and documentation requirements
- Required written policies and named personnel
- Mandated infection control continuing education, sometimes with a set number of hours on a cycle
- Who may perform which instrument processing and clinical tasks, and what credentials each role requires
- Unannounced board inspections, and whether the board uses its own checklist you can obtain in advance
Ask your board for its inspection form. Many publish it, and auditing against both that form and the CDC checklist closes nearly every realistic gap. Our state resources pages point to board contacts. Confirm requirements directly with the board and, where employee safety overlaps, with your state OSHA plan.
Build it into the year
Set two audit dates now, twelve months apart plus a midpoint, and put the monthly spot check on the same day each month. Schedule the document review for a day the schedule is light and the observation for a day it is not, because a busy day is where the practice really lives. Keep every report, because a stack of dated audits with closed corrective actions is the single most persuasive document you can hand an inspector, a buyer, or a malpractice defense attorney.
Next steps: work through Lesson 1: The Instrument Processing Chain and Lesson 5: Being Inspection Ready, download the sterilization monitoring log, and read what happens during an OSHA inspection for the employee-safety half of the same picture.
This article is educational and is not legal or clinical advice. CDC recommendations are summarized as of September 2026. State board infection control rules vary and are enforceable; confirm your requirements with your state dental board and your state OSHA plan where one applies.
Educational content only. It is not legal, financial, tax, or clinical advice. Prices and ranges are approximate and vary by region, condition, and year. Verify current rules with your state dental board and qualified professionals. ChairsideSource is not affiliated with any manufacturer, the ADA, or the DAT.