What are the requirements for developing a security program/security management plan?

The Joint Commission has no specific standards for the security of pediatric inpatient units. There are many available configurations, locking arrangements, security/access control systems, surveillance capabilities, etc. available to achieve security for a wide range of risks associated with the pediatric population(s) served by a health care organization. The organization is required to assess their unique circumstances and establish a safe and secure environment in accordance with standard EC.02.01.01. Remember, to be secured, something or someone must either be physically secured or under adequate surveillance. In all cases, locking arrangements must comply with NFPA 101 Life Safety Code (2000 edition) requirements, or CMS categorical waiver 13-58 that allows the 2012 edition of NFPA 101 to be used in certain pediatric security circumstances. Assessment participants should include representation from the unit staff, hospital leadership, hospital security, hospital maintenance, appropriate consultants, etc. Informational sources may include trade organizations, controlling authority (like a state licensing entity) requirements/recommendations, reputable design sources, etc. Criteria may include the physical layout, the number/arrangement of exits, the vulnerability of the patient population, intended level of guardian/visitor access, community risk, etc. The organization is expected to implement the assessed design, systems and operational practices, then analyze if the desired affect was achieved (see EC.04.01.01, EC.04.01.03 and EC.04.01.05). The Joint Commission survey process will evaluate the management of security in these areas for effectiveness, and validate that the organization is following their established practices. Abduction and missing patient exercises are effective means to validate pediatric security effectiveness. [EC.02.01.01]