Walk into almost any accredited agency in America — a police department, a fire district, a county health department, a crime lab, a prison — and ask one question: where does your accreditation live?
You will usually get one of two answers. The honest one is a room. A wall of three-ring binders, a shared drive with folder names like FINAL_v3_USE THIS ONE, and a filing cabinet nobody has opened since the last assessment. The more uncomfortable answer is a name. One person. The accreditation manager who knows which memo proves which standard, who has the assessor's cell number, and who is, quietly, the single point of failure for the agency's entire compliance posture.
I have spent 35 years in this business and 17 of them in and around corrections, working with more than 40 state departments of correction. That is where I learned to recognize the pattern. What surprised me was how far outside corrections it runs.
Because the binder problem is not a corrections problem. It is not a public safety problem either. It is the default operating model of accreditation itself — and it fails the same way in every sector that practices it.
Same architecture, different acronyms
Here is the shape of it, sector by sector. Read the one you live in, then read one you don't. The details change. The structure doesn't.
470 standards, proved bullet by bullet, year after year
CALEA's advanced law enforcement program comprises 470 standards; the tier-one program uses a highlighted subset of 193. Public safety communications — the 911 center — runs its own 211 standards.
The cycle is four years, and this is the part outsiders miss: it is not four quiet years and one hard one. Agencies file an Annual Status Report in years one through three, and CALEA staff conduct web-based assessments that sample standard files remotely. Initial accreditation requires at least one year of proofs. Reaccreditation requires documentation from each year of the cycle — and for a multi-part standard, a proof supporting each bullet.
That is not a filing job. It is a continuous evidentiary obligation that most agencies discover they are behind on only when someone opens the folder.
250 performance indicators, and an annual report every single year
The Commission on Fire Accreditation International's current model — the 11th edition FESSAM — contains 250 individual performance indicators across 11 categories. Accreditation is valid for five years, and every year in between the agency must submit an Annual Compliance Report. Getting to applicant status alone requires three completed documents: a community risk assessment, a strategic plan, and a self-assessment manual, inside 18 months.
Ambulance services face CAAS, which moved from 107 standards to 147 in Version 4.0 — now mandatory for all applications filed since January 2026 — on a three-year cycle. Medical transport programs face CAMTS on a three-year cycle, with a documentation checklist mapped to every standard.
Three bodies. Three cycles. Many fire-based EMS agencies carry two of them at once, staffed by the same person.
Ten domains, five years, and a lab standard with no finish line
Health departments accredit through PHAB against 10 domains aligned to the Essential Public Health Services. Status lasts five years, with annual reporting to PHAB in between. PHAB's refreshed 2026 standards took effect in July and actually cut roughly 40 required documents from initial accreditation, adding alternative ways to demonstrate conformity — live demonstrations, site-visit conversations, focused narratives. A rare move in the right direction, and a reminder that the requirements themselves are a moving target.
Forensic and testing laboratories run on ISO/IEC 17025:2017 through ANAB, supplemented by AR 3125, which layers on ILAC policies and forensic-specific requirements — including an annual code-of-ethics review by all personnel, with records to prove it. There is no tidy "number of standards" here. Cycles range from two to five years and are capped at five, with sampled oversight in between.
A lab does not get a quiet year. It gets sampled.
Four-year cycles, annual reports, and 36 months of documentation
COA accreditation through Social Current runs four years, with an annual report required to maintain it, and organizations submit narratives and documentation demonstrating implementation of each standard. Average time to reach full accreditation: 12 to 18 months for private organizations, 18 to 24 for public agencies.
CARF's top outcome is a three-year accreditation, and it comes with obligations attached: a Quality Improvement Plan within 90 days of the decision, and an Annual Conformance to Quality Report thereafter.
NCCHC, which accredits health services in jails and prisons, requires 100% of applicable essential standards and at least 85% of important standards — with no partial credit, since every compliance indicator must be met for the standard to count. An initial survey needs 12 months of documentation behind it. A reaccreditation survey needs 36 months.
Corrections is the sharpest version of it
I lead with corrections not because it is the only sector with this problem, but because it is where the problem is most extreme — several of these regimes stacked on top of each other, on the same staff, at the same time.
The American Correctional Association publishes 29 different accreditation manuals. To earn accreditation, a facility must hit 100% of applicable mandatory standards and at least 90% of applicable non-mandatory standards. Reaccreditation comes around every three years, and a performance monitoring visit lands somewhere between months 12 and 18 — right when the binders have gone quiet.
Stack PREA on top. Every confinement facility must be audited at least once in each three-year cycle, with at least one-third of each facility type audited every year. PREA auditors are explicit that paper alone will not save you: compliance cannot be assessed through a review of written policies and procedures alone. They want twelve months of documentation, functional testing, and interviews with a representative sample of staff and incarcerated people.
Then add NCCHC for health services. State jail standards and state inspections. Federal detention standards if you house detainees. Joint Commission if you run behavioral health.
A warden can be carrying four or five of these at once. But a fire chief pursuing CFAI while the ambulance division carries CAAS is carrying two. A county health department doing PHAB while its lab carries ISO 17025 is carrying two. The math is different. The failure is identical.
The failure isn't effort. It's architecture.
Let me be clear about this, because accreditation managers take enough grief already: nobody is failing because they don't care. The people doing this work are some of the most conscientious professionals in government.
They are failing because of how the work is structured.
Accreditation, as most agencies practice it, is an event. Progress made in one cycle doesn't compound into the next, because the knowledge lives in an individual rather than in a system. When that person retires — and in this labor market, they retire — the agency doesn't lose a file. It loses the map.
The consequences aren't administrative. Accreditation status shows up in litigation, in consent decree negotiations, in grant eligibility, in legislative budget hearings, and in the confidence a chief or a director can put in front of a council or a commission. It is one of the few defensible, third-party answers to the question "how do you know this operation is being run correctly?"
That answer should not depend on whether one person remembers where they filed something in 2023.
And the standards themselves keep moving
Here is the thing I did not expect to find when I went through these programs body by body.
Four of them issued new standards editions inside the last twelve months. NCCHC's 2026 standards took effect in January, adding expanded interpretive guidance and new supporting-documentation requirements. CAAS made Version 4.0 mandatory for applications from January. PHAB's refreshed standards took effect July 1st. CFAI's 11th edition is displacing the 10th through 2026 and 2027. CAMTS has a 13th edition landing January 2027. CALEA circulated proposed revisions in March — including, fittingly, a new section of standards on artificial intelligence.
This is the quiet argument for treating accreditation as a system rather than a binder. A binder encodes the edition that was current when somebody built it. When the manual is reissued, every cross-reference in that binder silently goes stale, and nobody finds out until an assessor asks a question the old edition didn't contain.
What actually changes the shape of the problem
I have looked at a lot of technology in this space, and I am careful about what I put my name behind. I am now representing Badge 6, and I want to explain what convinced me — because it isn't a feature list.
Most compliance software digitizes the binder. You still do the same work, in the same panic, just with fewer paper cuts. Badge 6 does something structurally different: it reads your documents against the standards and tells you what you have actually proven.
Upload a policy, a post order, a training record, a log. The platform matches it against the applicable standards, highlights the language that satisfies the requirement, and tracks compliance down to the subpoint level — not just "standard met" but which part of the standard, and what is still missing. If you have ever assembled proofs bullet by bullet for a multi-part CALEA standard, or mapped a policy against NCCHC compliance indicators that have to be met individually, you already know why that distinction matters.
Progress is visible continuously on a dashboard instead of being discovered three weeks before an assessor arrives. And when the assessment does come, the assessment-ready summary report is a click, not a quarter.
Their CEO — a former officer and accreditation manager — describes it as TurboTax for accreditation: something that does not require an expert to build a fully compliant assessment. That framing is the whole point. It moves the expertise from a person into a system.
The proof I found most persuasive wasn't a large agency. It was a two-officer department — an agency that had never been able to pursue accreditation at all — completing a full assessment across all 359 required standards. If the smallest agency in the state can do this without hiring a consultant, the excuse that accreditation is only for well-resourced organizations is finished.
How to tell whether you have this problem
You do not need a consultant to diagnose it. Four questions:
- If your accreditation manager gave notice tomorrow, how long until someone else could answer an assessor's question? If the honest answer is measured in weeks, the knowledge is in a person, not a system.
- Can you say today what percentage of your standards are currently proven? Not "we'll be ready" — the actual number, right now, at the subpoint level.
- When your accrediting body last reissued its manual, how did you find out what changed? If the answer is "we haven't fully worked through it," your binder is running an old edition.
- What is your annual obligation, separate from your assessment year? Most agencies underestimate this. Nearly every body on this page requires something every single year.
What I'd ask you to do
If you are a chief, a sheriff, a warden, a fire chief, a health officer, a lab director, a compliance director — or the accreditation manager reading this at 9pm because that is when you do this work — I'd like 20 minutes.
Not a pitch deck. A conversation about what your next cycle actually looks like, how many standards you are carrying, and how much of it lives in one person's head. If Badge 6 is a fit, I will show you. If it isn't, I will tell you that too — I have spent 35 years in this business and my referrals are worth more than any single deal.
Because the goal was never to survive the assessment. The goal is to run an operation you would be comfortable having someone walk into unannounced.