Buying Smart

GBAC STAR Service Accreditation: the process, the 20 elements, and what it means for BSC RFPs

When a hospital RFP in 2025 specifies GBAC STAR Service Accreditation as a qualification requirement, the BSC that does not hold it is disqualified before the price comparison begins. That is the operational reality of this credential: i...

9 min read 2159 words Updated Jun 03, 2026 Reviewed by Opora Editorial Team

By the Opora Editorial Team

When a hospital RFP in 2025 specifies GBAC STAR Service Accreditation as a qualification requirement, the BSC that does not hold it is disqualified before the price comparison begins. That is the operational reality of this credential: it has moved, in four years, from a pandemic-period differentiator to a baseline requirement in healthcare, hospitality, and portions of Class A commercial real estate procurement. The shift is not complete — most small-market commercial office accounts do not yet specify it — but the trajectory is clear, and the lead time to accreditation makes it the kind of credential that cannot be obtained in response to a specific RFP loss.

GBAC STAR Service Accreditation was launched on February 18, 2021, by the Global Biorisk Advisory Council (GBAC), a division of ISSA, per the GBAC launch press release. It is specifically designed for building service contractors and outsourced cleaning service providers — not for the facilities they clean. That distinction matters: a hospital that holds GBAC STAR Facility Accreditation has validated its own cleaning, disinfection, and infection prevention program against the 20 program elements. A BSC that holds GBAC STAR Service Accreditation has done the same for its service delivery operations. One does not substitute for the other in procurement.

This article explains the 20 program elements, the structural changes from the 2023 CIMS merger, and the compliance backstop that OSHA and EPA provide to the key accreditation requirements.

The GBAC STAR Service vs. Facility distinction

The GBAC STAR program has two accreditation tracks, and confusing them is a common error in both operator conversations and facility procurement documents.

GBAC STAR Facility Accreditation is awarded to building owners and facility operators who demonstrate that their facility's cleaning, disinfection, and infection prevention program meets the 20 program elements. A hotel, airport, or hospital that holds Facility accreditation has validated how that building is cleaned.

GBAC STAR Service Accreditation is awarded to BSCs and outsourced cleaning service providers who demonstrate that their service delivery organization — their protocols, training systems, chemical programs, and management processes — meets the same 20 elements, per GBAC. A BSC that holds Service accreditation is not claiming that every building it cleans is accredited. It is claiming that its operational infrastructure can support the standard.

In practice, GBAC STAR Service Accreditation appears in two distinct procurement contexts: as a pass/fail qualification requirement ("only accredited BSCs may bid") and as a scored criterion in weighted RFP evaluation ("GBAC STAR Service Accreditation: 10 points out of 100"). Healthcare accounts trend toward the former; commercial real estate accounts trend toward the latter.

The 2023 CIMS merger: what changed

In April 2023, ISSA merged the GBAC STAR Service Accreditation with its Cleaning Industry Management Standard (CIMS) certification into a single combined program. The resulting program is built on the CIMS criteria — a consensus-based management standard assessing organizational management systems across quality systems, service delivery, human resources, health, safety, and environmental stewardship — with a renewed emphasis on GBAC's infection prevention content.

For BSCs currently holding CIMS certification as of the merger: the combined program represented the first major update to CIMS components since the prior addition of CIMS-GB (the green building variant). For BSCs holding GBAC STAR Service but not CIMS: the merger brought management system requirements into the accreditation. For BSCs holding neither: the combined program is now the entry point.

The practical implication is that pursuing GBAC STAR Service Accreditation today means engaging with the combined CIMS-GBAC program, not the standalone 2021 launch version. Operators with older GBAC STAR Service credentials should verify their current standing and renewal requirements with ISSA directly.

The 20 program elements

The accreditation is structured around 20 program elements organized into five categories, per the GBAC STAR 20 Program Elements page. Each element has specific implementation requirements; what follows is the operational substance of each, with the compliance backstop identified where one exists.

Category 1 — Facility leadership, commitment, and planning (Elements 1–4)

Element 1: Organizational roles, responsibilities, and authorities. The BSC must identify staff who champion the accreditation program. This is a documentation and governance requirement — who owns what in the cleaning, disinfection, and infection prevention program.

Element 2: Facility commitment statement. Senior leadership must sign a commitment statement communicating the program to all stakeholders. For a BSC, this means executive-level sign-off, not a supervisor-level form.

Element 3: Sustainability and continuous improvement. The program must include mechanisms for continuous improvement — not a one-time certification exercise but an ongoing quality management cycle. This element aligns with the broader CIMS management system framework.

Element 4: Conformity and compliance. The BSC must identify all national, state, and local legal and regulatory requirements associated with cleaning and disinfection for each industry served. For healthcare-adjacent accounts, this means the exposure control plan requirements under OSHA 29 CFR 1910.1030 and the Hazard Communication training requirements under OSHA 29 CFR 1910.1200. Element 4 is where GBAC STAR's infection prevention focus intersects with OSHA's mandatory minimums.

Category 2 — Goals and strategies (Elements 5–8)

Element 5: Goals, objectives, and targets. Establish measurable goals for the cleaning and disinfection program based on prior assessments and client feedback.

Element 6: Program controls and monitoring. Set documented control measures — inspection protocols, chemical use logs, training records — and monitor against them. This is the operational equivalent of what OSHA's recordkeeping standard requires for safety: documentation that a program exists and is being executed.

Element 7: Risk assessment and risk mitigation strategies. Implement ongoing risk assessment — identifying buildings, areas, or tasks with elevated biorisk and adjusting protocols accordingly. This element is where an outbreak response protocol or pandemic-specific escalation procedure would live.

Element 8: Standard operating procedures. Establish written SOPs for all cleaning, disinfection, and infectious disease prevention work practices. The word "all" matters here. A GBAC-accredited BSC cannot rely on verbal training or supervisor memory for protocol delivery.

Category 3 — Supplies and inventory management (Elements 9–13)

Element 9: Tools and equipment. Review equipment periodically as technology changes. For a BSC, this includes electrostatic sprayers, microfiber system updates, autoscrubber compliance, and any equipment with an infection prevention function.

Element 10: Cleaning and disinfection chemicals. Use chemicals appropriate for the area and organisms of concern. For regulated pathogens, this requires chemicals from EPA List N (disinfectants for use against SARS-CoV-2) or other EPA-registered products with the required kill claims for the specific pathogen at issue. Element 10 is where the operator's chemical program must be documented and linked to EPA registration numbers.

Element 11: Inventory control and management. Maintain inventory control plans for supplies, tools, and equipment — including PPE requirements for each.

Element 12: Personal protective equipment (PPE). Inventory and manage PPE for cleaning personnel. This element aligns with OSHA's PPE requirements, and for accounts where bloodborne pathogen exposure is possible, the PPE inventory must include the items required by 29 CFR 1910.1030.

Element 13: Waste management. Ensure waste management plans are in place. For healthcare-adjacent accounts, this includes regulated medical waste protocols where applicable.

Category 4 — Training, preparation, and prevention (Elements 14–17)

Element 14: Personnel training and competency. Cleaning personnel must be properly trained and demonstrated competent in their responsibilities. GBAC specifies that competence can be demonstrated through appropriate education, training, certifications, and experience. For HazCom compliance, OSHA 29 CFR 1910.1200(h) requires training before initial assignment to jobs with hazardous chemical exposure — that regulatory floor is embedded in this element.

Element 15: Emergency preparedness and response. Establish an emergency preparedness process — what happens when an outbreak occurs at an account, when a chemical spill requires specialized response, or when a pandemic-level event changes the service model.

Element 16: Facility infection disease prevention policies. Address customer, client, and visitor needs through comprehensive infection control prevention programs. This is where a healthcare account's infection control requirements — specific to that facility type and potentially coordinated with an Infection Preventionist — are documented.

Element 17: Worker health program. Manage risks to workers' physical and psychological health through a program that covers all cleaning personnel who could be directly impacted by exposure to infectious materials. This is the employer-side health program that sits alongside the exposure control plan required by OSHA.

Category 5 — Constant vigilance (Elements 18–20)

Element 18: Audits and inspections. Create an internal audit and inspection program to verify the accreditation program is properly implemented. A BSC pursuing this element is building the same kind of documented inspection record that supports account renewal conversations — the two goals are aligned.

Element 19: Control of suppliers. Establish criteria for evaluating and re-evaluating suppliers of products and services, ensuring they comply with the BSC's specific requirements. For chemical suppliers, this means verifying that products continue to meet the EPA registration and formulation requirements embedded in Element 10.

Element 20: Documentation management. Document every part of the process and ensure current policies, plans, procedures, protocols, and records are aligned with the GBAC STAR program at all times. This is the administrative capstone: accreditation is not a file you submit once; it is a living document management system.

What accreditation costs: the data gap

The source pre-map for this article explicitly flags that GBAC STAR Service pricing for BSCs is not publicly listed. The pricing cited in some secondary sources for Facility accreditation (a range of several hundred to several thousand dollars depending on facility size) does not apply to the BSC Service program. GBAC updates its fee schedule periodically, and the current fee structure is available directly from GBAC at gbac.issa.com. Any figure cited here would be unverifiable at the time of reading.

The indirect costs — staff time for documentation, SOP development, training program formalization — are typically larger than the direct accreditation fee for a BSC that has not previously pursued formal management system certification.

The RFP value of the credential

The credential's RFP value is greatest where clients can verify it independently. GBAC maintains a searchable directory of accredited facilities and service providers. An FM evaluating a BSC's bid can confirm accreditation status directly, which makes the credential more defensible than a self-reported certification.

The complement to GBAC STAR Service Accreditation at the individual staff level is the ISSA Healthcare Environmental Hygiene Professional (HEHP) certification, launched June 2026, which validates individual EVS staff competency in healthcare settings. For healthcare accounts where both organizational-level program validation (GBAC STAR Service) and individual staff-level competency demonstration are specified, the two credentials address different levels of the requirements hierarchy.

The inspection and quality documentation programs that support GBAC accreditation are also the foundation for the 30/60/90-day account onboarding playbook — the same documentation system serves both the accreditation requirement and the client retention function.

What to verify yourself

  • Current accreditation requirements and fees. Contact GBAC directly at gbac.issa.com for the current fee schedule, application process, and audit requirements under the combined CIMS-GBAC program. The 2023 merger changed the program structure; any pre-2023 information about standalone GBAC STAR Service requirements may not reflect the current program.
  • Whether the RFP specifies Service or Facility accreditation. Read the accreditation requirement in any RFP carefully. A requirement for \"GBAC STAR accreditation\" could mean either track. Facility accreditation covers the building; Service accreditation covers the BSC. Confirm which is required before deciding whether to pursue it.
  • Chemical compliance under Element 10. Verify that your current disinfectants are on EPA List N or hold the appropriate EPA registration for the pathogens of concern in the accounts you serve. EPA List N is updated periodically.
  • OSHA compliance backstop. Elements 4, 12, 14, and 16 directly intersect with OSHA requirements. Verify your current compliance with 29 CFR 1910.1030 (bloodborne pathogens) and 29 CFR 1910.1200 (hazard communication) before submitting accreditation documentation. GBAC accreditation does not substitute for OSHA compliance; the two operate in parallel.
  • Renewal cadence. GBAC STAR accreditation is not indefinite. Verify the renewal period and audit requirements to budget appropriately for ongoing maintenance of the credential.

Disclaimer — Regulatory content

This article describes a voluntary industry accreditation program and its relationship to OSHA and EPA regulatory requirements as of the publication date shown. Accreditation program requirements, fees, and structures change. The information above reflects program content as of the GBAC STAR 20 Program Elements documentation last updated January 2023 and the CIMS merger announcement of April 2023.

Do not treat this article as a current or complete statement of GBAC STAR Service accreditation requirements. Verify all current requirements, fees, and program structures directly with GBAC at gbac.issa.com before making any accreditation-related business decisions.

For OSHA compliance questions related to Elements 4, 12, 14, and 16, the current regulatory text at osha.gov supersedes any summary in this article. Consult a licensed safety professional for compliance determinations specific to your operation. If you spot an error in this article, contact us.

This article links up to its hub pillar, the Buying Smart hub. Hub pillar slug: [INTERNAL: buying-smart-hub-pillar].

Primary sources

Part of these field guides

Related hubs

Buying smartComplianceProduct-guidesTier-a