An assigned regulatory task has stopped moving. The owner says it is under review, the due date is approaching, and another reminder produces the same update.

Before asking for status again, find out what is preventing the next action. Uncertainty about a requirement, disputed responsibility, and a scheduling conflict each need a different response.

Find the specific blocker

Ask the owner what needs to happen before the work can proceed. If the answer is “We are waiting on another department,” identify the exact input or decision that department owes.

Then match the response to the problem. Unclear requirements need clarification from the appropriate compliance, legal, or subject matter resource. Disputed ownership needs a decision from someone authorized to assign responsibility. A capacity problem needs a discussion about priorities and resources.

Jay Anstine’s article on compliance accountability recommends approaching operational leaders with curiosity and helping them solve problems while preserving their responsibility for the work. That approach is especially useful when a task appears inactive but the reason is unclear.

Agree on the next action

Once the blocker is understood, replace “still in progress” with a specific commitment. Record the next action, the person responsible, and when they will provide a result or raise an unresolved issue.

For work involving several departments, make the dependency visible. If training cannot begin until a revised procedure is approved, track the approval separately from the training. Each owner should understand what they are waiting for and what others need from them.

Keep internal checkpoints distinct from the regulatory deadline. Revising the project plan does not change when the underlying requirement takes effect.

Work through a blocked assignment

Consider a hypothetical hospital preparing a registration process change after reviewing a new requirement. Patient Access owns implementation, but progress has stopped because two locations use different forms.

A follow-up conversation reveals that Patient Access needs a decision about whether both locations can use one revised form. The designated approver agrees to review the proposed form by Tuesday. Patient Access then schedules its workflow update and staff instruction around that decision.

At Tuesday’s checkpoint, the team checks whether the approval occurred and whether implementation can proceed. The overall assignment stays open until the remaining work is completed and the designated reviewer checks the supporting records.

Escalate the decision that is needed

If the owner cannot resolve the blocker within their authority, use your organization’s escalation process. Explain the unresolved question, its effect on the implementation schedule, and the decision or resource needed from the recipient.

For example, a leader may need to decide which department owns a shared process or whether another project must move to make staff available. Naming that choice gives the leader a concrete way to help.

Lisa Estrada’s systems approach to regulatory change emphasizes operational decisions, documented rationale, and accountable follow-through. Preserve the escalation decision with the assignment so the owner can act on it and later reviewers can understand the response.

Use recurring blockers to improve the process

Review stalled assignments for patterns. Repeated approval delays may call for an earlier review checkpoint. Frequent ownership disputes may signal that shared processes need clearer decision authority.

Lisa Herota’s guidance on compliance metrics recommends tracking implementation and resolution, with reporting suited to the audience. For operational leaders, consider showing blocked assignments, how long each has been waiting, and the decision needed to move it forward.

Start with one stalled assignment at your next review. Identify the blocker, agree on the next action, and set a checkpoint that leaves time to respond before the deadline.

Practical compliance insights

Useful articles and resources, delivered to your inbox.

Sign up for the newsletter

Open the subscription form

The post How to Move Stalled Regulatory Work Forward first appeared on YouCompli.

New compliance professionals benefit from a variety of resources to ramp up their knowledge and value. If you’re new to the healthcare compliance field (or know someone who is), save and share this article 

Getting Started for Early-Career Compliance Professionals 

The 20+ foundational resources that follow were curated from the YouCompli resource library. This set is tailored specifically for early-career compliance professionals. Start reading for ideas to build your: 

• Leadership skills 
• Operational credibility 
• Cross-departmental influence 

Read Expert-Sourced Content Designed for Professional Development 

Written for (and sometimes directly by) healthcare compliance executives, the information is practical and easy to understand. 

The articles focus on a variety of important topics: 

• Communication and Professional Growth for New Leaders 
• Operational and Audit Fundamentals for Building Compliance Expertise 
• Technology and Strategic Planning for Regulatory Change Management 
• Compliance Program Building and Oversight 
• Video Hub: Expert Guidance for Healthcare Compliance Professionals 
• Downloadable Tip Sheets for Quick Ideas and Actions 
   

Pick where you need help most today and dive in. (A few resources fall into multiple categories, so you get double the return when you read them.) 

Communication and Professional Growth for New Leaders 

From soft skills to dollar signs, these articles cover areas that sometimes get neglected in more formal compliance leader training. These expert resources cover aspects of compliance communications you might not find anywhere else. Learn about the persuasive communication skills that are the secret superpowers behind strong compliance leaders.  

Aggressive vs Assertive Communication: What New Healthcare Compliance Officers Need to Know  

Get advice tailored for new leaders on building authority and articulating compliance risks without creating unnecessary friction. New compliance executive can learn how to speak with authority and assertiveness without damaging cross-departmental relationships.  

This article covers:  

• Key differences between two common communication styles  
• How assertive communication benefits the compliance program  
• Strategies to help you master this skillset 

Integrate Self-Awareness into Healthcare Compliance Programs: 18 Tips  

Being aware of how we do our own work is paramount for an effective compliance program and incorporating self-awareness into your healthcare compliance program can enhance its effectiveness. For example, it improves your ability to empathize with the challenges operational leaders face when adjusting a process to meet a regulatory requirement. To help build awareness, explore these 18 actionable tips for compliance officers. 

Financial Literacy: The “Superpower” Every Modern Compliance Leader Needs  

For effective healthcare compliance leaders, financial literacy isn’t optional. Compliance risk often hides in the fine print of financial data, making literacy a prerequisite for effective oversight.  Explains key financial concepts so business newcomers can align compliance goals with executives’ organizational priorities.  

By confidently speaking the language of finance with terms like liquidity, capital planning and debt financing, compliance officers move beyond being seen as a “cost center” and the “Department of No.”  Instead, compliance can become a guardian of the organization’s financial sustainability, ensuring that compliance is integrated into every high-level discussion, from annual budgeting to long-term strategic growth.   

Operational and Audit Fundamentals for Building Compliance Expertise 

Business operations are essential partners in a good compliance program, and audits are foundational to healthcare compliance in those areas. These resources drill down into both, explaining how to reduce friction and frustration through proactive partnerships and education.  

Audit Readiness? How about Audit Etiquette?  

In this blog, experts offer the real scoop on audit readiness in healthcare. It outlines crucial operational protocols and relationship dynamics for leading teams through smooth, defensible audits. Learn the unfiltered truth about compliance audits and what audit etiquette means. Get essential tips on: 

• Preparing for audits 
• Role of healthcare compliance auditors 
• What to do (and what not do) during an audit 
• What does audit readiness mean? 

Healthcare Quality Leadership: How to Be an Operational Partner, Not a Roadblock  

In every organization, there’s a moment where the quality department becomes either the trusted operational partner or the operational roadblock. The difference between the two comes from how you communicate, assign responsibility and how you follow through. This blog explains how to adopt the OG style for more effective quality programs in healthcare, with “Three Ways to Partner like a Pro.” Direct the strategies that shift compliance from a gatekeeper to a strategic business enabler. 

Three Tips for Strong Compliance Education Practices  

Compliance orientation educates new staff members about company policies, procedures, and various regulations that govern their specific roles. Ongoing compliance training ensures that as regulations evolve, all employees are appropriately educated on implications and requirements. With its emphasis on risk management, compliance training protects both employees and organizations from legal and ethical pitfalls.  

A good understanding of compliance helps employees safeguard the company against lawsuits and reputational damage. Get core principles and three tips for clear, memorable staff training programs that drive actual behavioral change. Two experts – one in education and one in compliance – share advice and analogies to improve your compliance education practices.    

Technology and Strategic Planning for Regulatory Change Management 

Technology and strategy have a lot in common. We expect both to be versatile and responsive, while at the same time, they have to hold up and carry the organization over the long term. These selections explore ideas that will help novice leaders leverage technology to drive strategy and value.  

What to Look for in Regulatory Change Management Software for Healthcare Compliance 

The ROI of tools like the YouCompli Analytics Dashboard comes from actionable, on-demand information to reduce the risk of noncompliance, fines, and reputational damage. Further value comes from efficient, centralized documentation, dashboard details and insights into completed work. Get a practical checklist to help new leaders evaluate software capabilities for tool selection. Learn six non-negotiables for regulatory change management software and processes. 

AI Guide for Healthcare Compliance Leaders  

From Manual to Scalable: How to Manage Healthcare Compliance Risk 

Despite recognizing it as a top risk year after year, many organizations still manage regulatory change as a monitoring activity. Updates are tracked. Summaries are circulated.  But when change actually occurs, the organization is left to work out (often manually and inconsistently) what the change means and what to do next.  

From a systems-thinking perspective, this is a structural failure, not an execution problem.  In this piece, Lisa Estrada explores systems-thinking strategies to move beyond manual processes and build a scalable regulatory compliance process.  

Compliance Program Building and Oversight 

During your compliance career, you may have opportunities to build a program or at least manage one. Using the metrics and collaboration-building practices covered in these resources will set you on the path. 

5 Strategies for Compliance Accountability Across the Organization  

While supporting operational teams in finding compliant solutions is part of your role, becoming the de facto fixer of what constitutes “operationally friendly” is beyond your scope. That piece must be owned by operations.  The challenge becomes how to get operational leaders to take ownership to resolve their own compliance challenges. 

These five strategies will help you encourage your operational leaders to take responsibility for their particular compliance issues, while preserving your role as a trusted advisor. Respected compliance professional Jay Anstine outlines methods for instilling shared ownership of compliance requirements across clinical and administrative business units.  

Beyond the Penalty: What Metrics Should Healthcare Compliance Officers Track? 

How Slowing Down Makes for a More Productive Compliance Program  

As regulations change or investigations are needed, we often get pushed to work faster, meet tighter deadlines, and juggle multiple tasks simultaneously.  

While this approach might seem efficient on the surface, it often leads to serious downsides: 

• Burnout 
• Decreased productivity 
• Decline in the quality of work  

This interesting piece focuses on transitioning from reactive firefighting to building deliberate, repeatable compliance processes. You’ll get five solid tips to help you and your compliance team slow things down in a good way. 

Video Hub: Expert Guidance for Healthcare Compliance Professionals 

While we can’t go into all of them here, the YouCompli video library is packed with useful visual learning materials.  Explore the full catalog, featuring expert interviews and practical strategies. 

Real Conversations. Practical Compliance Insights. 

Where do you need ideas and advice? 

• Compliance Leadership & Mindset 
• Influence, Trust & Seat at the Table 
• Operationalizing Compliance  
• Efficiency, Clarity & Saving Time 
• Customer Perspectives & Real‑World Experience 

Hear directly from compliance leaders who understand the realities of the work. These short videos share honest perspectives on simplifying regulatory requirements, building trust with the business, and turning compliance into a strategic advantage. 

Downloadable Tip Sheets for Quick Ideas and Actions 

For the compliance leader on the go (isn’t that all of us?) the Tip Sheet Library offers quick, useful information. Explore the collection and start downloading tip sheets to start your own handy idea file. 

• Compliance Career Tips 
• Compliance Culture 
• Compliance & Business Strategy 
• Healthcare Quality 
• Industry Trends 
• Rev Cycle 
• Rules and Regulations 

Need More Specialized Support for Your Healthcare Compliance Program? 

Not only does YouCompli have educational resources to help compliance professionals, we also human resources who can help. If you’d like to speak to someone to answer any questions, just reach out. 

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Schedule a quick overview

The post Resources to Accelerate New Healthcare Compliance Careers  first appeared on YouCompli.

A compliance control can exist, be documented and even be automated, yet still fail to prevent or detect a problem. That distinction matters as healthcare organizations add more policies, system edits, review procedures and reporting tools. The purpose of regulatory compliance control is to mitigate risk across the different operations and workflows in healthcare delivery.  

The presence of a control may give a false sense of security.  

The presence of a control may demonstrate that an organization recognized a risk. It doesn’t necessarily prove that the risk is being managed consistently. 

A recent audit from the U.S. Department of Health and Human Services Office of Inspector General offers a practical example of where controls can go wrong. 

What the OIG Audit Found 

The audit reviewed certain Medicare Part B payments made by Wisconsin Physicians Service (WPS) Insurance Corporation, a Medicare administrative contractor, for outpatient services during 2022 and 2023. 

Of 801 selected claim lines, OIG found that: 

• 138 claim lines were incorrect, resulting in at least $140,182 in overpayments. 
• 31 additional claim lines totaling $76,640 didn’t have supporting documentation. 
• Providers attributed identified overpayments to clerical errors and issues with their billing systems. 
• WPS had system edits in place but edits and review of flagged payments didn’t consistently identify claim lines that were in error. 

OIG recommended recovering identified overpayments and locating additional medical record documentation. Other recommendations included enhancing existing system edits and review processes and improving provider education. WPS agreed with all five recommendations. 

Read the official HHS-OIG audit summary and access the full report. 

Why Established Compliance Controls Still Fail 

Even though the audit focused on a specific contractor and set of Medicare payments, its findings illustrate a broader operational issue for healthcare compliance leaders: 

Having a control isn’t the same as knowing the control works. 

Most healthcare organizations don’t lack policies, procedures or controls. In fact, it may seem like there’s an abundance of those to some people.  

The more common challenge is that those controls operate across different people, departments and systems, and workflow can break down. A billing edit may identify a claim, but someone still needs to review it. A policy may require supporting documentation, but someone must still locate that documentation when it’s requested. An error may be corrected, but the organization still needs to verify the correction occurred. 

Each handoff creates an opportunity for the process to break down. 

Four Reasons for Control Failure 

As discussed in From Manual to Scalable: How to Manage Healthcare Compliance Risk, regulatory and compliance work becomes its own source of risk when it depends on individual effort, institutional memory and disconnected systems.  

In this environment, controls commonly fail for four reasons. 

1. The Process Depends on Manual Perfection 

Many compliance processes still rely on someone remembering to complete a step, notice an exception or follow up with another department. 

Manual work isn’t inherently ineffective. Human judgment is still essential to compliance. The problem arises when the process relies on individual memory without a reliable structure around it. 

Consider how often an organization depends on someone to: 

• Recognize that an issue requires review 
• Send an email to the appropriate person 
• Remember to follow up 
• Save supporting documentation 
• Confirm that the issue was corrected 
• Preserve evidence of the completed response 

A capable employee may perform those steps correctly most of the time. But a mature compliance program shouldn’t depend on perfect execution every time. The odds are against that long term. 

Instead, every regulatory change process should make the required next step clear, assign responsibility and show when work remains incomplete. 

2. A System Flag Is Mistaken for a Completed Control 

There are many reasons a system may successfully flag a potential error while the broader control still fails: 

• The alert goes to the wrong person. 
• No deadline is attached to the review. 
• The reviewer lacks sufficient context. 
• The alert is dismissed without documenting why. 
• The issue is corrected but not verified. 
• No one evaluates whether similar errors may exist elsewhere. 

This is the difference between detection and resolution. 

Automated edits and alerts can strengthen a compliance process, but an alert is only the beginning. 

A system edit can detect a possible problem. It can’t by itself ensure someone in the organization:  

• Evaluates the issue  
• Decides what action is required  
• Completes that action  
• Preserves evidence of the response 

Look at the full process surrounding an automated control, not just whether the technology generates an alert. 

3. Documentation Exists but Can’t Be Retrieved 

Supporting documentation is a recurring issue in audits, investigations and internal reviews. Sometimes the underlying work was completed, but the organization can’t produce any evidence.  

The organization may believe the record exists without actually knowing who owns it or where it can be found. Documentation could be stored in an individual inbox, a shared drive, a clinical system, a billing platform or a department-specific folder.  

For compliance purposes, documentation that can’t be retrieved may provide little practical protection. 

What Helpful Documentation Should Look Like 

A defensible process should make it possible to determine: 

• What happened 
• Who reviewed the issue 
• What information was considered 
• What decision was made 
• Why that decision was reasonable 
• What corrective action was assigned 
• Whether the action was completed 
• Where the supporting evidence is stored 

The goal isn’t about creating documentation for its own sake. The goal is to preserve a clear, trustworthy account of how the organization responded. 

For a deeper look at this issue, read How Healthcare Compliance Teams Can Turn Documentation Into Defensible Proof. 

4. Ownership Ends at the First Handoff 

Compliance teams rarely perform every operational task required to address a risk. They may identify the issue and send it to Revenue Cycle, Coding, Clinical Operations, Privacy, Legal, Quality or another department. Those handoffs are necessary, but they don’t complete the compliance process. 

Someone must remain responsible for determining whether the requested work was completed and whether the result adequately addressed the original risk. 

Without that accountability, a process becomes a series of disconnected activities: 

1. Compliance identifies a concern. 
2. The issue is sent to another department. 
3. The department begins reviewing it. 
4. A correction may or may not occur. 
5. The outcome is never reported back. 
6. Compliance can’t confirm completion or produce evidence later. 

Activity occurred, but the organization can’t demonstrate resolution. That’s why clear ownership means defining responsibility for both the operational action and the final verification. 

Three Questions to Test Whether a Control Works 

Healthcare compliance leaders can use three practical questions to evaluate a control. 

1. Does the Control Reliably Detect Exceptions? 

Don’t just ask whether a policy, edit or review procedure exists. 

Every time, the compliance leader should ask: 

• What specific risk is the control designed to identify? 
• What information does it evaluate? 
• Are there circumstances it may miss? 
• How often is its effectiveness tested? 
• What happens when the control identifies a potential exception? 

A control should have a clearly defined purpose and recognized limitations. It’s another job for compliance.  

2. Can We Retrieve the Supporting Evidence? 

Select a completed compliance action and attempt to reconstruct it. 

Can your organization quickly show: 

• Original issue or requirement 
• Analysis that occurred 
• People involved 
• Decision and rationale 
• Actions assigned 
• Completion records 
• Final verification 

This is a useful test because it evaluates the process from the perspective of an auditor, regulator or new compliance leader who wasn’t involved in the original work. 

3. Who Owns Correction and Verification? 

The person completing the corrective action may not be the person responsible for verifying it. Both roles should be clear. 

For example, an operational department may correct a billing process, while Compliance verifies that the correction addresses the identified concern and that evidence has been preserved. 

Without defined ownership, issues can remain open even after everyone believes someone else completed the work. 

From Individual Controls to Regulatory Operationalization 

The broader challenge isn’t simply building more controls but connecting them to repeatable operational processes. 

Then, when an issue or regulatory requirement is identified, the organization should be ready to: 

1. Assess its relevance and potential impact. 
2. Determine which departments and processes are affected. 
3. Define the required operational response. 
4. Assign clear owners and deadlines. 
5. Communicate expectations to the people completing the work. 
6. Track implementation and escalation. 
7. Verify that the required action occurred. 
8. Preserve documentation of the organization’s response. 

YouCompli refers to this discipline as Regulatory Operationalization: turning regulatory change into assigned, completed, verified and defensible action. This isn’t a one-off fix, but a scalable solution that adapts to health system needs. 

Technology can support this process but shouldn’t replace human judgment. The strongest approach combines structured workflows and automation with knowledgeable human review. 

Organizations evaluating whether their current technology supports that full process can use the six capabilities outlined in What to Look for in Regulatory Change Management Software for Healthcare Compliance. 

Metrics That Show Whether Controls Are Working 

Executive leadership and the Board of Directors may already receive compliance reports showing how many reviews, audits or corrective actions occurred. 

Those activity metrics are useful, but don’t necessarily demonstrate control effectiveness. 

Compliance leaders should also consider measures such as: 

• Percentage of flagged exceptions reviewed by the deadline 
• Average time from detection to resolution 
• Number of overdue corrective actions 
• Percentage of completed actions with supporting evidence 
• Recurrence rate of previously identified issues 
• Number of controls tested for effectiveness 
• Percentage of corrective actions independently verified 
• Time required to retrieve audit-ready documentation 

These measures help move the conversation from “Do we have a control?” to “Can we demonstrate that the control works?” 

For additional guidance on choosing useful measures and communicating them effectively, read Beyond the Penalty: What Metrics Should Healthcare Compliance Officers Track?. 

Compliance reporting should also help leaders identify overdue work, understand ownership and confirm what was completed and verified. Learn more about healthcare compliance reporting and verification. 

The Bottom Line 

The lesson from the OIG audit isn’t that automated edits, manual reviews or provider education are ineffective. The lesson is that no individual control should be evaluated in isolation. 

A system audit needs a reliable review process. A review needs an owner. An owner needs a deadline. A completed action needs verification. The entire response needs documentation that the organization can retrieve when challenged. 

Healthcare compliance programs have matured, and expectations have increased with them. It’s no longer enough to show that a policy was written, an alert was generated, or an email was sent. 

Organizations increasingly need to prove that risks were identified, evaluated, assigned, addressed and verified. 

That’s the difference between having compliance controls and operating a defensible compliance process. 

Can Your Documentation Prove the Work? 

Take the Compliance Documentation Readiness Check to evaluate whether your current process can demonstrate ownership, action, evidence and verification. 

The assessment takes approximately three to four minutes and provides a personalized result with access to the Prove-It Compliance Playbook. 

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Schedule a quick overview

The post When Regulatory Compliance Controls Exist but Still Fail  first appeared on YouCompli.

Healthcare compliance teams do a lot of work that never fits neatly into a single report.

They monitor regulatory changes. They coordinate with departments. They investigate issues. They respond to concerns. They train staff. They track corrective actions. They prepare updates for leadership. They answer questions from auditors, boards, regulators, and internal stakeholders.

But when someone eventually asks, “Can you prove it?” activity alone is not enough.

Documentation is what connects the work to the proof.

For healthcare compliance leaders, documentation should no longer be treated as an administrative afterthought or a last-minute scramble before a board meeting, audit, or investigation. It should operate as a strategic asset: a defensible system of record that shows what happened, who owned it, what changed, and how the outcome was verified.

That is the core idea behind prove-it compliance.

Why compliance documentation needs to prove more than activity

Good documentation does more than show that a task was completed. It helps compliance leaders answer the questions that matter when internal leadership, board members, state examiners, or federal agencies want to understand how an issue was handled.

A defensible record should help answer:

• How did this issue occur?
• What steps did we take to resolve it?
• What steps did we take to prevent future occurrences?

That level of documentation matters because compliance work is often reviewed after the fact. A concern may start as an internal report, an audit finding, a hotline issue, a privacy incident, a regulatory change, or a billing concern. Later, that same issue may need to be explained to a board committee, a state agency, the Office for Civil Rights, or another oversight body.

In that moment, the organization needs more than memory. It needs objective evidence.

A strong system of record reduces the stress of those moments because the compliance team is not scrambling to recreate the story. The story is already documented.

For teams managing a high volume of regulatory updates, this is also where regulatory change management becomes more than awareness. The work needs to move from “we saw the regulation” to “we reviewed it, assigned it, acted on it, verified it, and can show the record.”

Who needs compliance proof?

Different audiences need different levels of documentation.

Compliance leadership needs to see the work. That means granular data on intake, analysis, implementation status, ownership, follow-up, and completion across departments. This helps show whether the compliance function can manage high volumes of change and issue resolution.

Boards and compliance committees need to see the value. They usually do not need every log entry or operational detail. They need high-level summaries, trends, dashboards, and Problem-Solution-Proof narratives that show how compliance protects the organization.

Federal and state government reviewers need to see the process. They may need documentation that tracks a regulation, issue, or requirement from initial notice to final operational proof. This is where defensibility matters most.

A strong system of record should support all three audiences without forcing the compliance team to rebuild the story each time. That is also why healthcare compliance reporting should do more than summarize activity. It should help teams monitor risk, track ownership, and show what has been reviewed, assigned, completed, and verified.

The problem with scattered documentation

Most healthcare compliance leaders already understand that documentation is important. The challenge is usually not awareness. It is execution.

Documentation gaps often happen because compliance work is reactive. Fire drills, urgent requests, audits, investigations, and unexpected issues interrupt routine logging. Teams may also struggle with unclear ownership. If nobody knows who is responsible for documenting the who, what, when, and outcome, records become inconsistent or incomplete.

Another common challenge is the optimism trap. Teams may underestimate how long education, monitoring, corrective action, and documentation will actually take. A timeline that looks reasonable in April may become unrealistic by June if staffing changes, operational demands, or competing priorities interfere.

Resource scarcity creates another barrier. When teams rely on spreadsheets, shared drives, emails, personal folders, or disconnected tracking systems, documentation becomes harder to maintain and harder to retrieve.

The result is a familiar pattern: compliance teams do the work, but the proof is scattered.

That same issue shows up in broader regulatory change management. As YouCompli has covered in From Manual to Scalable: How to Manage Healthcare Compliance Risk, the pace and complexity of healthcare regulatory change can become a risk of its own when teams do not have systems that help them manage it.

What a defensible system of record should include

A true system of record is more than a folder on a drive.

It should function as a single source of truth for compliance documentation. That means the organization can find the right records, verify who did what and when, understand which version of a requirement or policy was used, and show how the work connects to oversight expectations.

At minimum, a defensible system of record should support:

• Retrievability: Can the team find a specific record from three years ago in under ten minutes?
• Version control: Is everyone working from the current version of the requirement, policy, or process?
• Audit readiness: Can the team move from searching for proof to presenting proof?
• Workflow accountability: Is it clear who owned each step and when action was taken?
• Documentation integrity: Can the record show objective evidence, not just a subjective summary?

This is especially important when documentation needs to support regulatory obligations, board reporting, state audit readiness, False Claims Act concerns, privacy investigations, billing issues, or corrective action follow-through.

For teams thinking through the structure of their compliance program, YouCompli’s article on how the OIG’s General Compliance Program Guidance addresses the Seven Elements is a useful related read.

How to structure compliance documentation for defensibility

It is not just what the team documents. It is how the documentation is structured.

To stand up to external scrutiny, documentation should go beyond a simple “yes” or “no.” It should create a clear trail that another person can understand later, even if the original owner has moved roles or left the organization.

A few practical standards help.

Every record should include audit-ready details such as date, time, owner, approver, relevant metadata, and objective evidence. If a policy change connects to training, monitoring, or corrective action, those related records should be cross-referenced. The documentation should tell the whole story from issue identification to resolution.

Compliance teams should also avoid subjective conclusions that are not supported by facts. A strong record should focus on what was observed, what requirement or regulation was cited, what decision was made, what action was taken, and what evidence supports the outcome.

One useful test is the ten-minute rule: can a specific record be retrieved and explained in under ten minutes?

If not, the documentation may exist, but it may not be defensible in a practical sense.

For more on how audit readiness requires a proactive posture, see YouCompli’s article, With Compliance Audits, The Best Defense is a Good Offense.

The operational toolkit behind prove-it compliance

Once the system of record exists, compliance teams need the daily tools that keep it useful.

A few core logs and plans often create the backbone of defensible documentation:

Compliance work plan: Shows planned initiatives, resource allocation, and progress against organizational and departmental goals.

Audit and monitoring plans: Show systematic checking, proactive issue detection, and corrective action follow-through.

Education and training plan: Shows what training was provided, who attended, and what expectations were communicated to impacted workforce members.

Investigation and disclosure log: Shows how issues were identified, investigated, resolved, and disclosed to regulators when appropriate.

The key is to make documentation a natural byproduct of the workflow, not an extra task that happens weeks later from memory.

For example, an investigation log should be updated at each stage of an inquiry. Waiting until the end increases the risk that context, decisions, and details will be lost.

Moving from activity reporting to impact reporting

Once a system of record is working well, compliance leaders can do more than prove that activity happened. They can show outcomes and value.

That requires moving from activity metrics to impact metrics.

Instead of reporting only how many tasks were completed, compliance teams can show whether the compliance engine is reliable, whether risk is being reduced, and whether compliance is embedded into daily operations.

Examples include:

Operational health: Timeliness of regulatory intake and task completion rates. This helps prove reliability by showing that the compliance process is consistent and predictable.

Risk reduction: Trends in identified gaps, audit findings, and closure rates. This helps prove protection by showing that the program is finding and fixing issues before they become bigger liabilities.

Engagement and culture: Training completion, hotline volume, policy acknowledgement, and advisory requests. This helps prove culture by showing that compliance is integrated into the daily work of the organization.

This is also where the Problem-Solution-Proof model becomes useful.

For more on reporting compliance value, see Healthcare Compliance KPIs: Real-Time Data Dashboards and YouCompli’s Healthcare Compliance Reporting and Verification page.

Using the Problem-Solution-Proof framework

Board and senior leadership reporting should not be a long list of compliance activities. It should tell a clear story.

The Problem-Solution-Proof framework helps compliance leaders frame that story:

Problem: What specific regulatory challenge, operational risk, issue, or gap required action?

Solution: What did the organization do in response?

Proof: What objective evidence shows that the action was completed and had the intended effect?

For example:

Problem: New state-level False Claims Act requirements.

Solution: Implemented a new verification workflow and staff training.

Proof: 100% training completion and zero documentation gaps found in an internal audit.

This kind of reporting helps leadership see not just what compliance did, but what changed because of the work.

How mature documentation helps compliance evolve

A mature system of record does more than store documentation. It helps compliance leaders spot trends.

If one department consistently misses documentation deadlines, that is not just a tracking issue. It is a roadmap for targeted improvement. If a recurring policy issue keeps appearing, the problem may not be staff effort. It may be that the policy is confusing, difficult to apply, or not supported by enough training.

By documenting and reviewing these patterns, compliance teams can move from reactive oversight to proactive leadership.

That is the shift from documentation as storage to documentation as intelligence.

When technology becomes necessary

Manual habits are often the starting point for compliance documentation. But as regulatory change volume grows, manual systems can become difficult to maintain.

Spreadsheets, shared folders, inboxes, and disconnected tracking systems may work for a small number of issues. But they often create problems when teams need consistent workflows, objective evidence, assignment tracking, audit trails, reporting, and centralized retrieval.

When evaluating software to support regulatory change management documentation, compliance teams should look for capabilities that:

• Act as a centralized repository
• Automate audit trails
• Reduce time and resource burdens through workflow automation
• Show who did what and when
• Preserve documentation integrity
• Support defensibility for state audits, False Claims Act concerns, and federal oversight
• Function as more than a filing system

The goal is not simply to digitize documentation. The goal is to make the compliance program more accountable, searchable, reportable, and defensible.

For a deeper software evaluation framework, see What to Look for in Regulatory Change Management Software for Healthcare Compliance. You can also review How YouCompli Works to see how regulatory change can move through a repeatable process: know what changed, decide what matters, manage the work, and verify completion.

The prove-it moment

Effective documentation is more than a regulatory requirement. It is the bridge between compliance activity and organizational safety.

When documentation is scattered, compliance teams are forced to reconstruct the proof later. When documentation is structured, searchable, and tied to workflow, the organization is better prepared for board reporting, audits, investigations, and leadership conversations.

That preparation matters when the prove-it moment arrives.

The strongest compliance documentation does not just show that work happened. It shows that the organization took the issue seriously, assigned ownership, acted on the requirement, verified the outcome, and preserved the proof.

That is the difference between activity and defensibility.

Want to see how your documentation process holds up?

Take the Prove-It Compliance Readiness Check to evaluate whether your current process supports retrievability, accountability, defensibility, and leadership-ready reporting.

Take the Readiness Check

You can also download the full Prove-It Compliance Playbook for a more detailed framework on building a defensible system of record for healthcare compliance documentation.

The post How Healthcare Compliance Teams Can Turn Documentation Into Defensible Proof first appeared on YouCompli.

Description: Elevate your audit strategy. Access 7 top educational resources designed to help healthcare compliance leaders navigate complex commercial and federal reviews.  

Trying to get a better handle on audit readiness? Good move. To save you some time, we’ve curated this audit-related content specifically for healthcare compliance professionals. The overview compilation gives you a quick look at the useful advice in each resource, so you can dive right into where you need help the most.  

If you haven’t thought about audit readiness lately, it’s probably time to put some focus on it. However, we know compliance life moves fast, and you can’t always get to some of the important things proactively. 

Compliance leaders get exhausted by resource scarcity, manual tracking fatigue, and escalating payer audits. According to the Barnes & Thornburg Compliance Outlook Report, 56% of healthcare compliance and risk leaders anticipate even greater regulatory challenges ahead, with over half struggling to secure the resources needed to keep up.  

So yeah, a proactive audit strategy could be a good idea. 

Healthcare Compliance Audits: 7 Essential Resources for Leaders 

Given that, it’s not surprising that continuous readiness is becoming the new standard for healthcare compliance leaders when it comes to audits. 

This collection is about shifting the conversation from “surviving the next audit” to “building a defensible, tech-forward compliance data engine”. 

These resources will quickly get you headed down a good path, with their abundant advice and useful tips from compliance professionals for compliance professionals. Many of them come with their own downloadable tip sheets. 

Think of the collection as the start of your “audit preparedness playbook.” 

Resource 1 – With Compliance Audits, The Best Defense is a Good Offense  

Is your organization defensible against a compliance audit? Do you have a game plan in place to avoid penalties and other losses? 

Traditional point-in-time random sampling simply fails to catch systemic gaps that audits can reveal. 

How this resource helps: 

With this blog, learn how to prepare your compliance program for the win. Using sports training analogies, the authors present a better way to handle ongoing inspections and audits in healthcare systems. 

The fast-break transition offense the authors suggest is inspired by the 1990 UNLV Running Rebels basketball team. Get their unique advice on how to go offense following a regulatory compliance audit or inspection, so you’re well-prepared for the next one. 

It takes practice. By reinforcing these principles and working on conditioning and decision making, teams can create more scoring opportunities. Just as a prepared team can force the defense into difficult situations, a well-prepared compliance team can “force” the auditor into zero-findings and more quality inspections.   

Resource 2 – Audit Readiness? How about Audit Etiquette?  

When a regulator shows up, what’s the first thing your team scrambles to find? 

• Is it evidence of task completion?  
• Maybe a list of applicable regs or updated policies?  
• How about proof of communication to stakeholders? 

In addition to documentation, how your team behaves during an audit also affects the outcome. 

How this resource helps: 

Learn the unfiltered truth about compliance audits and “audit etiquette” — the proper behavior for responding to an audit. 

Get expert tips on: 

• What audit readiness means 
• The role of healthcare compliance auditors 
• What to do (and what not do) during an audit 
• Audit etiquette best practices 

Perception is reality. If you look like you know what you’re doing, respond promptly, and treat the auditors with respect, you can generally minimize any damage. With the advice in this blog, you won’t just look ready; you’ll be ready – and calm.  

Follow these practices and display confident compliance audit behavior. 

Resource 3 – Healthcare Audit? Stay Ready. Don’t Get Ready.  

Compliance audit in Quality? Many quality teams think they’re ready, until they aren’t.  

In healthcare quality departments, audit readiness is no different than in any other area. Follow a defined process, then optimize as necessary so it works for your organization and patients.  

It’s not hard, but people still panic because an auditor can shut them down. 

However, if you have a proactive process in place to minimize the damage, you don’t have to worry.  

How this resource helps: 

This resource shares the pre-audit steps you need for proactive compliance readiness in Quality. It’s jammed with advice from the first word to the last. 

• During the Compliance Audit 
• Post-Audit Follow-Up Practices 
• Be Proactive: Prepare for Your Next Compliance Audit  

Resource 4 – How to Use TPE Plans for Compliance Auditing and Monitoring  

When doing periodic risk assessments, compliance professionals often use the OIG Work Plan or DOJ enforcement actions to determine how to deploy time and resources on auditing and monitoring. 

Another helpful tool is the list of services that Medicare Administrative Contractors (MACs) include in their Target, Probe and Educate (TPE) plans.  According to CMS, the goal of TPE is to accelerate improvement and let MACs work with providers to correct specific errors. 

How this resource helps: 

As this expert-written piece explains, TPE information can be a good resource for compliance leaders when designing proactive audit plans.  

This blog looks at how TPE plans are applied to specific areas of non-compliance that MACs observe. Use them to create your own checklists for cleaner compliance audits and proactive monitoring.  

Resource 5 – Six key steps to reduce the impact of telehealth audits 

Did you know telehealth is almost as old as the telephone itself? 

In 1879, just three years after Bell patented the telephone, an article in The Lancet first described the telehealth concept and its use.  

And a law that’s even older than the telephone still triggers telehealth audits today.  

The 1863 False Claims Act was enacted to keep profiteering contractors from defrauding the Union army. Today, it can trigger serious problems for modern telehealth practitioners.  

How this resource helps: 

Today we know the best way to cope with audits is to avoid the need for them in the first place. This article shares six proactive steps to take to reduce the impact of telehealth audits.  

It includes advice on how to: 

• Know what you’re up against.  
• Inventory your waivers.  
• Check your records.  
• Audit your process.  
• Fix what’s broken.  
• Rebill and repay.  

Patient demand for telehealth isn’t going away. Neither are the costs of noncompliance with telehealth regulations.  

By proactively partnering with colleagues in relevant departments, your compliance team can lead the efforts to identify and fix issues before they become major problems. That way, you can provide the telehealth services patients want in compliance with what the regulations demand. 

Resource 6 – 5 Payer Audit Errors Every Hospital Must Avoid 

From large hospitals to solo practitioners, at some point most providers will experience a commercial payer audit from CMS, OCR or some other agency. Their scrutiny reveals errors and violations, which in turn trigger hefty penalties. In fact, commercial payer audits have jumped 2.2 times over a single year, increasing the total sum at risk for hospital systems by 30%.  

Even more challenging, payers are moving heavily toward pre-payment audits. These can hold up payments and squeeze monthly cash flow.  

External payer audits don’t have to be such a nightmare.  

How this resource helps: 

The key to surviving an external audit with the least pain is to avoid the five payer audit errors outlined in this blog. 

1. Late responses 
2. Wrong documentation 
3. Billing the wrong codes 
4. No self-audit 
5. No legal help 

By staying prepared and vigilant, your next payer audit experience can be more streamlined and less stressful. 

Resource 7 – Audit Expectations and Challenges 

When it comes to providing best-in-class healthcare, stress comes with the territory. Unrelenting demands drain resources across the organization, including some not directly involved with patient care.  

One demand that turns daily routines upside down, and compounds stress levels is an audit. A compliance audit can be conducted internally by hospital committees or externally, often by government-approved contractors. 

Internal Audit – Seeks to determine provider’s financial and operational controls, and that related policies and procedures meet compliance and risk management needs. 

External Audits – Several federal agencies including CMS, OIG, OCR and others are the primary drivers of audits of regulations and compliance costs across hospitals. Responding to multiple external audits increases administrative costs, and funds could be bound up in lengthy appeals. 

How this resource helps: 

Study this overview to familiarize yourself with the basic workings and typical costs associated with audits. For example, external audits are conservatively estimated at $100 per hour, but the manual drain goes deeper:. Standard program reviews require 300 to 346 hours of direct manual labor per plan, taking skilled leaders away from higher-level risk mitigation. 

The Tech-Driven Path to a Proactive Audit Strategy 

You have plenty of insightful and helpful resources to review here. But as you look through them, keep this reality check in mind: 40% of compliance teams still rely on spreadsheets and text documents to track internal reviews. 

The future belongs to compliance leaders who lean into automated tools, allowing their teams to complete risk assessments far faster than manual methods and catch errors before federal or commercial auditors flag them. 

If you’re ready to leave the spreadsheets behind, or just have questions about setting up your proactive audit framework, we’re always here to talk. 

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Schedule a quick overview

The post Master Healthcare Compliance Audits: Learn from 7 Expert Resources  first appeared on YouCompli.

For healthcare compliance leaders, financial literacy is not optional. Compliance risk often hides in the fine print of financial data, making literacy a prerequisite for effective oversight.  

To identify anomalies or potential regulatory “red flags,” compliance officers must move beyond a high-level view of healthcare finance and understand how clinical operations translate into financial entries. 

What does a compliance leader need to understand? Things like: 

• Budgeting and capital planning 
• Internal controls and risk 
• Grant and research compliance  
• Key performance indicators (KPIs) 
• Communication between CFO and compliance officer 

Familiarity with the 14 steps of the revenue cycle is also valuable for mitigating risks associated with reimbursements and 340B compliance. (This topic is covered later in the blog.) 

Where Do Healthcare Compliance and Finance Intersect? 

Regulatory compliance and healthcare finance overlap in multiple ways. Compliance-related areas with a financial angle include: 

• Medicare, Medicaid reimbursement 
• 340B drug pricing 
• Stark Law and anti-kickback statutes 
• Charity care 
• Financial assistance requirements  

What Should Compliance Leaders Understand About Financial Statements? 

To build fiscal literacy, let’s start with some foundational concepts – financial statements. Compliance officers should have a basic understanding of these types of statements: 

1. Balance Sheet 
2. Income Statement 
3. Cash Flow Statement 

1. The Balance Sheet: Assessing Financial Integrity Through a “Snapshot” 

The balance sheet provides a snapshot of an organization’s financial health at a specific point in time, detailing its assets, liabilities and equity. 

Why Compliance Should Care: Monitoring the balance sheet helps ensure that assets are properly recorded, and that liabilities like these are appropriately disclosed: 

• Potential legal settlements 
• Debt obligations 
• Medicare overpayments 

2. The Income Statement: Monitoring Operational Risk Over Time 

Unlike the balance sheet snapshot, the income statement tracks revenue and expenses over a specific period, such as a month or a fiscal year. The income statement puts a focus on total revenue and expenses, and the difference between them, while distinguishing between operating and non-operating items. Those two concepts are compared in the chart below. 

In an income statement, it’s important to distinguish between accrual-basis accounting (matching revenue to period it was earned) and cash-basis accounting (recording transactions only when money changes hands). 

Why Compliance Should Care: By comparing current monthly performance against previous years, compliance officers can spot outliers in revenue or sudden spikes in expenses that could indicate billing errors, “upcoding,” or improper financial arrangements under the Stark Law. 

3. The Cash Flow Statement: Ensuring Operational Sustainability 

The cash flow statement tracks the actual movement of cash into and out of the organization, categorized by: 

• Operating activities 
• Investing activities 
• Financing activities 

Why Compliance Should Care: Understanding cash flow is vital for making sure the organization has liquidity to maintain compliance standards even during times of financial strain. A significant discrepancy between reported net income and actual cash flow can signal deep-seated issues with revenue cycle integrity.  

Revenue Cycle as Regulatory Roadmap 

For a prepared healthcare compliance leader, the revenue cycle isn’t just a financial process; it’s a regulatory roadmap. From initial patient interaction to final collection, each step presents a unique set of compliance risks that can lead to audits, fines or loss of reimbursement if not managed with understanding. 

What Compliance “Trapdoors” to Watch for in the Revenue Cycle 

The revenue cycle is full of complexity, largely fueled by the impact of different hospital types (PPS, critical access, disproportionate share, and tribal hospitals) on Medicare and Medicaid rates. 

While the full revenue cycle has 14 distinct stages, compliance officers should pay particular attention to these “trapdoors” where financial operations must meet strict federal regulations: 

• Front-End Integrity (Scheduling and Registration): Accuracy is paramount to ensure Medicare and Medicaid reimbursements aren’t jeopardized by incorrect patient data or lack of prior authorization. 
• Clinical Documentation and Coding: This is a high-density risk area. Compliance must make sure that coding reflects the actual services provided to avoid allegations of “upcoding” or “unbundling,” which can trigger False Claims Act investigations. 
• 340B Drug Pricing Program: If an organization participates in 340B, the revenue cycle needs rigorous internal audits to establish compliance with drug diversion and duplicate discount prohibitions. The stakes will be even higher if the program undergoes potential changes regarding payment models. 
• Billing and Claims Submission: Errors in this stage directly impact the Clean Claim Rate. More importantly, consistent billing errors for federal healthcare programs can lead to significant liability under Anti-Kickback Statutes or the Stark Law if improper financial relationships are found. 

Monitoring Denial Management at Back End of Revenue Cycle 

A robust compliance program monitors the back end of the revenue cycle as closely as the front. Analyzing denials can reveal systemic issues in documentation or billing practices that, if left unaddressed, represent both financial loss and compliance vulnerability. 

What KPIs Should Compliance Watch as Part of Financial Oversight? 

For a healthcare compliance officer, financial data is more than just a reporting requirement. It’s a proactive tool for risk assessment. By monitoring specific KPIs, compliance teams can move from reactive auditing to strategic oversight and identify operational stressors before they escalate into violations. 

The “Big Four” Financial KPIs for Compliance Officers 

Comprehensive financial oversight should track these four metrics: 

• Operating Margin: This measures whether the organization’s core clinical mission is profitable after all operating and overhead costs are paid. A shrinking margin often leads to “cutting corners” in staffing or documentation, which directly increases compliance risk. 
• Days Cash on Hand: This indicates liquidity. How many days can an organization operate using its current cash reserves if all revenue stopped? Higher liquidity provides the financial “breathing room” to maintain compliance and quality standards even during economic downturns. 
• Clean Claim Rate (CCR): A high CCR (ideally 95% or higher) indicates that claims are being submitted without errors the first time. A low rate is a red flag for systemic billing or documentation errors that could trigger federal audits under the False Claims Act. 
• Payer Mix: It’s critical to understand the percentage of revenue coming from Medicare, Medicaid and private insurance. In many healthcare models, Medicare functions as a “break-even” payer, while Medicaid reimbursements often fall below the actual cost of care, placing additional pressure on revenue integrity. 

What to Know about Budgeting and Internal Controls 

Compliance officers should also distinguish between the Operating Budget (daily/annual clinical operations) and the Capital Budget (typically reserved for long-term investments or items over $10,000). 

To prevent fraud and ensure financial integrity, a compliance program must enforce strict segregation of duties. This assures that no single individual has control over all aspects of a financial transaction, serving as a primary defense against embezzlement and improper financial reporting. 

Using the SBAR Tool to Structure CFO and Compliance Communication 

The most effective healthcare compliance programs are those where the Chief Compliance Officer (CCO) and Chief Financial Officer (CFO) operate as strategic partners.  

However, communicating complex compliance risks in a way that aligns with financial priorities requires a structured approach. This is where the SBAR tool (Situation, Background, Assessment, Recommendation) becomes invaluable for justifying financial decisions and resource allocation. (Download a helpful SBAR template at the end of this article)

Four-Step Method for Financial Advocacy 

Use this four-step method to present compliance needs to your finance team: 

• Situation: Clearly state the immediate financial or regulatory issue.  
  Example: “We have identified a 15% discrepancy in our 340B drug pricing audits.” 

• Background: Provide the necessary context and data.  
  Example: Current Medicare reimbursement rates for these drugs are subject to strict transparency requirements. 
   
• Assessment: Offer your professional analysis of the risk.  
  Example: Failure to rectify this documentation gap poses a significant risk to operating margin and regulatory standing and could trigger a federal audit. 
   
• Recommendation: Propose a specific, data-backed solution.  
  Example: “I recommend an immediate investment in automated tracking software as part of the next capital budget cycle.” 

How Compliance Can Secure a “Seat at the Table” 

By confidently speaking the language of finance with terms like liquidity, capital planning and debt financing, compliance officers move beyond being seen as a “cost center” and the “Department of No.”  

Instead, compliance can become a guardian of the organization’s financial sustainability, ensuring that compliance is integrated into every high-level discussion, from annual budgeting to long-term strategic growth.  

Ready to drive more compliance value? Reach out to see how YouCompli can help.  

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Qualified compliance professionals do the heavy lifting for you, simplifying regulatory change management  

The post Financial Literacy: The “Superpower” Every Modern Compliance Leader Needs  first appeared on YouCompli.

Revenue leakage from non-compliance with regulations exposes health systems to compliance risks and penalties. We’ve curated eleven resources to help compliance leaders be better prepared to guide alignment between regulatory compliance processes and revenue integrity goals.

Why Should Compliance Care about the Revenue Cycle? 

Over half of all regulations deal directly with revenue cycle, billing and finance. Most providers still lack an effective system or process to monitor, assess, and validate compliance with those regulations. As a result, these organizations leave themselves open to significant risks, not to mention significant revenue leakage. 

If you need to learn more about the revenue angle of healthcare compliance, these resources are a good place to start. 

Compliance Content by Compliance Experts 

The resources included in this collection Include articles from noted compliance experts including: 

• Shawn Y. DeGroot – CHC-F, CCEP, CHRC, CCPC 
• Maeve O’Neill, MEd – LPC-S, CHC, CDTLF 
• Sharon Parsley – JD, MBA, CHC, CHRC 
• Susan Thomas – CIA, CHC, CPC, CRMA 
• Maya Turner – CPMA, CPCO, CFPC, CPC, CPC-I, AAPC 
• CJ Wolf – MD, CPC, CPC-I, M.Ed. 

Learn from their advice and examples how compliance contributes to revenue performance and launch your own strategies for improvement. 

1. Blog – Mitigating Conflicts of Interest that Drive Profit Over Health  

Integrity First: Mitigating Conflicts of Interest in Clinical Decision-Making 

In healthcare, a conflict of interest (COI) occurs when secondary interests, such as financial ties or institutional goals, threaten to compromise clinical objectivity.  

These conflicts do more than just create ethical dilemmas; they often lead to overutilization of unnecessary tests and treatments, inflating costs for patients and insurers alike. For compliance leaders, addressing COIs is essential to protecting the integrity of the healthcare system and ensuring resources are used appropriately. 

This blog examines the ripple effects of COIs on both patients and providers. It discusses key components of these conflicts and the significant financial impact they have on the entire healthcare ecosystem. 

Inside this resource: 

• Identifying the Triggers: Learn to recognize the financial ties and personal relationships that can bias medical decision-making. 
• The Cost of Overutilization: Understand how unnecessary procedures create financial burdens and exploit the system for gain. 
• Systemic Impact: Explore the broader consequences of COIs, including their role in fraudulent billings. 
• Protecting Objectivity: Strategies for ensuring that clinical judgment remains aligned with the best interests of patients and public health. 

Don’t let hidden interests drive your organization’s clinical path. Read the full blog to learn how to identify and mitigate the conflicts that put your system at risk. 

2. Blog – How to Avoid False Claims Related to Medical Necessity   

Protecting the Bottom Line: Compliance as a Revenue Safeguard 

In the complex world of health system finance, a single coding error can quickly escalate into a multi-million-dollar False Claims Act liability. While Revenue Cycle Management (RCM) focuses on speed and volume, Revenue Integrity ensures that those gains aren’t lost to federal audits or recoupments. 

3. White Paper – Exploring the Four Hot Spots Of the Healthcare Revenue Cycle  

Navigating the Minefield: Mastering the Four Hot Spots of Revenue Integrity 

The healthcare revenue cycle is the financial lifeblood of your organization, but it’s also a landscape filled with hidden regulatory traps. With complexity in payer contracts and government oversight, certain areas have evolved into high-risk “hot spots” that demand immediate, expert compliance scrutiny. 

4. Case Study – Getting It Right: Minimizing Self-identified Overpayments & Maximizing Accurate Billing 

From Regulatory Burden to $400,000 in Savings: The Great River Health Story 

For a small compliance team, staying ahead of complex state coding rules and rapid federal updates is often a losing battle. At Great River Health, this challenge meant spending countless hours manually interpreting regulations, yet the team never felt fully confident that they were catching every risk. They needed a way to move away from constant research and toward decisive action. 

This featured case study explains how Great River Health transformed their compliance program from a source of stress into a vital engine for revenue integrity. By adopting a system that provides validated policy templates and expert regulatory analysis, they shifted their focus from interpretation to implementation. 

5. Blog – Healthcare Compliance is Everybody’s Business: Clinical, Revenue Cycle, IT, Sales and Marketing 

Breaking the Silos: Why Compliance is Everybody’s Business 

To ensure long-term stability, compliance leaders must lead the charge in fostering deep partnerships with clinical, IT, and revenue cycle teams. Compliance can no longer operate in isolation. As governmental and commercial payers deploy increasingly sophisticated programs, the only way to safeguard your organization is through a unified front.  

This blog explores the strategic necessity of internal alliances. It breaks down the specific skills and communication rhythms required to identify systemic risks and avoid the catastrophic penalties associated with “reverse false claims” liability. 

Inside this resource: 

• The Partnership Mandate: Why a strong relationship with your revenue cycle team is your first line of defense against advanced payer audits. 
• Beyond the Surface: Learn how to distinguish between coding-specific denials and medical necessity issues to uncover localized and systemic vulnerabilities. 
• The 60-Day Clock: Understand the critical risks of “reverse false claims” and how to manage the return of overpayments to avoid treble damages. 
• Proactive Governance: How to establish regular cross-departmental meetings that turn compliance from a reactive task into a shared culture of integrity. 

Stop letting departmental silos become a regulatory liability. Read the full blog to learn how to turn every team into a partner for revenue integrity. 

6. Blog – Uncovering $9 Million in Unbilled Services    

The $9 Million Question: How Mock Audits Uncover Hidden Revenue 

Most compliance professionals view mock audits as a shield against fines and regulatory scrutiny. However, when approached strategically, these audits can also act as a powerful engine for revenue integrity. In one striking example, a fresh set of eyes and a few “tough questions” led to the discovery of $9 million in unbilled services. 

This featured blog explores how mock audits do more than just manage risk. They’re a primary tool for building cross-departmental relationships and positioning the compliance team as a high-value partner to the rest of the organization. 

Inside this success story: 

• The “Fresh Eyes” Advantage: Why stepping away from day-to-day tasks to look at the bigger picture is essential for identifying systemic billing gaps. 
• Beyond Revenue Protection: Discover the five strategic benefits of audits, from shaping organizational culture to preventing future penalties. 
• The Power of Simple Questions: See how asking “Do we bill that?” can lead to the biggest dollar-value discoveries of your career. 
• Compliance as a Partner: How to use the audit process to build trust and influence across the business while delivering tangible financial value. 

Stop viewing audits as a burden and start seeing them as an opportunity to prove the financial impact of your compliance program. Read the full story here to learn how to turn your next mock audit into a multi-million-dollar win. 

7. Blog – Compliance Risks Associated with Outlier Payments  

The Chargemaster Trap: Managing the High Stakes of Outlier Payments 

The next resource in our collection focuses on a high-stakes area of reimbursement that often flies under the radar until an audit begins — outlier payments.  

Outlier payments are designed to protect hospitals from significant financial losses on exceptionally costly cases. However, because these supplemental payments are directly tied to hospital charges, they have become a primary target for regulatory scrutiny. If a facility raises its chargemaster prices without clear justification, it can artificially inflate these payments and trigger intense external audits. 

This blog explores the delicate balance between revenue protection and compliance risk. We examine real-world audit findings where simple human errors and system glitches led to hundreds of thousands of dollars in overpayments and potential penalties. 

Inside this resource: 

• The Scrutiny Factor: Understand why enforcement agencies are actively monitoring price increases that lead to spikes in outlier reimbursement. 
• Lessons from the Field: Review the 2020 OIG audit of an Arkansas facility that found over $580,000 in overpayments due to time-tracking and coding errors. 
• The Human Error Risk: Learn how “hardcoded” charges and misaligned supply items can create systemic billing inaccuracies that go undetected for years. 
• Strategic Collaboration: Discover why a close partnership between compliance, finance and reimbursement teams is the only way to safeguard your organization against these risks. 

Stop letting unjustified price adjustments put your hospital at risk for recoupment and penalties. Read the full blog here to learn how to proactively audit your outlier claims and maintain regulatory integrity. 

8. Blog – The Cost of Non-Compliance  

Beyond the Fine: Calculating the True Price of Non-Compliance 

In the budgeting process, the cost of non-compliance is often a forgotten line item until it becomes a hard reality. While hefty fines for HIPAA or Medicare violations are the most visible risks, they’re only the beginning.  

For healthcare organizations, the true cost includes a cascade of legal fees, operational disruptions and long-term reputational damage that can be difficult to quantify but impossible to ignore. 

This piece explores how to move beyond reactive firefighting and toward a model of operational excellence. We discuss how to use Corporate Integrity Agreements (CIAs) as a powerful benchmarking tool to identify systemic vulnerabilities before they lead to federal intervention. 

Inside this resource: 

• The Tangible and Intangible: Learn how to communicate the full spectrum of risk to your board, from immediate settlement costs to the lasting impact on patient trust. 
• Contract Integrity: Focus on the critical importance of auditing physician and medical director contracts to prevent Stark Act and Anti-Kickback Statute violations. 
• A Culture of Excellence: Understand why investing in compliance is not just a legal obligation but a cornerstone of your organization’s commitment to patient care and operational stability. 

Stop viewing compliance as a cost center. Read the full blog to learn how a proactive approach to auditing and monitoring can safeguard your organization’s future. 

9. Blog – How to Avoid Compliance Risk in Peripheral Vascular Reimbursement   

Under the Microscope: Navigating Peripheral Vascular Reimbursement Risks 

Peripheral vascular disease (PVD) reimbursement has become a lightning rod for regulatory scrutiny. With alarming statistics regarding improper payments and a surge in whistleblower investigations, health systems cannot afford to treat these interventions as routine billing.  

For compliance leaders, the challenge lies in ensuring that every procedure meets stringent medical necessity guidelines before a claim is ever submitted. 

This expert-led blog provides a deep dive into the regulatory trends and enforcement patterns currently shaping the vascular space. It provides technical insights and best practices your team needs to safeguard your organization’s reputation and financial stability. 

Inside this resource: 

• Medicare Compliance Mastery: Understand the specific documentation and coding requirements that federal auditors target in vascular interventions. 
• Fraud Warning Signs: Learn why high volumes in vascular reimbursement are triggering red flags for the OIG and how to stay ahead of these investigations. 
• Recent Investigation Insights: Review lessons learned from recent whistleblower cases that focused specifically on PVD compliance failures. 
• Best Practices for Integrity: Actionable strategies to align clinical documentation with reimbursement guidelines to ensure every claim is defensible. 

Stop letting PVD reimbursement become a vulnerability in your revenue cycle. Read the full blog here to equip your team with the knowledge to navigate this complex environment. 

10. Blog and Tip Sheet – Revenue Cycle Management Compliance: Ensuring Financial Health in Healthcare  

Financial Integrity: Mastering Revenue Cycle Management Compliance 

Revenue Cycle Management (RCM) is the essential financial engine of any healthcare provider, managing everything from claims processing to final payment.  

However, the efficiency of this cycle depends entirely on its alignment with regulatory standards. Without a foundation of strict compliance, even the most streamlined revenue process is at risk of legal repercussions and compromised financial integrity. 

11. Blog and Tip Sheet – Three Strategies to Align Compliance with Revenue Cycle  

Strategic Synergy: Bridging the Gap Between Compliance and Revenue Cycle 

For healthcare organizations, the revenue cycle is the financial lifeblood. However, when compliance and revenue cycle management operate in silos, the resulting friction creates significant regulatory and financial risks.  

To protect the bottom line and ensure long-term sustainability, compliance leaders must lead the charge in aligning these two critical functions. 

Stop letting a lack of alignment become a financial liability. Explore how these three strategies can transform your compliance program into a vital partner for revenue integrity.  

Take Free RL3M Assessment (Regulatory Lifecycle Management Maturity Model)

RL3M Assessment

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Qualified compliance professionals do the heavy lifting for you, simplifying regulatory change management  

The post 11 Educational Resources on Revenue Cycle and Healthcare Compliance  first appeared on YouCompli.

Artificial intelligence is beginning to reshape the compliance landscape, but the field is still in the early stages of adoption. Compared with other business functions, compliance has been slower to embrace AI, especially in healthcare, where concerns about risk, regulation, and potential bleed-over into clinical decision-making have made organizations particularly cautious. 

Yet the opportunity is substantial, especially when it comes to systems thinking. 

Why Systems Thinking Matters in Compliance 

Effective compliance programs depend on systems thinking. Rather than viewing each request for guidance, investigation, or remediation as an isolated issue, savvy compliance teams look at how individual problems fit into larger patterns. 

One of the challenges in any business function is the tension between individual heroics and well-designed systems, and, ultimately, systems win every time. Many compliance officers have been conditioned to act like lifeguards, diving in to save departments from themselves. But this reactive approach consumes time and limits impact. You stay busy, but the organization doesn’t necessarily become more compliant. 

Shifting away from heroic interventions requires time, strategic thinking and structural planning, resources that compliance professionals rarely have in abundance. This is where AI becomes a powerful ally. 

How AI Helps Compliance Move from Reactive to Proactive 

The key to building proactive compliance is carving out the mental space to think more broadly about operational processes. AI doesn’t replace human expertise, but it can significantly accelerate the work. 

AI tools can analyze the countless issues compliance teams handle daily and help generate system-level recommendations. Think of AI as a partner that gets you to the 50- or 60-yard line, far enough to give you a strong foundation, but still requiring human judgment to complete the plan. 

Using AI to Organize Compliance Processes 

The first step is identifying patterns: 

• What repeatedly goes wrong? 
• What are the recurring themes? 
• Where are the inefficiencies or high-risk points? 

Once you see the trends, you can begin imagining the systems that will address them. AI excels at helping structure these ideas. 

A practical way to start is by giving your AI assistant raw input: 

• Here’s what is happening. 
• Here’s the environment. 
• Here are the recurring issues. 

Then you can prompt the AI with something like: 

 “I want to build a system to help identify and minimize these risks within a complicated environment. What elements should be included, and what considerations fall under each element?” 

The output becomes a foundation, a map of decision points and organizational steps you can refine. 

Supercharging Systems Thinking 

Compliance work is complex, and many officers get stuck not because they lack insight but because they lack time. AI helps break the gridlock by organizing information, highlighting key considerations, and suggesting frameworks. 

The AI provides structure; the compliance professional brings subject-matter expertise. In this collaborative process, the AI’s suggestions spark additional ideas and help you think more holistically. The result is a level of systems thinking that becomes far more accessible even in hectic environments. 

The Human-AI Partnership 

Despite its power, AI cannot replace an experienced compliance officer. It draws from online information and from what you feed it, but it cannot grasp organizational nuance, personalities, or culture. 

For example, an AI may outline a solid system, but only the compliance officer understands how a skeptical executive will respond. That’s where the human element comes in. You can ask the AI to help tailor communications or anticipate objections, but the strategic decision-making remains yours. 

Staying Focused with AI Frameworks 

One of the hidden challenges of compliance work is staying focused long enough to complete long-term system projects. Urgent tasks constantly pull attention away, and partially built frameworks can easily get lost for months. 

AI-created structures help maintain focus. They provide guardrails, the methodological anchors that keep the conversation and planning on track. Most of the framework can often be developed in a single sitting, creating a roadmap you can return to even if you’re pulled into other issues. 

Even with the limitations of some AI tools, especially free versions that cap conversation length, paid versions make it easier to resume discussions, refine ideas, and maintain continuity. 

A Faster Roadmap to a Roadmap 

Compliance professionals work hard and add value every day, but much of that value is short-term because they lack the time to build the long-term systems that create lasting change. 

AI solves this by offering a “faster roadmap to a roadmap.” It accelerates the groundwork: 

•  Defining the problem 
• Outlining the system  
• Highlighting the risks 
• Mapping the components 

That clarity frees the compliance officer to focus on the human side of adapting the system to the organization, navigating culture, and communicating effectively with leaders. 

With an AI-driven framework, compliance work becomes more disciplined, efficient, and proactive. Systems thinking becomes not only achievable, but sustainable. AI doesn’t replace the expertise of compliance professionals—it elevates it. 

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Schedule a quick overview

---

27 Ungated Resources for Compliance Leaders and Teams 

Compliance professionals sometimes feel undervalued in comparison to other functions in their organization. They think leaders and colleagues don’t really understand what they do.  

These resources will help. Packed with ideas, tips and recommendations, these pieces were written by professionals with many years of compliance experience. 

You can quickly skim for articles that relate to your needs and interests. Bookmark this page as a reference for future questions or projects.

Visit Now

---

The post How to Use AI for Systems Thinking in Compliance Processes  first appeared on YouCompli.

The job of an Expert Compliance Professional requires very specific skills and strengths. When an ECP does their job well, hospital compliance teams’ benefit. This blog dives into the qualifications and background of one of YouCompli’s compliance professionals. 

Meet the Experts Behind Our Regulatory Intelligence Services 

Question: What skills and talents do you bring to this role? How did you gain the knowledge to perform your job?  

Bethanne VanderMolen – I bring a unique combination of clinical, compliance, and leadership skills to this role. My foundation as a speech pathologist taught me precision, documentation accuracy, and patient-centered care—skills that naturally translate into compliance oversight.  

As I advanced into leadership roles such as Rehab Director, VP, and Corporate Director of Rehab, I developed expertise in regulatory interpretation, risk mitigation, and the ability to build programs that balance operational goals with ethical and legal standards. 

Leading teams in therapy and then developing into a Chief Compliance Officer and Director of Risk Management in the senior care space sharpened my ability to engage diverse stakeholders and create regulatory frameworks, while my experiences outside of healthcare—working at Disney, teaching marching band, and coaching youth sports—taught me how to inspire teams, simplify complex concepts, and foster a culture of accountability in fun but effective ways. 

I gained my knowledge through both hands-on experience and formal professional development. Every step of my career, whether solving compliance challenges in healthcare, motivating students and athletes, or leading teams in high-pressure environments, has equipped me with the tools to not only interpret regulations but also make them meaningful and actionable for those I serve. 

Q – What achievements are you proud of in this or other roles? Share examples of how you bring value to your job and customers.  

BVK – I am most proud of the consistent impact I’ve made in my day-to-day work, where small improvements accumulated into lasting change. I think I’ve always had the ability to stack small wins and still see the big picture. I’ve always been willing to step in and do the work of multiple people when needed, keeping employees and patients in mind while balancing operational demands with compliance standards. 

In terms of larger achievements, I’m proud to have built two rehabilitation divisions from the ground up, as well as comprehensive compliance programs that continue to guide organizations long after my tenure.  

I’ve successfully navigated high-stakes challenges, including OCR breach investigations, Medicaid litigation, and regulatory and billing audits, often with positive outcomes that protected the organization, our employees, and our patients. I’ve also authored hundreds of clinical, administrative, and personnel policies that gave teams clear guidance and consistency.  

Perhaps one of the accomplishments I value most was leading compliance efforts during COVID. Much of that work happened behind the scenes with an amazing clinical consultant and director of operations—rewriting processes overnight, interpreting rapidly changing regulations, and ensuring patient care continued safely—but it kept our organization compliant and moving forward through a crisis. 

Across every role, I’ve found pride in building solutions, protecting patients, and making compliance meaningful for the people who rely on it. 

Q – What do you like about working in this role and in this company?  

BVK – What I enjoy most about this role and this company is the people. I genuinely like working with a team that is supportive, flexible, and kind—it makes even the tough days easier and the good days even better. I also really connect with the mission of helping compliance professionals succeed, because it means the work I’m doing has a ripple effect beyond just my own role. It feels good to know that what we do here is both meaningful and practical, and I appreciate being in an environment where collaboration and kindness are part of the culture.  

And on a more personal note, I love the flexibility of working remotely. It allows me to coach on the side and spend more time with my daughter. That balance makes me both happier and better at what I do. I love that I can log off in time to get to practice. Compliance and coaching both come down to teamwork, knowing your job, strategy, and keeping everyone playing by the rules. 

Q – What do you think is important for our customers to know about what you and what you do? 

BVK – I want customers to know that I bring clinical, management, and compliance experience to help make their work easier and more effective. I combine practical solutions with all the lessons I’ve learned along the way. I want customers to know that we are working hard to support them and reduce their stress. They are on our mind throughout the process; from the moment we pick up the reg through to the user interface. They can feel confident in my experience because I have been in their shoes as a clinician, manager, and compliance professional. 

Q – Any other thoughts? 

BVK – I got into healthcare as an SLP because it combined art and science. Helping someone with communication, cognition, and swallowing disorders requires an artistic soul because those are intimate human experiences. In my first job, however, I was confronted with the element of compliance in such an impactful and meaningful way that it changed the course of my career.  

I now like to think of compliance as both science and art: precise, but also human-centered. Our backgrounds are what help us make content that is usable, relatable, and trustworthy. We are what connects you to the regulations so that you can make it meaningful to your organization.  

Fun Facts 

Previous roles – SLP, Rehab Director, Rehab Consultant, VP of Rehabilitation, Corporate Director of Rehabilitation, Compliance Officer/Director of Risk Management 

Degrees, certificates, special training, etc. – University of South Carolina (Biology/Chemistry) and Medical University of South Carolina (MS Rehabilitation Sciences/Communication Sciences and Disorders); CHC; CHPC; CCC-SLP; RAC-CTA; CC; OSHA/General Industry 30; RAMP Certified 

Life Outside Compliance 

Jobs in other unrelated industries – Speech and Language Pathologist (SLP)/schools, percussion instruction, Disney, various administrative roles  

Family – Married to David, with one daughter, Kahlan. One awesome Shih-Tzu (Teddy “The Flash”). 

Hobbies and interests – Coaching, fantasy sports, sports card collecting, drums. Just hanging out with the family, playing games, etc.  

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Schedule a quick overview

• One Compliance Pro’s Regulatory Change Management Process    by Amy Laufmann, MBA
• Five ways to show how healthcare Compliance delivers value by Jerry Shafran
• Revenue Cycle Management Compliance: Ensuring… by Maya Turner, CPMA, CPCO, CFPC, CPC, CPC-I, AAPC
• Three Strategies to Align Compliance with Revenue Cycle  by CJ Wolf, MD
• 12 key metrics for compliance officers looking to… by Kenneth Zeko, JD, CHC
• Mitigating Conflicts of Interest that Drive Profit… by Susan Thomas
• How the Three Lines Model Strengthens Healthcare Compliance by Kenneth Zeko, JD, CHC
• New Regulation– Now What? Step-by-Step Guide to… by Amy Laufmann, MBA
• Transforming Compliance to a Department of Yes  by Lisa Herota, RHIA, CHC, CHPS, CCS Compliance & Privacy Officer
• Navigating Compliance Responsibility: A Foundation… by Amy Laufmann, MBA

The post Q&A with a Healthcare Compliance Expert   first appeared on YouCompli.