Healthcare compliance teams do a lot of work that never fits neatly into a single report.

They monitor regulatory changes. They coordinate with departments. They investigate issues. They respond to concerns. They train staff. They track corrective actions. They prepare updates for leadership. They answer questions from auditors, boards, regulators, and internal stakeholders.

But when someone eventually asks, “Can you prove it?” activity alone is not enough.

Documentation is what connects the work to the proof.

For healthcare compliance leaders, documentation should no longer be treated as an administrative afterthought or a last-minute scramble before a board meeting, audit, or investigation. It should operate as a strategic asset: a defensible system of record that shows what happened, who owned it, what changed, and how the outcome was verified.

That is the core idea behind prove-it compliance.

Why compliance documentation needs to prove more than activity

Good documentation does more than show that a task was completed. It helps compliance leaders answer the questions that matter when internal leadership, board members, state examiners, or federal agencies want to understand how an issue was handled.

A defensible record should help answer:

• How did this issue occur?
• What steps did we take to resolve it?
• What steps did we take to prevent future occurrences?

That level of documentation matters because compliance work is often reviewed after the fact. A concern may start as an internal report, an audit finding, a hotline issue, a privacy incident, a regulatory change, or a billing concern. Later, that same issue may need to be explained to a board committee, a state agency, the Office for Civil Rights, or another oversight body.

In that moment, the organization needs more than memory. It needs objective evidence.

A strong system of record reduces the stress of those moments because the compliance team is not scrambling to recreate the story. The story is already documented.

For teams managing a high volume of regulatory updates, this is also where regulatory change management becomes more than awareness. The work needs to move from “we saw the regulation” to “we reviewed it, assigned it, acted on it, verified it, and can show the record.”

Who needs compliance proof?

Different audiences need different levels of documentation.

Compliance leadership needs to see the work. That means granular data on intake, analysis, implementation status, ownership, follow-up, and completion across departments. This helps show whether the compliance function can manage high volumes of change and issue resolution.

Boards and compliance committees need to see the value. They usually do not need every log entry or operational detail. They need high-level summaries, trends, dashboards, and Problem-Solution-Proof narratives that show how compliance protects the organization.

Federal and state government reviewers need to see the process. They may need documentation that tracks a regulation, issue, or requirement from initial notice to final operational proof. This is where defensibility matters most.

A strong system of record should support all three audiences without forcing the compliance team to rebuild the story each time. That is also why healthcare compliance reporting should do more than summarize activity. It should help teams monitor risk, track ownership, and show what has been reviewed, assigned, completed, and verified.

The problem with scattered documentation

Most healthcare compliance leaders already understand that documentation is important. The challenge is usually not awareness. It is execution.

Documentation gaps often happen because compliance work is reactive. Fire drills, urgent requests, audits, investigations, and unexpected issues interrupt routine logging. Teams may also struggle with unclear ownership. If nobody knows who is responsible for documenting the who, what, when, and outcome, records become inconsistent or incomplete.

Another common challenge is the optimism trap. Teams may underestimate how long education, monitoring, corrective action, and documentation will actually take. A timeline that looks reasonable in April may become unrealistic by June if staffing changes, operational demands, or competing priorities interfere.

Resource scarcity creates another barrier. When teams rely on spreadsheets, shared drives, emails, personal folders, or disconnected tracking systems, documentation becomes harder to maintain and harder to retrieve.

The result is a familiar pattern: compliance teams do the work, but the proof is scattered.

That same issue shows up in broader regulatory change management. As YouCompli has covered in From Manual to Scalable: How to Manage Healthcare Compliance Risk, the pace and complexity of healthcare regulatory change can become a risk of its own when teams do not have systems that help them manage it.

What a defensible system of record should include

A true system of record is more than a folder on a drive.

It should function as a single source of truth for compliance documentation. That means the organization can find the right records, verify who did what and when, understand which version of a requirement or policy was used, and show how the work connects to oversight expectations.

At minimum, a defensible system of record should support:

• Retrievability: Can the team find a specific record from three years ago in under ten minutes?
• Version control: Is everyone working from the current version of the requirement, policy, or process?
• Audit readiness: Can the team move from searching for proof to presenting proof?
• Workflow accountability: Is it clear who owned each step and when action was taken?
• Documentation integrity: Can the record show objective evidence, not just a subjective summary?

This is especially important when documentation needs to support regulatory obligations, board reporting, state audit readiness, False Claims Act concerns, privacy investigations, billing issues, or corrective action follow-through.

For teams thinking through the structure of their compliance program, YouCompli’s article on how the OIG’s General Compliance Program Guidance addresses the Seven Elements is a useful related read.

How to structure compliance documentation for defensibility

It is not just what the team documents. It is how the documentation is structured.

To stand up to external scrutiny, documentation should go beyond a simple “yes” or “no.” It should create a clear trail that another person can understand later, even if the original owner has moved roles or left the organization.

A few practical standards help.

Every record should include audit-ready details such as date, time, owner, approver, relevant metadata, and objective evidence. If a policy change connects to training, monitoring, or corrective action, those related records should be cross-referenced. The documentation should tell the whole story from issue identification to resolution.

Compliance teams should also avoid subjective conclusions that are not supported by facts. A strong record should focus on what was observed, what requirement or regulation was cited, what decision was made, what action was taken, and what evidence supports the outcome.

One useful test is the ten-minute rule: can a specific record be retrieved and explained in under ten minutes?

If not, the documentation may exist, but it may not be defensible in a practical sense.

For more on how audit readiness requires a proactive posture, see YouCompli’s article, With Compliance Audits, The Best Defense is a Good Offense.

The operational toolkit behind prove-it compliance

Once the system of record exists, compliance teams need the daily tools that keep it useful.

A few core logs and plans often create the backbone of defensible documentation:

Compliance work plan: Shows planned initiatives, resource allocation, and progress against organizational and departmental goals.

Audit and monitoring plans: Show systematic checking, proactive issue detection, and corrective action follow-through.

Education and training plan: Shows what training was provided, who attended, and what expectations were communicated to impacted workforce members.

Investigation and disclosure log: Shows how issues were identified, investigated, resolved, and disclosed to regulators when appropriate.

The key is to make documentation a natural byproduct of the workflow, not an extra task that happens weeks later from memory.

For example, an investigation log should be updated at each stage of an inquiry. Waiting until the end increases the risk that context, decisions, and details will be lost.

Moving from activity reporting to impact reporting

Once a system of record is working well, compliance leaders can do more than prove that activity happened. They can show outcomes and value.

That requires moving from activity metrics to impact metrics.

Instead of reporting only how many tasks were completed, compliance teams can show whether the compliance engine is reliable, whether risk is being reduced, and whether compliance is embedded into daily operations.

Examples include:

Operational health: Timeliness of regulatory intake and task completion rates. This helps prove reliability by showing that the compliance process is consistent and predictable.

Risk reduction: Trends in identified gaps, audit findings, and closure rates. This helps prove protection by showing that the program is finding and fixing issues before they become bigger liabilities.

Engagement and culture: Training completion, hotline volume, policy acknowledgement, and advisory requests. This helps prove culture by showing that compliance is integrated into the daily work of the organization.

This is also where the Problem-Solution-Proof model becomes useful.

For more on reporting compliance value, see Healthcare Compliance KPIs: Real-Time Data Dashboards and YouCompli’s Healthcare Compliance Reporting and Verification page.

Using the Problem-Solution-Proof framework

Board and senior leadership reporting should not be a long list of compliance activities. It should tell a clear story.

The Problem-Solution-Proof framework helps compliance leaders frame that story:

Problem: What specific regulatory challenge, operational risk, issue, or gap required action?

Solution: What did the organization do in response?

Proof: What objective evidence shows that the action was completed and had the intended effect?

For example:

Problem: New state-level False Claims Act requirements.

Solution: Implemented a new verification workflow and staff training.

Proof: 100% training completion and zero documentation gaps found in an internal audit.

This kind of reporting helps leadership see not just what compliance did, but what changed because of the work.

How mature documentation helps compliance evolve

A mature system of record does more than store documentation. It helps compliance leaders spot trends.

If one department consistently misses documentation deadlines, that is not just a tracking issue. It is a roadmap for targeted improvement. If a recurring policy issue keeps appearing, the problem may not be staff effort. It may be that the policy is confusing, difficult to apply, or not supported by enough training.

By documenting and reviewing these patterns, compliance teams can move from reactive oversight to proactive leadership.

That is the shift from documentation as storage to documentation as intelligence.

When technology becomes necessary

Manual habits are often the starting point for compliance documentation. But as regulatory change volume grows, manual systems can become difficult to maintain.

Spreadsheets, shared folders, inboxes, and disconnected tracking systems may work for a small number of issues. But they often create problems when teams need consistent workflows, objective evidence, assignment tracking, audit trails, reporting, and centralized retrieval.

When evaluating software to support regulatory change management documentation, compliance teams should look for capabilities that:

• Act as a centralized repository
• Automate audit trails
• Reduce time and resource burdens through workflow automation
• Show who did what and when
• Preserve documentation integrity
• Support defensibility for state audits, False Claims Act concerns, and federal oversight
• Function as more than a filing system

The goal is not simply to digitize documentation. The goal is to make the compliance program more accountable, searchable, reportable, and defensible.

For a deeper software evaluation framework, see What to Look for in Regulatory Change Management Software for Healthcare Compliance. You can also review How YouCompli Works to see how regulatory change can move through a repeatable process: know what changed, decide what matters, manage the work, and verify completion.

The prove-it moment

Effective documentation is more than a regulatory requirement. It is the bridge between compliance activity and organizational safety.

When documentation is scattered, compliance teams are forced to reconstruct the proof later. When documentation is structured, searchable, and tied to workflow, the organization is better prepared for board reporting, audits, investigations, and leadership conversations.

That preparation matters when the prove-it moment arrives.

The strongest compliance documentation does not just show that work happened. It shows that the organization took the issue seriously, assigned ownership, acted on the requirement, verified the outcome, and preserved the proof.

That is the difference between activity and defensibility.

Want to see how your documentation process holds up?

Take the Prove-It Compliance Readiness Check to evaluate whether your current process supports retrievability, accountability, defensibility, and leadership-ready reporting.

Take the Readiness Check

You can also download the full Prove-It Compliance Playbook for a more detailed framework on building a defensible system of record for healthcare compliance documentation.

The post How Healthcare Compliance Teams Can Turn Documentation Into Defensible Proof first appeared on YouCompli.

Description: Elevate your audit strategy. Access 7 top educational resources designed to help healthcare compliance leaders navigate complex commercial and federal reviews.  

Trying to get a better handle on audit readiness? Good move. To save you some time, we’ve curated this audit-related content specifically for healthcare compliance professionals. The overview compilation gives you a quick look at the useful advice in each resource, so you can dive right into where you need help the most.  

If you haven’t thought about audit readiness lately, it’s probably time to put some focus on it. However, we know compliance life moves fast, and you can’t always get to some of the important things proactively. 

Compliance leaders get exhausted by resource scarcity, manual tracking fatigue, and escalating payer audits. According to the Barnes & Thornburg Compliance Outlook Report, 56% of healthcare compliance and risk leaders anticipate even greater regulatory challenges ahead, with over half struggling to secure the resources needed to keep up.  

So yeah, a proactive audit strategy could be a good idea. 

Healthcare Compliance Audits: 7 Essential Resources for Leaders 

Given that, it’s not surprising that continuous readiness is becoming the new standard for healthcare compliance leaders when it comes to audits. 

This collection is about shifting the conversation from “surviving the next audit” to “building a defensible, tech-forward compliance data engine”. 

These resources will quickly get you headed down a good path, with their abundant advice and useful tips from compliance professionals for compliance professionals. Many of them come with their own downloadable tip sheets. 

Think of the collection as the start of your “audit preparedness playbook.” 

Resource 1 – With Compliance Audits, The Best Defense is a Good Offense  

Is your organization defensible against a compliance audit? Do you have a game plan in place to avoid penalties and other losses? 

Traditional point-in-time random sampling simply fails to catch systemic gaps that audits can reveal. 

How this resource helps: 

With this blog, learn how to prepare your compliance program for the win. Using sports training analogies, the authors present a better way to handle ongoing inspections and audits in healthcare systems. 

The fast-break transition offense the authors suggest is inspired by the 1990 UNLV Running Rebels basketball team. Get their unique advice on how to go offense following a regulatory compliance audit or inspection, so you’re well-prepared for the next one. 

It takes practice. By reinforcing these principles and working on conditioning and decision making, teams can create more scoring opportunities. Just as a prepared team can force the defense into difficult situations, a well-prepared compliance team can “force” the auditor into zero-findings and more quality inspections.   

Resource 2 – Audit Readiness? How about Audit Etiquette?  

When a regulator shows up, what’s the first thing your team scrambles to find? 

• Is it evidence of task completion?  
• Maybe a list of applicable regs or updated policies?  
• How about proof of communication to stakeholders? 

In addition to documentation, how your team behaves during an audit also affects the outcome. 

How this resource helps: 

Learn the unfiltered truth about compliance audits and “audit etiquette” — the proper behavior for responding to an audit. 

Get expert tips on: 

• What audit readiness means 
• The role of healthcare compliance auditors 
• What to do (and what not do) during an audit 
• Audit etiquette best practices 

Perception is reality. If you look like you know what you’re doing, respond promptly, and treat the auditors with respect, you can generally minimize any damage. With the advice in this blog, you won’t just look ready; you’ll be ready – and calm.  

Follow these practices and display confident compliance audit behavior. 

Resource 3 – Healthcare Audit? Stay Ready. Don’t Get Ready.  

Compliance audit in Quality? Many quality teams think they’re ready, until they aren’t.  

In healthcare quality departments, audit readiness is no different than in any other area. Follow a defined process, then optimize as necessary so it works for your organization and patients.  

It’s not hard, but people still panic because an auditor can shut them down. 

However, if you have a proactive process in place to minimize the damage, you don’t have to worry.  

How this resource helps: 

This resource shares the pre-audit steps you need for proactive compliance readiness in Quality. It’s jammed with advice from the first word to the last. 

• During the Compliance Audit 
• Post-Audit Follow-Up Practices 
• Be Proactive: Prepare for Your Next Compliance Audit  

Resource 4 – How to Use TPE Plans for Compliance Auditing and Monitoring  

When doing periodic risk assessments, compliance professionals often use the OIG Work Plan or DOJ enforcement actions to determine how to deploy time and resources on auditing and monitoring. 

Another helpful tool is the list of services that Medicare Administrative Contractors (MACs) include in their Target, Probe and Educate (TPE) plans.  According to CMS, the goal of TPE is to accelerate improvement and let MACs work with providers to correct specific errors. 

How this resource helps: 

As this expert-written piece explains, TPE information can be a good resource for compliance leaders when designing proactive audit plans.  

This blog looks at how TPE plans are applied to specific areas of non-compliance that MACs observe. Use them to create your own checklists for cleaner compliance audits and proactive monitoring.  

Resource 5 – Six key steps to reduce the impact of telehealth audits 

Did you know telehealth is almost as old as the telephone itself? 

In 1879, just three years after Bell patented the telephone, an article in The Lancet first described the telehealth concept and its use.  

And a law that’s even older than the telephone still triggers telehealth audits today.  

The 1863 False Claims Act was enacted to keep profiteering contractors from defrauding the Union army. Today, it can trigger serious problems for modern telehealth practitioners.  

How this resource helps: 

Today we know the best way to cope with audits is to avoid the need for them in the first place. This article shares six proactive steps to take to reduce the impact of telehealth audits.  

It includes advice on how to: 

• Know what you’re up against.  
• Inventory your waivers.  
• Check your records.  
• Audit your process.  
• Fix what’s broken.  
• Rebill and repay.  

Patient demand for telehealth isn’t going away. Neither are the costs of noncompliance with telehealth regulations.  

By proactively partnering with colleagues in relevant departments, your compliance team can lead the efforts to identify and fix issues before they become major problems. That way, you can provide the telehealth services patients want in compliance with what the regulations demand. 

Resource 6 – 5 Payer Audit Errors Every Hospital Must Avoid 

From large hospitals to solo practitioners, at some point most providers will experience a commercial payer audit from CMS, OCR or some other agency. Their scrutiny reveals errors and violations, which in turn trigger hefty penalties. In fact, commercial payer audits have jumped 2.2 times over a single year, increasing the total sum at risk for hospital systems by 30%.  

Even more challenging, payers are moving heavily toward pre-payment audits. These can hold up payments and squeeze monthly cash flow.  

External payer audits don’t have to be such a nightmare.  

How this resource helps: 

The key to surviving an external audit with the least pain is to avoid the five payer audit errors outlined in this blog. 

1. Late responses 
2. Wrong documentation 
3. Billing the wrong codes 
4. No self-audit 
5. No legal help 

By staying prepared and vigilant, your next payer audit experience can be more streamlined and less stressful. 

Resource 7 – Audit Expectations and Challenges 

When it comes to providing best-in-class healthcare, stress comes with the territory. Unrelenting demands drain resources across the organization, including some not directly involved with patient care.  

One demand that turns daily routines upside down, and compounds stress levels is an audit. A compliance audit can be conducted internally by hospital committees or externally, often by government-approved contractors. 

Internal Audit – Seeks to determine provider’s financial and operational controls, and that related policies and procedures meet compliance and risk management needs. 

External Audits – Several federal agencies including CMS, OIG, OCR and others are the primary drivers of audits of regulations and compliance costs across hospitals. Responding to multiple external audits increases administrative costs, and funds could be bound up in lengthy appeals. 

How this resource helps: 

Study this overview to familiarize yourself with the basic workings and typical costs associated with audits. For example, external audits are conservatively estimated at $100 per hour, but the manual drain goes deeper:. Standard program reviews require 300 to 346 hours of direct manual labor per plan, taking skilled leaders away from higher-level risk mitigation. 

The Tech-Driven Path to a Proactive Audit Strategy 

You have plenty of insightful and helpful resources to review here. But as you look through them, keep this reality check in mind: 40% of compliance teams still rely on spreadsheets and text documents to track internal reviews. 

The future belongs to compliance leaders who lean into automated tools, allowing their teams to complete risk assessments far faster than manual methods and catch errors before federal or commercial auditors flag them. 

If you’re ready to leave the spreadsheets behind, or just have questions about setting up your proactive audit framework, we’re always here to talk. 

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Schedule a quick overview

The post Master Healthcare Compliance Audits: Learn from 7 Expert Resources  first appeared on YouCompli.

For healthcare compliance leaders, financial literacy is not optional. Compliance risk often hides in the fine print of financial data, making literacy a prerequisite for effective oversight.  

To identify anomalies or potential regulatory “red flags,” compliance officers must move beyond a high-level view of healthcare finance and understand how clinical operations translate into financial entries. 

What does a compliance leader need to understand? Things like: 

• Budgeting and capital planning 
• Internal controls and risk 
• Grant and research compliance  
• Key performance indicators (KPIs) 
• Communication between CFO and compliance officer 

Familiarity with the 14 steps of the revenue cycle is also valuable for mitigating risks associated with reimbursements and 340B compliance. (This topic is covered later in the blog.) 

Where Do Healthcare Compliance and Finance Intersect? 

Regulatory compliance and healthcare finance overlap in multiple ways. Compliance-related areas with a financial angle include: 

• Medicare, Medicaid reimbursement 
• 340B drug pricing 
• Stark Law and anti-kickback statutes 
• Charity care 
• Financial assistance requirements  

What Should Compliance Leaders Understand About Financial Statements? 

To build fiscal literacy, let’s start with some foundational concepts – financial statements. Compliance officers should have a basic understanding of these types of statements: 

1. Balance Sheet 
2. Income Statement 
3. Cash Flow Statement 

1. The Balance Sheet: Assessing Financial Integrity Through a “Snapshot” 

The balance sheet provides a snapshot of an organization’s financial health at a specific point in time, detailing its assets, liabilities and equity. 

Why Compliance Should Care: Monitoring the balance sheet helps ensure that assets are properly recorded, and that liabilities like these are appropriately disclosed: 

• Potential legal settlements 
• Debt obligations 
• Medicare overpayments 

2. The Income Statement: Monitoring Operational Risk Over Time 

Unlike the balance sheet snapshot, the income statement tracks revenue and expenses over a specific period, such as a month or a fiscal year. The income statement puts a focus on total revenue and expenses, and the difference between them, while distinguishing between operating and non-operating items. Those two concepts are compared in the chart below. 

In an income statement, it’s important to distinguish between accrual-basis accounting (matching revenue to period it was earned) and cash-basis accounting (recording transactions only when money changes hands). 

Why Compliance Should Care: By comparing current monthly performance against previous years, compliance officers can spot outliers in revenue or sudden spikes in expenses that could indicate billing errors, “upcoding,” or improper financial arrangements under the Stark Law. 

3. The Cash Flow Statement: Ensuring Operational Sustainability 

The cash flow statement tracks the actual movement of cash into and out of the organization, categorized by: 

• Operating activities 
• Investing activities 
• Financing activities 

Why Compliance Should Care: Understanding cash flow is vital for making sure the organization has liquidity to maintain compliance standards even during times of financial strain. A significant discrepancy between reported net income and actual cash flow can signal deep-seated issues with revenue cycle integrity.  

Revenue Cycle as Regulatory Roadmap 

For a prepared healthcare compliance leader, the revenue cycle isn’t just a financial process; it’s a regulatory roadmap. From initial patient interaction to final collection, each step presents a unique set of compliance risks that can lead to audits, fines or loss of reimbursement if not managed with understanding. 

What Compliance “Trapdoors” to Watch for in the Revenue Cycle 

The revenue cycle is full of complexity, largely fueled by the impact of different hospital types (PPS, critical access, disproportionate share, and tribal hospitals) on Medicare and Medicaid rates. 

While the full revenue cycle has 14 distinct stages, compliance officers should pay particular attention to these “trapdoors” where financial operations must meet strict federal regulations: 

• Front-End Integrity (Scheduling and Registration): Accuracy is paramount to ensure Medicare and Medicaid reimbursements aren’t jeopardized by incorrect patient data or lack of prior authorization. 
• Clinical Documentation and Coding: This is a high-density risk area. Compliance must make sure that coding reflects the actual services provided to avoid allegations of “upcoding” or “unbundling,” which can trigger False Claims Act investigations. 
• 340B Drug Pricing Program: If an organization participates in 340B, the revenue cycle needs rigorous internal audits to establish compliance with drug diversion and duplicate discount prohibitions. The stakes will be even higher if the program undergoes potential changes regarding payment models. 
• Billing and Claims Submission: Errors in this stage directly impact the Clean Claim Rate. More importantly, consistent billing errors for federal healthcare programs can lead to significant liability under Anti-Kickback Statutes or the Stark Law if improper financial relationships are found. 

Monitoring Denial Management at Back End of Revenue Cycle 

A robust compliance program monitors the back end of the revenue cycle as closely as the front. Analyzing denials can reveal systemic issues in documentation or billing practices that, if left unaddressed, represent both financial loss and compliance vulnerability. 

What KPIs Should Compliance Watch as Part of Financial Oversight? 

For a healthcare compliance officer, financial data is more than just a reporting requirement. It’s a proactive tool for risk assessment. By monitoring specific KPIs, compliance teams can move from reactive auditing to strategic oversight and identify operational stressors before they escalate into violations. 

The “Big Four” Financial KPIs for Compliance Officers 

Comprehensive financial oversight should track these four metrics: 

• Operating Margin: This measures whether the organization’s core clinical mission is profitable after all operating and overhead costs are paid. A shrinking margin often leads to “cutting corners” in staffing or documentation, which directly increases compliance risk. 
• Days Cash on Hand: This indicates liquidity. How many days can an organization operate using its current cash reserves if all revenue stopped? Higher liquidity provides the financial “breathing room” to maintain compliance and quality standards even during economic downturns. 
• Clean Claim Rate (CCR): A high CCR (ideally 95% or higher) indicates that claims are being submitted without errors the first time. A low rate is a red flag for systemic billing or documentation errors that could trigger federal audits under the False Claims Act. 
• Payer Mix: It’s critical to understand the percentage of revenue coming from Medicare, Medicaid and private insurance. In many healthcare models, Medicare functions as a “break-even” payer, while Medicaid reimbursements often fall below the actual cost of care, placing additional pressure on revenue integrity. 

What to Know about Budgeting and Internal Controls 

Compliance officers should also distinguish between the Operating Budget (daily/annual clinical operations) and the Capital Budget (typically reserved for long-term investments or items over $10,000). 

To prevent fraud and ensure financial integrity, a compliance program must enforce strict segregation of duties. This assures that no single individual has control over all aspects of a financial transaction, serving as a primary defense against embezzlement and improper financial reporting. 

Using the SBAR Tool to Structure CFO and Compliance Communication 

The most effective healthcare compliance programs are those where the Chief Compliance Officer (CCO) and Chief Financial Officer (CFO) operate as strategic partners.  

However, communicating complex compliance risks in a way that aligns with financial priorities requires a structured approach. This is where the SBAR tool (Situation, Background, Assessment, Recommendation) becomes invaluable for justifying financial decisions and resource allocation. (Download a helpful SBAR template at the end of this article)

Four-Step Method for Financial Advocacy 

Use this four-step method to present compliance needs to your finance team: 

• Situation: Clearly state the immediate financial or regulatory issue.  
  Example: “We have identified a 15% discrepancy in our 340B drug pricing audits.” 

• Background: Provide the necessary context and data.  
  Example: Current Medicare reimbursement rates for these drugs are subject to strict transparency requirements. 
   
• Assessment: Offer your professional analysis of the risk.  
  Example: Failure to rectify this documentation gap poses a significant risk to operating margin and regulatory standing and could trigger a federal audit. 
   
• Recommendation: Propose a specific, data-backed solution.  
  Example: “I recommend an immediate investment in automated tracking software as part of the next capital budget cycle.” 

How Compliance Can Secure a “Seat at the Table” 

By confidently speaking the language of finance with terms like liquidity, capital planning and debt financing, compliance officers move beyond being seen as a “cost center” and the “Department of No.”  

Instead, compliance can become a guardian of the organization’s financial sustainability, ensuring that compliance is integrated into every high-level discussion, from annual budgeting to long-term strategic growth.  

Ready to drive more compliance value? Reach out to see how YouCompli can help.  

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Qualified compliance professionals do the heavy lifting for you, simplifying regulatory change management  

The post Financial Literacy: The “Superpower” Every Modern Compliance Leader Needs  first appeared on YouCompli.

Revenue leakage from non-compliance with regulations exposes health systems to compliance risks and penalties. We’ve curated eleven resources to help compliance leaders be better prepared to guide alignment between regulatory compliance processes and revenue integrity goals.

Why Should Compliance Care about the Revenue Cycle? 

Over half of all regulations deal directly with revenue cycle, billing and finance. Most providers still lack an effective system or process to monitor, assess, and validate compliance with those regulations. As a result, these organizations leave themselves open to significant risks, not to mention significant revenue leakage. 

If you need to learn more about the revenue angle of healthcare compliance, these resources are a good place to start. 

Compliance Content by Compliance Experts 

The resources included in this collection Include articles from noted compliance experts including: 

• Shawn Y. DeGroot – CHC-F, CCEP, CHRC, CCPC 
• Maeve O’Neill, MEd – LPC-S, CHC, CDTLF 
• Sharon Parsley – JD, MBA, CHC, CHRC 
• Susan Thomas – CIA, CHC, CPC, CRMA 
• Maya Turner – CPMA, CPCO, CFPC, CPC, CPC-I, AAPC 
• CJ Wolf – MD, CPC, CPC-I, M.Ed. 

Learn from their advice and examples how compliance contributes to revenue performance and launch your own strategies for improvement. 

1. Blog – Mitigating Conflicts of Interest that Drive Profit Over Health  

Integrity First: Mitigating Conflicts of Interest in Clinical Decision-Making 

In healthcare, a conflict of interest (COI) occurs when secondary interests, such as financial ties or institutional goals, threaten to compromise clinical objectivity.  

These conflicts do more than just create ethical dilemmas; they often lead to overutilization of unnecessary tests and treatments, inflating costs for patients and insurers alike. For compliance leaders, addressing COIs is essential to protecting the integrity of the healthcare system and ensuring resources are used appropriately. 

This blog examines the ripple effects of COIs on both patients and providers. It discusses key components of these conflicts and the significant financial impact they have on the entire healthcare ecosystem. 

Inside this resource: 

• Identifying the Triggers: Learn to recognize the financial ties and personal relationships that can bias medical decision-making. 
• The Cost of Overutilization: Understand how unnecessary procedures create financial burdens and exploit the system for gain. 
• Systemic Impact: Explore the broader consequences of COIs, including their role in fraudulent billings. 
• Protecting Objectivity: Strategies for ensuring that clinical judgment remains aligned with the best interests of patients and public health. 

Don’t let hidden interests drive your organization’s clinical path. Read the full blog to learn how to identify and mitigate the conflicts that put your system at risk. 

2. Blog – How to Avoid False Claims Related to Medical Necessity   

Protecting the Bottom Line: Compliance as a Revenue Safeguard 

In the complex world of health system finance, a single coding error can quickly escalate into a multi-million-dollar False Claims Act liability. While Revenue Cycle Management (RCM) focuses on speed and volume, Revenue Integrity ensures that those gains aren’t lost to federal audits or recoupments. 

3. White Paper – Exploring the Four Hot Spots Of the Healthcare Revenue Cycle  

Navigating the Minefield: Mastering the Four Hot Spots of Revenue Integrity 

The healthcare revenue cycle is the financial lifeblood of your organization, but it’s also a landscape filled with hidden regulatory traps. With complexity in payer contracts and government oversight, certain areas have evolved into high-risk “hot spots” that demand immediate, expert compliance scrutiny. 

4. Case Study – Getting It Right: Minimizing Self-identified Overpayments & Maximizing Accurate Billing 

From Regulatory Burden to $400,000 in Savings: The Great River Health Story 

For a small compliance team, staying ahead of complex state coding rules and rapid federal updates is often a losing battle. At Great River Health, this challenge meant spending countless hours manually interpreting regulations, yet the team never felt fully confident that they were catching every risk. They needed a way to move away from constant research and toward decisive action. 

This featured case study explains how Great River Health transformed their compliance program from a source of stress into a vital engine for revenue integrity. By adopting a system that provides validated policy templates and expert regulatory analysis, they shifted their focus from interpretation to implementation. 

5. Blog – Healthcare Compliance is Everybody’s Business: Clinical, Revenue Cycle, IT, Sales and Marketing 

Breaking the Silos: Why Compliance is Everybody’s Business 

To ensure long-term stability, compliance leaders must lead the charge in fostering deep partnerships with clinical, IT, and revenue cycle teams. Compliance can no longer operate in isolation. As governmental and commercial payers deploy increasingly sophisticated programs, the only way to safeguard your organization is through a unified front.  

This blog explores the strategic necessity of internal alliances. It breaks down the specific skills and communication rhythms required to identify systemic risks and avoid the catastrophic penalties associated with “reverse false claims” liability. 

Inside this resource: 

• The Partnership Mandate: Why a strong relationship with your revenue cycle team is your first line of defense against advanced payer audits. 
• Beyond the Surface: Learn how to distinguish between coding-specific denials and medical necessity issues to uncover localized and systemic vulnerabilities. 
• The 60-Day Clock: Understand the critical risks of “reverse false claims” and how to manage the return of overpayments to avoid treble damages. 
• Proactive Governance: How to establish regular cross-departmental meetings that turn compliance from a reactive task into a shared culture of integrity. 

Stop letting departmental silos become a regulatory liability. Read the full blog to learn how to turn every team into a partner for revenue integrity. 

6. Blog – Uncovering $9 Million in Unbilled Services    

The $9 Million Question: How Mock Audits Uncover Hidden Revenue 

Most compliance professionals view mock audits as a shield against fines and regulatory scrutiny. However, when approached strategically, these audits can also act as a powerful engine for revenue integrity. In one striking example, a fresh set of eyes and a few “tough questions” led to the discovery of $9 million in unbilled services. 

This featured blog explores how mock audits do more than just manage risk. They’re a primary tool for building cross-departmental relationships and positioning the compliance team as a high-value partner to the rest of the organization. 

Inside this success story: 

• The “Fresh Eyes” Advantage: Why stepping away from day-to-day tasks to look at the bigger picture is essential for identifying systemic billing gaps. 
• Beyond Revenue Protection: Discover the five strategic benefits of audits, from shaping organizational culture to preventing future penalties. 
• The Power of Simple Questions: See how asking “Do we bill that?” can lead to the biggest dollar-value discoveries of your career. 
• Compliance as a Partner: How to use the audit process to build trust and influence across the business while delivering tangible financial value. 

Stop viewing audits as a burden and start seeing them as an opportunity to prove the financial impact of your compliance program. Read the full story here to learn how to turn your next mock audit into a multi-million-dollar win. 

7. Blog – Compliance Risks Associated with Outlier Payments  

The Chargemaster Trap: Managing the High Stakes of Outlier Payments 

The next resource in our collection focuses on a high-stakes area of reimbursement that often flies under the radar until an audit begins — outlier payments.  

Outlier payments are designed to protect hospitals from significant financial losses on exceptionally costly cases. However, because these supplemental payments are directly tied to hospital charges, they have become a primary target for regulatory scrutiny. If a facility raises its chargemaster prices without clear justification, it can artificially inflate these payments and trigger intense external audits. 

This blog explores the delicate balance between revenue protection and compliance risk. We examine real-world audit findings where simple human errors and system glitches led to hundreds of thousands of dollars in overpayments and potential penalties. 

Inside this resource: 

• The Scrutiny Factor: Understand why enforcement agencies are actively monitoring price increases that lead to spikes in outlier reimbursement. 
• Lessons from the Field: Review the 2020 OIG audit of an Arkansas facility that found over $580,000 in overpayments due to time-tracking and coding errors. 
• The Human Error Risk: Learn how “hardcoded” charges and misaligned supply items can create systemic billing inaccuracies that go undetected for years. 
• Strategic Collaboration: Discover why a close partnership between compliance, finance and reimbursement teams is the only way to safeguard your organization against these risks. 

Stop letting unjustified price adjustments put your hospital at risk for recoupment and penalties. Read the full blog here to learn how to proactively audit your outlier claims and maintain regulatory integrity. 

8. Blog – The Cost of Non-Compliance  

Beyond the Fine: Calculating the True Price of Non-Compliance 

In the budgeting process, the cost of non-compliance is often a forgotten line item until it becomes a hard reality. While hefty fines for HIPAA or Medicare violations are the most visible risks, they’re only the beginning.  

For healthcare organizations, the true cost includes a cascade of legal fees, operational disruptions and long-term reputational damage that can be difficult to quantify but impossible to ignore. 

This piece explores how to move beyond reactive firefighting and toward a model of operational excellence. We discuss how to use Corporate Integrity Agreements (CIAs) as a powerful benchmarking tool to identify systemic vulnerabilities before they lead to federal intervention. 

Inside this resource: 

• The Tangible and Intangible: Learn how to communicate the full spectrum of risk to your board, from immediate settlement costs to the lasting impact on patient trust. 
• Contract Integrity: Focus on the critical importance of auditing physician and medical director contracts to prevent Stark Act and Anti-Kickback Statute violations. 
• A Culture of Excellence: Understand why investing in compliance is not just a legal obligation but a cornerstone of your organization’s commitment to patient care and operational stability. 

Stop viewing compliance as a cost center. Read the full blog to learn how a proactive approach to auditing and monitoring can safeguard your organization’s future. 

9. Blog – How to Avoid Compliance Risk in Peripheral Vascular Reimbursement   

Under the Microscope: Navigating Peripheral Vascular Reimbursement Risks 

Peripheral vascular disease (PVD) reimbursement has become a lightning rod for regulatory scrutiny. With alarming statistics regarding improper payments and a surge in whistleblower investigations, health systems cannot afford to treat these interventions as routine billing.  

For compliance leaders, the challenge lies in ensuring that every procedure meets stringent medical necessity guidelines before a claim is ever submitted. 

This expert-led blog provides a deep dive into the regulatory trends and enforcement patterns currently shaping the vascular space. It provides technical insights and best practices your team needs to safeguard your organization’s reputation and financial stability. 

Inside this resource: 

• Medicare Compliance Mastery: Understand the specific documentation and coding requirements that federal auditors target in vascular interventions. 
• Fraud Warning Signs: Learn why high volumes in vascular reimbursement are triggering red flags for the OIG and how to stay ahead of these investigations. 
• Recent Investigation Insights: Review lessons learned from recent whistleblower cases that focused specifically on PVD compliance failures. 
• Best Practices for Integrity: Actionable strategies to align clinical documentation with reimbursement guidelines to ensure every claim is defensible. 

Stop letting PVD reimbursement become a vulnerability in your revenue cycle. Read the full blog here to equip your team with the knowledge to navigate this complex environment. 

10. Blog and Tip Sheet – Revenue Cycle Management Compliance: Ensuring Financial Health in Healthcare  

Financial Integrity: Mastering Revenue Cycle Management Compliance 

Revenue Cycle Management (RCM) is the essential financial engine of any healthcare provider, managing everything from claims processing to final payment.  

However, the efficiency of this cycle depends entirely on its alignment with regulatory standards. Without a foundation of strict compliance, even the most streamlined revenue process is at risk of legal repercussions and compromised financial integrity. 

11. Blog and Tip Sheet – Three Strategies to Align Compliance with Revenue Cycle  

Strategic Synergy: Bridging the Gap Between Compliance and Revenue Cycle 

For healthcare organizations, the revenue cycle is the financial lifeblood. However, when compliance and revenue cycle management operate in silos, the resulting friction creates significant regulatory and financial risks.  

To protect the bottom line and ensure long-term sustainability, compliance leaders must lead the charge in aligning these two critical functions. 

Stop letting a lack of alignment become a financial liability. Explore how these three strategies can transform your compliance program into a vital partner for revenue integrity.  

Take Free RL3M Assessment (Regulatory Lifecycle Management Maturity Model)

RL3M Assessment

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Qualified compliance professionals do the heavy lifting for you, simplifying regulatory change management  

The post 11 Educational Resources on Revenue Cycle and Healthcare Compliance  first appeared on YouCompli.

Artificial intelligence is beginning to reshape the compliance landscape, but the field is still in the early stages of adoption. Compared with other business functions, compliance has been slower to embrace AI, especially in healthcare, where concerns about risk, regulation, and potential bleed-over into clinical decision-making have made organizations particularly cautious. 

Yet the opportunity is substantial, especially when it comes to systems thinking. 

Why Systems Thinking Matters in Compliance 

Effective compliance programs depend on systems thinking. Rather than viewing each request for guidance, investigation, or remediation as an isolated issue, savvy compliance teams look at how individual problems fit into larger patterns. 

One of the challenges in any business function is the tension between individual heroics and well-designed systems, and, ultimately, systems win every time. Many compliance officers have been conditioned to act like lifeguards, diving in to save departments from themselves. But this reactive approach consumes time and limits impact. You stay busy, but the organization doesn’t necessarily become more compliant. 

Shifting away from heroic interventions requires time, strategic thinking and structural planning, resources that compliance professionals rarely have in abundance. This is where AI becomes a powerful ally. 

How AI Helps Compliance Move from Reactive to Proactive 

The key to building proactive compliance is carving out the mental space to think more broadly about operational processes. AI doesn’t replace human expertise, but it can significantly accelerate the work. 

AI tools can analyze the countless issues compliance teams handle daily and help generate system-level recommendations. Think of AI as a partner that gets you to the 50- or 60-yard line, far enough to give you a strong foundation, but still requiring human judgment to complete the plan. 

Using AI to Organize Compliance Processes 

The first step is identifying patterns: 

• What repeatedly goes wrong? 
• What are the recurring themes? 
• Where are the inefficiencies or high-risk points? 

Once you see the trends, you can begin imagining the systems that will address them. AI excels at helping structure these ideas. 

A practical way to start is by giving your AI assistant raw input: 

• Here’s what is happening. 
• Here’s the environment. 
• Here are the recurring issues. 

Then you can prompt the AI with something like: 

 “I want to build a system to help identify and minimize these risks within a complicated environment. What elements should be included, and what considerations fall under each element?” 

The output becomes a foundation, a map of decision points and organizational steps you can refine. 

Supercharging Systems Thinking 

Compliance work is complex, and many officers get stuck not because they lack insight but because they lack time. AI helps break the gridlock by organizing information, highlighting key considerations, and suggesting frameworks. 

The AI provides structure; the compliance professional brings subject-matter expertise. In this collaborative process, the AI’s suggestions spark additional ideas and help you think more holistically. The result is a level of systems thinking that becomes far more accessible even in hectic environments. 

The Human-AI Partnership 

Despite its power, AI cannot replace an experienced compliance officer. It draws from online information and from what you feed it, but it cannot grasp organizational nuance, personalities, or culture. 

For example, an AI may outline a solid system, but only the compliance officer understands how a skeptical executive will respond. That’s where the human element comes in. You can ask the AI to help tailor communications or anticipate objections, but the strategic decision-making remains yours. 

Staying Focused with AI Frameworks 

One of the hidden challenges of compliance work is staying focused long enough to complete long-term system projects. Urgent tasks constantly pull attention away, and partially built frameworks can easily get lost for months. 

AI-created structures help maintain focus. They provide guardrails, the methodological anchors that keep the conversation and planning on track. Most of the framework can often be developed in a single sitting, creating a roadmap you can return to even if you’re pulled into other issues. 

Even with the limitations of some AI tools, especially free versions that cap conversation length, paid versions make it easier to resume discussions, refine ideas, and maintain continuity. 

A Faster Roadmap to a Roadmap 

Compliance professionals work hard and add value every day, but much of that value is short-term because they lack the time to build the long-term systems that create lasting change. 

AI solves this by offering a “faster roadmap to a roadmap.” It accelerates the groundwork: 

•  Defining the problem 
• Outlining the system  
• Highlighting the risks 
• Mapping the components 

That clarity frees the compliance officer to focus on the human side of adapting the system to the organization, navigating culture, and communicating effectively with leaders. 

With an AI-driven framework, compliance work becomes more disciplined, efficient, and proactive. Systems thinking becomes not only achievable, but sustainable. AI doesn’t replace the expertise of compliance professionals—it elevates it. 

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Schedule a quick overview

---

27 Ungated Resources for Compliance Leaders and Teams 

Compliance professionals sometimes feel undervalued in comparison to other functions in their organization. They think leaders and colleagues don’t really understand what they do.  

These resources will help. Packed with ideas, tips and recommendations, these pieces were written by professionals with many years of compliance experience. 

You can quickly skim for articles that relate to your needs and interests. Bookmark this page as a reference for future questions or projects.

Visit Now

---

The post How to Use AI for Systems Thinking in Compliance Processes  first appeared on YouCompli.

The job of an Expert Compliance Professional requires very specific skills and strengths. When an ECP does their job well, hospital compliance teams’ benefit. This blog dives into the qualifications and background of one of YouCompli’s compliance professionals. 

Meet the Experts Behind Our Regulatory Intelligence Services 

Question: What skills and talents do you bring to this role? How did you gain the knowledge to perform your job?  

Bethanne VanderMolen – I bring a unique combination of clinical, compliance, and leadership skills to this role. My foundation as a speech pathologist taught me precision, documentation accuracy, and patient-centered care—skills that naturally translate into compliance oversight.  

As I advanced into leadership roles such as Rehab Director, VP, and Corporate Director of Rehab, I developed expertise in regulatory interpretation, risk mitigation, and the ability to build programs that balance operational goals with ethical and legal standards. 

Leading teams in therapy and then developing into a Chief Compliance Officer and Director of Risk Management in the senior care space sharpened my ability to engage diverse stakeholders and create regulatory frameworks, while my experiences outside of healthcare—working at Disney, teaching marching band, and coaching youth sports—taught me how to inspire teams, simplify complex concepts, and foster a culture of accountability in fun but effective ways. 

I gained my knowledge through both hands-on experience and formal professional development. Every step of my career, whether solving compliance challenges in healthcare, motivating students and athletes, or leading teams in high-pressure environments, has equipped me with the tools to not only interpret regulations but also make them meaningful and actionable for those I serve. 

Q – What achievements are you proud of in this or other roles? Share examples of how you bring value to your job and customers.  

BVK – I am most proud of the consistent impact I’ve made in my day-to-day work, where small improvements accumulated into lasting change. I think I’ve always had the ability to stack small wins and still see the big picture. I’ve always been willing to step in and do the work of multiple people when needed, keeping employees and patients in mind while balancing operational demands with compliance standards. 

In terms of larger achievements, I’m proud to have built two rehabilitation divisions from the ground up, as well as comprehensive compliance programs that continue to guide organizations long after my tenure.  

I’ve successfully navigated high-stakes challenges, including OCR breach investigations, Medicaid litigation, and regulatory and billing audits, often with positive outcomes that protected the organization, our employees, and our patients. I’ve also authored hundreds of clinical, administrative, and personnel policies that gave teams clear guidance and consistency.  

Perhaps one of the accomplishments I value most was leading compliance efforts during COVID. Much of that work happened behind the scenes with an amazing clinical consultant and director of operations—rewriting processes overnight, interpreting rapidly changing regulations, and ensuring patient care continued safely—but it kept our organization compliant and moving forward through a crisis. 

Across every role, I’ve found pride in building solutions, protecting patients, and making compliance meaningful for the people who rely on it. 

Q – What do you like about working in this role and in this company?  

BVK – What I enjoy most about this role and this company is the people. I genuinely like working with a team that is supportive, flexible, and kind—it makes even the tough days easier and the good days even better. I also really connect with the mission of helping compliance professionals succeed, because it means the work I’m doing has a ripple effect beyond just my own role. It feels good to know that what we do here is both meaningful and practical, and I appreciate being in an environment where collaboration and kindness are part of the culture.  

And on a more personal note, I love the flexibility of working remotely. It allows me to coach on the side and spend more time with my daughter. That balance makes me both happier and better at what I do. I love that I can log off in time to get to practice. Compliance and coaching both come down to teamwork, knowing your job, strategy, and keeping everyone playing by the rules. 

Q – What do you think is important for our customers to know about what you and what you do? 

BVK – I want customers to know that I bring clinical, management, and compliance experience to help make their work easier and more effective. I combine practical solutions with all the lessons I’ve learned along the way. I want customers to know that we are working hard to support them and reduce their stress. They are on our mind throughout the process; from the moment we pick up the reg through to the user interface. They can feel confident in my experience because I have been in their shoes as a clinician, manager, and compliance professional. 

Q – Any other thoughts? 

BVK – I got into healthcare as an SLP because it combined art and science. Helping someone with communication, cognition, and swallowing disorders requires an artistic soul because those are intimate human experiences. In my first job, however, I was confronted with the element of compliance in such an impactful and meaningful way that it changed the course of my career.  

I now like to think of compliance as both science and art: precise, but also human-centered. Our backgrounds are what help us make content that is usable, relatable, and trustworthy. We are what connects you to the regulations so that you can make it meaningful to your organization.  

Fun Facts 

Previous roles – SLP, Rehab Director, Rehab Consultant, VP of Rehabilitation, Corporate Director of Rehabilitation, Compliance Officer/Director of Risk Management 

Degrees, certificates, special training, etc. – University of South Carolina (Biology/Chemistry) and Medical University of South Carolina (MS Rehabilitation Sciences/Communication Sciences and Disorders); CHC; CHPC; CCC-SLP; RAC-CTA; CC; OSHA/General Industry 30; RAMP Certified 

Life Outside Compliance 

Jobs in other unrelated industries – Speech and Language Pathologist (SLP)/schools, percussion instruction, Disney, various administrative roles  

Family – Married to David, with one daughter, Kahlan. One awesome Shih-Tzu (Teddy “The Flash”). 

Hobbies and interests – Coaching, fantasy sports, sports card collecting, drums. Just hanging out with the family, playing games, etc.  

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Schedule a quick overview

• One Compliance Pro’s Regulatory Change Management Process    by Amy Laufmann, MBA
• Five ways to show how healthcare Compliance delivers value by Jerry Shafran
• Revenue Cycle Management Compliance: Ensuring… by Maya Turner, CPMA, CPCO, CFPC, CPC, CPC-I, AAPC
• Three Strategies to Align Compliance with Revenue Cycle  by CJ Wolf, MD
• 12 key metrics for compliance officers looking to… by Kenneth Zeko, JD, CHC
• How the Three Lines Model Strengthens Healthcare Compliance by Kenneth Zeko, JD, CHC
• Mitigating Conflicts of Interest that Drive Profit… by Susan Thomas
• Transforming Compliance to a Department of Yes  by Lisa Herota, RHIA, CHC, CHPS, CCS Compliance & Privacy Officer
• New Regulation– Now What? Step-by-Step Guide to… by Amy Laufmann, MBA
• Navigating Compliance Responsibility: A Foundation… by Amy Laufmann, MBA

The post Q&A with a Healthcare Compliance Expert   first appeared on YouCompli.

This blog goes deep into regulatory intelligence for healthcare, guided by the expert commentary of longtime compliance veteran, Bethanne K. VanderMolen. [See bio at end.] It covers everything from reg intel basics to how the overall process works to AI’s potential contribution. 

Question – What does regulatory intelligence in healthcare mean, and what do expert compliance professionals do? 

Bethanne VanderMolen – Regulatory intelligence is an organized process that keeps healthcare systems in line with the copious regulatory agencies and legislative bodies directing healthcare. The full regulatory change management process supports operational decision making, compliance program updates, risk mitigation, policy maintenance, and strategic planning. 

As Expert Compliance Professionals (ECPs), we gather, analyze and apply information about new and revised regulations, guidelines and enforcement trends to help organizations maintain compliance and guide strategic decisions.  

While we do a lot of systematic monitoring, the work goes beyond that. The regulatory intelligence life cycle isn’t complete unless you turn that information into action.  Know what’s changing, understand the effect on your organization, and respond! 

Q – What do you think is important for clients to know about regulatory intelligence work? What is something most people might not realize? 

BV – Regulatory intelligence is dynamic and requires vigilance when reviewing changes. Google alerts are not a regulatory strategy or risk management program. Yes, we use tools and tech, but real regulatory intelligence takes interpretation. AI cannot do this work. I spend a lot of time reading between the lines to know not just what a rule says, but what it means.  

What people might not realize is that we review a lot of material that never goes anywhere. That’s just as much a part of this job. 

Q – What does a regulatory intelligence expert or ECP do? What kind of background do you need?  

BV – An ECP is part detective, part translator and part strategist. We constantly scan federal and state laws, guidance, enforcement trends and policy, and review and analyze regulatory updates.  

There isn’t a single path to becoming a compliance intelligence professional. A background in healthcare is very helpful, along with certification in healthcare compliance. You must have a strong regulatory background, meaning you have had to personally review, interpret and act on regulatory updates (not simply be subject to such changes). You really need that hands-on involvement in policy monitoring, regulatory change management, procedure updates, etc. 

Q – What skills and strengths are needed to do well in this role? 

BV – A regulatory intelligence professional must be detail-oriented and self-motivated. You must be an analytical thinker with strong reading comprehension. You see the big picture, and you’re tech-friendly. 

About the Regulatory Intelligence Process 

Q – Tell me about the process used to review and extract regulatory requirements.  

BV – These are the steps in our regulatory intelligence process: 

• First, log the item in the tickler file. Then I conduct my “first read” so I know what I’m reviewing and can identify if these are updates, new information, etc. I figure out who issued the reg, their authority, and if the update is proposed, final or advisory. I might also flag some items that may require a deep review. 
• Develop an “Extras sheet” that I can use to develop my screening questions, categories and tasks. This usually involves identifying some key words that will help me build these pieces. I also identify who it affects and check the enforcement dates. 
• Find any other relevant documents. Sometimes you need to locate older versions or comparison documents from the state, various boards or federal government. 
• Second read: Highlight changes and identify items with operational impact. Eliminate unnecessary information. Note items that may be “of interest” to a provider. 
• Develop the customer’s compliance tool using the highlighted changes. This will focus on the updates or new information that they need to know.   
• Review for standardization items. We try very hard to keep every tool’s format and language consistent between the various compliance professionals developing the tools. The group agrees to a set of guidelines that keep style, language, and grammar consistent.  
• Check my work. 
• Create in the YouCompli system using all the above. 
• Submit to validator and revise as necessary. (A validator checks our work and provides support and a sounding board.) 
• Track through tickler. 

Q – What’s the hardest part of regulatory intelligence services as a job? What do you like most? 

BV – There are times when regulatory agencies write conflicting things or make mistakes in their text. Then you must do a lot of research to figure out what is “right.” That’s the hard part. It can also be challenging at times to figure out what is really being communicated and then appropriately simplifying for the customer and making sure you’re not leaving anything on the table. 

I love this job. It’s very flexible. When I’m stuck on something, I can move to a different task or assignment. That helps a ton when you’ve been working on a large reg that requires a lot of review. Knowing you can leave it and sleep on it is a great benefit to the job.  

I also like the people. I can honestly say this is one of the few jobs where people are genuinely pleasant to work with and supportive of one another.  

Benefits and Outcomes 

Q – What do regulatory intelligence services offload from compliance teams?  

BV – I have been a compliance “department of one” with little to no support or resources. The responsibility for managing every regulatory update from every agency affecting our organization was overwhelming.  

What these regulatory intelligence services offload are the tasks of scanning all agencies for updates. You feel like someone is supporting you. What you do with the information is up to you, but not having to search for it or worry that you may have “missed” something is amazing. 

There was nothing worse in my previous lives than feeling like my days and nights had to be spent checking for changes. Or hearing a “rumor” that something was changing that you had no idea about. It was difficult to carry the stress of having to seek out all regulatory updates on my own, and no single association or board provides everything. You don’t want to let down your organization. YouCompli has your back, so you don’t have to have that stress anymore. 

I was never lucky enough to have YouCompli outside of the pandemic in my other roles. YouCompli was generous during Covid and provided their resources for free during that time. It helped me stay afloat when I was working 16-hour days, six to seven days a week. I will always be grateful. 

Evaluating Regulatory Intelligence Services 

Q – What’s important for compliance leaders to know about regulatory intelligence services? 

BV – Our regulatory intelligence services don’t just help you keep up; they put you ahead if you choose to carry the process through the entire compliance life cycle. The life cycle approach allows you to collect crucial information, then target policy changes, take action, and manage organizational risk if you use the information. In the current regulatory environment these services are becoming increasingly essential. 

The services also provide a great way to show compliance program effectiveness. If you’re utilizing YouCompli software and incorporating it into your risk management and compliance reporting processes, you can demonstrate proactive risk mitigation and value. It really helps mature your compliance department and will be valuable in any audit process. 

Good regulatory intelligence will also help operations leaders make good decisions, so it creates a great team dynamic for organizations when they use our regulatory intelligence resources. 

Q – What functionality should a compliance leader look for in a regulatory intelligence partner? 

They should look for more than just access to laws and updates. Compliance leaders should assess how well the service contributes to timely, relevant and actionable compliance decisions. 

Required functionality checkpoints for compliance partner: 

• Jurisdictional coverage 
• Timeliness 
• Context/analysis 
• Customization 
• Integration into workflow 

Q – What should health systems look for when a regulatory intel vendor says they offer these capabilities?  

• Proactive monitoring – Be certain they are monitoring what affects YOU. Also look for source transparency.  
• Impact assessment – Offers tailored results and prioritization for action. 
• Strategic plan – Look for collaboration tools. 
• Expert analysis – Check qualifications. 

Q – How do you feel about AI and regulatory intelligence? Any potential there? 

BV – Absolutely. As with all healthcare, AI is going to be a great partner for compliance. We just need to figure out how to incorporate it in a responsible and human way.  There is nothing that replaces the human experience. AI value really depends on how it is implemented. 

When I look at a reg that affects nursing homes, clinical services or therapy, there’s a personal connection that can’t be duplicated by AI. I know what the operator in the nursing home would want to know, even if it’s not highlighted by AI. I know what surveyors use and how they interpret regulatory language. I have been part of clinical action, training and policies, and understand what the clinicians need to know to do their jobs. 

But AI can provide real-time monitoring and scanning faster than humans. It can process language effectively and summarize key information such as dates, entities, etc. There’s a ton of potential for AI in this space. It’s not entirely trustworthy just yet, but it’s getting there fast! AI is going to be a powerful tool in healthcare compliance, but it needs to be well-validated and always used with human oversight.  

Want to learn more about compliance without chaos? Reach out for a look at our regulatory compliance services and software. 

About Our Expert 

Bethanne VanderMolen is a veteran compliance professional with more than 20 years of experience in the healthcare space, including compliance and regulatory intelligence. Her career path started as a clinician, where she cut her teeth as a Speech Language Pathologist. With commitment and skill, Bethanne rose from Rehab Director to Regional Director, VP of Rehab and Corporate Director of Rehab. 

In these roles, Bethanne found herself conducting surveys and writing policies, which inevitably drew her to the roles of Chief Compliance Officer and Director of Risk Management. Her subject matter expertise and hands-on experience have assisted departments and facilities through federal, state and local regulatory audits and surveys.  

Bethanne’s dedication to staying on top of these regulations and providing real-time updates and actionable guidance is second to none. Armed with extensive experience in developing and maintaining clinical, administrative and regulatory policies, she’s an excellent source of insight and advice about healthcare compliance.  

Bethanne’s expertise and commitment to the industry make her an invaluable resource for leaders navigating the complex world of regulatory compliance. Her advice is rooted in practical experience and a thorough understanding of the regulatory environment that shapes healthcare today. 

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Schedule a quick overview

• One Compliance Pro’s Regulatory Change Management Process    by Amy Laufmann, MBA
• Five ways to show how healthcare Compliance delivers value by Jerry Shafran
• Revenue Cycle Management Compliance: Ensuring… by Maya Turner, CPMA, CPCO, CFPC, CPC, CPC-I, AAPC
• Three Strategies to Align Compliance with Revenue Cycle  by CJ Wolf, MD
• 12 key metrics for compliance officers looking to… by Kenneth Zeko, JD, CHC
• How the Three Lines Model Strengthens Healthcare Compliance by Kenneth Zeko, JD, CHC
• Mitigating Conflicts of Interest that Drive Profit… by Susan Thomas
• Transforming Compliance to a Department of Yes  by Lisa Herota, RHIA, CHC, CHPS, CCS Compliance & Privacy Officer
• New Regulation– Now What? Step-by-Step Guide to… by Amy Laufmann, MBA
• Navigating Compliance Responsibility: A Foundation… by Amy Laufmann, MBA

The post Q&A: Regulatory Intelligence with a Healthcare Compliance Expert  first appeared on YouCompli.

How do you become a more valuable compliance professional?  

By becoming a more knowledgeable business professional! 

That requires a solid understanding of how your organization works and drives value. Then you focus on contributing to those goals and becoming more valued. 

That’s our theme this year at the HCCA Compliance Institute in Las Vegas — how to become more valuable by concentrating on the Business of Compliance. We’re attending again as part of our mission to: 

• Transform compliance professionals into business professionals. 
• Make the compliance role more valuable to the business. 

What the Business of Compliance Means 

In healthcare, compliance touches many areas. That’s why the Business of Compliance approach also covers a lot of ground: 

• Regulatory Lifecycle Management & Change Management  
• Business & Compliance Leadership  
• Financial & Revenue Cycle Impact 
• Quality & Patient Safety  
• Regulatory Trends & Emerging Healthcare Issues 

If you’re interested in any of these, check out the Business of Compliance webinar series we produced with HCCA. (Find information about accessing those sessions.) Now we’re going to dive into the topic in person in Booth 526 at the Compliance Institute and at our Vendor Spotlight session on April 30. 

The Reality of Healthcare Compliance 

Being a healthcare compliance professional involves navigating a complex landscape where law, risk, operations, ethics and patient care intersect. These professionals play critical roles in preventing reputational and financial risks that could jeopardize their organization and its ability to serve patients effectively.  

By ensuring adherence to regulations and ethical standards, compliance teams safeguard not only the institution’s viability but also the trust and safety of patients. This multifaceted responsibility underscores the importance of compliance in fostering a culture of integrity and accountability within the healthcare sector. 

The Compliance Image Problem 

Unfortunately, compliance departments often struggle with a negative reputation, commonly being viewed as “The Department of No.” This perception sometimes leads to exclusion from strategic planning, creating an unnecessary barrier to collaboration and innovation.  

Compliance teams are frequently seen as reactive, responding to issues as they arise, rather than proactively engaging in risk management and organizational strategy. This image problem undermines their potential value within the organization and hampers the development of a culture that prioritizes compliance as a vital component of business success. 

It’s a tough job, and there’s a real need for high-level strategic training for compliance professionals to reach their full potential. 

What the Healthcare Business Cares About 

To become more valuable to the organization and overcome negative perceptions, compliance pros must understand and deliver on what the business cares about.  

Strategic thinking – Pivotal role in navigating the complex and ever-changing healthcare industry. Professionals who can envision long-term goals while effectively planning for the future are essential to organizational success.  

Cross-functional collaboration – Fosters teamwork across departments, bringing together diverse expertise around patient care and operational efficiency.  

Outcomes over effort – Highlights the importance of measurable results that improve both patient health and organizational performance.  

Actionable insights from data – Healthcare organizations rely on data-driven decisions to optimize processes, enhance patient experiences, and ultimately achieve better health outcomes.  

Together, these business values lead to a framework for effective compliance leadership and innovation within healthcare organizations. 

YouCompli Software Enables Metrics that Matter 

With confident data and metrics, compliance professionals can prove quantifiable value to their organizations. YouCompli aggregates and reports activity at an organizational level, providing comprehensive visibility into compliance efforts.  

• Centralizes and tracks regulatory change 
• Assigns tasks and ensures accountability 
• Aggregates and reports activity across the org 
• Enables KPI development and dashboarding 

Leveraging technology such as YouCompli Software significantly enhances the ability to capture and analyze critical metrics about compliance value. This robust platform centralizes and tracks regulatory changes, ensuring compliance professionals are always informed of the latest requirements and prepared with action plans. 

Compliance: From Enforcer to Executive 

Compliance professionals are poised to make a significant shift from being seen as mere enforcers of regulations to becoming integral executives within their organizations. By aligning compliance efforts with the broader business goals, healthcare compliance professionals can play a vital role in supporting operational success while ensuring regulatory adherence.  

To facilitate this transformation, adopt a proactive, rather than reactive, mindset, anticipating compliance challenges and addressing them before they escalate. Embracing this shift from enforcer to executive will position compliance professionals as essential leaders who contribute to the overall mission and success of their organizations. 

We’ll be speaking with lots of compliance professionals in booth #526, as well as at our Vendor Spotlight presentation at 10 AM on April 30. Do stop by and let’s talk about you and the Business of Compliance.   

You’ll also find useful information in this HCCA-CI quick guide to help you prepare for your trip to the Compliance Institute. See you there!

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Qualified compliance professionals do the heavy lifting for you, simplifying regulatory change management  

---

27 Ungated Resources for Compliance Leaders and Teams 

Compliance professionals sometimes feel undervalued in comparison to other functions in their organization. They think leaders and colleagues don’t really understand what they do.  

These resources will help. Packed with ideas, tips and recommendations, these pieces were written by professionals with many years of compliance experience. 

You can quickly skim for articles that relate to your needs and interests. Bookmark this page as a reference for future questions or projects.

Visit Now

---

The post Ditch the “Department of No” & Embrace the Business of Compliance  first appeared on YouCompli.

Shawn DeGroot, Jenny O’Brien, and Roy Snell lead YouCompli campaign to educate and develop healthcare compliance professionals 

PITTSBURGH –– APRIL 15, 2024 –– It’s not a bird…it’s not a plane… YouCompli, a leading provider of SaaS healthcare compliance solutions, today announced it has formed the “Titans of Compliance.” Three of the biggest names in the healthcare compliance industry have banded together to offer their insights and perspectives on the past, present, and future of the healthcare compliance world – all to advance, educate and develop the profession and the professionals within it.  

The Titans of Compliance, in alphabetical order, are: 

• Shawn DeGroot – president of Compliance Vitals. She provides consulting services for clients in need of practical guidance in a complex healthcare regulatory environment. She also is a past president of HCCA/SCCE and serves on an advisory group to the HCCA/SCCE Board of Directors. 
• Jenny O’Brien – president and principal at BlackBridge Advisors. She has been the chief compliance officer at multiple companies, including UnitedHealthcare, as well as a state assistant attorney general and a partner at a law firm. She is a past president and board member of HCCA/SCCE, and serves on the boards of Bon Secours Mercy Health System and St. Charles Health System and the advisory board of Stellar Health.  
• Roy Snell – previously CEO of the Health Care Compliance Association (HCCA) and the Society of Corporate Compliance and Ethics (SCCE). He co-founded the organizations and was their first president. Roy also is a former Mayo Clinic administrator, consultant, and compliance officer. He has been named twice to Ethisphere’s “Most Influential People in Business Ethics” list. 

“If you were to create superhero-themed posters featuring the most accomplished professionals in the world of healthcare compliance, these Titans would be included in the first run,” said Jerry Shafran, founder and CEO of YouCompli. “We’re absolutely thrilled that Shawn, Jenny, and Roy are willing to share their extensive and valuable perspectives with all of us in the industry.” 

The “Titans of Compliance” will be featured in webinars, blog posts, videos and other YouCompli-produced content over the months to come. For more information, visit the Titans of Compliance webpage: https://youcompli.com/about/titans-of-compliance/.  

About YouCompli 

Founded in 2016, YouCompli offers the only healthcare compliance solution combining actionable, regulatory analysis and a simple SaaS workflow. Its compliance experts distill the complex regulatory changes issued by every healthcare regulator into straightforward action plans validated by HortySpringer, the nation’s leading healthcare law firm. YouCompli’s solution then guides users through a simple workflow to assign, manage, and track the rollout and completion of regulatory requirements. This one-two punch of intelligence and technology protects the whole organization and puts compliance officers at ease.  

For more information, visit www.youcompli.com.  

Qualified compliance professionals do the heavy lifting for you, simplifying regulatory change management   

Our in-house team works tirelessly to monitor U.S. regulators, carefully read the regulations in their entirety, and translate the information into simple regulatory intelligence you can use. We deliver model procedures and expert tools that can be used to fulfill your business requirements. Everything is validated by a third-party law firm. Follow the button below to get a tour of our healthcare compliance software.  

Get the latest from healthcare compliance experts  

Never miss an article from YouCompli. Sign up for YouCompli’s weekly email if you haven’t already.   

The post YouCompli Unveils “Titans of Compliance”  first appeared on YouCompli.