Six Capabilities Needed to Drive Scalable Change Management  

For healthcare compliance leaders, the challenge isn’t just lack of information. It’s a lack of time. 

When a new regulation or update is enacted, the clock starts ticking toward its inevitable effective date and another compliance deadline. Regulatory change management is a moving target with constant deadlines and uncertain task status. 

Without the right tools and systems, all that many compliance leaders can hope for is a link to a government website buried in your inbox from a listserv, or a lengthy regulation that needs reviewed to get started. 

That’s why a modern regulatory change management (RCM) system should do more than just notify you when regulatory changes occur.  

To be truly useful, RCM software needs to transform complex regulations into actionable tasks that clinical and administrative teams can execute without needing law degrees or spending a lot of time extracting all the need-to-implement details.  

Beyond the Regulation: 6 Non-Negotiables for Regulatory Change Management Software 

The shift from uncertainty and static reading material to active management and confident compliance is critical for any modern healthcare system. 

If you’re evaluating a regulatory change management (RCM) solution, look for these six essential capabilities to move your team from “reading” to “doing.” 

Top Requirements for Regulatory Change Management Processes: 

1. Expert-Led Analysis for Continuous Regulatory Intelligence and Monitoring 

2. Efficient Relevance Identification and Assessment Saves Time 

3. Automated Assignment Mapping to Departments, Assignees and Monitors 

4. Workflow Accountability and Oversight for Defensible Audit Trail  

5. Proactive Notification and Escalation Reduce Manual Steps 

6. On-Demand Analytics and Reporting for Actionable Data 

1. Expert-Led Analysis for Continuous Regulatory Intelligence and Monitoring 

Many compliance solutions just offer a link to a government website. That’s not enough for healthcare teams that are already stretched and overworked. Asking a pharmacy director or a head of nursing to read a hundred-page statute on drug pedigree requirements isn’t a sustainable compliance strategy. 

Can It Do the Heavy Lifting? 

A true regulatory change management solution does the heavy lifting for you. A best-in-class solution provides not only the source regulations, but analysis for those regulatory changes relevant to your organization or department.  

This analysis serves as a bridge between the legal language of the regulators and the daily operations of the hospital. Model procedures outline updated provisions of regulatory changes, that is – the requirements, in an operational way.  

From “Legalese” to “Actionable” 

For instance, if a new rule regarding patient privacy in telehealth is released, your software shouldn’t just notify you of the change. The tool should provide a comprehensive overview of what’s included in those changes for you to operationalize. The overview provides all the need-to-know information combined with workflow to assign work and track that it gets done.  

By clearly presenting these tasks, the system reduces the cognitive load on your department heads and ensures nothing is overlooked in the transition from “legalese” to “actionable.” When your team knows exactly what they need to do, the risk of non-compliance drops significantly. 

2. Efficient Relevance Identification and Assessment Saves Time 

Not every regulatory change applies to every organization. Identifying if a regulation or part of one that applies to your organization can take time, resources, and effort to read and see if, how and what applies. A regulatory change management solution should facilitate identification of what’s relevant. Then you can put a quick focus on regulatory changes that specifically impact your organization.  

Capabilities That Reduce Effort Spent Reading Regulations 

Regulation Relevance Check: Your software should guide you through a relevance check and allow you to quickly (within a minute or less), identify if a regulation is relevant or not. 

The “Don’t Know” Button: If a user is unsure of how to answer a question to determine relevance, the software should provide the ability to assign questions to additional staff who have information needed to answer yes or no. Look for a workflow solution that allows you to reach out if you’re unsure of the answer. 

Once the subject matter expert provides their response, you decide if the requirement is relevant as assisted by the question tips. These walk you through the relevance decision-making process.  

The workflow process ends at Step One for requirements that aren’t relevant. It progresses to task assignment and review only for the regulatory work your organization actually needs to get done.  

3. Automated Assignment Mapping to Departments, Assignees and Monitors 

In a busy health system, the person doing the work isn’t always the person who needs to verify that it was done. That creates blind spots and broken workflows. 

Regulatory change management (RCM) software avoids this by allowing you to: 

• Automate Assignments by Department: Assign requirements based on staff department (e.g., pharmacy, radiology, professional fee revenue cycle). 

• Differentiate Roles: Software distinguishes between an Assignee (the person doing the work) and a Monitor (the person providing oversight/cc’d). 

• Set Audit Trails: Every comment and status change should be time-stamped with the username to ensure a defensible record for future audits. 

RCM software reflects your organization’s reality through distinct user roles and automated workflows to them. These roles define who has the hands-on responsibility and who has oversight responsibility, creating a clear chain of command. 

The Role of the Monitor 

The monitor role is an essential feature of modern change management software. Think of this as a structured “cc” function. A department director might need to see that a change is occurring without being the one to upload proof of completion. This keeps leadership informed and accountable without cluttering their daily task lists.  

For instance, a Chief Nursing Officer might want to monitor the progress of a new patient safety protocol across multiple departments without being responsible for each individual task. This separation of duties is a hallmark of a mature compliance program. 

Smart Duplication for Scalable Efficiency 

Also look for “smart duplication” in regulatory change software. For example, if you manage five different hospitals, you shouldn’t have to manually create five identical tasks. An “Assign to All” feature lets you create unique, trackable requirements for each location simultaneously.  

Each hospital administrator receives their own task, but the corporate compliance office can see the progress of all five locations in a single view.  

This maintains centralized oversight while ensuring local accountability. This feature is particularly useful for large health systems that need consistency across dozens of locations and departments while allowing for local execution. 

4. Workflow Accountability and Oversight for Defensible Audit Trail 

The saying goes that if it wasn’t documented, it didn’t happen, and sometimes that applies to healthcare audits. An effective audit trail should be able to reconstruct the entire decision-making process for any given regulation. 

Your software shouldn’t just track completion status. It should capture the entire story of your compliance efforts, providing a clear path for auditors to follow.  

Centralized Commenting Backs Up Workflow Decisions 

Centralized commenting is a key part of a defensible audit trail. Compliance leaders can move away from fragmented check-in emails and internal chat threads. Instead, all discussions regarding a specific regulation live inside a dedicated task workspace.  

This creates a time-stamped, unalterable record of: 

• Who made decisions 
• What questions were asked 
• When work was completed 

If an auditor asks why a certain policy was changed six months ago, you can provide the exact thread of discussion that led to that decision. This level of transparency builds trust with regulators and simplifies the audit process. 

5. Proactive Notification and Escalation Reduce Manual Steps 

Compliance shouldn’t be a surprise. Proactive notification and escalation ensure that deadlines are known and met. A good compliance management system sends automated reminders well before an effective date passes.  

If a task remains untouched as a deadline approaches, the software should trigger a proactive escalation to supervisors. This ensures potential gaps are addressed before they become regulatory violations.  

Automated escalations remove the need for compliance officers to manually follow up with department heads, saving time and reducing friction between departments.  

Proactive Notifications Improve Efficiency 

A static dashboard is where compliance tasks go to die. Instead, look for a dynamic, proactive system that pushes information to your team. With email integration, direct links from an email notification take users straight to their requirement and task workspace in the software. 

6. On-Demand Analytics and Reporting for Actionable Data 

The Analytics Dashboard is designed for what healthcare compliance leaders need to see: 

• What’s overdue?  
• Where do I need to focus?  
• What do we need to do? 

With one click, see everything happening in the workflow, then export important information into spreadsheets or slides for sharing or presenting.  

The outcomes of using a dashboard to manage compliance workflow are: 

• Efficient, reliable access to real-time, high-quality data 
• Simplicity and ease of use save time 
• Visibility and transparency lead to peace of mind 

The ROI of tools like the YouCompli Analytics Dashboard comes from actionable, on-demand information to reduce the risk of noncompliance, fines, and reputational damage. Further value comes from efficient, centralized documentation for details of dashboard information and insights into completed work. 

Next Steps in Your Software Journey: Look for a Partner, Not a PDF Repository 

When evaluating software vendors, ask if the solution actually helps you do the work or does it just give you more things to read. The right regulatory change management software doesn’t stop at sending notifications of regulatory changes. Instead, it actively manages your workload.  

By prioritizing expert analysis, intelligent relevance filtering, and clear role definitions, a good software tool can move your compliance department from an underappreciated burden to a streamlined operational partner.  

A truly effective solution empowers your staff and provides peace of mind to executive leadership. The goal is a culture of compliance where every team member knows exactly what is expected of them and has the tools to achieve it. We share that goal. Reach out if you’d like to know what regulatory change management software can do for you. 

About the Author 

Amy Laufmann, MBA, Client Success Manager at YouCompli, has 10+ years of experience in healthcare compliance leadership and operations in the Pacific Northwest and is passionate about helping healthcare organizations demonstrate the immense value compliance teams provide the healthcare organizations they serve. In her current role, she works with clients to ensure they get the most value out of the YouCompli software and supports compliance leaders nationwide to continuously improve the services and support YouCompli provides. 

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Qualified compliance professionals do the heavy lifting for you, simplifying regulatory change management  

The post What to Look for in Regulatory Change Management Software for Healthcare Compliance  first appeared on YouCompli.

For healthcare compliance leaders, financial literacy is not optional. Compliance risk often hides in the fine print of financial data, making literacy a prerequisite for effective oversight.  

To identify anomalies or potential regulatory “red flags,” compliance officers must move beyond a high-level view of healthcare finance and understand how clinical operations translate into financial entries. 

What does a compliance leader need to understand? Things like: 

• Budgeting and capital planning 
• Internal controls and risk 
• Grant and research compliance  
• Key performance indicators (KPIs) 
• Communication between CFO and compliance officer 

Familiarity with the 14 steps of the revenue cycle is also valuable for mitigating risks associated with reimbursements and 340B compliance. (This topic is covered later in the blog.) 

Where Do Healthcare Compliance and Finance Intersect? 

Regulatory compliance and healthcare finance overlap in multiple ways. Compliance-related areas with a financial angle include: 

• Medicare, Medicaid reimbursement 
• 340B drug pricing 
• Stark Law and anti-kickback statutes 
• Charity care 
• Financial assistance requirements  

What Should Compliance Leaders Understand About Financial Statements? 

To build fiscal literacy, let’s start with some foundational concepts – financial statements. Compliance officers should have a basic understanding of these types of statements: 

1. Balance Sheet 
2. Income Statement 
3. Cash Flow Statement 

1. The Balance Sheet: Assessing Financial Integrity Through a “Snapshot” 

The balance sheet provides a snapshot of an organization’s financial health at a specific point in time, detailing its assets, liabilities and equity. 

Why Compliance Should Care: Monitoring the balance sheet helps ensure that assets are properly recorded, and that liabilities like these are appropriately disclosed: 

• Potential legal settlements 
• Debt obligations 
• Medicare overpayments 

2. The Income Statement: Monitoring Operational Risk Over Time 

Unlike the balance sheet snapshot, the income statement tracks revenue and expenses over a specific period, such as a month or a fiscal year. The income statement puts a focus on total revenue and expenses, and the difference between them, while distinguishing between operating and non-operating items. Those two concepts are compared in the chart below. 

In an income statement, it’s important to distinguish between accrual-basis accounting (matching revenue to period it was earned) and cash-basis accounting (recording transactions only when money changes hands). 

Why Compliance Should Care: By comparing current monthly performance against previous years, compliance officers can spot outliers in revenue or sudden spikes in expenses that could indicate billing errors, “upcoding,” or improper financial arrangements under the Stark Law. 

3. The Cash Flow Statement: Ensuring Operational Sustainability 

The cash flow statement tracks the actual movement of cash into and out of the organization, categorized by: 

• Operating activities 
• Investing activities 
• Financing activities 

Why Compliance Should Care: Understanding cash flow is vital for making sure the organization has liquidity to maintain compliance standards even during times of financial strain. A significant discrepancy between reported net income and actual cash flow can signal deep-seated issues with revenue cycle integrity.  

Revenue Cycle as Regulatory Roadmap 

For a prepared healthcare compliance leader, the revenue cycle isn’t just a financial process; it’s a regulatory roadmap. From initial patient interaction to final collection, each step presents a unique set of compliance risks that can lead to audits, fines or loss of reimbursement if not managed with understanding. 

What Compliance “Trapdoors” to Watch for in the Revenue Cycle 

The revenue cycle is full of complexity, largely fueled by the impact of different hospital types (PPS, critical access, disproportionate share, and tribal hospitals) on Medicare and Medicaid rates. 

While the full revenue cycle has 14 distinct stages, compliance officers should pay particular attention to these “trapdoors” where financial operations must meet strict federal regulations: 

• Front-End Integrity (Scheduling and Registration): Accuracy is paramount to ensure Medicare and Medicaid reimbursements aren’t jeopardized by incorrect patient data or lack of prior authorization. 
• Clinical Documentation and Coding: This is a high-density risk area. Compliance must make sure that coding reflects the actual services provided to avoid allegations of “upcoding” or “unbundling,” which can trigger False Claims Act investigations. 
• 340B Drug Pricing Program: If an organization participates in 340B, the revenue cycle needs rigorous internal audits to establish compliance with drug diversion and duplicate discount prohibitions. The stakes will be even higher if the program undergoes potential changes regarding payment models. 
• Billing and Claims Submission: Errors in this stage directly impact the Clean Claim Rate. More importantly, consistent billing errors for federal healthcare programs can lead to significant liability under Anti-Kickback Statutes or the Stark Law if improper financial relationships are found. 

Monitoring Denial Management at Back End of Revenue Cycle 

A robust compliance program monitors the back end of the revenue cycle as closely as the front. Analyzing denials can reveal systemic issues in documentation or billing practices that, if left unaddressed, represent both financial loss and compliance vulnerability. 

What KPIs Should Compliance Watch as Part of Financial Oversight? 

For a healthcare compliance officer, financial data is more than just a reporting requirement. It’s a proactive tool for risk assessment. By monitoring specific KPIs, compliance teams can move from reactive auditing to strategic oversight and identify operational stressors before they escalate into violations. 

The “Big Four” Financial KPIs for Compliance Officers 

Comprehensive financial oversight should track these four metrics: 

• Operating Margin: This measures whether the organization’s core clinical mission is profitable after all operating and overhead costs are paid. A shrinking margin often leads to “cutting corners” in staffing or documentation, which directly increases compliance risk. 
• Days Cash on Hand: This indicates liquidity. How many days can an organization operate using its current cash reserves if all revenue stopped? Higher liquidity provides the financial “breathing room” to maintain compliance and quality standards even during economic downturns. 
• Clean Claim Rate (CCR): A high CCR (ideally 95% or higher) indicates that claims are being submitted without errors the first time. A low rate is a red flag for systemic billing or documentation errors that could trigger federal audits under the False Claims Act. 
• Payer Mix: It’s critical to understand the percentage of revenue coming from Medicare, Medicaid and private insurance. In many healthcare models, Medicare functions as a “break-even” payer, while Medicaid reimbursements often fall below the actual cost of care, placing additional pressure on revenue integrity. 

What to Know about Budgeting and Internal Controls 

Compliance officers should also distinguish between the Operating Budget (daily/annual clinical operations) and the Capital Budget (typically reserved for long-term investments or items over $10,000). 

To prevent fraud and ensure financial integrity, a compliance program must enforce strict segregation of duties. This assures that no single individual has control over all aspects of a financial transaction, serving as a primary defense against embezzlement and improper financial reporting. 

Using the SBAR Tool to Structure CFO and Compliance Communication 

The most effective healthcare compliance programs are those where the Chief Compliance Officer (CCO) and Chief Financial Officer (CFO) operate as strategic partners.  

However, communicating complex compliance risks in a way that aligns with financial priorities requires a structured approach. This is where the SBAR tool (Situation, Background, Assessment, Recommendation) becomes invaluable for justifying financial decisions and resource allocation. (Download a helpful SBAR template at the end of this article)

Four-Step Method for Financial Advocacy 

Use this four-step method to present compliance needs to your finance team: 

• Situation: Clearly state the immediate financial or regulatory issue.  
  Example: “We have identified a 15% discrepancy in our 340B drug pricing audits.” 

• Background: Provide the necessary context and data.  
  Example: Current Medicare reimbursement rates for these drugs are subject to strict transparency requirements. 
   
• Assessment: Offer your professional analysis of the risk.  
  Example: Failure to rectify this documentation gap poses a significant risk to operating margin and regulatory standing and could trigger a federal audit. 
   
• Recommendation: Propose a specific, data-backed solution.  
  Example: “I recommend an immediate investment in automated tracking software as part of the next capital budget cycle.” 

How Compliance Can Secure a “Seat at the Table” 

By confidently speaking the language of finance with terms like liquidity, capital planning and debt financing, compliance officers move beyond being seen as a “cost center” and the “Department of No.”  

Instead, compliance can become a guardian of the organization’s financial sustainability, ensuring that compliance is integrated into every high-level discussion, from annual budgeting to long-term strategic growth.  

Ready to drive more compliance value? Reach out to see how YouCompli can help.  

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Qualified compliance professionals do the heavy lifting for you, simplifying regulatory change management  

The post Financial Literacy: The “Superpower” Every Modern Compliance Leader Needs  first appeared on YouCompli.

This Q&A with compliance expert, Lisa Herota, RHIA, CHC, CHIAP, CHPS, CCS covers best practices for a data-savvy compliance leader. Learn about realistic compliance metrics and how to share them effectively. Read more about Lisa’s background and experience at the end of this blog. 

Question 1 – How do you define value in the context of healthcare compliance? What kinds of value can compliance create? 

Lisa Herota – Compliance has a positive impact on financial, clinical and operational outcomes when we manage compliance well overall, not just by avoiding penalties.  

We help the organization safeguard the mission and reputation by: 

• Protecting revenue  
• Enabling ethical growth 
• Maintaining patient safety 

We do this all while also making our leaders feel more confident. They can make informed decisions through a compliance mindset, versus just worrying about how we’re going to avoid a penalty. 

Q 2 – Can you share examples of how you’ve created value or seen others do it? 

LH – One approach I’m proud of is strengthening organizational trust and reputation by developing a culture of compliance. This happens through:  

• Rounding and being present in the organization 
• Doing trainings  
• Partnering with leaders, medical staff, employees and even patients 

I’ve taken compliance teams from being the department where ideas go to die or the “Department of No” to being seen as a function that engages and supports. We became a resource that leaders want to bring to the table at the beginning of projects and discussions as a support versus just somebody to call when things go wrong. 

Q 3 – How do you measure and quantify compliance value?  

LH – I love data. I preach data, data, data to all compliance leaders. There are lots of different metrics we don’t think about, but many times, we just look at how we avoid fines. 

Actually, compliance has a lot of data for leaders to study. We can:  

• Look at percent of applicable regulations implemented on time.  
• Look at number and severity of audit findings or corrective action plans implemented.  
• Trend reported issues and how quickly those issues were resolved.  

Compliance Metric: Tracking the Near Misses 

Something that compliance leaders don’t think about often enough are the near misses. We usually think about these situations in patient safety and quality. But many times, compliance can help with close calls, and we should track those.  

Compliance Metric: Financial Value from Correct Regulation Implementation 

Common examples of financial value derived from correctly implementing new regulations include: 

• Reductions in external legal expenses 
• Decrease in denials and claw backs or repayments 
• Additional revenue capture  

Compliance Metric: Operations Staff Hours Saved 

You can talk to your operational leaders about how their team workloads benefit, especially if you have good regulatory change management tools with reporting and dashboards. Many times, I’ve tracked the number of hours saved that operational leaders don’t have to spend reading through regulations to decipher and interpret them.  

Department heads save valuable time when we provide them with tools like policy templates, implementation information, and the interpretation of the regulation itself. So, the hours compliance saves other department leaders is a good metric, too. 

Hard for Compliance to Quantify: Harm Avoidance  

It’s difficult for compliance professionals to quantify how they help the organization avoid harm. It’s definitely easier for revenue-generating departments to show their value, because they can measure the revenue they drive.  

But compliance often concentrates on how we avoid fines, and it’s hard to prove we’ve truly avoided something when the attitude is “Maybe we wouldn’t have gotten that fine anyway, regardless of what we do or don’t do.” That’s why I focus on other metrics. 

Q 4 – Who needs to know about the value that compliance creates, and how do you communicate that? 

LH – That’s a great question. There are various levels across any health system or organization that need to know the value that compliance has created, but the way you report it is going to look different based on whom you’re talking to.  

Talking to the Board 

When I’m presenting to my board or board committees, I target risk mitigation trends, assuring them we’ve got this. I use heat maps that show risk rankings, prioritization and key regulatory risk areas. I use implementation rates or key issues identified and resolved. When I’m talking to my board, I highlight how compliance work aligns with the strategic priorities of the organization.  

Talking to the Executive Team 

But when I’m talking to my executive team, I might get a little more granular with how many reduced denials or repayments or how many claw backs we avoided. Also, that metric about saving frontline leaders’ time, because that affects their operational teams as well as alignment with patient safety, quality and patient experience goals. A key metric is showing executive leaders how compliance ties into all the other objectives that the organization is trying to accomplish.  

Talking to Operational Leaders and Frontline Teams 

It’s a very different story when I’m talking to operational leaders or frontline staff.  With them, I focus on how I’m helping them succeed:  

• Fewer surprises related to regulations that apply to them 
• Reduced fire drills from reactive implementations versus steady, methodical implementation of regulatory change. 
• With good policies, procedures and training 

With frontline staff, it’s all about what compliance does. Proving compliance value is about showing them how we:  

• Impact their day-to-day reality. 
• Make changes to protect them and their patients. 
• Help make their work easier and safer. 

Really, it’s all about how we help support them and affect their day-to-day work. 

Tie Compliance Work to Strategic Goals for Value Recognition 

To overcome compliance reporting roadblocks, I go back to tying compliance’s work directly to the organization’s strategic goals. Just connect what we do to what the organization is focused on. Show how what we do impacts quality, CMS, star ratings, financial stability, the growth of new service lines and innovation.  

We need to connect what we do to optimizing and streamlining those goals and processes. 

Q 5 – What feedback have you had about compliance metrics and value? 

LH – One of the stories I love to share is about the day I was presenting a regulatory change management dashboard to my board. The very first time, I showed them that over the course of a year, the compliance team had touched over 535 regulations. It was the height of Covid, and when I presented that dashboard, board members just sit back in their chairs almost with a collective sigh.  

And they said, with the data you present, we can see what’s happened to the organization. We’re not just hoping we’re compliant. Now we can prove it. We can show that the organization truly is operating in a compliant manner. That was one of my biggest takeaways from frontline leaders.  

Other feedback I’ve received includes: 

• “I feel like compliance is supporting and partnering with me, not just telling me no or being a barrier.” 
• “When we streamlined compliance tools, that really helped support compliance functions.” 
• “Compliance saves us time and work by not having to review, interpret and decipher complicated regulations.” 

Leaders feel confident knowing we’re not missing anything and that they’re being supported. 

Be a Confident, Data-Driven Compliance Leader 

Wouldn’t you like to feel the same way about your compliance program? Reach out and we’ll show you some of the compliance management tools mentioned in this blog. 

About the Author 

Lisa Herota is a seasoned healthcare executive with over two decades of experience leading high-impact initiatives in compliance, privacy and health information management (HIM). She brings a strategic, data-driven approach to safeguarding organizational integrity. 

Throughout her career, Lisa has held pivotal leadership roles at several medical systems. Her expertise spans the full spectrum of healthcare operations, from managing complex ICD-9 and CPT coding systems, to overseeing departmental budgets and navigating rigorous accreditation standards. 

Lisa is a recognized expert in regulatory change management and is passionate about transforming compliance from a “policing” function into a proactive business partner. She holds an impressive array of professional certifications that underscore her deep technical knowledge, including: 

• RHIA: Registered Health Information Administrator 
• CHC: Certified in Healthcare Compliance 
• CHIAP: Certified Healthcare Internal Audit Professional 
• CHPS: Certified in Healthcare Privacy and Security 
• CCS: Certified Coding Specialist 

Beyond her technical skills, Lisa is a dedicated advocate for building a culture of compliance. She leverages her background in research and data compilation to provide executive leadership with insights to make informed, ethical and growth-oriented decisions.

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Qualified compliance professionals do the heavy lifting for you, simplifying regulatory change management  

The post Beyond the Penalty: What Metrics Should Healthcare Compliance Officers Track?  first appeared on YouCompli.

Revenue leakage from non-compliance with regulations exposes health systems to compliance risks and penalties. We’ve curated eleven resources to help compliance leaders be better prepared to guide alignment between regulatory compliance processes and revenue integrity goals.

Why Should Compliance Care about the Revenue Cycle? 

Over half of all regulations deal directly with revenue cycle, billing and finance. Most providers still lack an effective system or process to monitor, assess, and validate compliance with those regulations. As a result, these organizations leave themselves open to significant risks, not to mention significant revenue leakage. 

If you need to learn more about the revenue angle of healthcare compliance, these resources are a good place to start. 

Compliance Content by Compliance Experts 

The resources included in this collection Include articles from noted compliance experts including: 

• Shawn Y. DeGroot – CHC-F, CCEP, CHRC, CCPC 
• Maeve O’Neill, MEd – LPC-S, CHC, CDTLF 
• Sharon Parsley – JD, MBA, CHC, CHRC 
• Susan Thomas – CIA, CHC, CPC, CRMA 
• Maya Turner – CPMA, CPCO, CFPC, CPC, CPC-I, AAPC 
• CJ Wolf – MD, CPC, CPC-I, M.Ed. 

Learn from their advice and examples how compliance contributes to revenue performance and launch your own strategies for improvement. 

1. Blog – Mitigating Conflicts of Interest that Drive Profit Over Health  

Integrity First: Mitigating Conflicts of Interest in Clinical Decision-Making 

In healthcare, a conflict of interest (COI) occurs when secondary interests, such as financial ties or institutional goals, threaten to compromise clinical objectivity.  

These conflicts do more than just create ethical dilemmas; they often lead to overutilization of unnecessary tests and treatments, inflating costs for patients and insurers alike. For compliance leaders, addressing COIs is essential to protecting the integrity of the healthcare system and ensuring resources are used appropriately. 

This blog examines the ripple effects of COIs on both patients and providers. It discusses key components of these conflicts and the significant financial impact they have on the entire healthcare ecosystem. 

Inside this resource: 

• Identifying the Triggers: Learn to recognize the financial ties and personal relationships that can bias medical decision-making. 
• The Cost of Overutilization: Understand how unnecessary procedures create financial burdens and exploit the system for gain. 
• Systemic Impact: Explore the broader consequences of COIs, including their role in fraudulent billings. 
• Protecting Objectivity: Strategies for ensuring that clinical judgment remains aligned with the best interests of patients and public health. 

Don’t let hidden interests drive your organization’s clinical path. Read the full blog to learn how to identify and mitigate the conflicts that put your system at risk. 

2. Blog – How to Avoid False Claims Related to Medical Necessity   

Protecting the Bottom Line: Compliance as a Revenue Safeguard 

In the complex world of health system finance, a single coding error can quickly escalate into a multi-million-dollar False Claims Act liability. While Revenue Cycle Management (RCM) focuses on speed and volume, Revenue Integrity ensures that those gains aren’t lost to federal audits or recoupments. 

3. White Paper – Exploring the Four Hot Spots Of the Healthcare Revenue Cycle  

Navigating the Minefield: Mastering the Four Hot Spots of Revenue Integrity 

The healthcare revenue cycle is the financial lifeblood of your organization, but it’s also a landscape filled with hidden regulatory traps. With complexity in payer contracts and government oversight, certain areas have evolved into high-risk “hot spots” that demand immediate, expert compliance scrutiny. 

4. Case Study – Getting It Right: Minimizing Self-identified Overpayments & Maximizing Accurate Billing 

From Regulatory Burden to $400,000 in Savings: The Great River Health Story 

For a small compliance team, staying ahead of complex state coding rules and rapid federal updates is often a losing battle. At Great River Health, this challenge meant spending countless hours manually interpreting regulations, yet the team never felt fully confident that they were catching every risk. They needed a way to move away from constant research and toward decisive action. 

This featured case study explains how Great River Health transformed their compliance program from a source of stress into a vital engine for revenue integrity. By adopting a system that provides validated policy templates and expert regulatory analysis, they shifted their focus from interpretation to implementation. 

5. Blog – Healthcare Compliance is Everybody’s Business: Clinical, Revenue Cycle, IT, Sales and Marketing 

Breaking the Silos: Why Compliance is Everybody’s Business 

To ensure long-term stability, compliance leaders must lead the charge in fostering deep partnerships with clinical, IT, and revenue cycle teams. Compliance can no longer operate in isolation. As governmental and commercial payers deploy increasingly sophisticated programs, the only way to safeguard your organization is through a unified front.  

This blog explores the strategic necessity of internal alliances. It breaks down the specific skills and communication rhythms required to identify systemic risks and avoid the catastrophic penalties associated with “reverse false claims” liability. 

Inside this resource: 

• The Partnership Mandate: Why a strong relationship with your revenue cycle team is your first line of defense against advanced payer audits. 
• Beyond the Surface: Learn how to distinguish between coding-specific denials and medical necessity issues to uncover localized and systemic vulnerabilities. 
• The 60-Day Clock: Understand the critical risks of “reverse false claims” and how to manage the return of overpayments to avoid treble damages. 
• Proactive Governance: How to establish regular cross-departmental meetings that turn compliance from a reactive task into a shared culture of integrity. 

Stop letting departmental silos become a regulatory liability. Read the full blog to learn how to turn every team into a partner for revenue integrity. 

6. Blog – Uncovering $9 Million in Unbilled Services    

The $9 Million Question: How Mock Audits Uncover Hidden Revenue 

Most compliance professionals view mock audits as a shield against fines and regulatory scrutiny. However, when approached strategically, these audits can also act as a powerful engine for revenue integrity. In one striking example, a fresh set of eyes and a few “tough questions” led to the discovery of $9 million in unbilled services. 

This featured blog explores how mock audits do more than just manage risk. They’re a primary tool for building cross-departmental relationships and positioning the compliance team as a high-value partner to the rest of the organization. 

Inside this success story: 

• The “Fresh Eyes” Advantage: Why stepping away from day-to-day tasks to look at the bigger picture is essential for identifying systemic billing gaps. 
• Beyond Revenue Protection: Discover the five strategic benefits of audits, from shaping organizational culture to preventing future penalties. 
• The Power of Simple Questions: See how asking “Do we bill that?” can lead to the biggest dollar-value discoveries of your career. 
• Compliance as a Partner: How to use the audit process to build trust and influence across the business while delivering tangible financial value. 

Stop viewing audits as a burden and start seeing them as an opportunity to prove the financial impact of your compliance program. Read the full story here to learn how to turn your next mock audit into a multi-million-dollar win. 

7. Blog – Compliance Risks Associated with Outlier Payments  

The Chargemaster Trap: Managing the High Stakes of Outlier Payments 

The next resource in our collection focuses on a high-stakes area of reimbursement that often flies under the radar until an audit begins — outlier payments.  

Outlier payments are designed to protect hospitals from significant financial losses on exceptionally costly cases. However, because these supplemental payments are directly tied to hospital charges, they have become a primary target for regulatory scrutiny. If a facility raises its chargemaster prices without clear justification, it can artificially inflate these payments and trigger intense external audits. 

This blog explores the delicate balance between revenue protection and compliance risk. We examine real-world audit findings where simple human errors and system glitches led to hundreds of thousands of dollars in overpayments and potential penalties. 

Inside this resource: 

• The Scrutiny Factor: Understand why enforcement agencies are actively monitoring price increases that lead to spikes in outlier reimbursement. 
• Lessons from the Field: Review the 2020 OIG audit of an Arkansas facility that found over $580,000 in overpayments due to time-tracking and coding errors. 
• The Human Error Risk: Learn how “hardcoded” charges and misaligned supply items can create systemic billing inaccuracies that go undetected for years. 
• Strategic Collaboration: Discover why a close partnership between compliance, finance and reimbursement teams is the only way to safeguard your organization against these risks. 

Stop letting unjustified price adjustments put your hospital at risk for recoupment and penalties. Read the full blog here to learn how to proactively audit your outlier claims and maintain regulatory integrity. 

8. Blog – The Cost of Non-Compliance  

Beyond the Fine: Calculating the True Price of Non-Compliance 

In the budgeting process, the cost of non-compliance is often a forgotten line item until it becomes a hard reality. While hefty fines for HIPAA or Medicare violations are the most visible risks, they’re only the beginning.  

For healthcare organizations, the true cost includes a cascade of legal fees, operational disruptions and long-term reputational damage that can be difficult to quantify but impossible to ignore. 

This piece explores how to move beyond reactive firefighting and toward a model of operational excellence. We discuss how to use Corporate Integrity Agreements (CIAs) as a powerful benchmarking tool to identify systemic vulnerabilities before they lead to federal intervention. 

Inside this resource: 

• The Tangible and Intangible: Learn how to communicate the full spectrum of risk to your board, from immediate settlement costs to the lasting impact on patient trust. 
• Contract Integrity: Focus on the critical importance of auditing physician and medical director contracts to prevent Stark Act and Anti-Kickback Statute violations. 
• A Culture of Excellence: Understand why investing in compliance is not just a legal obligation but a cornerstone of your organization’s commitment to patient care and operational stability. 

Stop viewing compliance as a cost center. Read the full blog to learn how a proactive approach to auditing and monitoring can safeguard your organization’s future. 

9. Blog – How to Avoid Compliance Risk in Peripheral Vascular Reimbursement   

Under the Microscope: Navigating Peripheral Vascular Reimbursement Risks 

Peripheral vascular disease (PVD) reimbursement has become a lightning rod for regulatory scrutiny. With alarming statistics regarding improper payments and a surge in whistleblower investigations, health systems cannot afford to treat these interventions as routine billing.  

For compliance leaders, the challenge lies in ensuring that every procedure meets stringent medical necessity guidelines before a claim is ever submitted. 

This expert-led blog provides a deep dive into the regulatory trends and enforcement patterns currently shaping the vascular space. It provides technical insights and best practices your team needs to safeguard your organization’s reputation and financial stability. 

Inside this resource: 

• Medicare Compliance Mastery: Understand the specific documentation and coding requirements that federal auditors target in vascular interventions. 
• Fraud Warning Signs: Learn why high volumes in vascular reimbursement are triggering red flags for the OIG and how to stay ahead of these investigations. 
• Recent Investigation Insights: Review lessons learned from recent whistleblower cases that focused specifically on PVD compliance failures. 
• Best Practices for Integrity: Actionable strategies to align clinical documentation with reimbursement guidelines to ensure every claim is defensible. 

Stop letting PVD reimbursement become a vulnerability in your revenue cycle. Read the full blog here to equip your team with the knowledge to navigate this complex environment. 

10. Blog and Tip Sheet – Revenue Cycle Management Compliance: Ensuring Financial Health in Healthcare  

Financial Integrity: Mastering Revenue Cycle Management Compliance 

Revenue Cycle Management (RCM) is the essential financial engine of any healthcare provider, managing everything from claims processing to final payment.  

However, the efficiency of this cycle depends entirely on its alignment with regulatory standards. Without a foundation of strict compliance, even the most streamlined revenue process is at risk of legal repercussions and compromised financial integrity. 

11. Blog and Tip Sheet – Three Strategies to Align Compliance with Revenue Cycle  

Strategic Synergy: Bridging the Gap Between Compliance and Revenue Cycle 

For healthcare organizations, the revenue cycle is the financial lifeblood. However, when compliance and revenue cycle management operate in silos, the resulting friction creates significant regulatory and financial risks.  

To protect the bottom line and ensure long-term sustainability, compliance leaders must lead the charge in aligning these two critical functions. 

Stop letting a lack of alignment become a financial liability. Explore how these three strategies can transform your compliance program into a vital partner for revenue integrity.  

Take Free RL3M Assessment (Regulatory Lifecycle Management Maturity Model)

RL3M Assessment

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Qualified compliance professionals do the heavy lifting for you, simplifying regulatory change management  

The post 11 Educational Resources on Revenue Cycle and Healthcare Compliance  first appeared on YouCompli.

It amazes us how many healthcare facilities don’t always store records appropriately. Check that. People don’t store records properly.  

Just this week, I was in a colleague’s office. Literally, it looked like Staples puked up aisle 3. I asked her what everything was, because you couldn’t make heads or tails of any of it. She explained that it was patient records that she didn’t know what to do with.  

I asked her, “Well, what does the process say to do?”  

“Process?” she said. Nice girl, means well, greener than a pepper tree.  

After helping her re-organize everything, I was motivated to put together some ideas to help others in her situation. Here are some record retention best practices in the event you have hoarded up some claptrap and now have to figure out what to do with it.  

What Records Do You Have? Archival or Data? 

First step, take an assessment of everything you have. Samples? Materials? Records?  

Archival storage should be for all original records, including source data and metadata, which are generated, recorded, calculated or transcribed at the time of an activity. This data allows full and complete reconstruction and evaluation of the activity.  

Data storage may be written, printed electronically, scanned image, photographic, or other form for later reference. Raw data obtained from measurement, testing, processing, direct observation or computer, and instrument printouts should be represented exactly as captured at its source without transformation, aggregation or calculation.  

Responsible Parties and Retention Periods 

All personnel should be responsible for handling, submitting or returning records to the archive in the same conditions in which they were found.  

Keep in mind that different items are governed by different regulations, so you need to check retention periods. The retention period begins when all work with samples or records is complete. Specified retention periods supersede any other retention requirements unless explicitly noted. 

Factors Influencing Retention Period Requirements 

• State and federal laws: State laws are the primary source for retention periods, which can range from three to over ten years. Federal laws, like those from CMS for Medicare, may also have specific requirements.  
• Patient age: Records for minors often require longer retention periods, usually extending past the age of majority.  
• Type of record: Different types of records can have different retention requirements. For instance, some states require longer retention for certain records like mammography images.  
• Legal and regulatory changes: Laws and regulations can change, so it’s important to stay updated on current requirements. 

Scope of Work in Healthcare Records Retention Process 

Generally, quality or project management takes the lead on records retention. The scope of work involves: 

• Archiving, filing, retaining, organizing and retrieving records 
• Maintaining security and integrity of records in archives if stored on-site 
• Collecting and cataloging records, including: 
• Assigning archival numbers 
• Preparing archive labels, updates to archival forms 
• Making copies of any supporting electronic data  
• Handling off-site storage as applicable.  

On-Site and Off-Site Record Storage Locations 

For healthcare records, you have two storage choices: on-site or off-site.  

If you store records on-site, storage must be access-controlled, and all records must be stored appropriately to ensure integrity and preservation, minimize deterioration and facilitate timely retrieval. All original paper records should be stored in secure, fireproof filing cabinets or appropriate containers, like folders, binders, weather-proof envelopes, cases or boxes. 

If you decide to store records off-site, make sure to use a qualified contractor specializing in off-site medical records storage. Quality should be involved in sending records off-site. All records should be assigned a unique number or other appropriate identifiers which your site must maintain.  

Records should be sent off-site appropriately grouped by record type. This is important because at some point, you might need to retrieve them. And you generally don’t have much notice to retrieve something. It’s generally an immediate need or within 24-48 hours, so if you don’t know where the records are or how they are organized, you won’t be able to produce them as you need to. That’s a problem.  

General Guidelines to Reduce Risk in Records Retention 

Healthcare record retention is governed by federal and state laws, requiring that records be kept for a specific period for patient access, legal protection, and compliance.  

Your organization should operate under the basic requirements for retaining records unless otherwise specified. Use these general guidelines to ensure your processes are set up for retention compliance: 

• Without a specified retention period, a minimum period of 10 years should be used.  
• Once the defined retention period is reached, samples and records may continue to be maintained, returned, transferred to the appropriate owner, or destroyed.  
• Do not destroy anything without appropriate approval from the functional owner.  
• Record destruction must be appropriately documented to denote the end of the life cycle. 

What’s Your Next Step? 

When you have these processes and practices in place, records retention will be a lot more efficient and a lot less stressful.  

Want more ideas for optimizing compliance and quality? You’ll find guidance in these popular articles. 

• Four Ways to Integrate Compliance with Safety/Quality Efforts 
• Best Practices for Better Training in Healthcare Compliance
• Integrate Self-Awareness into Healthcare Compliance Programs: 18 Tips  

Andrea has taught first grade in Willoughby, Ohio for 27 years in the same classroom that she attended school as a child. She earned a Bachelor of Science in elementary education with a minor in language arts from John Carroll University and a Master’s Degree in the Art of Teaching and Education from Marygrove College. 

John builds and fixes quality departments, while currently thriving as the Administrator & Director of Quality, Risk Management and Compliance at River Vista, a behavioral hospital in Columbus, Ohio.

---

The Q-Kids – John R Nocero and Andrea L Bordonaro – are experts at everything quality, regulatory, education training and compliance and love sharing their knowledge on YouCompli.

Follow them on LinkedIn – for more quality content or send them a message – they’d love to hear from you.

---

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Schedule a quick overview

The post Hoarders Need Borders: Quality’s Role in Healthcare Record Storage  first appeared on YouCompli.

In this blog, learn how to go on offense following a regulatory compliance audit or inspection, so you’re well-prepared for the next one. Using sports training analogies, the authors present a better way to handle ongoing inspections and audits in healthcare systems.  

If you play us in basketball, we’re going to run the fast-break transition offense at you, and we will tell you right now; you don’t want to play us two on two. We know our biggest strength – namely that conditioning kills. Savage speed plus unlimited endurance equals an unstoppable force.  

The fast-break transition offense we use is inspired by the 1990 UNLV Running Rebels basketball team. This high-tempo strategy aims to score before the defense can get set. It involves pushing the ball down the court immediately after gaining possession and creating scoring opportunities through numerical advantages and defensive mismatches.  

You can apply the same strategies when managing audits and inspections.  

What Drives Healthcare Audits and Inspections? 

Audits and inspections are regular occurrences in healthcare systems. A number of factors influence how often and what kind. 

• Internal vs. External: Healthcare organizations conduct their own internal audits monthly, quarterly or annually. 
• Regulatory Bodies: Government agencies conduct their own audits, with the number depending on things like budget and staff. 
• Risk and Regulation: Frequency may increase if issues are discovered or when major changes are made to regulations. 
• Organization Size: Larger organizations often have more complex auditing needs, potentially driving more frequent audits. 
• Staff Turnover: High turnover can trigger more frequent audits to ensure consistency. 

What’s Your Playbook for Regulatory Inspections and Audits? 

Most healthcare systems have good reason to believe that a regulatory inspection, sponsor audit or other scrutiny could appear at any time, announced or unannounced. It’s accepted that the standard technique for managing these visits is ongoing vigilance.  

At her presentation on “How to Be Your Own Internal Monitor: A Guide to Monitoring Your Own Studies” at the ACRP 2025 conference, Ann-Marie Jacobson, CCRP, Senior Research Affairs Specialist at Tufts University School of Dental Medicine, said “Because of the unknowns about inspections and audits of in-progress or completed clinical trials, it is important to make sure that all study materials are always kept accurate, current, and explanative of the study activities to date.”

“You always need to be asking yourself, if the Food and Drug Administration (FDA), sponsor, or IRB came in right now and selected a current or recently closed study for examination, would everything be ready?”  

She explained that at her institution, study coordinators “regularly conduct audits of regulatory binders, subject folders, case report forms (CRFs), payment logs, and enrollment/screening logs. These are coordinators who are separate from the clinical team, to ensure that fresh perspectives are always present.” 

We don’t disagree with her, but we wouldn’t call that a fresh approach. Rather, we think that ongoing vigilance should be the standard in healthcare compliance, like a basketball team needs the fundamentals of solid shooting, dribbling and passing.  

Changing Audit Landscape Requires a New Game Plan 

The current healthcare audit landscape is shifting and shifting quickly. Back in late 2024 and even earlier this year, federal and state auditors would arrive and investigate one complaint at a time. They’d come in specifically for one reason or to investigate a particular incident, talk with a couple of staff members, and then summarize their findings and leave.  

Now, we’re hearing differently. Just this week at one of our collegial facilities, an investigator came in to investigate about 10 complaints in various areas, from documentation, to patient care and the like.  

To diligently investigate complaints of this type and volume, the auditor or inspector is probably going to be there on-site for a week or more. They will gobble up valuable conference room space, staff time and basically throw your whole operation into a tizzy due to the heightened emotional state.  

What’s your game plan for audit readiness now? 

Fast Break Offense for Compliance Audit Readiness 

How do you combat this? Well, if you use the key principles of a fast break offense, you will be prepared and conditioned. We’ve adapted these three techniques to the compliance game, to make champions of your team. 

1 – Push the Pace 

In basketball, coaches encourage players to maintain a fast pace and recognize when to initiate the first trigger. In an audit, this means anticipating what the auditor is going to ask and getting ahead of it before they bring it up.  

Pre-audit prep meetings and ongoing reviews of your events make this work, but you can’t just do a pre-audit meeting when an inspection is scheduled. You need to regularly schedule pre-audit meetings, so you’re always prepared.  

I know most organizations don’t do this. But we do. Which is why we have covered things so thoroughly that we can go quickly and get the auditor what they need and then move on to the next question.  

2 – Strength in Numbers 

In sports, we recognize numerical advantages, such as 2-on-1’s, 3-on-2’s or 4-on-3’s and then capitalize on these circumstances through drive-and-kick sequences. Drive the ball to the basket and when the defense collapses on the person with the ball, you kick the ball out to an open teammate to hit a jump shot.  

Within audits, scoring means answering auditors’ questions with the best players you have. You create a numerical advantage by bringing in multiple people to meet with the auditor at the same time and kicking facts around like you would move the ball to score.  

3 – Continuously Practice Good Habits Across the Team 

Lastly, you need elite conditioning habits in sports and in compliance. To run the fast break effectively, you can’t get tired. Imagine unleashing an endless barrage of offense and staying so diligent to this effort that teams know it’s coming and still can’t stop it.  

The team with the most dialed-in offense is usually the most capable, but you need to have players who can react “lag-free” or win their first three steps to capitalize on numerical advantage. The only way to get good at this is to continually work on it.  

Quality and compliance preach continuous improvement, but how often do you do make the effort? How often do you stay late at work, just because? How often do you run more meetings or make everything tighter?  

Chances are zero times, but I will tell you right now that we do. So, if you get into an audit with me, by Day 4, I am still working with a full gas tank, but the auditor isn’t because they went home and “Netflixed“ while I slept. Get your whole team committed to elite habits, and you are unstoppable.  

Prepare Your Compliance Program for the Win 

By reinforcing these principles and working on conditioning and decision making, teams can create more scoring opportunities. And just as a prepared team can force the defense into difficult situations, a well-prepared compliance team can “force” the auditor into zero-findings and more quality inspections.  

Download a PDF Version of the Tip Sheet

Create Compliance Scoring Opportunities 

If you’re interested in more ideas for building a strong compliance program, read these resources next. A strong compliance culture is the foundation of a strong program. 

10 Tips for Building a Compliance Culture in Healthcare 

Earning recognition as a value creator and establishing a healthy culture can be challenging. Yet as these 10 tips show, you can successfully shape culture to help the larger organization better manage and control risk. 

Healthcare Compliance Culture Means Doing the Right Thing at All Levels 

A culture of compliance isn’t just a platitude. It really does exist. Those organizations with a strong culture of compliance and an effective compliance program are the ones with engaged clinical and operational leaders. 

A Culture of Compliance Through Proactive Decision-making 

A culture of compliance is critical to effective regulatory change management. Find three steps to help your leaders make decisions more proactively.   

Andrea has taught first grade in Willoughby, Ohio for 27 years in the same classroom that she attended school as a child. She earned a Bachelor of Science in elementary education with a minor in language arts from John Carroll University and a Master’s Degree in the Art of Teaching and Education from Marygrove College. 

John builds and fixes quality departments, while currently thriving as the Administrator & Director of Quality, Risk Management and Compliance at River Vista, a behavioral hospital in Columbus, Ohio.

---

The Q-Kids – John R Nocero and Andrea L Bordonaro – are experts at everything quality, regulatory, education training and compliance and love sharing their knowledge on YouCompli.

Follow them on LinkedIn – for more quality content or send them a message – they’d love to hear from you.

---

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Schedule a quick overview

---

27 Ungated Resources for Compliance Leaders and Teams 

Compliance professionals sometimes feel undervalued in comparison to other functions in their organization. They think leaders and colleagues don’t really understand what they do.  

These resources will help. Packed with ideas, tips and recommendations, these pieces were written by professionals with many years of compliance experience. 

You can quickly skim for articles that relate to your needs and interests. Bookmark this page as a reference for future questions or projects.

Visit Now

---

The post With Compliance Audits, The Best Defense is a Good Offense  first appeared on YouCompli.

Artificial intelligence is beginning to reshape the compliance landscape, but the field is still in the early stages of adoption. Compared with other business functions, compliance has been slower to embrace AI, especially in healthcare, where concerns about risk, regulation, and potential bleed-over into clinical decision-making have made organizations particularly cautious. 

Yet the opportunity is substantial, especially when it comes to systems thinking. 

Why Systems Thinking Matters in Compliance 

Effective compliance programs depend on systems thinking. Rather than viewing each request for guidance, investigation, or remediation as an isolated issue, savvy compliance teams look at how individual problems fit into larger patterns. 

One of the challenges in any business function is the tension between individual heroics and well-designed systems, and, ultimately, systems win every time. Many compliance officers have been conditioned to act like lifeguards, diving in to save departments from themselves. But this reactive approach consumes time and limits impact. You stay busy, but the organization doesn’t necessarily become more compliant. 

Shifting away from heroic interventions requires time, strategic thinking and structural planning, resources that compliance professionals rarely have in abundance. This is where AI becomes a powerful ally. 

How AI Helps Compliance Move from Reactive to Proactive 

The key to building proactive compliance is carving out the mental space to think more broadly about operational processes. AI doesn’t replace human expertise, but it can significantly accelerate the work. 

AI tools can analyze the countless issues compliance teams handle daily and help generate system-level recommendations. Think of AI as a partner that gets you to the 50- or 60-yard line, far enough to give you a strong foundation, but still requiring human judgment to complete the plan. 

Using AI to Organize Compliance Processes 

The first step is identifying patterns: 

• What repeatedly goes wrong? 
• What are the recurring themes? 
• Where are the inefficiencies or high-risk points? 

Once you see the trends, you can begin imagining the systems that will address them. AI excels at helping structure these ideas. 

A practical way to start is by giving your AI assistant raw input: 

• Here’s what is happening. 
• Here’s the environment. 
• Here are the recurring issues. 

Then you can prompt the AI with something like: 

 “I want to build a system to help identify and minimize these risks within a complicated environment. What elements should be included, and what considerations fall under each element?” 

The output becomes a foundation, a map of decision points and organizational steps you can refine. 

Supercharging Systems Thinking 

Compliance work is complex, and many officers get stuck not because they lack insight but because they lack time. AI helps break the gridlock by organizing information, highlighting key considerations, and suggesting frameworks. 

The AI provides structure; the compliance professional brings subject-matter expertise. In this collaborative process, the AI’s suggestions spark additional ideas and help you think more holistically. The result is a level of systems thinking that becomes far more accessible even in hectic environments. 

The Human-AI Partnership 

Despite its power, AI cannot replace an experienced compliance officer. It draws from online information and from what you feed it, but it cannot grasp organizational nuance, personalities, or culture. 

For example, an AI may outline a solid system, but only the compliance officer understands how a skeptical executive will respond. That’s where the human element comes in. You can ask the AI to help tailor communications or anticipate objections, but the strategic decision-making remains yours. 

Staying Focused with AI Frameworks 

One of the hidden challenges of compliance work is staying focused long enough to complete long-term system projects. Urgent tasks constantly pull attention away, and partially built frameworks can easily get lost for months. 

AI-created structures help maintain focus. They provide guardrails, the methodological anchors that keep the conversation and planning on track. Most of the framework can often be developed in a single sitting, creating a roadmap you can return to even if you’re pulled into other issues. 

Even with the limitations of some AI tools, especially free versions that cap conversation length, paid versions make it easier to resume discussions, refine ideas, and maintain continuity. 

A Faster Roadmap to a Roadmap 

Compliance professionals work hard and add value every day, but much of that value is short-term because they lack the time to build the long-term systems that create lasting change. 

AI solves this by offering a “faster roadmap to a roadmap.” It accelerates the groundwork: 

•  Defining the problem 
• Outlining the system  
• Highlighting the risks 
• Mapping the components 

That clarity frees the compliance officer to focus on the human side of adapting the system to the organization, navigating culture, and communicating effectively with leaders. 

With an AI-driven framework, compliance work becomes more disciplined, efficient, and proactive. Systems thinking becomes not only achievable, but sustainable. AI doesn’t replace the expertise of compliance professionals—it elevates it. 

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Schedule a quick overview

---

27 Ungated Resources for Compliance Leaders and Teams 

Compliance professionals sometimes feel undervalued in comparison to other functions in their organization. They think leaders and colleagues don’t really understand what they do.  

These resources will help. Packed with ideas, tips and recommendations, these pieces were written by professionals with many years of compliance experience. 

You can quickly skim for articles that relate to your needs and interests. Bookmark this page as a reference for future questions or projects.

Visit Now

---

The post How to Use AI for Systems Thinking in Compliance Processes  first appeared on YouCompli.

You Can’t Manage What You Can’t See 

I get into the hospital about 5am every day. I go to intake and get the daily census sheet and report it out to the providers. I walk upstairs and I get my census sheets for all four units. I call in a fourth provider if needed. I review my e-mails.  

But at 7:30 am every day, I round. No exceptions. Weekday. Weekends. Holidays when I am supposed to be off. Doesn’t matter. I round. It has to be done, because I can’t manage what I can’t see.  

You Need to Manage Healthcare Risk 

So many times, compliance administrators and quality leaders sit in their office and manage through e-mail. Say they are too busy. Too many things to do. Yeah, too many meetings. But the truth is, you need to manage risk. 

Risk comes in many forms . Financial. Patient-related. But the biggest unforeseen risk to me is reputational. If you don’t have a reputation for offering the best patient care while keeping people safe and patients receiving benefits from treatment, you won’t be successful. You won’t make money. You won’t care for patients. You need to see it. Firsthand.  

You can’t manage what you can’t see. Here’s how I round.  

What We Look for During Compliance Rounding 

I walk onto the units through the front entrance and immediately talk to the charge nurse.  

• Do you have enough staff?  
• Is everyone listening to you?  
• How is your census?  
• Do you have any events to report?  
• What is the “temperature” of the unit?  

I then walk down the hall and look in everyone’s room. Are the doors locked? Any ligature risks? Any contraband – things like cups, extra linens, things that someone could harm themselves with? You can’t manage what you can’t see. I walk into each room and just look.  

• What is its condition?  
• Are there any screws loose?  
• What does the milieu look like? Is it calm?  
• Are patients interacting with each other?  
• Are they respectful?  

Then up to all the techs. Same questions, plus ones like these: 

• Have patients gotten showers?  
• Are you tired? Do you need to break?  
• What do observations look like? Are they up to date?  

I then walk through the nurse’s station to the sister units and do the same thing. Same questions. Then downstairs to the other two units. Same thing. Same questions.  

You can’t manage what you can’t see. It takes about 45 minutes total, and it’s the most important part of the day. We have cameras, and I could look at the cameras and do this. But so much would be missed. You need to get onto the units. Why? Because you can’t manage what you can’t see.  

Why In-Person Observation Is Valuable Compliance Practice 

There are three main reasons why I do rounding and in-person observation:  

1. Presence: I have to have a presence on the units. Staff need to see me and see me holding them accountable. They know I’m going to come by every day. Same time. They need to be ready. No questions. No excuses. Plus, it shows I care. I do care about every member of the staff. I want them to get used to seeing me on the floor. Pull me aside. Tell me things. That’s important.  
2. Safety: No one should feel unsafe here, so I’m always looking around for contraband or things that patients can use to harm themselves. Cups and linens as I said but there are things that sometimes make it up to the units. Like shoelaces for example. Now, you take it for granted. Loop, swoop, pull and tie your shoes. A self-harming patient can see that as something more. I look at the environment, too. A loose light or a loose screw can be thrown or even swallowed. You need to stay on top of it. If I see something, I tell my Plant Operations Director and put in a work order to have it fixed immediately.  
3. You can’t manage what you can’t see: This is the most important reason and the one I keep bolding. The only way to know what is going on is to be present. Management by walking around is a thing. When I changed a process a couple months ago, the staff was outraged. We can’t do this, that or the other. Then I walked the units. People on phones. Laughing. Looking calm. You ain’t stressed. That changed fast. Funny how that happened.  

Get Real-Time View of What’s Happening in Your Organization 

Only by being present can you get a real-time view of what’s done, what’s stuck and what is slipping through the cracks. Visibility is power. And I finished this round at 7:28. Two minutes to get upstairs, where they’re also expecting me.  

More Resources About Compliance and Risk 

Ready, Set, Go! Identifying Emerging Risks in Your Annual Compliance Workplan 

Before moving on from this year, it’s important to take time and get feedback from business partners to ensure an “outside-in” perspective is included in your 2026 plan. Compliance expert Jenny O’Brien, JD, MCHDS, CHC shares proven practices.  

The Why, What, Who, and When of Healthcare Risk Assessments   

Sharon Parsley, JD, MBA, CHC, CHRC discusses risk assessment from a “why, what who, and when” perspective. She also looks at ways that you, as an effective compliance officer, can lead this process with your colleagues. 

Andrea has taught first grade in Willoughby, Ohio for 27 years in the same classroom that she attended school as a child. She earned a Bachelor of Science in elementary education with a minor in language arts from John Carroll University and a Master’s Degree in the Art of Teaching and Education from Marygrove College. 

John builds and fixes quality departments, while currently thriving as the Administrator & Director of Quality, Risk Management and Compliance at River Vista, a behavioral hospital in Columbus, Ohio.

---

The Q-Kids – John R Nocero and Andrea L Bordonaro – are experts at everything quality, regulatory, education training and compliance and love sharing their knowledge on YouCompli.

Follow them on LinkedIn – for more quality content or send them a message – they’d love to hear from you.

---

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Schedule a quick overview

The post Risk Visibility Isn’t Optional in Healthcare Compliance  first appeared on YouCompli.

In every organization there is a moment where the quality department becomes either the trusted operational partner or the operational roadblock. The difference tween the two comes from how you communicate, assign responsibility and how you follow through. This blog explains how to adopt the OG style for more effective quality programs in healthcare. 

Comparing Two Styles of Quality Performance 

There are two guys – let’s call them Young Buck and OG. The Young Buck is probably 30, limitless energy, the one-man wrecking machine. You know that guy. Full of passion or some other nonsense. All gas and no brakes. Runs through the facility on a crusade to save the world. All alone. Takes on all the tasks but somehow, really accomplishes nothing except annoying everyone else on the team with his constant question of “Need anything?” 

OG is a bit different. Older. Works like he is 30 with the wisdom that comes from being 20 years older. Shaved head, salt-and-pepper beard. Dresses as he wants because he has the street cred and knowledge to back it up, so no one cares. Works as an individual contributor but has a connection to everyone on the leadership team. Can tell you about all their strengths. Kills every audit, understands the entire operation. Has paid his dues, knows who he is and does not chase anyone’s validation except his own. 

Operational Partner or Quality Roadblock? 

The OG knows a thing or two about operational improvements that matter. He goes beyond simple efficiency improvements such as how units are staffed or cost-cutting initiatives like slashing overtime because the team is over hours.  

The OG embraces the philosophy that all aspects of the organization work harmoniously to deliver maximum value to customers, while minimizing waste and variation in processes (Six Sigma, 2025). It’s simple execution like this, isn’t it?  

• The organization develops systems that promote problem-solving at all levels. 
• Best practices are the norm not the exception  
• Cultivate culture where improvement is habitual, not exceptional.  
• Discipline and consistency are staples that override passion and enthusiasm. 

The operational roadblock is not always the guy who says no, at least not in this scenario. What we are describing is far too common. This roadblock doesn’t know what he doesn’t know and is too focused on short-term results (his own) than on long-term gains (the team’s). He’s in favor of acting but instead of evolving his processes thoughtfully, he wants to make significant changes to the way an organization operates. What this does is create bottlenecks, upset the status quo and build employee resistance. 

OG or bottleneck? Take your choice:  

• Long-term investment or short-term expense?  
• Streamlined processes or maximized rework? 
• Improved quality control or weakened inventory management?  

Us, too. The difference is how you communicate, how you assign responsibility and how you follow through. 

Three Ways to Partner like a Pro 

Want to be more like the OG? Here are some tips for more effective quality operations: 

1 – Communication: Be clear. Be direct. Know what you want to say before you actually say it. Think it out and then say it. Don’t be monologuing at people like Carson on The Tonight Show. You don’t need people to necessarily like you. It helps but it helps more if they respect you. The only way to get that is to tell them what needs to be said, say it and then follow up when needed. 

2 – Responsibility: Assign tasks to people for things they can be responsible for and actually succeed in. Read that again. It is selected delegation. Holding people responsible for things that they cannot perform is a recipe for disaster. In cliched terms, hold your people accountable. 

3 – Follow Through: So simple it only takes one sentence. Do what you say you are going to do, how you said you’d do it, when you said, over and over again. Period. That’s it. All you need to do. 

OG Your Way to Effective Quality and Compliance 

You don’t need to “young buck” your way through quality and compliance. The only way to be the OG is to become respected, highly regarded, skilled and authentic in what you do. Your team and organization will thank you. 

Ready to Learn More? 

We’ve got more resources on quality and compliance in healthcare. Have a look at these three selections: 

White Paper: How Compliance Drives Healthcare Quality and Safety 

Effective compliance management directly supports quality care, operational efficiency, and financial stability. Read the white paper for practical ways to leverage compliance as a strategic asset, transforming regulatory obligations into opportunities for excellence in patient care and organizational success. 

Blog: Four Ways to Integrate Compliance with Safety/Quality Efforts 

How can your compliance program answer the OIG’s call and include patient safety and quality in your oversight efforts? This blog explores four practices to integrate safety/quality concerns into compliance practices. 

Blog: Building a Quality Education Program That’s Good Enough 

It’s essential that you build a quality education program that works. Doing that right means covering the basics well, not adding fancy bells and whistles. This blog explains what will lead to training sustainability for you and the organization.   

Download Tip Sheet Below

Andrea has taught first grade in Willoughby, Ohio for 27 years in the same classroom that she attended school as a child. She earned a Bachelor of Science in elementary education with a minor in language arts from John Carroll University and a Master’s Degree in the Art of Teaching and Education from Marygrove College. 

John builds and fixes quality departments, while currently thriving as the Administrator & Director of Quality, Risk Management and Compliance at River Vista, a behavioral hospital in Columbus, Ohio.

---

The Q-Kids – John R Nocero and Andrea L Bordonaro – are experts at everything quality, regulatory, education training and compliance and love sharing their knowledge on YouCompli.

Follow them on LinkedIn – for more quality content or send them a message – they’d love to hear from you.

---

Download our Latest Whitepaper

Sign-up for our Weekly Newsletter

Schedule a quick overview

• One Compliance Pro’s Regulatory Change Management Process    by Amy Laufmann, MBA
• Five ways to show how healthcare Compliance delivers value by Jerry Shafran
• Revenue Cycle Management Compliance: Ensuring… by Maya Turner, CPMA, CPCO, CFPC, CPC, CPC-I, AAPC
• 12 key metrics for compliance officers looking to… by Kenneth Zeko, JD, CHC
• Transforming Compliance to a Department of Yes  by Lisa Herota, RHIA, CHC, CHPS, CCS Compliance & Privacy Officer
• Three Strategies to Align Compliance with Revenue Cycle  by CJ Wolf, MD
• How the Three Lines Model Strengthens Healthcare Compliance by Kenneth Zeko, JD, CHC
• Navigating Compliance Responsibility: A Foundation… by Amy Laufmann, MBA
• New Regulation– Now What? Step-by-Step Guide to… by Amy Laufmann, MBA
• Four Ways to Integrate Compliance with… by CJ Wolf, MD

The post Healthcare Quality Leadership: How to Be an Operational Partner, Not a Roadblock first appeared on YouCompli.