When Regulatory Compliance Controls Exist but Still Fail
A compliance control can be documented, automated and still fail to manage risk consistently. An HHS-OIG audit offers a practical example of why healthcare organizations need to look beyond whether controls exist and verify that they actually work.




