Critical Change: Enterprise Risk Management Meets Healthcare. 18 TH Annual Compliance Institute San Diego, CA March 31, 2014.

Size: px
Start display at page:

Download "Critical Change: Enterprise Risk Management Meets Healthcare. 18 TH Annual Compliance Institute San Diego, CA March 31, 2014."

Transcription

1 Critical Change: Enterprise Risk Management Meets Healthcare 18 TH Annual Compliance Institute San Diego, CA March 31, 2014 Marie Moseley, JD, MPH, BSN, NNP-C, CHC, CHC-P 1 Objectives 1 Understand ERM Basics and how it applies to Health Care 2 Identify key components 3 Lessons learned 2 1

2 Shared with permission B Braun Medical ERM What is it? [A] process, effected by an entity s board of directors, management and other personnel, applied in strategy setting and across the enterprise, designed to identify potential events that may affect the entity, and manage risk to be within its risk appetite, to provide reasonable assurance regarding the achievement of entity objectives. (Committee of Sponsoring Organizations of the Treadway Commission (COSO)) 4 2

3 Enterprise Risk Management (ERM) defined: A broad based interdisciplinary process through which an organization identifies, analyzes, prioritizes, and addresses the risks and opportunities (in other words, the uncertainties) than can affect its achievement of strategic objectives, whether in positive or negative ways. American Health Lawyers Association, Enterprise Risk Management for Healthcare: Where & How to Begin 5 Traditional Risk Management Risk = Negative outcome Risk driven Silo approach Enterprise Risk Management Risk = any issue affecting the organization s ability to meet its objectives Value driven Holistic approach 3

4 Key Components: 1. Enterprise wide risk analysis 2. Enterprise wide oversight 3. Strategic risk ranking 4. Accountability & Monitoring Core Elements: 1. Education 2. Objective setting 3. Event identification 4. Risk assessment 5. Risk response 6. Controls 7. Communication 8. Monitoring 4

5 Loss of/reduction in Revenue Sources Loss of Accreditation 9 Key Components: 1. Enterprise wide risk analysis 2. Enterprise wide oversight 3. Strategic risk ranking 4. Accountability & Monitoring 5

6 Risk Domains Strategic Financial Human Operational Regulatory/ Legal Technological Project Specific Key Components: 1. Enterprise wide risk analysis 2. Enterprise wide oversight 3. Strategic risk ranking 4. Accountability & Monitoring 6

7 Marketing Finance Affiliates/ Faculty Operations IS Legal Organizational Risk? Compliance Operations Internal Affiliates/ Audit Faulty Quality Medical Staff HR IS Marketing Research Legal Affiliates/ Faculty Finance HR Compliance IS Quality Audit Medical Staff Operations Organizational Risk 7

8 Compliance Operations IS Marketing HR Research ERM Leader Medical Staff Legal Finance Affiliates/ Faculty Quality Internal Audit Key Components: 1. Enterprise wide risk analysis 2. Enterprise wide oversight 3. Strategic risk ranking 4. Accountability & Monitoring 8

9 Likelihood 17 Key Components: 1. Enterprise wide risk analysis 2. Enterprise wide oversight 3. Strategic risk ranking 4. Accountability & Monitoring 9

10 Management Response (Red & Yellow) Avoid Control/Mitigate Accept Transfer 19 Identify and focus on top risks Critical business unit Critical risk 10

11 Identify risk universe Monitor Assess impact & controls Report & manage Prioritize Identify risk universe Monitor Assess impact & controls Report & manage Prioritize 11

12 Project Financial Reputational Operational Legal Regulatory/Compliance Fraud/Abuse Project Specific Deliverables Execution Patient Satisfaction Branding Market Share CMS/OIG IRS EPA Accreditation FCA, AKB Project Organization Stark Reputational Legal Fraud/Abuse Civil/Criminal Liability Financial Operational Regulatory/Compliance Project Specific HR/Provider Relations Benefit Plans EMTALA Impact Revenue/Assets Bonds Clinical/Business Interruption Anti trust IT.???? Safety HIPAA 12

13 Identify risk universe Monitor Assess impact & controls Report & manage Prioritize 13

14 Rate the impact and likelihood if a threat is exploited Compare impact and likelihood to existing controls Establish a risk priority for each threat potential Risk Assessment scorecard with recommendation and response decision 14

15 Identify risk universe Monitor Assess impact & controls Report & manage Prioritize 30 15

16 31 Identify risk universe Monitor Assess impact & controls Report & manage Prioritize 16

17 33 Lessons learned Slow, painful & time consuming Requires top down commitment Baby steps Strong leader, C suite engagement Build on existing resources Communicate Not about the tools 34 17

18 Objectives 1 Understand ERM Basics and how it applies to Health Care 2 Identify key components 3 Lessons learned 35 Example: Meaningful Use 1. EHR functionality 2. Clinical work flows 3. Untimely adoption 4. Reimbursement 5. Audit defense 18

19 Example: ICD 10 Office Map, Reprinted with permission, AAPC. Available at 10/office map/index.aspx 19

20 20

The Essentials of Enterprise Risk Management. Steven C. Tourek, Senior Vice President, General Counsel & Secretary, The Marvin Companies

The Essentials of Enterprise Risk Management. Steven C. Tourek, Senior Vice President, General Counsel & Secretary, The Marvin Companies The Essentials of Enterprise Risk Management Steven C. Tourek, Senior Vice President, General Counsel & Secretary, The Marvin Companies Introduction How should an organization think about the management

More information

Integrating Risk Management with Performance Management * Margaret Woods Aston Business School

Integrating Risk Management with Performance Management * Margaret Woods Aston Business School Integrating Risk Management with Performance Management * Margaret Woods Aston Business School Why Risk Management Matters Sometimes it is the things you don t see that really matter. Source: Enron Corporation

More information

Maryland Association of Boards of Education Insurance Programs

Maryland Association of Boards of Education Insurance Programs Insurance Programs ENTERPRISE RISK MANAGEMENT John Magoon, ARM (P, E), CBCP, MBCI Risk Management Officer, MABE jmagoon@mabe.org 443 603 0399 A PERFECT DAY Our Goals 1.2 1 0.8 0.6 0.4 0.2 0 Actual Goal

More information

Enterprise-Wide Risk Assessment

Enterprise-Wide Risk Assessment Enterprise-Wide Risk Assessment Agenda 1. Definition of risk. 2. Risk drivers in higher education today. 3. Implementing an enterprise-wide risk management (ERM) program to effectively assess, manage,

More information

Risk Management - Board & Management Responsibilities Murray Short, MBA, CPA CA Not-for-Profit Partner RLB LLP

Risk Management - Board & Management Responsibilities Murray Short, MBA, CPA CA Not-for-Profit Partner RLB LLP Risk Management - Board & Management Responsibilities Murray Short, MBA, CPA CA Not-for-Profit Partner RLB LLP 2 AGENDA About RLB / About Our Not-for-Profit Team Defining Risk Types of Organizational Risk

More information

Enterprise Risk Management & Information Technology

Enterprise Risk Management & Information Technology Enterprise Risk Management & Information Technology Presented by Scott Perry and Gary Ross Slalom Consulting, San Francisco Agenda Introductions Session Objectives Overview of Enterprise Risk Management

More information

The New International Standard on the Practice of Risk Management A Comparison of ISO 31000:2009 and the COSO ERM Framework

The New International Standard on the Practice of Risk Management A Comparison of ISO 31000:2009 and the COSO ERM Framework The New International Standard on the Practice of Risk Management A Comparison of ISO 31000:2009 and the COSO ERM Framework Dorothy Gjerdrum, ARM-P, Chair of the ISO 31000 US TAG and Executive Director,

More information

Enterprise Risk Management. Presented by: Lori Koethe, Director of Compliance & Risk Management University Hospitals Elyria Medical Center

Enterprise Risk Management. Presented by: Lori Koethe, Director of Compliance & Risk Management University Hospitals Elyria Medical Center Enterprise Risk Management Presented by: Lori Koethe, Director of Compliance & Risk Management University Hospitals Elyria Medical Center Objectives Define Enterprise Risk Management (ERM) and related

More information

University of Windsor Board of Governors. That the Board of Governors approve of the Enterprise Risk Management Framework.

University of Windsor Board of Governors. That the Board of Governors approve of the Enterprise Risk Management Framework. University of Windsor Board of Governors BG130430-4.2.3 4.2.3 Enterprise Risk Management Framework Item for: Approval Forwarded by: Audit Committee MOTION: That the Board of Governors approve of the Enterprise

More information

2/20/2014. Taking Compliance to the Next Level: Enterprise Risk Management. CaroMont Health & Continuum of Care

2/20/2014. Taking Compliance to the Next Level: Enterprise Risk Management. CaroMont Health & Continuum of Care Taking Compliance to the Next Level: Enterprise Risk Management Donnetta Horseman, MA, CHC, CHPC, CIPP/US, CCE Vice President, Corporate Responsibility CaroMont Health 435-bed acute care community hospital

More information

Understanding Enterprise Risk Management. Presented by Dorothy Gjerdrum Arthur J Gallagher

Understanding Enterprise Risk Management. Presented by Dorothy Gjerdrum Arthur J Gallagher Understanding Enterprise Risk Management Presented by Dorothy Gjerdrum Arthur J Gallagher Learning Objectives Understand the components of a wellrun ERM program Review scope and process Explore the role

More information

Risk Assessment & Enterprise Risk Management

Risk Assessment & Enterprise Risk Management Risk Assessment & Enterprise Risk 1 Healthcare Corporate Governance Today s environment requires building a culture of risk awareness and management of risk across the organization, while formulating less

More information

The College of New Jersey Enterprise Risk Management and Higher Education For Discussion Purposes Only January 2012

The College of New Jersey Enterprise Risk Management and Higher Education For Discussion Purposes Only January 2012 The College of New Jersey Enterprise Risk Management and Higher Education For Discussion Purposes Only Agenda Introduction Basic program components Recent trends in higher education risk management Why

More information

Analyzing Risks in Healthcare. February 12, 2014

Analyzing Risks in Healthcare. February 12, 2014 Analyzing s in Healthcare February 12, 2014 1 Content What is Enterprise Management (ERM) ERM Benefits ERM Standards / ISO 31000:2009 ERM Process Register ERM Governance Model s Q&A 2 What is Enterprise

More information

WELCOME BY HELEN HALL

WELCOME BY HELEN HALL WELCOME BY HELEN HALL Daryll Griffin: d.r.griffin@ieee.org Helen Hall: h.hall@ieee.org More webinars on the way Webinars: ieeeusa.org/careers/webinars BEFORE WE GET STARTED Type your questions in the chat

More information

Developing an Effective Enterprise Risk Management Program

Developing an Effective Enterprise Risk Management Program Developing an Effective Enterprise Risk Management Program Jay Brietz, CPA and CIA Senior Manager This material was used by Elliott Davis Decosimo during an oral presentation; it is not a complete record

More information

Enterprise Risk Management: Taking the First Steps

Enterprise Risk Management: Taking the First Steps Enterprise Risk Management: Taking the First Steps TN PRIMA, 2012 DOROTHY GJERDRUM, ARM, CIRM NOVEMBER 15, 2012 Agenda Goal: To understand how to begin to implement a broader approach to risk management

More information

Performing a Compliance Risk Assessment for Compliance Auditing & Monitoring in Healthcare Organizations

Performing a Compliance Risk Assessment for Compliance Auditing & Monitoring in Healthcare Organizations Performing a Compliance Risk Assessment for Compliance Auditing & Monitoring in Healthcare Organizations Author: Glen C. Mueller, Chief Audit & Compliance Officer, Scripps Health, San Diego, CA Introduction

More information

IRM CERTIFICATE AND DIPLOMA OUTLINE SYLLABUS

IRM CERTIFICATE AND DIPLOMA OUTLINE SYLLABUS IRM CERTIFICATE AND DIPLOMA OUTLINE SYLLABUS 1 Module 1: Principles of Risk and Risk Management Module aims The aim of this module is to provide an introduction to the principles and concepts of risk and

More information

Matthew E. Breecher Breecher & Company PC November 12, 2008

Matthew E. Breecher Breecher & Company PC November 12, 2008 Applying COSO s Enterprise Risk Management Integrated Framework Matthew E. Breecher Breecher & Company PC November 12, 2008 The basic outline for this presentation was provided by: Objectives for the session:

More information

Hand IN Hand: Balanced Scorecards

Hand IN Hand: Balanced Scorecards ANNUAL CONFERENCE T O P I C Risk Management WORKING Hand IN Hand: Balanced Scorecards AND Enterprise Risk Management B Y M ARK B EASLEY, CPA; A L C HEN; K AREN N UNEZ, CMA; AND L ORRAINE W RIGHT Recent

More information

International Diploma in Risk Management Syllabus

International Diploma in Risk Management Syllabus International Diploma in Risk Management Syllabus Module 1: Principles of Risk and Risk Management The aim of this module is to provide an introduction to the principles and concepts of risk and risk management.

More information

Governance and Risk Management in the Public Sector. Fernando A. Fernandez Inter-American Development Bank (202) 623-1430 e-mail: fernandof@iadb.

Governance and Risk Management in the Public Sector. Fernando A. Fernandez Inter-American Development Bank (202) 623-1430 e-mail: fernandof@iadb. Governance and Risk Management in the Public Sector Fernando A. Fernandez Inter-American Development Bank (202) 623-1430 e-mail: fernandof@iadb.org 1 Agenda Governance, why is it important? Compliance

More information

Defining the concept, recognizing its value

Defining the concept, recognizing its value ENTERPRISE RISK MANAGEMENT Part One: Defining the concept, recognizing its value FOREWORD This three-part monograph series Enterprise Risk Management is available as three PDF documents on the Web site

More information

What is a definition of risk?

What is a definition of risk? What is a definition of risk? Definition of Risk Risk is the probability or threat of any negative occurrence caused by internal or external vulnerabilities interfering with achieving objectives that may

More information

Fraud Risk Management

Fraud Risk Management Fraud Risk Management Overview Discussion Questions 1) Does your organization follow a specific risk management model? If so, which one? Do you think this model adequately addresses the risks your organization

More information

IFAD Policy on Enterprise Risk Management

IFAD Policy on Enterprise Risk Management Document: EB 2008/94/R.4 Agenda: 5 Date: 6 August 2008 Distribution: Public Original: English E IFAD Policy on Enterprise Risk Management Executive Board Ninety-fourth Session Rome, 10-11 September 2008

More information

Applying Integrated Risk Management Scenarios for Improving Enterprise Governance

Applying Integrated Risk Management Scenarios for Improving Enterprise Governance Applying Integrated Risk Management Scenarios for Improving Enterprise Governance János Ivanyos Trusted Business Partners Ltd, Budapest, Hungary, ivanyos@trusted.hu Abstract: The term of scenario is used

More information

Get More Out of Your Risk Assessment. Austin Chapter of the IIA

Get More Out of Your Risk Assessment. Austin Chapter of the IIA Get More Out of Your Risk Assessment Austin Chapter of the IIA Speakers Alyssa G. Martin, CPA Dallas Executive Partner, Advisory Services 25 years of public accounting experience, with a practice emphasis

More information

How to stay competitive in a converging healthcare system kpmg.com

How to stay competitive in a converging healthcare system kpmg.com Managing risk in a transforming healthcare organization How to stay competitive in a converging healthcare system kpmg.com 2 Healthcare Risk Management Managing the risk of healthcare transformation Healthcare

More information

The Role of Internal Audit in Risk Governance

The Role of Internal Audit in Risk Governance The Role of Internal Audit in Risk Governance How Organizations Are Positioning the Internal Audit Function to Support Their Approach to Risk Management Executive summary Risk is inherent in running any

More information

Assessing Your HIPAA Compliance Risk

Assessing Your HIPAA Compliance Risk Assessing Your HIPAA Compliance Risk Jennifer Kennedy, MA, BSN, RN, CHC National Hospice and Palliative Care Organization HIPAA Security Rule All electronic protected health information (PHI and EPHI)

More information

How To Transform It Risk Management

How To Transform It Risk Management The transformation of IT Risk Management kpmg.com The transformation of IT Risk Management The role of IT Risk Management Scope of IT risk management Examples of IT risk areas of focus How KPMG can help

More information

Become a Certified Health Care Compliance Professional

Become a Certified Health Care Compliance Professional Become a Certified Health Care Compliance Professional Program designed for working professionals and graduate students: Health and legal professionals Graduate students Law students Offered by Hamline

More information

Accreditation Application Forms

Accreditation Application Forms The Institute of Risk Management The Institute of Risk Management Accreditation Application Forms Universities and Professional Associations The Institute of Risk Management Accreditation Application Forms

More information

Organizational Change Management: A Best Practice to Effective ERM Implementation

Organizational Change Management: A Best Practice to Effective ERM Implementation Organizational Change Management: A Best Practice to Effective ERM Implementation Christine Ackerman, CPA Associate Vice President & Director of Internal Audit University of Cincinnati Anita Ingram, ARM

More information

And The Question Is: What are the Key AMC Compliance Focus Areas in the Current Regulatory Environment?

And The Question Is: What are the Key AMC Compliance Focus Areas in the Current Regulatory Environment? And The Question Is: What are the Key AMC Compliance Focus Areas in the Current Regulatory Environment? Panel Members: Joan Podleski, Duke University Luanna Putney, University of California Kristen West,

More information

Enterprise Risk Management: Concepts & Issues

Enterprise Risk Management: Concepts & Issues Enterprise Risk Management: Concepts & Issues Jacques Lapointe Internal Audit, Management Board Secretariat November 2003 1 The Basic Concept of Risk Management The active process of identifying risks,

More information

Introduction to Enterprise Risk Management at UVM DRAFT

Introduction to Enterprise Risk Management at UVM DRAFT Introduction to Enterprise Management at UVM 1 Enterprise What is Enterprise Management? Enterprise risk management is a structured, consistent, and continuous process across the whole organization for

More information

Enterprise Risk Management Process Improvement. Secure Banking Solutions, LLC

Enterprise Risk Management Process Improvement. Secure Banking Solutions, LLC Enterprise Risk Management Process Improvement 2 Contact Information Contact Information Chad Knutson Senior Information Security Consultant CISSP, CISA, CRISC Phone: 605-480-3366 chad.knutson@protectmybank.com

More information

Enterprise Risk Management

Enterprise Risk Management 1 Are You Exposed? Building a Home Care Risk Management Program Click to edit Master title Pauline Barry, BSN, MPS, CPHRM, FASHRM Assistant Vice Click President Here Risk to add Management a subtitle Allied

More information

IT GOVERNANCE PANEL BRING VALUE BY AUDITING IT GOVERNANCE GET THE

IT GOVERNANCE PANEL BRING VALUE BY AUDITING IT GOVERNANCE GET THE 1 IT GOVERNANCE PANEL BRING VALUE BY AUDITING IT GOVERNANCE GET THE ANSWERS AND PRACTICAL TIPS FROM THE IT GOVERNANCE AUDIT PROFESSIONALS JOHAN LIDROS, PRESIDENT EMINERE GROUP KATE MULLIN, CISO, HEALTH

More information

A Risk-Based Audit Strategy November 2006 Internal Audit Department

A Risk-Based Audit Strategy November 2006 Internal Audit Department Mental Health Mental Retardation Authority of Harris County ENTERPRISE RISK MANAGEMENT A Framework For Assessing, Evaluating And Measuring Our Agency s Risk A Risk-Based Audit Strategy November 2006 Internal

More information

Policy 10.105: Enterprise Risk Management Policy

Policy 10.105: Enterprise Risk Management Policy Name: Responsibility: Complements: Enterprise Risk Management Framework Coordinator, Enterprise Risk Management Policy 10.105: Enterprise Risk Management Policy Date: November 2006 Revision Date(s): January

More information

ENTERPRISE RISK MANAGEMENT FRAMEWORK

ENTERPRISE RISK MANAGEMENT FRAMEWORK ENTERPRISE RISK MANAGEMENT FRAMEWORK COVENANT HEALTH LEGAL & RISK MANAGEMENT CONTENTS 1.0 PURPOSE OF THE DOCUMENT... 3 2.0 INTRODUCTION AND OVERVIEW... 4 3.0 GOVERNANCE STRUCTURE AND ACCOUNTABILITY...

More information

Enterprise Risk Management

Enterprise Risk Management Enterprise Risk Management The Basics or ERM 101 1 Enterprise Risk Management Enterprise risk management deals with risks and opportunities affecting value creation or preservation, defined as: COSO s

More information

and Risk Tolerance in an Effective ERM Program

and Risk Tolerance in an Effective ERM Program The Roles of Risk Appetite and Risk Tolerance in an Effective ERM Program Eric Gerner, Risk Advisory Services Director Tuesday, July 10, 2012 General Information Share the webinar Ask a question Votes

More information

Enterprise Risk Management for Hospital Systems: What Counsel Needs to Know

Enterprise Risk Management for Hospital Systems: What Counsel Needs to Know Presenting a live 90-minute webinar with interactive Q&A Enterprise Risk Management for Hospital Systems: What Counsel Needs to Know Leveraging ERM as a Strategic Business Tool WEDNESDAY, APRIL 4, 2012

More information

RISK MANAGEMENT IN A FOR-

RISK MANAGEMENT IN A FOR- RISK MANAGEMENT IN A FOR- PROFIT ORGANISATION 1 OBJECTIVES Explain the risk management framework The underlying process and cycle, and resources and people involved The framework can be applied in for

More information

THE ROLE OF FINANCE AND ACCOUNTING IN ENTERPRISE RISK MANAGEMENT

THE ROLE OF FINANCE AND ACCOUNTING IN ENTERPRISE RISK MANAGEMENT THE ROLE OF FINANCE AND ACCOUNTING IN ENTERPRISE RISK MANAGEMENT Let me begin by thanking Baruch College for giving me the opportunity to present this year s prestigious Emanuel Saxe Lecture in Accounting.

More information

Enterprise risk management: A pragmatic, four-phase implementation plan

Enterprise risk management: A pragmatic, four-phase implementation plan Enterprise risk management: A pragmatic, four-phase implementation plan Prepared by: John Brackett, Managing Director, Risk Advisory Services, RSM McGladrey, Inc. 704.442.3820, john.brackett@mcgladrey.com

More information

ENTERPRISE RISK MANAGEMENT FOR BANKS

ENTERPRISE RISK MANAGEMENT FOR BANKS ENTERPRISE RISK MANAGEMENT FOR BANKS Seshagiri Rao Vaidyula, Senior Manager, Governance, Risk and Compliance Jayaprakash Kavala, Consultant, Banking and Financial Services 1 www.wipro.com/industryresearch

More information

Get Plugged in: Defining Your Connectivity Strategy. CHIME College Live 17 April 2013

Get Plugged in: Defining Your Connectivity Strategy. CHIME College Live 17 April 2013 Get Plugged in: Defining Your Connectivity Strategy CHIME College Live 17 April 2013 Topics Introductions Drivers Strategies Imperatives Discussion Page 2 Copyright Kurt Salmon 2013 All Rights Reserved

More information

Impact of New Internal Control Frameworks

Impact of New Internal Control Frameworks Impact of New Internal Control Frameworks Webcast: Tuesday, February 25, 2014 CPE Credit: 1 0 With You Today Bob Jacobson Principal, Risk Advisory Services Consulting Leader West Region Bob.Jacobson@mcgladrey.com

More information

Exhibit 1: Structure of a heat map

Exhibit 1: Structure of a heat map Integrating risk and performance management processes Werner Bruggeman Geert Scheipers Valerie Decoene 1. Introduction Years ago, Kaplan & Norton interviewed managers about their time consumption and they

More information

Top Priorities for Internal Auditors in U.S. Healthcare Provider Organizations

Top Priorities for Internal Auditors in U.S. Healthcare Provider Organizations Top Priorities for Internal Auditors in U.S. Healthcare Provider Organizations Key Areas for Improvement Include Compliance, Social Media and Quality Assurance Activities INTRODUCTION In January 01, healthcare

More information

Accountable Care Organizations and Provider Integration Under Health Care Reform. Sarah Swank 202.326.5003 seswank@ober.com

Accountable Care Organizations and Provider Integration Under Health Care Reform. Sarah Swank 202.326.5003 seswank@ober.com Accountable Care Organizations and Provider Integration Under Health Care Reform Sarah Swank 202.326.5003 seswank@ober.com February 26, 2014 Overview Affordable Care Act and ACOs Trends in Integration

More information

ENTERPRISE RISK MANAGEMENT AN OVERVIEW. November 2011

ENTERPRISE RISK MANAGEMENT AN OVERVIEW. November 2011 ENTERPRISE RISK MANAGEMENT AN OVERVIEW November 2011 Overview Overview of Enterprise Risk Management (ERM) Risk Assessment Process Identifying Business Risks Consideration of Impact and Likelihood Soliciting

More information

Sunday March 30, 2014, 9am noon HCCA Conference, San Diego

Sunday March 30, 2014, 9am noon HCCA Conference, San Diego Meaningful Use as it Relates to HIPAA Compliance Sunday March 30, 2014, 9am noon HCCA Conference, San Diego CLAconnect.com Objectives and Agenda Understand the statutory and regulatory background and purpose

More information

Seven Component Framework For Compliance Auditing & Monitoring Physician Contracting In Healthcare Organizations

Seven Component Framework For Compliance Auditing & Monitoring Physician Contracting In Healthcare Organizations Seven Component Framework For Compliance Auditing & Monitoring Physician Contracting In Healthcare Organizations Author: Debi J. Weatherford, Vice President, Compliance and Audit Services, Revenue Cycle

More information

How To Get A Job At A Hospital

How To Get A Job At A Hospital Because they are experts in managing healthcare data and protecting the privacy and security of medical records, and play an essential role in helping organizations migrate to the electronic health record

More information

4/25/2016. American Society for Healthcare Risk Management. ASHRM is

4/25/2016. American Society for Healthcare Risk Management. ASHRM is American Society for Healthcare Risk Management ASHRM is 6,000 members strong Society of individuals involved in the risk management field Clinical risk managers Patient safety Risk financing/claims management

More information

2/9/2012. 2012 HIPAA Privacy and Security Audit Readiness. Table of contents

2/9/2012. 2012 HIPAA Privacy and Security Audit Readiness. Table of contents 2012 HIPAA Privacy and Security Audit Readiness Mark M. Johnson National HIPAA Services Director Table of contents Page Background 2 Regulatory Background and HITECH Impacts 3 Office of Civil Rights (OCR)

More information

Strategic Risk Management for School Board Trustees

Strategic Risk Management for School Board Trustees Strategic Management for School Board Trustees A Management Process Framework May, 2012 Table of Contents Introduction Page I. Purpose....................................... 3 II. Applicability and Scope............................

More information

Enterprise Risk Management

Enterprise Risk Management Cayman Islands Society of Professional Accountants Enterprise Risk Management March 19, 2015 Dr. Sandra B. Richtermeyer, CPA, CMA What is Risk Management? Risk management is a process, effected by an entity's

More information

THE SOUTH AFRICAN HERITAGE RESOURCES AGENCY ENTERPRISE RISK MANAGEMENT FRAMEWORK

THE SOUTH AFRICAN HERITAGE RESOURCES AGENCY ENTERPRISE RISK MANAGEMENT FRAMEWORK THE SOUTH AFRICAN HERITAGE RESOURCES AGENCY ENTERPRISE RISK MANAGEMENT FRAMEWORK ACCOUNTABLE SIGNATURE AUTHORISED for implementation SIGNATURE On behalf of Chief Executive Officer SAHRA Council Date Date

More information

Beyond risk identification Evolving provider ERM programs

Beyond risk identification Evolving provider ERM programs Beyond risk identification Evolving provider ERM programs March 2016 At a glance PwC conducted research to assess the state of enterprise risk management (ERM) within healthcare providers and found many

More information

Tying It All Together: Practical ERM Integration. Richard Scanlon Vice President Enterprise Risk Management CIGNA Corporation

Tying It All Together: Practical ERM Integration. Richard Scanlon Vice President Enterprise Risk Management CIGNA Corporation Tying It All Together: Practical ERM Integration Richard Scanlon Vice President Enterprise Risk Management CIGNA Corporation November 16, 2007 1 Agenda Basis for ERM Integration ERM Objectives ERM Focus

More information

The Changing IT Risk Landscape Understanding and managing existing and emerging risks

The Changing IT Risk Landscape Understanding and managing existing and emerging risks The Changing IT Risk Landscape Understanding and managing existing and emerging risks IIA @ Noon Kareem Sadek Senior Manager, Deloitte Canada Chris Close Senior Manager, Deloitte Canada December 2, 2015

More information

The Changing Landscape for Trade Compliance Enterprise Risk (and Opportunity) Management

The Changing Landscape for Trade Compliance Enterprise Risk (and Opportunity) Management The Changing Landscape for Trade Compliance Enterprise Risk (and Opportunity) Management API International Trade and Customs Conference H. Michael Leightman, Partner Customs and International Trade Practice

More information

ERM Program. Enterprise Risk Management Guideline

ERM Program. Enterprise Risk Management Guideline ERM Program Enterprise Management Guideline Table of Contents PREAMBLE... 2 When should I refer to this Guideline?... 3 Why do we need a Guideline?... 4 How do I use this Guideline?... 4 Who is responsible

More information

Audit. In today s constantly changing business. The Relevant

Audit. In today s constantly changing business. The Relevant Edward Hill, CIA, CPA Executive Director Business Advisory Services Grant Thornton LLP The Relevant Audit IT GAIT-R provides a top-down, risk-based approach to scoping IT risks and processes into audits.

More information

ENTERPRISE RISK MANAGEMENT. J. Joseph Hoey, Ed.D. Bridgepoint Education CAIR 2015

ENTERPRISE RISK MANAGEMENT. J. Joseph Hoey, Ed.D. Bridgepoint Education CAIR 2015 ENTERPRISE RISK MANAGEMENT J. Joseph Hoey, Ed.D. Bridgepoint Education CAIR 2015 Enterprise Risk Management (ERM) Defined ERM is a principles-based approach to manage, not eliminate risk. ERM is a process

More information

The Role of the Board in Enterprise Risk Management

The Role of the Board in Enterprise Risk Management Enterprise Risk The Role of the Board in Enterprise Risk Management The board of directors plays an essential role in ensuring that an effective ERM program is in place. Governance, policy, and assurance

More information

Healthcare Risk Management: The Path Forward

Healthcare Risk Management: The Path Forward Healthcare Risk Management: The Path Forward Legislative regulation and mounting patient expectations have created seismic shifts in U.S. healthcare that are compelling practitioners to abandon well-established

More information

2013 PLUS Medical PL Symposium Credentialing in the World of ACOs

2013 PLUS Medical PL Symposium Credentialing in the World of ACOs 2013 PLUS Medical PL Symposium Credentialing in the World of ACOs Chicago April 10-11, 2013 Credentialing in the World of ACOs MODERATOR: Fay A. Rozovsky, JD, MPH, DFASHRM, President, The Rozovsky Group,

More information

To Be or Not To Be Independent, That Is The Question. Lisa Chase Law Offices of Lisa Chase, P.C. chase@lchaselaw.

To Be or Not To Be Independent, That Is The Question. Lisa Chase Law Offices of Lisa Chase, P.C. chase@lchaselaw. To Be or Not To Be Independent, That Is The Question Lisa Chase Law Offices of Lisa Chase, P.C. chase@lchaselaw.com (520) 623-6262 Overview Private Practice Trends Benefits of Independence Threats and

More information

Enterprise Risk Management Panel Discussion

Enterprise Risk Management Panel Discussion Enterprise Risk Management Panel Discussion Facilitators Bill Cole, VCU and VCUHS CAE Michael Bordoni, former Emory University CAE, now DHG (Dixon Hughes Goodman LLP) Risk Advisory Services Partner Gary

More information

Enterprise Risk Management in a Highly Uncertain World. A Presentation to the Government-University- Industry Research Roundtable June 20, 2012

Enterprise Risk Management in a Highly Uncertain World. A Presentation to the Government-University- Industry Research Roundtable June 20, 2012 Enterprise Risk Management in a Highly Uncertain World A Presentation to the Government-University- Industry Research Roundtable June 20, 2012 CRO Council Introduction Mission The North American CRO Council

More information

How To Understand The Role Of An Internal Audit

How To Understand The Role Of An Internal Audit Top Ten Issues facing Internal Auditing in the Future The IIA Dallas Chapter April 6, 2006 Presented by: David A. Richards, CIA, CPA President The Institute of Internal Auditors drichards@theiia.org 1

More information

The Upside of Risk: Enterprise Risk Management and Public Real Estate Companies

The Upside of Risk: Enterprise Risk Management and Public Real Estate Companies The Upside of Risk: Enterprise Risk Management and Public Real Estate Companies James Barkley, Simon Property Group, Inc. and David E. Weiss, DDR Corp. Introduction: As lawyers, particularly real estate

More information

Health Data Analytics (HDA) Build the organizational capabilities to create value from HDA

Health Data Analytics (HDA) Build the organizational capabilities to create value from HDA Health Data Analytics (HDA) Build the organizational capabilities to create value from HDA Health Data Analytics (HDA) Webinar Presenter Celwyn Evans Moderator Joe Crandall Objective: Review a pragmatic

More information

Enhancing IT Governance, Risk and Compliance Management (IT GRC)

Enhancing IT Governance, Risk and Compliance Management (IT GRC) Enhancing IT Governance, Risk and Compliance Management (IT GRC) Enabling Reliable eservices Tawfiq F. Alrushaid Saudi Aramco Agenda GRC Overview IT GRC Introduction IT Governance IT Risk Management IT

More information

A Proposed Information Technology Audit Framework For Microfinance Kumasi

A Proposed Information Technology Audit Framework For Microfinance Kumasi A Proposed Information Technology Audit Framework For Microfinance Kumasi Dr. Thomas Yeboah ABSTRACT Information Technology Audit (ITA) has become very important aspect in the Information Technology (IT)

More information

COBIT Helps Organizations Meet Performance and Compliance Requirements

COBIT Helps Organizations Meet Performance and Compliance Requirements DISCUSS THIS ARTICLE COBIT Helps Organizations Meet Performance and Compliance Requirements By Sreechith Radhakrishnan, COBIT Certified Assessor, ISO/IEC 20000 LA, ISO/IEC 27001 LA, ISO22301 LA, ITIL Expert,

More information

Strategic Plan 2014 2018

Strategic Plan 2014 2018 DEPARTMENT OF HEALTH Strategic Plan 2014 2018 We focus on improving internal systems and processes in the Vermont Department of Health s Strategic Plan. By successfully implementing the Plan s objectives,

More information

Looking at the SANS 20 Critical Security Controls

Looking at the SANS 20 Critical Security Controls Looking at the SANS 20 Critical Security Controls Mapping the SANS 20 to NIST 800-53 to ISO 27002 by Brad C. Johnson The SANS 20 Overview SANS has created the 20 Critical Security Controls as a way of

More information

PAPER-6 PART-1 OF 5 CA A.RAFEQ, FCA

PAPER-6 PART-1 OF 5 CA A.RAFEQ, FCA 1 Chapter-4: Business Continuity Planning and Disaster Recovery Planning PAPER-6 PART-1 OF 5 CA A.RAFEQ, FCA Learning Objectives 2 To understand the concept of Business Continuity Management To understand

More information

Getting the Focus on Enterprise Risk Management Right. by Al Decker & Donna Galer

Getting the Focus on Enterprise Risk Management Right. by Al Decker & Donna Galer Getting the Focus on Enterprise Risk Management Right by Al Decker & Donna Galer Definition and Purpose of Enterprise Risk Management (ERM) All business processes exist to achieve a specific end product

More information

Implementing an Integrated City-wide Risk Management Framework

Implementing an Integrated City-wide Risk Management Framework AUDITOR GENERAL S REPORT ACTION REQUIRED Implementing an Integrated City-wide Risk Management Framework Date: June 11, 2015 To: From: Wards: Audit Committee Auditor General All Reference Number: SUMMARY

More information

Principled Performance & GRC

Principled Performance & GRC part of GRC Fundamentals Principled Performance & GRC How principled performance is the new normal and the imperative for integrating governance, performance, risk, internal control and compliance management

More information

A Registered Nurses Place in Affordable Healthcare Barbara Mayer, RN, PhD Director of Nursing Quality Stanford Health Care Stanford, California

A Registered Nurses Place in Affordable Healthcare Barbara Mayer, RN, PhD Director of Nursing Quality Stanford Health Care Stanford, California A Registered Nurses Place in Affordable Healthcare Barbara Mayer, RN, PhD Director of Nursing Quality Stanford Health Care Stanford, California People in Health Care January 29, 2015 San Diego, California

More information

www.pwc.com Governance, Risk and Compliance Update & Hot Topics Pittsburgh Chapter IIA December 3, 2012

www.pwc.com Governance, Risk and Compliance Update & Hot Topics Pittsburgh Chapter IIA December 3, 2012 www.pwc.com Governance, Risk and Compliance Update & Hot Topics Pittsburgh Chapter IIA December 3, 2012 Agenda Introduction Mark Gibbons 12:00 12:05 Governance, Risk and Compliance Overview Mark Gibbons

More information

Internal Auditing Guidelines

Internal Auditing Guidelines Internal Auditing Guidelines Recommendations on Internal Auditing for Lottery Operators Issued by the WLA Security and Risk Management Committee V1.0, March 2007 The WLA Internal Auditing Guidelines may

More information

ENTERPRISE RISK MANAGEMENT SURVEY. 2013 RIMS Enterprise Risk Management (ERM) Survey SPONSORED BY:

ENTERPRISE RISK MANAGEMENT SURVEY. 2013 RIMS Enterprise Risk Management (ERM) Survey SPONSORED BY: t RIMS2013 ENTERPRISE RISK MANAGEMENT SURVEY 2013 RIMS Enterprise Risk Management (ERM) Survey SPONSORED BY: Administered by: Advisen Ltd. Zurich Authored by: RIMS and Advisen Ltd. Publishers: Mary Roth,

More information

Health care internal audit: Identifying prevalent risks within your organization

Health care internal audit: Identifying prevalent risks within your organization Health care internal audit: Identifying prevalent risks within your organization Overview The health care sector continues to go through many changes, presenting several new risks and a host of complicated

More information

Clarius Group Risk Management Policy and Framework

Clarius Group Risk Management Policy and Framework 1. Introduction Clarius Group Risk Management Policy and Framework 1.1 Definition Risk is the chance of something happening that will have an impact on objectives. Risk provides the opportunity (upside)

More information

Enterprise Risk Management, Compliance, Management Advisory Services: An Integrated Approach

Enterprise Risk Management, Compliance, Management Advisory Services: An Integrated Approach Enterprise Risk Management, Compliance, and Management Advisory Services: An Integrated Approach SCCE s Higher Education Compliance Conference June 13, 2011 Objectives Implementing Enterprise Risk Management

More information

Physician Scorecards. Clinical Documentation and Coding Improvement. Team Goals Metrics. Data Benchmarks Compliance.

Physician Scorecards. Clinical Documentation and Coding Improvement. Team Goals Metrics. Data Benchmarks Compliance. Health Solutions Clinical Documentation and Coding Improvement Physician Scorecards Individual physician performance has a direct impact on a health system s financial, patient safety, and care quality

More information

RSA ARCHER OPERATIONAL RISK MANAGEMENT

RSA ARCHER OPERATIONAL RISK MANAGEMENT RSA ARCHER OPERATIONAL RISK MANAGEMENT 87% of organizations surveyed have seen the volume and complexity of risks increase over the past five years. Another 20% of these organizations have seen the volume

More information