Compliance News

Thought leadership and practical advice on policy development, audit readiness, and continuous monitoring. Find templates, checklists, and workflows that align programs with evolving regulations.

2026 CMS Enforcement: Your Data Accuracy Is Now Your Primary Revenue Defense

For years, you have likely operated under a "best-effort" compliance model. If you submitted your data, responded to audits reasonably well, and fixed errors as they arose, you remained safe. In 2026, that safety net disappears. The Centers for Medicare & Medicaid Services (CMS) is shifting its stance. They no longer want to see your effort; they want to see your proof. The new enforcement ...

By |2026-01-06T14:18:24+00:00January 6th, 2026|Compliance, Healthcare GRC|

The 2026 Compliance Gap: Why “Check-the-Box” Can No Longer Protect Your Business

By 2031, cybercrime will cost the world $12.2 trillion annually. That is roughly $386,000 in damages every single second. If you are still managing risk with static spreadsheets or annual training cycles, you are fighting a digital war with analog tools. The compliance landscape for 2026 isn't just shifting; it is accelerating. From autonomous AI agents that make decisions without human oversight to "N-th party" ...

By |2025-12-30T20:18:37+00:00January 2nd, 2026|Compliance, Governance, Risk & Compliance: GRC|

What the 2025 DOJ Guidance Means for Compliance Teams

You might be more exposed than you realize. Here is how to spot the red flags in your hiring and training programs before an investigation starts. In 2024 alone, the Department of Justice (DOJ) recovered around $2.7 billion through False Claims Act cases tied to compliance failures. With the 2025 guidance, DEI programs now sit in the same high-risk zone as billing fraud, procurement violations, ...

By |2025-12-22T18:43:23+00:00December 22nd, 2025|Compliance|

How to Measure Compliance Program Effectiveness: Reporting Lines, Risk Assessments & More

Expectations for Compliance Officers continue to rise as they assume new areas of oversight, such as privacy compliance, internal audit, and compliance risk management. Given their wide range of responsibilities, not to mention the dynamic and demanding nature of their jobs, a number of important questions arise: How do you prove your compliance program is effective? Where should your Compliance Officer sit in the org ...

By |2025-09-29T19:27:06+00:00September 28th, 2025|Compliance, Governance, Risk & Compliance: GRC|

How to Build Compliance Teams That Thrive Under Pressure

Tasked with managing risk, navigating uncertainty, and leading with clarity, compliance officers and their teams need to be able to operate under pressure and respond decisively. According to Fabiana Lacerca-Allen, JD, LLM, Chief Compliance Officer at Cipla USA and author of The Crisis Capable Leader, and Brenda Crabtree, former U.S. Naval officer turned Director of Compliance at Vaxcyte, these traits are best honed by leaning ...

By |2025-07-07T13:26:21+00:00July 7th, 2025|Compliance, Governance, Risk & Compliance: GRC|

Understanding DOJ Guidance: What’s the Impact on Corporate Compliance Programs?

The U.S. Department of Justice (DOJ) has long emphasized the importance of effective corporate compliance programs. While enforcement priorities may shift over time, the core expectations outlined in DOJ guidance remain consistent: programs must be well-designed, applied in good faith, and actually work in practice. What does that look like in real terms? First, programs must reflect the unique risks of the organization. There’s no ...

By |2025-08-15T18:59:18+00:00June 2nd, 2025|Compliance, Governance, Risk & Compliance: GRC|

A Quick Look at CPS 230 APRA: What Australia’s Standard Means for Financial Institutions

The CPS 230 APRA standard represents one of the most significant shifts in how Australian financial institutions manage operational risk. Introduced by the Australian Prudential Regulation Authority (APRA), CPS 230 is designed to strengthen resilience by improving oversight, risk visibility, and accountability across critical operations. This standard moves beyond reactive risk management. It encourages a culture of preparedness and clarity. And it ensures organizations are compliant ...

By |2025-05-07T19:32:35+00:00May 7th, 2025|Compliance, Governance, Risk & Compliance: GRC|

Watch Current State of Healthcare Compliance Programs: 2025 Benchmark Results

Current State of Healthcare Compliance Programs: 2025 Benchmark Results For the sixteenth year in a row, SAI360 partnered with Strategic Management Services to study the state of healthcare compliance programs in an industry benchmark survey of programs in the United States. This annual survey is designed to gain an understanding of issues currently confronting compliance programs and how compliance officers and organizations are responding to ...

By |2025-05-12T15:06:19+00:00April 18th, 2025|Compliance, Governance, Risk & Compliance: GRC, Healthcare GRC|

Watch Current State of Healthcare Compliance Programs: 2025 Benchmark Results (Video)

For the sixteenth year in a row, SAI360 partnered with Strategic Management Services to study the state of healthcare compliance programs in an industry benchmark survey of programs in the United States. In this webinar, former HHS Inspector General, Richard Kusserow, CEO of Strategic Management Services, reports on the results and provides analysis of the data from the survey, including important trending and cumulative ...

By |2025-06-03T20:19:57+00:00April 17th, 2025|Compliance, Governance, Risk & Compliance: GRC, Healthcare GRC|

How to Create an Effective Compliance Program

Ask five organizations what makes an effective compliance program, and you’ll likely get five different answers. But ask a regulator, and the picture gets a lot clearer.  Regulators are not looking for flashy training modules or one-size-fits-all policies. What they’re looking for is evidence—evidence that your compliance program is real, rooted in risk, and taken seriously across the business. Can you walk the compliance walk ...

By |2025-06-17T20:25:38+00:00April 16th, 2025|Compliance, Governance, Risk & Compliance: GRC|