Compliance Does Not Equal Security

A compliance program is a process or system that finds all consumer laws and guarantees that have breached (refer to part A).

It is often recommended for (HCO)’s to have a corporate compliance plan to be more efficient, reduce errors, and not have small errors turn into large errors. As (OIG) it’s a necessary and fundamental need to incorporate a corporate compliance plan to have for staff and management to stay organized and lessen the chance of fraud, waste, and abuse in the company. Stated by, (Cleverly, Song, & Cleverly, 2011), it is effective only if it includes management support, effective communication, continuous monitoring, and individual accountability. All these aspects are a continual monitoring requirement as long the corporate compliance is in place for the duration.

A compliance officer is responsible to ensure that the organization complies with state and federal law and regulations, as well as internal policies. Compliance officers must have thorough knowledge of the organizations’ culture, goals, and the healthcare industry laws. Their responsibility involves implementation of all essential activities to ensure the accomplishment of organizations’ compliance programs. They are in charge of conducting, maintaining, updating the compliance programs, educating staffs, and monitoring daily activities involving the inappropriate manners to alleviate the risks of organizations in dealing with unethical and illegal problems. The compliance officers must cooperate with others departments, such as human resource,

Compliance with Laws, Rules, and Regulations is, to me, the most important area in a company’s code of conduct. Complying with laws, rules, and regulations includes preventing harassment and discrimination, improper payments, and environmental compliance. When companies are in compliance they are not putting themselves at risk of huge fines, lawsuits, and negativity towards their company.

There are six U.S. based compliance law to date. These are Federal Information Security Management Act (FISMA) 2002, Health Insurance Portability and Accountability Act (HIPAA) 1996, Gramm-Leach-Bliley Act (GLBA) 1999, Sarbanes-Oxley Act (SOX) 2002, Family Educational Rights and Privacy Act (FERPA) 1974, Children’s Internet Protection Act (CIPA) 2000. The two I will discuss are:

When it comes to a compliance plan program it provider a proactive program that will ensures that you will have full compliance with all the applicable, policies, and the procedures, law and regulations. Compliance officer’s are responsibilities that this will be include in the development and it will also be in the implementation and a good management of this program for action and a designed to make sure that you would want to have3 a ethical behavior that would be in accordance with all the rules of the MUSC’s core values as to expressed in a mission statement and a cord of conduct. In these program it will endeavor to protect. One of the key element this program is the cultivation and to nurturing of an environment committed to the principle

In other instances, compliance is a type of conformity that would be a good thing in following rules or laws. Different types of rules from driving to being in a restaurant or store. To following laws of being on a freeway and avoiding to get pulled over or going to an airport and bring things that won't be allowed. Rules are put to sometimes keep us safe, like the rules of driving; always wear a seatbelt, no texting and driving, no drinking and driving, and etc.. But some are against the laws or rule of different types wouldn't be able to speak up because no one would listen to them now the rules stay the same as they are now.

Now a day, companies are focusing and investing more on IT security, where the company’s and customers’ personal and financial information managing and storing. Certainly, more cost involves in this process. Companies who failed in security breach prevention paid and paying huge amount. Example for this is Target. This multinational grocery stores company’s data breached in 2013 this affecting its business. Furthermore, by 2015 nearly 1000 Target employees lost their jobs and the company is facing legal suits from bankers and customers.

Compliance refers to a perpetrator attending appointments due to fear of consequences should they not do so. In this sense, it relates to following the rules and regulations. On the other hand, co-operation represents active engagement and a sense of buy in from the perpetrator (Weaver & Barry, 2014, p. 280).

Compliance is everyone's responsibility. Each employee is expected to be aware of the regulatory requirements and what they must do to achieve compliance in the context of their roles. This can be achieved through effective training.

Compliant or Compliance in a healthcare setting is referring to the HIPAA (Healthcare Insurance Portability and Accountability Act) rules, conventions, guidelines, procedures, plans, or federal/state laws that a healthcare facility will have in place for their staff to follow. An example of Compliance guidelines would be a requirement that providers must accurately complete and sign off on a patient’s note within a certain number of days after a treatment plan has been assessed. Another example would be guidelines in regard to a patient with Mental and Behavioral Health records. These type of records contain sensitive information and should not be widely shared with the entire staff. Therefore, a healthcare facility may set a rule/guideline

Performing a Compliance Audit is a way to prove that the organization is compliant with regulatory and international standards and also measure how the organization’s operations are regulated, risk balanced, measurable, and can be monitored. Based on the results of an audit, the organization will then prepare for formal certification or a renewal audit to confirm that any audit findings have been addressed. Such certifications can strengthen trust in an organization and give it a competitive edge.

Establishing and maintaining a culture requires the board and its senior management to demonstrate continuous support for compliance through their consideration of risks in setting and executing strategy budgets, articulating risk appetite, prioritising information technology (IT) plans, and holding business units accountable. Embedding compliance factors into performance reviews and bonus decisions sends a clear message about the importance of compliance coupled with this training, procedures,

A regulatory compliance examines the company’s ability to provide and regulate goods or services. For example, the reasoning for Health Insurance Portability and accountability act (HIPPA) uses inhouse and external auditing procedures is to identify if healthcare entities are acting in compliance, there is not a discretion with an employee or customer, and to identify a breach in operations (Davis, Schiller, & Wheeler, 2011). Some of these audits are mandated while others can be random just to ensure there is not a need for changes in procedures. Many enterprises are assessed in a HIPPA audit, including healthcare providers, clearinghouses, and insurance plans. During the Audit five components are studied within these organizations such

There should also be clear mechanisms in place for reporting and reviewing any compliance issues throughout the organisation which ensures the continued independence of the compliance team.