As we near the end of 2024, organizations should be preparing and planning for 2025. Part of this preparation is developing a 2025 Compliance Work Plan to establish your organization’s focus areas.

Your organization’s work plan should include compliance, privacy, security and may even include legal. Some of the elements may include operations, developing policies and procedures, training, and auditing and monitoring. The items included should be areas that need to be improved or developed throughout the new year, prioritizing items that place your organization at higher risk.

When developing these work plan items, your organization should review and include any healthcare regulations or guidance updates. What audits need to be completed in 2025? Did your organization have any compliance issues in 2024 that need to be addressed? Did your organization identify areas in the 2024 audits that need improvement? Or perhaps new monitoring needs to be implemented?

Make sure to identify who is completing the items outlined in your work plan and what the budget is for any of the items that may require outside vendors. Does your organization have the funds and staff needed to complete the items outlined in your work plan?

In developing your 2025 Compliance Work Plan, be aware of your organization’s goals. The work plan should match those goals. If you are expanding telehealth, be sure to include plans to audit for the increased risk.

As mentioned previously, items should be listed by priority of risk. To help identify these risks, did your organization complete a risk assessment in 2024? If not, your organization should make that a priority in your 2025 Compliance Work Plan. It is important that your organization reviews and identifies any risk areas that need to be addressed annually. Additionally, risk assessments and follow up action items provide evidence of an effective compliance program.

Working with an outside vendor and having a fresh set of eyes review your Compliance Program and complete a risk assessment could help your organization identify risks that you weren’t aware of. Read our blog “Compliance Programs – How to Identify Gaps and Know Your Organization’s Risks” for more information.

Let our experts conduct a risk assessment to identify your organization’s risks and help develop your work plan. Our consultants also have experience reviewing Compliance Programs and completing a gap analysis to identify your organization’s gaps.

For more information, contact Harriett Wall at [email protected] or call (207) 432-4190.