[CLIENT TYPE] Achieves [OUTCOME] After IHS Regulatory Gap Assessment

Last updated: April 2026

Last updated: April 2026

Detail	Value
Organization Type	[e.g., Behavioral health network / Regional health plan / FQHC / Specialty pharmacy]
Organization Size	[e.g., 3 sites, 85 staff / Single-site, 12 providers / 22,000 member lives]
Regulatory Frameworks Assessed	[e.g., CARF + CMS + HIPAA / NCQA + state licensure / ACHC + USP 797]
Engagement Duration	[e.g., 8 weeks]
Gaps Identified	[e.g., 23 findings across 6 domains]
Survey Outcome	[e.g., First-time accreditation awarded / Zero citations / Preliminary Denial reversed]

The Challenge

[CLIENT TYPE] came to IHS [X months] before a scheduled [ACCREDITING BODY] survey. The organization had [DESCRIBE SITUATION: e.g., never been through an accreditation survey before / experienced a citation in the previous survey cycle / recently launched a new service line that triggered new regulatory requirements / gone through a merger that created overlapping compliance obligations].

Internally, the organization had [DESCRIBE INTERNAL STATE: e.g., one part-time compliance officer managing daily operations with no capacity for systematic assessment / policies last reviewed in [YEAR] / documentation practices that staff followed inconsistently across sites]. The primary concern was [DESCRIBE PRIMARY CONCERN: e.g., not knowing which specific standards represented the highest risk / uncertainty about whether the new [SERVICE LINE/PROGRAM] met applicable requirements / needing an independent assessment the board could rely on for governance purposes].

Key constraints: [DESCRIBE CONSTRAINTS: e.g., limited remediation timeline before survey / budget ceiling for the engagement / specific domains requiring expedited assessment due to upcoming state licensure renewal].

The IHS Approach

IHS initiated the engagement with a scope definition session mapping [CLIENT TYPE]'s regulatory obligations across [LIST FRAMEWORKS]. This phase identified [NUMBER] overlapping requirements across frameworks — meaning [NUMBER] policies could be revised once to satisfy multiple standards simultaneously, reducing remediation effort by an estimated [X]%.

Phase 1: Scope Definition and Framework Mapping

[DESCRIBE SCOPE DEFINITION: e.g., IHS mapped the organization's service lines against CMS Conditions of Participation, CARF 2024 standards, and applicable state licensure requirements. Three domains emerged as the highest-priority assessment areas based on known citation patterns for this organization type: infection prevention, care planning, and staff competency documentation.]

Phase 2: Current State Assessment

[DESCRIBE ASSESSMENT: e.g., IHS conducted document review across [NUMBER] policy areas, interviewed [NUMBER] staff members across clinical, administrative, and compliance functions, and applied tracer methodology following [NUMBER] patient care episodes from intake through discharge. Unannounced walkthroughs of all [NUMBER] sites completed the operational assessment.]

Phase 3: Root Cause Analysis

[DESCRIBE ROOT CAUSE FINDINGS: e.g., Of the 23 gaps identified, 14 traced to a single root cause: the organization's policy review cycle had not been updated following the 2024 CMS final rule. Staff were following policies that referenced superseded requirements. Correcting the policy review process — not writing 14 new policies — was the primary remediation lever.]

Phase 4: Corrective Action Planning

[DESCRIBE CAP: e.g., IHS delivered a prioritized CAP with 23 findings assigned across 6 internal owners. 8 findings were classified critical-path for immediate remediation before application; 12 as high-priority for completion within 60 days; 3 as improvement-cycle items addressable during normal operations.]

Key Findings

The assessment identified [NUMBER] total findings across [NUMBER] regulatory domains. Highest-risk findings by domain:

Domain	Findings	Risk Classification	Regulatory Citation
[e.g., Infection Prevention & Control]	[e.g., Hand hygiene documentation absent from 3 of 4 units; sterilization logs incomplete for 6-month period]	Critical Path	[e.g., CMS F880 / TJC PE]
[e.g., Care Planning]	[e.g., 40% of reviewed care plans lacked SMART goals; 25% had not been updated within required 90-day window]	Critical Path	[e.g., CMS F656/F657]
[e.g., Staff Competency]	[e.g., Direct observation sign-offs missing for 7 of 12 clinical staff on nonwaived testing procedures]	High Priority	[e.g., CAP GEN.55500]
[e.g., HIPAA Security]	[e.g., 2 vendor BAAs expired; ePHI access logging not enabled on EHR mobile application]	High Priority	[e.g., 45 CFR §164.308]
[e.g., Policy Currency]	[e.g., 11 policies referencing superseded 2022 standards; 3 lacking medical director signatures]	High Priority	[e.g., CAP COM.10000]
[e.g., Physical Environment]	[e.g., Fire alarm testing log gap for July–September 2025; ILSM assessment not completed for ongoing construction]	Improvement Cycle	[e.g., TJC PE (Accreditation 360)]

A finding that the internal compliance team had not identified: [DESCRIBE UNEXPECTED FINDING: e.g., the organization's new AI-assisted care planning tool had no algorithmic transparency documentation — a requirement under TJC's Accreditation 360 digital health provisions effective January 2026. This finding was not on the team's radar and would have produced a citation in the upcoming survey.]

Remediation and Outcome

IHS supported the organization through remediation of all critical-path and high-priority findings over [X weeks/months] following assessment delivery. Key remediation actions:

[REMEDIATION ACTION 1: e.g., Rebuilt policy review cycle with automated renewal calendar and medical director signature workflow; updated 11 policies to current standards in 3 weeks]
[REMEDIATION ACTION 2: e.g., Implemented hand hygiene observation audit program with unit-level accountability; completed 90-day compliance documentation build for all 4 units]
[REMEDIATION ACTION 3: e.g., Completed care plan revision for all active patients with SMART goal documentation; implemented 90-day review reminder system in EHR]
[REMEDIATION ACTION 4: e.g., Renewed all vendor BAAs; enabled ePHI access logging on mobile application with IT department; documented HIPAA security risk analysis update]
[REMEDIATION ACTION 5: e.g., Built AI governance documentation for care planning tool including algorithmic transparency disclosure and bias-testing protocol]

Survey Outcome

[DESCRIBE OUTCOME: e.g., The organization entered its CARF survey [X months] after IHS delivered the gap assessment report. The survey produced [NUMBER] findings — compared to [NUMBER] findings in the prior survey cycle. All findings were in the improvement-cycle tier identified by the IHS assessment. Zero critical-path or high-priority findings appeared in the survey report. [ACCREDITATION TYPE] was awarded at [FULL/CONDITIONAL] level.]

[OUTCOME QUOTE PLACEHOLDER — client testimonial if available]

Post-Assessment Value Beyond the Survey

[DESCRIBE ADDITIONAL VALUE: e.g., The compliance maturity score from the IHS assessment was included in the organization's annual board report, demonstrating to the board of directors that compliance risk had been systematically addressed. The executive-level reporting format was subsequently adopted as the organization's standard compliance dashboard template. The CAP ownership assignments became the foundation of the organization's ongoing compliance monitoring program.]

Why IHS

[CLIENT QUOTE OR RATIONALE: e.g., The organization selected IHS because of its multi-framework expertise across CARF, CMS, and HIPAA — domains that no single specialty firm covers within one engagement. Prior to IHS, the organization had used separate consultants for accreditation and HIPAA assessments, which produced duplicative findings and conflicting remediation priorities. The IHS integrated assessment eliminated that fragmentation.]

Thomas G. Goddard, JD, PhD, led the engagement from scope definition through survey preparation. The organization worked with the same principal throughout — no account manager handoff, no junior associate delivering findings the senior consultant had not personally reviewed.

For organizations in similar situations — [DESCRIBE SITUATION: e.g., multi-framework compliance obligations, limited internal compliance capacity, or approaching accreditation for the first time] — IHS provides the same integrated, principal-led engagement model.

Ready to Get Started?

Schedule a no-obligation gap assessment consultation with IHS. We will assess your current compliance posture, identify the highest-risk domains for your organization type, and give you a clear roadmap to regulatory readiness.

Schedule Your Gap Assessment Consultation