20 Question Compliance Assessment

Corporate Compliance Post Pandemic

Is your practice as safeguarded as you would like? This 20-question self-assessment tool immediately scores your overall compliance in the areas of OSHA, Infection Control, HIPAA, and Corporate Compliance under the Affordable Care Act. Understanding your compliance score enables you to identify and prioritize risk reduction and safety strategies in your practice or organization.

Would your practice or organization pass a surprise random audit or compliant?

STRATEGIC

Risks resulting from external events and trends that can impact the growth and value of your practice or organization.

FINANCIAL

Risks associated with the ability of the practice to make money and remain fiscally sound.

OPERATIONAL

Core business risks such as marketing, competitive or clinical/patient safety risks.

LEGAL/REGULATORY

Non-compliance with state/federal rules, regulations, and statutes affecting dentistry. See our free HIPAA and OSHA Risk Assessments

TECHNOLOGY

Rapidly evolving risks from technologies and equipment, biomedical products, computers, or teledentistry.

HUMAN CAPITAL

Risks related to staffing, encompassing recruitment, training, and maintenance of your team. See our free Employment Law Risk Assessment.

This 20-question self-assessment tool immediately scores your compliance in the areas of OSHA, Infection Control, HIPAA, and Corporate Compliance under the Affordable Care Act. Understanding your compliance score enables you to identify and prioritize risk reduction and safety strategies in your practice.

Assessment Quiz

Name*
First Last
Name of Practice*
Work Email
Phone Number
Rate your practice on a scale from least confident (I'm not sure) to most confidence (I nailed it!).
I designated/assigned a team member(s) the role of HIPAA Privacy/Security Officer.
I designated/assigned a team member(s) the role of OSHA/Infection Control Coordinator.
I have written job descriptions for the roles above.
These individuals have been provided additional training and/or certifications in order to carry out their role.
I have clear and current documentation of new hire training during my onboarding process. (EX: OSHA, Infection Control, HIPAA, Sexual Harassment, Corporate Compliance, etc)
I have clear and current training rosters (not CE certificates) for annual training for OSHA, Infection Control, HIPAA, Sexual Harassment, Workplace Violence, Corporate Compliance, etc per Federal and State-specific requirements that is customized for our practice or organization and does not consist of generic recordings.
I have written Corporate Compliance policies, a Risk Management Plan, and an established Compliance Committee. (Note: this relates to coding/billing and prevention of fraud, waste, and abuse)
Our Compliance Committee meets regularly (e.g. monthly or quarterly) and we have an established workplan to assess various risks on an ongoing basis.
We regularly (e.g. monthly or quarterly) conduct internal chart reviews for documentation completeness and accuracy of coding.
If I was audited, I could provide the last 3yrs of OSHA and 6yrs of HIPAA annual training as required by these agencies.
I completed a HIPAA Security Risk Analysis in the last 12-months and resolved any identified security vulnerabilities.
I have complete HIPAA Security and Privacy Policies that were customized for my practice or organization? (EX: not fill in the blank)
I have Mobile Device Security, Social Media, Remote Worker, and Computer/Internet Usage policies and they are regularly reviewed and updated.
I regularly ask my Business Associates to provide proof they are HIPAA compliant. (EX: IT Partner or Vendor, Collection Agency, Patient Communication Platform, Consultants) Note: BA's must follow key provisions of the HITECH Act to be HIPAA compliant.
We occasionally use non-healthcare programs, such as Google Docs, Dropbox, Slack, Monday.com, What's App, Zoom, etc to share patient data with other dental practices or the lab. We have assessed the risk and as a result have taken added security measures that are documented.
Our IT Partner/Vendor regularly provides ongoing dark web scans, anti-virus/malware updates and real-time monitoring of our network (managed services) as required by the Security Rule.
I have complete OSHA Policies that were customized for my practice, such as Exposure Control Plan, Hazard Communication Plan, Post Exposure Management Plan, Radiation/Laser Safety Plan, Workplace Violence, Active Shooter Policy,etc. (EX: not a generic fill in the blank manual)
I have documentation of an annual review of my Exposure Control Plan as required by OSHA.
We have a copy of the CDC Guidelines for Infection Control for Dental Settings and our team is familiar with their responsibilities per the CDC Guidelines.
Would you like to subscribe to our e-newsletter?*
- Yes, please subscribe me to the e-newsletter.
- No, thank you.
Name
This field is for validation purposes and should be left unchanged.