OIG Work Plan for Healthcare: Key Updates and Compliance Priorities

The Office of Inspector General (OIG) Work Plan is your forward-looking map of audits, evaluations, and enforcement themes that shape HHS Program Integrity. Understanding what is on the Work Plan—and why—helps you focus resources on the highest-risk areas, align internal monitoring, and demonstrate proactive compliance.

This guide explains how the Work Plan functions, highlights compliance program guidance for nursing facilities and Medicare Advantage, and shows how to use OIG financial recoveries and enforcement trends to calibrate oversight.

OIG Work Plan Overview

What the Work Plan covers

The Work Plan outlines active and planned projects across audits, evaluations, and inspections. Topics span Medicare, Medicaid, public health, and cross-cutting program integrity risks such as data quality, improper payments, and vendor oversight. Each item signals what the OIG considers material to beneficiaries and the federal healthcare dollar.

How the Work Plan evolves

The Work Plan updates on a rolling basis, typically monthly. New projects are added, scopes are refined, and timelines shift as emerging risks surface. This dynamic cadence means you should treat the Work Plan as a living risk register, not a once-a-year reference.

How to use it in practice

• Map each Work Plan item to your organization’s processes, owners, and controls.
• Assess inherent and residual risk, then prioritize validation steps (data testing, control walkthroughs, targeted audits).
• Document your rationale and remediation plans to evidence an active, risk-based compliance approach.

Updated Compliance Program Guidance for Nursing Facilities

Tailoring the seven elements to long‑term care

OIG’s Compliance Program Guidance emphasizes seven core elements, adapted here for nursing facility oversight: governance and tone; written standards; effective training; confidential reporting and non-retaliation; risk-based monitoring and auditing; consistent discipline; and prompt investigations with corrective action. In nursing facilities, quality-of-care risks must sit alongside billing integrity, not beneath it.

High-impact risk domains

• Quality and safety: care planning, adequate staffing, supervision, infection prevention, and incident reporting.
• Accurate clinical data: MDS accuracy, therapy documentation, medical necessity, and diagnosis coding that drives payment.
• Billing integrity: SNF Part A/B claims, consolidated billing requirements, and medically necessary admissions and days.
• Resident protections: grievance handling, abuse/neglect prevention, restraints, pharmacy oversight, and antipsychotic stewardship.
• Third-party and referral risks: vendor diligence, exclusion screening, and Anti-Kickback Statute awareness for arrangements with hospitals, physicians, and pharmacies.
• Overpayment management: timely identification, quantification, and refund of overpayments with root-cause remediation.

Operational playbook for facilities

• Integrate compliance with QAPI so clinical quality indicators feed your risk assessment and audit plan.
• Use data analytics to reconcile MDS, care plans, therapy minutes, and claims—flagging outliers for review.
• Embed brief, role-based training tied to real facility scenarios; refresh when Work Plan items shift.
• Trend hotline and incident data to identify systemic issues and close the loop on corrective actions.

Medicare Advantage and Nursing Facilities Compliance Guidance

Medicare Advantage compliance priorities

Medicare Advantage Compliance centers on accurate payment and beneficiary protection. Key areas include risk adjustment data integrity, encounter data quality, prior authorization appropriateness and timeliness, coverage determinations, appeals and grievances, broker/marketing oversight, network adequacy, and protections for vulnerable enrollees.

Implications for nursing facilities serving MA members

• Authorization and level-of-care decisions: maintain medical-necessity documentation supporting admission and continued stay.
• Care coordination and transitions: ensure timely, accurate exchange of documentation to prevent avoidable denials.
• Documentation integrity: align clinical records with claims, MDS, and any plan-specific requirements.
• Resident communication: provide clear, timely notices and support for appeals when coverage is disputed.

Shared controls across plans and providers

• Data integrity: reconcile clinical, MDS, and claims data to reduce error rates that drive improper payments.
• Vendor and delegate oversight: monitor utilization management and revenue cycle vendors through performance metrics and audits.
• Issue escalation: use joint committees to resolve denial patterns, address root causes, and validate corrective actions.

Financial Recoveries and Enforcement Actions

What OIG measures and enforces

Financial recoveries reflect dollars expected from audits and investigations, while enforcement spans administrative, civil, and criminal tools. Criminal and civil enforcement actions can involve restitution, civil monetary penalties, False Claims Act settlements, exclusions, and Corporate Integrity Agreements that impose long-term compliance obligations.

Common triggers you can prevent

• Systemic documentation gaps that indicate unsupported medical necessity or inaccurate coding.
• Patterns of inappropriate denials or delays that risk beneficiary harm.
• High-variance billing outliers, especially following policy or coding changes.
• Financial arrangements with referral sources that raise Anti-Kickback concerns.

Response principles when issues arise

• Act fast: preserve records, scope the issue, and quantify exposure using statistically sound methods.
• Fix root causes: strengthen policies, retrain staff, adjust systems, and monitor for sustained effectiveness.
• Manage repayments: follow timely overpayment refund requirements and document your methodology.
• Consider self-disclosure pathways when appropriate and coordinate with counsel and leadership.

Dynamic Work Plan Updates and Enforcement Priorities

Why priorities shift

OIG adapts quickly to new benefits, payment models, data anomalies, and beneficiary-safety concerns. Shifts also reflect lessons learned from prior audits, investigative trends, and evolving technologies such as telehealth and remote monitoring.

How to monitor and act

• Schedule a monthly Work Plan review and push updates to control owners within one week.
• Maintain a living “OIG watchlist” that maps updates to risks, controls, and testing status.
• Use short, targeted audits aligned to each new item; track issues to remediation closure.
• Brief leadership quarterly on top risks, remediation progress, and residual exposure.

A prioritization lens

• Beneficiary impact: risks of harm or access barriers take precedence.
• Dollars at stake: focus on high-spend services and fast-growing categories.
• Novelty and change: target areas affected by new rules, codes, or benefits.
• Data signals: investigate sudden shifts, outliers, or error spikes.
• Repeat findings: close gaps that reappear across audits or facilities.

Semiannual Financial Recovery Reports

What these reports include

OIG’s semiannual reports summarize expected recoveries from audits and investigations, investigative receivables, questioned and disallowed costs, the number of exclusions, and significant criminal and civil enforcement actions. They also highlight top challenges and priority recommendations across HHS programs.

How to apply the data

• Benchmark: compare your internal findings against OIG themes to validate your risk assessment.
• Target testing: align audits to categories driving the largest recoveries or repeat deficiencies.
• Educate leaders: translate recovery metrics and enforcement stories into concrete control investments.
• Evidence progress: tie corrective actions to the external risk picture to show governance is working.

FAQs.

What is the purpose of the OIG Work Plan in healthcare?

The Work Plan signals where the OIG is concentrating audits and evaluations so you can prioritize controls that protect beneficiaries and federal funds. It helps you align monitoring, training, and auditing with HHS Program Integrity priorities before issues become enforcement matters.

How often is the OIG Work Plan updated?

The Work Plan is updated on a rolling basis, typically monthly. New items are added, scopes are refined, and timelines can change, so you should review updates routinely and adjust your compliance activities accordingly.

What are the latest compliance priorities for nursing facilities?

Current priorities commonly emphasize quality and safety of care, accurate MDS and documentation supporting medical necessity, appropriate therapy utilization, infection prevention, pharmacy and antipsychotic stewardship, resident protections, and robust oversight of vendors and referral arrangements. Facilities should integrate these areas into risk assessments and monitoring.

How does the OIG report financial recoveries?

OIG summarizes expected audit and investigative recoveries in semiannual reports, alongside questioned costs, exclusions, and notable criminal and civil enforcement actions. These reports provide directional insight into where control failures are most costly and where to focus remediation.