Audit Model

When we begin auditing for you, you can expect that we will deliver our services in the spirit of our Core Values: Reverence, Integrity, Servant Leadership, and Excellence.

Risk Management Based Approach
CHAN Healthcare’s Internal Audit Model is a risk management based approach to ensure your audit resources are focused on the business units with the greatest risks. This approach results in vitally useful audit reports and allows us to:

  • Share with you what we have learned from auditing across multiple health systems
  • Help governance and management address risk and strengthen internal controls
  • Constantly improve our quality because of the insight and wisdom we gain from our partnership with you.

This approach begins with the internal auditor partnering with management to understand the entity-wide risks resulting from business strategy and objectives. The result is an annual audit plan of the work we will deliver throughout the year. But the first draft of an audit plan is rarely the final draft. Draft plans are reviewed by both your management and ours before going to your audit committee for approval. Because new issues arise year-round, we also reassess each audit plan on a quarterly basis, adjusting priorities to address changing needs.

No Surprises
As we begin an audit, you can expect a “no surprises” approach. We focus on auditing issues, not people, on developing solutions, not placing blame. Issues are discussed as identified and we develop action plans in collaboration with management. The draft audit report remains a draft until management is satisfied with the action plans and approach for addressing issues.

Governance Reporting and Follow-up
At this stage, we are ready to report the audit to governance. You can be assured our audit report will help you and governance understand how the process or area audited functions, and whether internal controls are effective in both design and operations so you can note areas for improvement.
We do not stop after issuing the report. We follow up on action plans to assure governance and management that the issues identified were addressed through implementation of agreed-upon solutions.

Sharing What We Learn
From this process, repeated across multiple health systems in many audit areas, comes our ability to share with you what we have learned about healthcare risks and internal controls. You will have access to our Client Resource Center with internal control best practices identified through our auditing work. Our knowledge sharing capability is a strategic focus and differentiator for CHAN Healthcare, and we are committed to feeding you information that’s available only from a company that audits across 350-plus healthcare facilities.

Plenty of Support
Although your client-based auditors are the key link to a successful partnership, you will soon experience that CHAN Healthcare is much bigger. Our auditors have access to numerous subject matter experts, resources, and tools to give you the highest quality internal audit services. Their work is reviewed by an experienced supervisor to ensure objectivity and that all relevant questions are asked and answered. This supervision is possible by the use of an automated audit system. CHAN Healthcare was one of the first audit companies to use automated work papers, and now has 10 years of experience in this area. Our system facilitates discussion and sharing of knowledge across the company, and our auditors support one another in helping you address risk and strengthen internal controls.

In addition to subject matter experts in the operational areas of healthcare, CHAN Healthcare auditors have access to coding, compliance, and IT audit expertise. Many are trained in Data Analysis or can get assistance from one of our Data Analysis specialists. Healthcare companies desiring internal audit coverage in the areas of coding or IT can request any or all of these as part of their service contract.