Corporate Integrity Agreements (CIAs) and Independent Review Organizations (IROs): A Discussion with Harriett Wall, CEO of LW Consulting, Inc.

Episode Date: July 16, 2024

In this episode of Stark Integrity, Harriett Wall, President & CEO of LW Consulting, Inc., joins Bob Wade (Captain Integrity) to break down one of the most significant consequences of healthcare enforcement actions:

Corporate Integrity Agreements (CIAs)—and the role of Independent Review Organizations (IROs).

This discussion reframes CIAs not just as penalties, but as opportunities to strengthen compliance programs and organizational infrastructure.

What Is a Corporate Integrity Agreement?

A Corporate Integrity Agreement (CIA) is a formal agreement between a healthcare organization and the Office of Inspector General (OIG), typically entered into as part of resolving fraud or False Claims Act allegations.

Under a CIA:

• The organization agrees to enhanced compliance obligations
• The government agrees not to exclude the entity from federal healthcare programs

Most CIAs:

• Last five years
• Require significant operational and cultural changes

The key point:

A CIA is not just a settlement—it is a multi-year compliance transformation.

CIAs as a Turning Point

One of the central themes in this episode is the reframing of CIAs from:

• A liability

To:

• A strategic opportunity

While CIAs are often viewed negatively, they also:

• Force organizations to build robust compliance programs
• Introduce structure, discipline, and oversight
• Provide a framework for long-term improvement

The takeaway:

A CIA can be a catalyst for positive change—if approached correctly.

Core Components of a CIA

Although each CIA is tailored, most include common elements such as:

• Implementation of a formal compliance program
• Appointment of a compliance officer and committee
• Ongoing training and education
• Reporting obligations to the OIG
• Independent reviews conducted by an IRO

These requirements are designed to:

Prevent, detect, and correct compliance issues going forward.

The Role of Independent Review Organizations (IROs)

A critical component of any CIA is the involvement of an:

Independent Review Organization (IRO).

An IRO is responsible for:

• Conducting objective, third-party reviews
• Evaluating claims, documentation, and systems
• Identifying compliance risks and deficiencies
• Reporting findings to both the organization and the government

The key requirement:

Independence.

IROs must be:

• Objective
• Free from bias
• Separate from the organization they review

Their role ensures:

Accountability and credibility in the compliance process.

Rethinking the IRO Relationship

A key insight from this discussion is that organizations should not view IROs as:

• Adversaries

But instead as:

• Partners in compliance improvement

When approached collaboratively:

• IRO findings can provide valuable insights
• Organizations can strengthen processes more effectively
• The overall compliance program becomes more robust

The takeaway:

The IRO is not just a reviewer—it is a resource.

The Role of the OIG Monitor

The discussion also touches on perceptions of OIG oversight.

Organizations often ask:

Is the OIG monitor a friend or foe?

The answer:

• The OIG’s role is oversight and enforcement
• But its objective is also to ensure compliance and program integrity

This reinforces a broader point:

Transparency and cooperation are critical under a CIA.

Avoiding a CIA in the First Place

Another major takeaway is:

The best way to manage a CIA is to avoid it.

Organizations can reduce risk by:

• Building and maintaining strong compliance programs
• Monitoring high-risk areas
• Addressing issues proactively
• Responding quickly to internal findings

Because once a CIA is in place:

The operational burden and oversight are significant.

Embracing Change Under a CIA

For organizations already under a CIA, the episode emphasizes:

• Accept the process
• Use it to drive improvement
• Align leadership and operations
• Invest in compliance infrastructure

Because ultimately:

Resistance delays progress—embracing the process accelerates it.

Practical Compliance Considerations

From an operational standpoint, organizations should:

• Understand CIA requirements in detail
• Select a qualified and independent IRO
• Treat IRO findings as opportunities for improvement
• Strengthen documentation, monitoring, and reporting
• Align leadership with compliance objectives

Because:

Success under a CIA depends on execution, not just intention.

Key Takeaways

• CIAs are formal agreements tied to enforcement actions
• They typically last five years and require significant oversight
• CIAs are designed to strengthen compliance programs
• IROs provide independent, objective evaluation of compliance
• IROs should be viewed as partners—not adversaries
• Strong compliance programs can help avoid CIAs entirely
• Organizations should embrace CIAs as opportunities for improvement

Final Thoughts

This episode highlights one of the most important perspectives in compliance:

Enforcement actions do not have to define an organization—they can transform it.

Corporate Integrity Agreements represent:

• Accountability
• Oversight
• Risk

But they also represent:

Opportunity.

Organizations that approach CIAs strategically can:

• Build stronger compliance programs
• Improve operational discipline
• Reduce future risk

Ultimately:

A CIA is not just about resolving the past—it is about reshaping the future.

Because in today’s environment:

The organizations that learn the most from enforcement are the ones that become the strongest.

Click here to listen to this Stark Integrity Podcast Episode:
https://podcasts.apple.com/us/podcast/corporate-integrity-agreements-cias-and-independent/id1588939373?i=1000662468434&l=fr-FR