Abastyan Governance Desk
The Ledger.
Briefs and working tools for the people accountable for healthcare compliance. Open access. No gates.
The index
Every brief, entered in order.
EntryDomainBriefFiled
No. 008QAPI & SurveyWhat surveyors ask for under F865, and how to have it readyTakeaway. QAPI is surveyed as a program, not a binder. Here is the evidence a nursing facility is expected to produce, organized the way surveyors look for it.Sep 20269 minNo. 007QAPI & SurveyThe five elements of a plan of correctionTakeaway. What each element should document, based on CMS State Operations Manual guidance.Sep 2026
4 minNo. 006Program DesignWhy shared drives struggle to run a compliance programTakeaway. Shared drives and email are good at storing files. A compliance program needs to prove who did what, when, against which version.Aug 2026
6 minNo. 005HIPAA & PrivacyThe HIPAA breach clock: what starts it and what it requiresTakeaway. The sixty-day deadline runs from discovery, not from confirmation. Knowing when discovery happens is most of the battle.Aug 2026
8 minNo. 004WorkforceExclusion screening: how often, against what, and what to keepTakeaway. Employing or contracting with an excluded individual may expose the organization to civil monetary penalties for items or services they furnish that are billed to federal health care programs.Jul 2026
6 minNo. 003VendorsManaging business associates across their full lifecycleTakeaway. A signed BAA is the start of the obligation, not the end. Here is what to track from selection to offboarding.Jul 2026
7 minNo. 002AI GovernanceStarting an AI governance program with an inventoryTakeaway. Governance starts with knowing which AI tools are in use, who owns them, and what data they receive. An inventory is the first artifact most governance frameworks call for.Jun 2026
8 minNo. 001Program DesignEffectiveness checks: proving a corrective action workedTakeaway. Closing a corrective action is not the same as fixing the problem. An effectiveness check is how you tell the difference.Jun 2026
5 min
Working tools
Tools for your program.
A cost calculator and a compliance checklist, available now.
Documentation
The policies your board, counsel, and IT reviewers will ask for.
Subscribe to The Ledger
New briefs by email, starting with the 15-point checklist.
The Shared Drive & Email Compliance Checklist covers the gaps reviewers find first when compliance lives in folders and inboxes. No call required.