Category Archives: Compliance

There Is No Such Thing as HIPAA Certification. Let’s Stop Pretending There Is.

HIPAA compliance is not a trophy you win once and keep on the shelf. It is a working system: policies people actually follow, access controls that match job duties, audit logs someone reviews, breach procedures that have been thought through before a bad day, business associate agreements that reflect the real service being provided, and a risk analysis that is more than a stale template with today’s date on it. I have seen certificates that meant the workforce completed a training module. That can be useful. I have seen certificates that meant a consultant did a narrow document review. Also useful, if everyone understands its limits.

By North American Forensic Advisors | Published February 1, 2026 | Posted in Compliance |

Common Elements of U.S. Corporate Compliance Frameworks

How much do you really know about your company’s inner operations? How much can you know? If someone in your organization was bribing foreign officials, illegally dumping toxic substances, or falsifying business records, would you know about it before it appeared on federal enforcement radar? If not, a single unscrupulous individual or a small group of conspirators could bring your entire organization down. Given that it’s impossible to oversee every employee action at all times, how do you protect your company from noncompliance that can trigger potentially crushing prosecution? The answer is to implement and maintain a corporate compliance program that deters wrongdoing while qualifying your company for leniency if rogue actors transgress the law.

By North American Forensic Advisors | Published September 1, 2025 | Posted in Compliance, Internal Controls |

Conducting Effective Employee Relations Investigations

Companies today must adhere to heightened expectations when it comes to culture, compliance, and accountability. Thus, when a worker makes a complaint, (e.g., harassment, discrimination, retaliation, misconduct, or policy violation), leadership comes under intense scrutiny for the manner in which they conduct their employee relations investigations. When handled correctly, a thorough and fair ER investigation protects the company, supports the rights of employees, and demonstrates a commitment to ethical conduct. When mishandled, it exposes the organization to significant legal liability, regulatory penalties, and damage to employee trust.

By North American Forensic Advisors | Published July 15, 2025 | Posted in Compliance, Internal Investigations |