Blog > Theme > Article

Home » A 90-day Audit Readiness Plan

A 90-day Audit Readiness Plan

September 1, 2026

In This Article:

-4 HCHB

For home health, hospice, and other home-based care organizations, compliance readiness isn’t something that begins when an audit, survey, or documentation request arrives. It’s an ongoing discipline built around clear ownership, visibility into risk, and processes that work consistently when they’re tested. 

That doesn’t mean every compliance process needs to be overhauled at once. A focused 90-day audit readiness plan can help organizations establish the infrastructure for continuous readiness while identifying the areas that deserve deeper attention. 

The approach is straightforward: establish ownership and visibility, test the control environment, then standardize and sustain what works.  

Days 1–30: Establish ownership and visibility 

Start by determining who owns readiness and what leadership needs to see. 

Establish the governance structure. 
Name an executive sponsor and cross-functional readiness team. 

Identify priority risks. 
Use recent findings, operational data, regulatory changes and leadership input to identify the highest-priority areas. 

Define exception categories. 
Agree on what constitutes an exception and where it is tracked. 

Build or refine analytics dashboards or reports. 
Prioritize a manageable set of indicators rather than producing a dashboard no one uses. 

Establish response protocols. 
Confirm ownership and escalation procedures for surveys, audits, ADRs, and other external requests. 

At the end of the first 30 days, leadership should be able to answer: 

Where are our highest-priority readiness risks, and who owns each one? 

Days 31–60: Test the control environment 

Next, move from visibility to validation. 

Conduct focused self-surveys. 
Select high-priority processes, branches or service lines. 

Sample recent claims and patient records. 
Trace them across the care journey and into billing. 

Test audit trails. 
Determine whether the organization can show creation, modification, review and approval activity where relevant. 

Review exception handling. 
Select common exceptions and trace how they are identified, assigned and resolved. 

Test retrieval. 
Assemble records as though an outside reviewer had requested them.  

At the end of 60 days, leadership should be able to answer:  

Do our controls work the way we think they do? 

Days 61–90: Standardize and sustain 

Use what the organization learned to build an ongoing cadence. 

  • Correct identified weaknesses. 
  • Assign findings to QAPI where appropriate. 
  • Standardize effective workflows across locations. 
  • Provide targeted education based on identified causes. 
  • Repeat high-risk reviews. 
  • Establish recurring executive reporting. 
  • Determine what should be reported to the governing body or board. 

At the end of 90 days, leadership should be able to answer: 

How will we know six months from now that these improvements are still working? 

Build readiness into the way the organization operates 

The value of a 90-day compliance readiness exercise isn’t simply completing a checklist. It’s creating a repeatable way to understand risk, validate controls, address weaknesses, and give leadership better visibility into whether improvements are holding over time. 

For home-based care organizations navigating ongoing regulatory, documentation, billing, and operational requirements, that foundation can make audit readiness more manageable. More importantly, it helps shift readiness from a reactive event to an ongoing operating discipline supported by clear accountability, reliable processes, and continuous improvement.