United States: Audit

California businesses must now complete annual, independent cybersecurity audits to meet California Privacy Rights Act requirements.

The Securities and Exchange Commission (SEC) approved the joint industry proposal (Proposed Amendment), spearheaded by Consolidated Audit Trail, LLC (CAT LLC), to amend the National Market System Plan...

Indirect cost errors can lead to under-recovery, audit findings, repayments, and compliance risk, making proactive monitoring essential for helping safeguard funding and credibility.

As the calendar starts anew, Q1 can be the perfect season to tighten corporate hygiene. A short, focused tune-up reduces risk, speeds audits and financings, prepares for the ongoing tax season, and sets a clean foundation...

The Office of Inspector General's (OIG's) Medicare Advantage Industry Segment-Specific Compliance Program Guidance (MA ICPG) should not be read as a traditional compliance manual or risk inventory.

Under new regulations effective January 1, 2026, California regulators now expect businesses to conduct an annual "cybersecurity audit" that assesses "how the business's cybersecurity program protects personal information ...

The Northern District of Texas' original ruling vacated CMS's 2023 Final Rule—which had eliminated use of the FFS adjuster in RADV audit findings and expressly incorporated extrapolation into its regulations...

States across the country have made a genuine effort to rein in the conduct of Pharmacy Benefit Managers (PBMs).

The U.S. Department of the Treasury has announced a "comprehensive audit" of all contracts and task orders awarded under the U.S. Small Business Administration's 8(a) Business Development Program and other preference-based contracting initiatives, such as the HUBZone program, the Service-Disabled Veteran-Owned Small Business program, and the Women-Owned Small Business program.