Government "alphabet soup" organizations are more active than ever, and their pursuit of "fraudster" activity is not limited to large integrated systems. If you are a physician group or any type of provider with a medicare/medicaid payor number, the chances you will be audited are very high. These "regulatory" allegations can be very expensive to defend, and can be dragged out for years. There are measures groups can take to fight back by putting HIPPA compliant processes/programs in place to take the financial sting out of a REG audit, allegation or cyber/privacy data breach...another very expensive exposure to any business.