Case Study: Large healthcare system transforms risk profile and cuts costs with Protiviti's outsourced internal audit

Healthcare organization in search of an internal audit group finds a strategic partner in Protiviti

Healthcare Organization needed to extract greater value, fresh insight and specialized expertise from its internal audit function and chose to fully outsource that function. The chief administrative officer and board selected Protiviti to serve as the outsourced internal audit partner to bring healthcare industry experience, broad audit capabilities and strategic advisory support.

Protiviti led the transition, delivering a first risk assessment within two months and a new, 12‑month internal audit plan covering areas such as information security, revenue cycle, compliance and physician contracting. Protiviti then expanded its role into enterprise risk management and ongoing advisory work—helping the organization quantify revenue-cycle improvements, remodel executive reporting, halve the anticipated HIPAA security risk‑analysis completion time, perform penetration and vulnerability testing, and implement project risk management for an EHR rollout—producing more meaningful audit findings, a transformed risk profile and cost savings compared with the prior in‑house function.