Healthcare Audit & Assurance

PYA provides healthcare audit, assurance, and advisory services for physician practices, community hospitals, multi-hospital health systems, and other not-for-profit, for-profit, and governmental healthcare organizations. Our professionals focus extensively on healthcare and understand the financial reporting, reimbursement, regulatory, technology, and operational issues that affect audit planning and risk assessment. Services include financial statement and Single Audits, SOC examinations, internal audit support, risk assessments, accounting standard implementation, and transaction-related financial analysis.

Our Healthcare Audit and Assurance Services

Audit

Assurance

  • Outsourcing or Co-sourcing of Internal Audit Functions
  • Reviews and Compilations of Financial Statements
  • Debt Issuance and Compliance Monitoring
  • Agreed-Upon Procedure Reports and Special Reporting
  • IT/Cybersecurity

Advisory

  • Internal Control Reviews and Risk Assessments
  • New Accounting Standard Implementation
  • Accounting Policy and Procedure Manual Development
  • Fraud and Forensic Investigations and Dispute Resolution
  • Financial Due Diligence and Quality of Earnings (QoE)
  • Transaction Accounting Assistance
  • Financial and Statistical Analysis
  • Fraud Prevention and Detection

Healthcare Audit and Assurance Advisory Services

PYA Accounting Advisory Services Visualization – Strategic Financial Guidance

Financial Reporting and Independent Assurance for Healthcare Organizations

Healthcare organizations rely on accurate financial reporting, strong internal controls, and independent assurance to support boards, lenders, regulators, and other stakeholders. PYA provides audit, attest, and assurance services tailored to hospitals, health systems, physician practices, and other healthcare organizations operating in a complex regulatory and reimbursement environment.

Internal Audit, Compliance, and Risk Assessment Services

Healthcare providers face growing operational, compliance, cybersecurity, and financial risks that require ongoing monitoring and structured oversight. PYA assists organizations with internal audit support, compliance assessments, SOC examinations, enterprise risk assessments, accounting standard implementation, and other advisory services designed to strengthen organizational readiness and financial integrity.

Healthcare Transaction, Due Diligence, and Financial Advisory Services

Healthcare transactions and strategic initiatives often require coordinated financial and operational analysis. PYA provides financial due diligence, Quality of Earnings assistance, forensic accounting, valuation-related support, and financial analysis services to help healthcare organizations evaluate risk, support decision-making, and navigate complex financial and operational challenges.

Healthcare Audit & Assurance Frequently Asked Questions

What audit and assurance needs can arise across a healthcare organization?

Healthcare organizations may need audits of financial statements, federal awards under Uniform Guidance, employee benefit plans, or system and organization controls. Other needs can include reviews and compilations, debt issuance and compliance monitoring, agreed-upon procedures, internal audit support, IT and cybersecurity work, internal control reviews, risk assessments, accounting standard implementation, and transaction-related financial analysis.

How can healthcare organizations reduce duplicated assurance work across audit, compliance, finance, risk, and IT?

When assurance work is planned separately, organizations can face repeated walkthroughs and requests, inconsistent risk assessments, siloed findings, and gaps in coverage. An aligned approach inventories assurance providers, aligns the risk universe and work plans, standardizes reporting, and supports continuous collaboration. Each function retains its authority, while leadership receives a more unified view of risk and control effectiveness.

Why do EHR, billing, and other IT systems matter during healthcare audit planning?

Healthcare financial systems often connect with electronic health records, billing platforms, and other critical applications. Audit planning therefore considers how systems that affect financial reporting operate and how IT general controls support access, system performance, data processing, system-generated reports, and automated processes. These controls influence risk assessment and the audit procedures applied to financial information.

When can healthcare audit and accounting support be useful during a transaction or major change?

Healthcare transactions and strategic initiatives may call for financial due diligence, Quality of Earnings analysis, transaction accounting assistance, forensic accounting, valuation-related support, and financial or statistical analysis. Major accounting changes may also require new standard implementation, policy and procedure development, or internal control review.

When can co-sourced internal audit help a healthcare organization address specialized risks?

Co-sourcing or outsourcing can add targeted capability when an internal audit plan includes technical areas such as cybersecurity, technology governance, regulatory and compliance risk, fraud risk management, data privacy, or emerging technology. The model can supplement internal capacity and bring specialized expertise while internal audit, management, compliance, or board-directed oversight continues to provide direction.

The PYA Difference

Over our 40-year history, PYA has consistently delivered high-value advisory services to our national client base. Our team is deployed to develop custom plans using proven approaches and work plans.

Independence

Private ownership means we answer only to our clients, not to third-party investors, giving us the freedom to be thorough and thoughtful in our work. We judge our success by our clients’ success.

Relationships

We value long-term relationships and work hard to maintain them. Our commitment to client relationships and the communities we serve remains constant.

Responsiveness

PYA has a reputation among clients for responsiveness. PYA's goal is to respond to calls and emails within 24 hours when possible.

The PYA Difference

Contact Our Healthcare Audit & Assurance Team

Team Leader

Mike Shamblin Headshot Mike Shamblin

Managing Principal of Accounting & Advisory and Firm Chief Risk Officer

Subject Matter Experts

PYA
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.