Accreditation – A Bedrock of Risk Management
When insurance companies are considering coverage for an organization, they are generally looking for those that can demonstrate high performance in risk prevention, safety, quality, outcomes, and qualified and competent staff. Accreditation standards often drive good practices in these same areas, particularly with risk management and performance improvement. Thus, the accreditation status of an organization can be indicative of the frequency and severity of costly claims.
Dan Rains, CSP, ARM, Risk Control Manager for Berkley Human Services, offers insight, “Accreditation speaks volumes about the quality of an organization. It demonstrates commitment to a continuous improvement culture with data-driven quality assurance processes and visionary leadership. These are all things that are important from an underwriting perspective which can have long term impact on losses and total cost of risk.”
Sean Conaboy, MSW, MPA, Insurance advisor with NSM Insurance Brokers, Behavioral Healthcare/Human Services Practice provides additional insight. “Insurance companies are interested in how an organization mitigates its risks, and one sound mitigation strategy is national accreditation. That’s why the first questions on an insurance application are regarding both licensure and type of accreditation.”
Accreditation as a Risk Reduction Strategy
By shifting an organization from a reactive stance after an adverse event to an ongoing proactive risk management approach, accreditation can become the bedrock for effective risk control and mitigation. The standards and survey process of accreditation guides an organization in a process of identifying and assessing actual and potential risks as well as implementing activities to prevent occurrence and to reduce severity should there be an occurrence. Connaboy agrees, “When an applicant for insurance notes that they are accredited by a national accrediting body, the underwriter reviewing the application can assume that the organization has a strong infrastructure based on sound risk control activities and practices. At the end of the day, insurance companies want to know how well-run an organization is – and being accredited provides the framework for a well-run organization.”
Additionally, legal conformance and regulatory compliance are universal, risk-reducing requirements of all accrediting bodies. Accrediting organizations also encourage and assist organizations to go beyond what is regulated and strive for a higher level of quality and safety through a continuous improvement process that incorporates monitoring the effectiveness of risk reduction activities as well as outcomes achieved.
Risk Exposures and Controls
Risk exposures and controls are addressed in a variety of ways during the accreditation process, notably in standards and in areas addressed during the onsite survey. Below are some examples of the high-risk exposure areas and controls that may be used to mitigate the exposure.
Risk: Transporting Clients/Persons Served
Control Examples:
Criteria for authorizing drivers
Use of vehicle telematics
Appropriate safety restraints and adequate passenger supervision
Risk: Abuse/Molestation
Control Examples:
Zero-tolerance policies/Culture of safety
Criminal background and reference checks
Mandated reporting policy/procedures
Risk: Cyber Attack
Control Examples:
Initial and periodic staff training on cybersecurity
Policies and procedures addressing staff use of computers and passwords (remote access)
Software protection of information
Updating computers and backup/recovery procedures
Risk: Lack of Qualified/Competent Staff
Control Examples:
Policies and procedures for verification of credentials
Oversight and supervision of staff
Staff training
Written job descriptions linking duties/responsibilities to qualifications/competencies
Effective risk controls also include emergency response preparedness. An accredited agency is usually required to have a written disaster plan including, if applicable, evacuation and relocation of staff and clients, as well as specific plans to meet the needs of individuals with disabilities and other special needs during emergencies. The organization must also address coordination with governmental authorities and emergency responders.
Accreditation and the Risk Management Model
The standard risk management model includes identification, analysis, evaluation, and mitigation of risk. Accreditation can help organizations to identify risks they perhaps have not thought about, such as requiring a possible potential disaster be used in an emergency management plan. Requirements to conduct a risk assessment help organizations analyze and evaluate risks to determine how severe or costly they might be and can help identify risk controls to mitigate the risk. Additionally, accreditation helps organizations to reduce or mitigate risk through standard compliance in key areas, such as safety standards, fire code compliance, IT data management, human resources policies, emergency planning, and more.
How Can Accreditation Guru Help?
Although reducing risks is common with accreditation, there are differences in the risk management/risk reduction requirements between the accrediting bodies. Please feel free to contact us to learn more about the differences in risk management standards across the national accrediting bodies.
In addition to helping organizations achieve their accreditation goals, Accreditation Guru’s consulting team is also available to assess your organization’s risk management/risk reduction processes. Our service includes a holistic, systemic assessment of your risk management process or an assessment of one or more specific critical risk exposures.
For more information or questions about the contents of this article, please write or call Jennifer Flowers @ Jennifer@AccreditationGuru.com / 212.209.0240. This post contains original content and was written for Accreditation Guru, Inc. Use of this copy is permitted with credit and reference within the same body of copy to Accreditation Guru, Inc.