Under OIG compliance program guidance, how frequently should a healthcare organization's compliance risk assessment be reviewed?
-
A
Every five years
-
B
Only when a new regulation is enacted
-
C
At least annually or when significant changes occur
-
D
Every two years as part of an accreditation cycle