Which item is NOT considered a core component of a Medicare compliance program?

• A. Written policies and procedures
• B. A designated compliance officer
• C. Annual risk assessments
• D. Marketing and public relations plan

Answer: (D)

Medicare compliance programs are built around strong governance and risk management to prevent fraud and ensure adherence to Medicare rules. The essential pieces include written policies and procedures that codify how things should be done, a designated compliance officer who has real authority to oversee the program, and annual risk assessments that identify where the organization is most vulnerable and guide ongoing monitoring and corrective action. Together, these elements establish clear expectations, accountability, and a plan for continuous improvement in compliance.

A marketing and public relations plan, while important for truthful and compliant communication with patients and the public, operates in a different area focused on messaging and outreach rather than internal controls and risk management. It isn’t a mechanism that enforces policies, oversees compliance, or assesses and mitigates risk, so it isn’t considered a core component of a Medicare compliance program.

So, the item that isn’t a core component is the marketing and public relations plan.