The quality improvement organization (QIO) has alerted the hospital that it is under review for overutilizing healthcare services for Medicare patients. The hospital should take several steps: assess the situation by examining organizational structures and processes; confirm if there is a problem and take steps to correct it; and ensure the situation is corrected ongoing. When developing a compliance program, organizations should include the seven key elements: establish standards and controls; provide oversight and ensure compliance; conduct due diligence in hiring; provide training and communication; perform auditing and monitoring; use discipline and incentives; and take corrective action to prevent future issues. This helps organizations avoid legal actions and have an effective ethics and compliance program.