Introduction
An infectious disease practice can deliver outstanding clinical care, managing complex OPAT regimens, running a busy infusion suite, covering hospital consults, and still watch earned revenue slip away.
The leak rarely shows up in one place. It happens in disconnected pieces: a registration error here, a missed prior authorization there, a documentation gap that turns into a denial three weeks later.
Many practices struggle to tell the difference between a one-off billing mistake and a recurring process failure. That distinction matters.
A revenue cycle audit traces problems back to their source, whether that's scheduling, authorization, documentation, coding, claims submission, or payment posting.
For U.S. ID practices, the stakes go beyond cash flow. Revenue cycle audits help practices:
- Reduce rework and preventable denials
- Support compliant reimbursement
- Clarify decisions on expanding OPAT or infusion services
MGMA's 2024 poll found that 60% of medical groups reported higher denial rates than the prior year. That's a general practice trend, not an ID-specific figure, but it signals that proactive review pays off.
Key Takeaways
- A revenue cycle audit traces the complete path from scheduling and eligibility checks through final payment, not just the billing office.
- ID practices need to review professional services separately from OPAT, infusion, lab, and other service-line workflows.
- Denial patterns, aging A/R, underpayments, and authorization failures require root-cause analysis, not quick fixes.
- Findings only create value once they become a prioritized action plan with owners and deadlines.
- Base conclusions on your own historical claims data and payer contracts, not generic industry benchmarks.
What Is a Revenue Cycle Audit for an Infectious Disease Practice?
A revenue cycle audit is a structured review of every administrative and clinical step that turns delivered ID care into collected payment. It covers scheduling, documentation, coding, billing, reimbursement, and collections, the full chain from patient encounter to deposited payment.
Rather than examine billing in isolation, the audit follows revenue through three distinct stages.
The Three Revenue-Cycle Components
Front end covers everything before care is delivered: registration, insurance eligibility verification, referral tracking, and prior authorization. For an ID practice, this is where an infusion authorization gets requested, or missed, before a patient shows up for a first dose.
Mid-cycle focuses on documentation, charge capture, and coding. A hospital consult note must support the billed complexity, and infusion administration charges need accurate start and stop times to justify the codes submitted.
Back end runs from claims submission through payer adjudication, payment posting, denial management, and patient collections. A denied OPAT claim either gets reworked and appealed, or quietly written off.
How This Differs From a Financial or Compliance Audit
A general financial audit tests whether financial statements fairly represent the practice's overall position. A compliance audit tests adherence to specific regulations, such as anti-kickback rules.
A revenue cycle audit overlaps with both but asks a narrower, more operational question: is the practice capturing and collecting everything it has legitimately earned, through processes that hold up under payer and regulatory scrutiny?
Why Revenue Cycle Audits Matter for Infectious Disease Practices
Independent ID practices run on thinner margins than many specialties. Financial sustainability depends on capturing every dollar of legitimately earned revenue, and a revenue cycle audit gives physicians and administrators the evidence needed to protect those margins.
ID practices generate revenue from distinct sources: inpatient consults, contracted hospital services, outpatient clinic visits, and infusion or OPAT programs. Each carries its own billing rules, authorization requirements, and cash-flow timing. Averaging them into one blended number hides exactly the problems an audit is meant to find.
What a Revenue Cycle Audit Reveals
A well-run audit typically surfaces:
- Missed charges and incomplete capture of visits or drug administrations that were delivered but never billed
- Unworked claims sitting in a queue past timely-filing windows
- Payment-posting discrepancies, where remittance doesn't match what the contract allows
- Recurring denials tied to a specific root cause, such as expired authorizations or missing documentation
- Service-line blind spots, where infusion or OPAT economics look fine on paper but mask underlying losses
Connecting denial codes back to the workflow that produced them (registration, eligibility, documentation, coding, or claim submission) is what separates a useful audit from a report nobody acts on.
Beyond cash recovery, audits support compliant billing. Comparing documentation, coding, and payer rules against what's actually billed protects against both undercoding and unsupported upcoding.
OIG's 2023 guidance recommends that small entities conduct a compliance risk assessment at least annually and perform regular internal audits. The guidance is voluntary, yet it treats routine review as sound practice.
Persistex, which publishes GrowInfectiousDisease, works directly with independent ID practices to identify these opportunities using actual claims and payment data rather than industry averages. A practice's real denial rate, real days in A/R, and real payer mix tell a very different story than a generic benchmark ever could.
How to Conduct an Infectious Disease Practice Revenue Cycle Audit
An effective audit is risk-based and practical. Define the scope, collect reliable data, test a representative sample of transactions, trace problems to root causes, and convert findings into corrective action.
Common audit failures to avoid:
- Reviewing only denied claims while ignoring unbilled encounters and underpayments
- Trusting summary reports without validating the underlying source data
- Excluding clinicians from documentation conversations
- Producing a findings list with no accountable owner attached
Step 1: Define the Audit Objective and Scope
Start with why you're auditing. Rising denials, aging A/R, unexplained collection variation, a new infusion service line, an EHR conversion, or a routine annual check all shape the scope differently.
Specify which services, locations, providers, payers, and date ranges are included. Separate professional billing from OPAT and infusion billing; combining them hides where problems actually live.
Then write down the specific questions the audit must answer: Where are charges getting lost? Which payer rules create the most rework? Are authorizations being obtained consistently?
Step 2: Gather and Validate Inputs
Pull source documents, not just summary dashboards:
- Scheduling and registration records
- Eligibility results and authorizations
- Clinical documentation and charge records
- Claims, remittance advice, and denial logs
- Payment postings and A/R aging
- Payer contracts and credentialing files
Reconcile definitions before analysis. "Billed," "allowed," "paid," and "outstanding" get confused constantly across reports, so confirm what each number actually represents. Follow applicable privacy and security requirements whenever patient data gets exported, sampled, or shared for the audit.
Step 3: Review Front-End Controls
Test whether registration, eligibility, referral requirements, and prior authorizations are captured correctly before care is delivered. For infusion and OPAT specifically, prior authorization is often required, and coverage rules differ depending on where the drug is administered and billed.
Measure how front-end defects ripple downstream: delayed claims, denials, unexpected patient responsibility, staff rework, and timely-filing risk.
Step 4: Review Mid-Cycle Documentation and Coding
Compare a defensible sample of encounters against documentation, charges, diagnosis codes, and claim output. Confirm who owns documentation and charge transmission across clinicians, infusion nurses, and billing staff. Ambiguity here is where charges quietly disappear.
ID-specific risk areas include:
- Consultative services and time-based or prolonged-service codes
- OPAT oversight and care coordination documentation
- Infusion administration charges, including start and stop times
- Drug and supply charge capture against administered doses
Look for undercapture (missing services, incomplete documentation) and overstatement (duplicate charges, unsupported codes) equally. Any coding conclusion should go through qualified coding and compliance review rather than by assumption alone, since CMS, OIG, AMA, and payer guidance change often enough that last year's rule may not apply today.
Step 5: Analyze Claims, Denials, Payments, and A/R
Categorize every denial by root cause, payer, provider, service line, and dollar impact. Rank them by financial effect, not raw claim count, since in drug-heavy practices a single infusion claim can outweigh a month of office visits.
Review clean-claim rates, first-pass performance, and claims approaching filing deadlines. HFMA's KPI benchmarks cite a 98% clean-claim target and 30-40 days in A/R as general industry guidelines. Treat these as useful reference points, not measured ID-practice results.
Compare remittance against contracted fee schedules to catch underpayments, particularly on high-dollar drug claims where unit or NDC mismatches are common. Then review A/R aging by payer and service line, flagging balances that keep getting transferred or adjusted without documented follow-up.
Step 6: Turn Findings Into Action
Rank findings by financial effect, compliance exposure, frequency, and reversibility. Assign each corrective action to a specific owner, such as patient access, coding, billing, credentialing, or IT, with a deadline attached.
Pick a small set of measures to track going forward: denial categories by dollar value, unbilled encounters, days in A/R, payment variance against contracted rates, and documentation completion. Re-test corrected workflows after implementation to confirm the issue actually resolved rather than shifting somewhere else in the cycle.
A Simplified Audit Example
Picture an ID practice that added an outpatient infusion line eighteen months ago. Collections, once predictable, have started fluctuating month to month.
The audit team defines the scope: infusion claims only, the last two quarters, all payers. They reconcile scheduled encounters against charges and submitted claims, then pull a sample of denied and paid transactions for comparison.
The pattern that emerges: authorizations obtained for the first infusion visit in a series weren't being re-verified for later visits in the same course of therapy. That single gap explained most of the denials.
The resulting action plan stays narrow and specific:
- Build a re-verification step into scheduling for recurring infusion visits
- Clarify documentation ownership for authorization status in the chart
- Review the payer's re-authorization rules before changing anything further
- Recheck denial rates after 90 days
Before drawing conclusions, the team validated their sample size, involved clinical and billing staff, and confirmed this was a process defect, not a one-off payer dispute.
How GrowInfectiousDisease Can Help
GrowInfectiousDisease is a free, ungated resource hub built for infectious disease physicians, group leaders, and practice administrators who need plain-English guidance on revenue cycle management, OPAT, infusion economics, reimbursement, and staffing.
Its browser-based tools let you plug in your own numbers instead of relying on generic rates:
- The Independent ID Practice Economics Calculator models revenue streams, costs, contribution per physician, and break-even volume from your own practice inputs.
- The Infusion & OPAT Economics Calculator breaks down drug acquisition, nursing time, chair time, supplies, and reimbursement across a full course of therapy.
- Practice Health Check scores financial and operational signals across revenue cycle, payer mix, referral concentration, authorization performance, and infusion economics.
Every tool runs entirely in your browser. Nothing you enter is transmitted or stored, and no email is required to see a result.
None of this replaces an audit or individualized coding, legal, or regulatory advice. GrowInfectiousDisease doesn't publish invented reimbursement rates, drug acquisition costs, or margin figures.
The illustrative defaults in its calculators are placeholders meant to be replaced with your own practice data. Payer rules, coding guidance, and compliance conclusions should always be validated against current authoritative sources and qualified experts.
Conclusion
An infectious disease revenue cycle audit connects clinical documentation, operational workflows, payer requirements, billing activity, and what actually lands in the bank. None of those pieces operate in isolation, and treating them that way is usually how leakage goes unnoticed for years.
The most useful audit is specific: built around your practice's own services, your own data, and root causes rather than symptoms. Findings need owners and deadlines, and workflows need re-testing after changes go live.
Financial clarity isn't just a back-office concern. For independent ID practices weighing whether to expand OPAT, add infusion capacity, or bring on another physician, it's the foundation those decisions should rest on.
Frequently Asked Questions
What are the 12 steps of RCM?
There's no single universal 12-step list; frameworks vary by source. Typical steps span scheduling, registration, eligibility, authorization, documentation, charge capture, coding, claims, adjudication, payment posting, denials or appeals, and collections.
What are the 5 stages of the audit cycle?
Most audit frameworks move through planning and risk assessment, evidence gathering, testing and analysis, reporting with corrective action, and follow-up or re-audit. For an ID practice, that cycle repeats whenever a new service line or payer issue emerges.
What is a revenue audit?
A revenue audit reviews how revenue is generated, billed, reimbursed, posted, and collected. The goal is to identify leakage, control gaps, and compliance risks, then fix the processes that caused them.
What is RCM in audit?
In an audit context, RCM means testing the healthcare revenue cycle, from patient access through final payment, to confirm transactions are complete, accurate, timely, documented, and compliant with payer and regulatory rules.
What are the three main components of the revenue cycle?
Front end (registration, eligibility, authorization), mid-cycle (documentation, coding, charge capture), and back end (claims, denials, payment posting, collections). Verifying an infusion authorization, documenting OPAT oversight time, and working a denied drug claim are examples of each.
