Compliance & risk · Healthcare

Every training you assign should trace to a rule that requires it.

Most healthcare organizations can name the trainings they run. Far fewer can name the regulation behind each one, or show a surveyor the connection. Muster builds the map first — then the training, the policies, and the risk program that sit on top of it.

Book a 20-minute call See how the crosswalk works

Throughline

The crosswalk

Select a citation to see which training satisfies it. This is the artifact we build for every client — your regulatory stack on the left, your assigned training on the right, and a defensible line between them.

Applicable authority

Training that satisfies it

How the crosswalk gets built →

Training areas

Five areas, built for organizations that sit under more than one regulator at once.

Layered confidentiality

Where off-the-shelf HIPAA training quietly fails. Part 2, Title X, Ryan White and ADAP, CMIA, and minor consent each add rules that a general privacy course never mentions.

Risk managementCore

Compliance and risk are one discipline. Trained by a certified ambulatory care risk manager, not a course vendor.

Enterprise risk assessment
Incident reporting and event review
Claims and litigation readiness
Insurance and risk transfer
Third-party and vendor risk
Emergency preparedness

Fraud, waste & abuse

False Claims Act, anti-kickback, exclusion and sanction screening, and billing integrity — written for the people who actually touch the claim.

Grant & regulatory compliance

Section 330 scope, FTCA deeming requirements, 340B integrity, and subrecipient monitoring. The obligations that arrive attached to the funding.

Workforce mandatory training

The annual required set, assigned by role and mapped to its authority — so the answer to "why does this person have to take this?" is on the record.

Who we work with

Any healthcare organization carrying more than one set of confidentiality rules — which, in practice, is most of them.

Community health centers & FQHCs Behavioral health Substance use treatment programs Family planning / Title X HIV services & Ryan White grantees School-based health Tribal health Rural health clinics Free & charitable clinics Developmental disability services

All five areas in detail →

Where this comes from

Muster was built in California's safety net — the clinics in the valley towns, the mobile units, the programs holding four funding streams at once. The rules that get organizations in trouble are the ones nobody wrote a course for.

Services

Training is one deliverable. Most engagements start with something more urgent.

Assessment

Site visit readiness review

A structured walk-through of your compliance and risk program against what a reviewer will actually ask for, with a prioritized gap list you can hand to your board.

Build

Regulatory crosswalk

Your organization's full training-to-regulation map, including every funding stream and state law that applies to you. Yours to keep, in a format you can update.

Build

Program & policy development

Compliance and risk policy suites, committee charters, incident and grievance workflows, and the documentation trail that proves the program runs.

Ongoing

Fractional compliance & risk support

Standing support for organizations without a full-time compliance officer, or with one who needs a second set of eyes on the hard calls.

Who's behind this

Twenty-five years inside the programs, not adjacent to them.

Muster is led by Robert Colon-Torres, who has spent his career building compliance and risk programs in safety-net healthcare — starting as an EMT in Oakland and working through senior compliance leadership at community health organizations across California and New York.

He currently serves as chief compliance officer at a California community health center, which means the work here is informed by programs that are running today, under current rules, with real surveyors on the calendar.

Robert Colon-Torres · Founder

Credentials

Degree in health law, Loyola University Chicago School of Law
B.S., Criminology — Portland State University
Certified Healthcare Compliance Officer (CHCO)
Certified HIPAA Administrator (CHA)
Ambulatory Care Risk Management Certificate, ECRI
Post-Bachelor Certificate in Patient Advocacy, UCLA
Board member, American Institute of Healthcare Compliance (2022–2026)
Founding board member, A Place for Tommy