Financial Control Point One: Governance The Standard That Governs Everything Else
By Michelle Repash, Founder — RepashGlobal · Revenue Protection Architecture™ · 36 Years in Dental Revenue
Why I Built This Framework
After 36 years working in dental revenue, I have seen the same pattern more times than I can count.
A practice with a skilled team. A trusted office manager. A history of collections that looked reasonable on paper. And then — a Tuesday morning. An AR audit. A number that should not exist.
The first time I saw it, I assumed it was a staffing problem. The second time, I looked for a technology failure. By the fifth time, I understood what it actually was.
Not a billing problem. Not a software problem. Not a people problem.
A governance problem.
There were no written financial standards. No defined ownership at any point in the revenue cycle. No accountability structure that connected a failure in the chart room to a denial in the billing queue. The team was working hard. The billing was processing. And revenue was leaking — at six distinct points — because no one had ever been named to protect it.
That is why I built Revenue Protection Architecture™ and the Six Financial Control Points framework.
The framework is not a billing system. It is not a collections protocol. It is a governance structure — one that assigns named ownership, a defined mission, a measurable success standard, and a single audit question to each of the six upstream points in a dental revenue cycle where financial failure originates.
When all six control points are assigned and working, the practice has something most practices do not: a revenue cycle that can be audited, corrected, and governed — not just hoped for.
The Architecture: The Six Financial Control Points
The Six Financial Control Points are the six upstream stages in a dental practice's revenue cycle where a specific type of financial failure can occur — and where a named owner must exist to prevent it.
They are not billing categories. They are not job descriptions. They are governance positions — defined points in the revenue cycle where accountability must be assigned, where a success standard must exist, and where a single person can be asked: Is this control point working?
CP | Name | What It Governs |
CP1 | Governance ← Current Article | Written standards, team training, policy enforcement |
CP2 | Patient Qualification & Intake | Financial qualification before treatment begins |
CP3 | Insurance Intelligence & Eligibility | Benefits interpretation, not just verification |
CP4 | Documentation & Coding Integrity | Clinical record and coding accuracy before billing |
CP5 | Claim Submission & Billing Integrity | Transmission, denial management, payment posting |
CP6 | Owner Oversight & Corrective Action | Leadership-level revenue monitoring and corrective action |
Why Each Control Point Requires a Named Owner
The research supports what I have seen in practice for decades.
According to published benchmarks, the average dental practice fails to collect approximately 9% of its adjusted production — roughly $65,000 annually for a practice producing $60,000 per month.[1] Billing errors alone drain an additional 5 to 10% of annual revenue — as much as $50,000 to $100,000 per year for a single-doctor practice, according to research published in the Journal of Healthcare Finance.[2]
What the benchmarks do not tell you is where those losses originate.
They do not start in billing. They start at the points where no one was assigned to prevent them.
The healthcare revenue cycle research is consistent on this point. A 2024 study published in PMC on Revenue Cycle Management identifies demographic and documentation failures — not billing processing — as the primary drivers of claim denial rates above the 5–10% benchmark.[3] The American Dental Association has found that practices which actively manage their reimbursement processes — meaning they have governance structures in place — increase collections by as much as 25%.[4]
A Financial Control Point owner is not a new hire. It is not a new title. It is a defined governance position — assigned to an existing role in your practice — with four elements:
Scope — what this control point is responsible for protecting
Mission — the four-part mandate that defines what ownership means at this stage
Success Standard — what working correctly looks like, in measurable terms
Audit Question — the single question that tells you whether this control point is functioning
When these four elements are assigned to a named person, the practice gains something it does not currently have: a governance structure. One that can answer the most important question in revenue protection — Where did this failure originate? — before it compounds.
DEEP DIVE: Financial Control Point 1 — Governance
Why Governance Is CP1
I did not put Governance first because it is the most common source of revenue loss. I put it first because it is the reason every other control point fails.
Without written financial standards, CP2 has no intake protocol to follow. Without a defined training cadence, CP3 has no verification standard to enforce. Without documented policies, CP4 has no documentation requirement to meet. Without a governance owner who audits compliance, CP5 has no accountability structure to rely on. Without Governance as a working control point, CP6 — owner oversight — has nothing to govern.
Governance is not one of six control points. It is the foundation the other five stand on. An unassigned CP1 does not just expose Governance — it structurally weakens every control point that depends on it.
What CP1 Owns
The Governance control point owns:
The written financial policies that govern every financial interaction in the practice
The training standard that ensures every team member who touches revenue has been trained to those policies
The compliance cadence that confirms policies are being followed, not just known
The corrective action protocol for policy violations
The policy update process that keeps standards current with payer changes, regulatory changes, and operational changes
If any of these five elements is missing, the Governance control point is unassigned — regardless of whether anyone in the practice believes it is covered.
The Mission of the Governance Owner
The CP1 owner has a four-part mandate:
Establish — Create and maintain written financial standards for every stage of the revenue cycle
Train — Ensure every team member who touches a financial control point has been trained to the standard, with documented completion
Enforce — Conduct regular audits and compliance checks to confirm standards are being followed — not assumed
Update — Review and revise policies when payer rules change, when compliance failures occur, or when operational changes require a policy adjustment
This four-part mandate is the test of whether Governance is actually owned. If the person named as CP1 owner cannot demonstrate all four functions — not just one or two — Governance is not owned. It is approximated.
Who Should Own CP1
In most single-doctor practices, CP1 should be owned by the Office Manager or Practice Administrator — but with a critical condition: the owner must have the authority to enforce the standards, not just document them.
This is where most practices get it wrong. They name a person. They do not grant that person the standing to conduct a policy audit, issue a corrective action, or require documentation of compliance. A governance owner without enforcement authority is a compliance document — not a control point.
In multi-doctor or group practice environments, CP1 may be owned jointly by the Office Manager and a designated practice leader — but joint ownership requires a documented division of responsibilities and a clear escalation path. Shared governance without a named decision-maker is another form of unassigned ownership.
The test: Can your CP1 owner stop a process that violates policy — and document the corrective action — without escalating to the doctor first? If not, the authority structure needs to be addressed before the governance structure can function.
What Breaks When CP1 Is Unassigned
When Governance is unassigned, the practice runs on institutional habit rather than written standard.
This is comfortable. It is also dangerous.
Institutional habit means:
The front desk follows the policy the last office manager taught them — which may no longer reflect current payer requirements
Financial agreements are presented inconsistently — or not at all — depending on who is working the front
Insurance verification is performed according to whoever's interpretation of thorough applies that day
Write-off approvals are made by whoever the patient reaches on the phone
No one knows what the actual policy is, because the actual policy was never written down
The data is clear on what this costs. Research in the Journal of Healthcare Finance documents that billing errors — many of which originate at the governance level — drain 5 to 10% of a practice's annual revenue.[2] The ADA has found that practices with active reimbursement governance structures increase collections by as much as 25%.[4]
The gap between a practice with Governance as a working control point and one without it is not incremental. It is structural.
The Success Standard for CP1
The CP1 Governance owner can demonstrate the control point is working when all five of the following conditions are true:
[ ] A written financial policy manual exists, is dated, and has been reviewed within the past 12 months
[ ] Every team member who touches a financial control point has signed documentation confirming they have been trained to the current policy
[ ] A compliance audit schedule exists, with completed audit records on file
[ ] The last compliance failure resulted in a documented corrective action, with a resolution date and a sign-off
[ ] The policy manual includes a section for each of the other five control points, defining the standard each control point owner is accountable to
If any of these five conditions cannot be confirmed, the Governance control point is not functioning — regardless of how experienced the team is, or how long the practice has been in operation.
The Audit Question for CP1
"Can you show me the written financial policy that governs [specific revenue activity], the training record confirming the team has been trained to it, and the last compliance audit that verified it was followed?"
If the answer to this question is not a document — if it is an explanation, a memory, or "we always do it that way" — Governance is unassigned.
Common Governance Failures — and What They Actually Cost
Based on 36 years of practice audits, the five most common Governance failures are:
1. No written financial policy manual
Policies exist in the office manager's head. When the office manager leaves, the policies leave with them. This is the single most common cause of catastrophic revenue loss following a key staff departure.
2. Training without documentation
The team was trained. No one can prove it. When a claim is denied on the basis of a policy violation, there is no record that the team knew what the policy required. This creates both a compliance exposure and an unresolvable corrective action.
3. Policies that have not been updated
Insurance payer rules change. ADA coding updates annually. Fee schedules are revised. Practices without a governance owner assigned to update policies continue operating under rules that no longer apply — and continue losing revenue to denials that reflect the gap. The AMA's Physician's Guide to Revenue Cycle Management identifies policy currency as a foundational governance requirement.[5]
4. No escalation path for policy violations
When a team member deviates from a financial policy, there is no defined consequence and no defined correction. The violation is absorbed. The practice adapts around it. And the policy becomes optional in practice — even if it exists on paper.
5. Write-off authority without governance
One of the most expensive Governance failures is undefined write-off authority. When any team member can approve a write-off, write-offs accumulate — not as strategic decisions but as the path of least resistance. The Healthcare Financial Management Association's Revenue Cycle Governance framework specifically identifies write-off authority governance as a foundational financial control.[6]
A Note on Experience
I want to be direct about something, because it matters.
The most common response I receive when I identify a Governance failure in a practice audit is: "But my office manager has been here for fifteen years."
I understand why that feels like a defense. Experience is valuable. Institutional knowledge is real. But experience is not the same as a written standard. It is not the same as a trained team. And it is absolutely not the same as a compliance record.
I have audited practices where a 20-year office manager had built an outstanding operational structure — entirely undocumented. When that manager left, the practice lost its Governance control point entirely. Within eighteen months, AR was unmanageable.
Experience cannot be inherited. Written standards can.
Governance is not about doubting your team. It is about protecting the practice from the moment the team changes — which, in every dental practice, it eventually will.
What Governance Looks Like When It Is Working
When CP1 is assigned to a named owner with authority, a practice can demonstrate:
New hires receive a financial policy onboarding packet on their first day — not a verbal overview from a co-worker
Insurance payer rule changes are flagged within 30 days, reviewed by the Governance owner, and reflected in a policy update before they affect claims
Write-off requests go through a defined approval process — every time, regardless of the amount
Compliance audits happen on a defined schedule, and results are documented and reviewed
When a claim is denied on the basis of a process failure, the Governance owner can trace the failure to its policy origin and issue a corrective action within a defined timeframe
The practice owner can pick up the policy manual at any time and know exactly what standard every team member is accountable to.
This is not an aspirational state. This is what a working Governance control point produces.
What Comes Next
In the next article in this series, we go deep into Financial Control Point 2: Patient Qualification & Intake — the control point where most demographic-based revenue loss originates, and where the single most expensive category of preventable AR loss lives.
If you completed the six-line exercise in the free gateway article and wrote a blank or a department name next to Patient Qualification & Intake — Article 2 is written for exactly that moment.
It publishes next month.
You Are Reading Article 1 of 6
The Six Control Points series delivers one deep-dive article per month — one for each Financial Control Point. Full scope, mission, success standard, and the audit question that tells you whether the control point is working.
[Get Lifetime Access — $97 → PASTE YOUR WIX PLAN LINK HERE]
Protect what you've already earned. — Michelle
References & Sources
Zeldent. How Much Revenue Does the Average Dental Practice Lose Each Year. February 3, 2025. zeldent.com
DentistrySupport, citing Journal of Healthcare Finance. The Silent Revenue Killer: How Admin Errors Are Costing Your Dental Practice Thousands. dentistrysupport.com
American Association of Dental Office Management (AADOM), citing American Dental Association. Maximizing Reimbursements in a Dental Practice. dentalmanagers.com
Healthcare Financial Management Association (HFMA). Sample Revenue Cycle Governance Council Charter. hfma.org
Chandawarkar R. et al. Revenue Cycle Management: The Art and the Science. PMC, 2024. PMCID: PMC11219169. pmc.ncbi.nlm.nih.gov
American Medical Association. A Physician's Guide to Effective Revenue Cycle Management. ama-assn.org
AADOM. 7 Steps to Successfully Managing Your Accounts Receivables. dentalmanagers.com
Oral Health Group. Survey Links Administrative Shortages to Billions in Lost Revenue in U.S. Dental Practices. 2025. oralhealthgroup.com
Michelle Repash is the creator of Revenue Protection Architecture™ and the Six Financial Control Points framework. She has 36 years of experience in dental revenue cycle management and practice governance. RepashGlobal · repashglobal.com
Revenue Protection Insider takes it further.
The Revenue Insider gives you everything in the Six Control Points series — plus the case studies behind the framework, ongoing paid content as the architecture evolves, and first access to new Revenue Protection Architecture™ releases.
This is not a membership for people who want to learn about dental revenue. It is for practice owners who are ready to govern it.
Upgrade to Revenue Protection Insider — $147/year →