Internal audit and risk projects in healthcare

These four projects by Luis Edgar Parra Salas at Méderi, a high-complexity hospital network in Bogotá, cover an integrated risk management system based on ISO 31000, an ethics hotline against fraud, the adoption of SARLAFT anti-money-laundering controls with an anti-bribery directive, and the transition of internal audit to the IIA Global Standards.

• Integrated Risk Management System (SIGR)

  Identify and control strategic, operational and compliance risks in a high-complexity hospital network

  37% less risk exposure

• Línea Transparente: ethics hotline and fraud risk (Méderi, 2013)

  Prevent fraud and corruption

  Implemented before it was mandatory

• SARLAFT and Anti-Bribery Directive (Méderi, 2016–2018)

  Anti-money-laundering and anti-corruption compliance

  Voluntary EACA assessment in 2018

• Transition to the IIA Global Internal Audit Standards (Méderi, 2025)

  Modernise the internal audit function

  Function aligned with the new international standard