# Strategic Management Services, LLC

- **Type:** Advisory firm
- **Website:** https://www.compliance.com/
- **Assessed by:** The Assurance Desk (Add-Venture Advisory Ltd)

A US healthcare compliance consultancy offering interim HIPAA privacy officers and help after a healthcare data breach.

## Strategic Management Services scores

Scored 1 to 5 on six criteria. There is no overall score.

### Help when things go wrong: 3/5

Leadership pedigree (former HHS-OIG, CMS, FBI staff) and a named CIA/breach-response practice signal real defence capability, but no case study or named enforcement outcome is published to verify it.

### Qualifications of the people who do the work: 4/5

President and named staff hold CHC, CHPC and CCEP credentials from HCCA/SCCE, and the founder served 11 years as HHS Inspector General.

### What it publishes about fees: 1/5

No fee schedule, pricing model or rate card is published anywhere on compliance.com; every engagement routes to a sales enquiry.

### Knowledge of your sector: 4/5

Deep, decades-long healthcare-only specialism with named HIPAA practitioners, though CCPA/CPRA and state AI-law expertise is unproven.

### Independence from what it sells: 3/5

Consulting is run separately from the sister Compliance Resource Center software, but that subscription product is actively cross-promoted to consulting clients.

### Who carries the risk if the advice is wrong: 2/5

No professional-indemnity insurance, liability cap or work guarantee is disclosed anywhere on the firm's public website.

## Sources for Strategic Management Services

Every line carries the page it was read on and the date it was checked.

- Strategic Management Services, LLC is registered in Virginia as a Limited Liability Company, company number S1660663, with status Active.
  - Source: https://opencorporates.com/companies/us_va/S1660663
  - Checked: 2026-09-20
- The firm was founded in 1992 by Richard Kusserow, a former Inspector General of the US Department of Health and Human Services.
  - Source: https://www.compliance.com/about-us/experience/
  - Checked: 2026-09-20
- President Carrie Kusserow holds CHC, CHPC and CCEP credentials and has over 20 years of healthcare compliance experience.
  - Source: https://www.compliance.com/consultants/carrie-kusserow/
  - Checked: 2026-09-20
- The firm's Data Breach Support practice names staff who handle HIPAA privacy investigations, breach risk assessments, breach notification letters and OCR reporting.
  - Source: https://www.compliance.com/focus_area/data-breach-support/
  - Checked: 2026-09-20
- The firm is headquartered at 6350 Walker Lane, Ste. 550, Alexandria, VA 22310, reachable at 800-683-9601.
  - Source: https://www.compliance.com/
  - Checked: 2026-09-20

## What this provider publishes

Not published means we did not find it on the firm's own pages.

- Price: Not published
- Indemnity cover: Not published
- Credentials: Published
- Independent accreditation: Not published
- Client results: Not published
- How it uses AI: Not published

## Strengths

- Decades-long, founder-led specialism in healthcare regulatory compliance, started by a former 11-year HHS Inspector General.
- Named privacy practitioners (Carrie Kusserow, Lisa Shuman, Robbi-Lynn Watnik) hold recognized healthcare-privacy credentials (CHC, CHPC, CCEP) and run a real, named Interim/Designated HIPAA Privacy Officer service line.
- Team includes former staff of HHS-OIG, CMS and the FBI, giving direct familiarity with federal healthcare enforcement processes such as Corporate Integrity Agreements.

## Things to check

Each one carries the factual basis it rests on.

- No case study or named client engagement is published to evidence actual breach-response or OCR-defense outcomes.
  - Basis: The interim-privacy-officers and data-breach-support pages list staff expertise only, with no named client results.
- The privacy practice is scoped to HIPAA/healthcare; no CCPA/CPRA or state AI-law practice evidence was found.
  - Basis: Site content and searches surface only HIPAA/OIG-focused services, none addressing CCPA/CPRA or state AI statutes.
- No fee schedule or pricing model is published anywhere on the firm's site.
  - Basis: Homepage, services and interim-privacy-officer pages all route pricing to a sales enquiry with no published rates.

## Where this firm appears

- [Do you need a data protection officer?](https://theassurancedesk.com/best/first-appointment)
- [After a data breach: what UK law asks of you](https://theassurancedesk.com/best/post-breach)
- [Your sector adds its own rules to UK data protection law](https://theassurancedesk.com/best/sector-regulated)
- [Compare providers](https://theassurancedesk.com/compare)

---

**Scope.** The Assurance Desk covers data protection, AI governance and cyber security in the United Kingdom and the United States. It scores providers in both: UK-facing firms, and firms based in the United States. Every provider scored so far was selected for data-protection, AI-governance or security-assurance work. Where a page describes law, it names the country that law applies in.

**Who publishes this.** The Assurance Desk is published by Add-Venture Advisory Ltd, company number 11854524, registered in England and Wales. The same owner runs Avouch, a marketing agency that sells AI visibility services to firms of the kind this site covers. That is a conflict of interest, and it is disclosed here.

**Corrections.** If you represent this firm and something here is wrong or out of date, email hello@theassurancedesk.com with the evidence.
