While the CMS creates the rules healthcare professionals must follow, the OIG fills the investigatory to detect fraud and law enforcement role, initiating investigations into practices that the CMS or other federal agencies identify as non-compliant.