Yes, they are a must. Doctors are being educated more and more on outsourcing and what to look for. One of the things they are told at AMA conferences and other seminars is to ASK to see the compliance plan. VERY important.
Follow the OIG guidelines, add HIPAA and HITECH and Also add your own Policies & Procedures. Do not look at others plans or try to do a boiler plate, remember that just having it isn't enough, it has to be followed.