Healthcare Compliance Audit (HIPAA)
The
Health Insurance Portability and Accountability Act provides a framework for
health care organizations to ensure the privacy and security of patient records.
HIPAA is one of the more complex regulations. Compliance with Section 160 of the
act, which covers security and privacy, presents an organization with numerous
operational, technical, and management challenges. Anitian's HIPAA compliance
team can help organize your HIPAA efforts or analyze existing measures to ensure
complete compliance with the regulations.
Anitian uses our exclusive Industry Security Maturity ProfilesTM (ISMP)
to analyze and audit your environment. These profiles combine established
security standards such as ISO17799, CobiT and ITIL with the HIPAA regulation to
provide a health-care focused maturity profile. Using this profile, our
team can audit your security posture in comparison to other, similar health-care
organizations, thus providing an audit that is uniquely relevant to your
organization.
Our typical HIPAA auditing
engagement includes:
-
Risk Analysis
Review your organization's exposure to known threats.
-
GAP Analysis
Determine the existing state of your organization and security challenges.
-
Policy and procedure review
Review of all organization security policies and procedures for compliance
with HIPAA regulations.
-
Security assessment
Assess networks, systems and access for security weaknesses.
-
Standards Adherence
Analyze business against established standards using Anitian's exclusive
Industry Security Maturity ProfilesTM.
-
Compliance Analysis
Review organization for compliance with relevant regulations.
-
Remediation Reporting
Report results of audit and develop remediation measures.
-
Implement Security Improvements
Architect and implement necessary security improvements.
-
Train & Educate Staff
Educate staff on proper security practices and procedures.
-
Certify compliance
Assess the effectiveness of security measures and certify their proper
use.
-
Monitoring
On-going monitoring and validation to ensure compliance.
The result is a comprehensive process to increase
the security and efficiency of your organization. Anitian's has complete
audits at dozens of healthcare organizations, both large and small. Our team
also participates in numerous healthcare alliances and professional groups to
keep up to date on the latest methods and strategies for HIPAA complaince.
For additional information, please contact
info@anitian.com.