HIPAA Security Audit

Your HIPAA Security Audit will be competently conducted by the InfoSight Inc. Team; avoid regulatory risks, and huge fines! We are praised by our many satisfied clients! HIPAA, the Health Insurance Portability and Accountability Act, sets the standard for protecting sensitive patient data. Any company dealing with protected health information (PHI) must ensure that physical, network, and process security measures are in place and strictly adhered to.

Rapid changes are taking place to secure Protected Health Information (PHI); the HIPAA Security Audit is growing in importance. The HIPAA Security Rule has been in effect since 2003. In 2009, Health and Human Services (HHS) added “business associate” to entities that must comply with the HIPAA Act of 1996. In 2009, the American Recovery and Reinvestment Act (ARRA) was signed into law. Part of this new law, the HITECH Act lays down breach notification requirements, for all covered entities under HIPAA.

Our InfoSight Inc. Compliance and Security Specialist will guide you on HIPAA Security Audit, and conduct your Risk Assessment, focusing on your technology, people, environment, and processes, across seven (7) security domains; Management and Policy, Access Control, Authentication, Awareness, Content Security, Threat Management, and Encryption, using forty-three (43) threat agents representing internal/external events that may disrupt your processes and activities.

Healthcare providers receive financial incentives to upgrade Electronic Health Records (EHR) systems or purchase EHR systems, which deliver a secure set of electronic services in keeping with the HITECH Act, a provision of the American Recovery and Reinvestment Act of 2009 (ARRA). This strengthens paves the way for a HIPAA Security Audit, and enhances compliance records. The program ends in 2015. Call us, InfoSight Inc. for info on your HIPAA Security Audit needs.

Here are some questions to ask to determine how vulnerable your network may be:

• How long ago was my last vulnerability test?
• How many changes and or upgrades has my network had since my last vulnerability test?
• Do the counter measures I have in place to prevent an intrusion actually work?
• What security layers should I implement next to best protect my company's assets?
• Do I know where confidential and sensitive data is located on my network enterprise wide?
• How do I know if my IT Security reports are accurate?