Healthcare (HIPAA) Compliance
Solid Security begins with knowing. Excels by doing.
At expoIT we are passionate about compliance and cyber security and we strive each and every day to offer the very best in our HIPAA Compliance and Risk Assessment Services! In a premier partnership along with Contextual Security’s compliance professional services team, can assist your organization in understanding and ultimately complying with the HIPAA and HITECH security requirements. Our team of experienced healthcare consultants will review your documented HIPAA policies and procedures, interview key members with healthcare data security responsibilities and conduct technical inspections of those systems that store, process and/or transmit healthcare data to ensure that all three are in line with the controls found within the HIPAA Audit Protocol as well as security best practice. This comprehensive approach allows our clients to have confidence in the accuracy of our findings because they rely on tangible data gathered through our three-pronged approached (document reviews, interviews and system inspections), and not just the results from an employee survey or a review of the organizations information security policy.
In addition, as with any of our compliance related service offerings, our clients are given 24/7 visibility into the progress of audit through our illumino platform. Illumino gives organizations the ability to quickly identify the status (Compliant, Not Compliant, Remediating, etc.) of each control within the HIPAA Audit Protocol, including the information that was relied upon by the assessor to make the status determination. By making this information available 24/7, there are no surprises!
The goal of our engagement is to identify areas of risk that impact the security of your information. We provide a remediation plan tailored specifically to your organization’s needs for security and compliance. We often learn from new clients’ past experiences that plans were recommended, but execution was never a part of the plan. Why plan if you’re not going to execute?
Components
Our HIPAA compliance engagements are specifically tailored to your organizations needs and requirements.
Virtual HIPAA/HITECH Consultant
Contextual Security’s HIPAA/HITECH General Consulting offering was created for organizations who are interested in having an experienced HIPAA compliance consultant available throughout the year for regular (e.g. weekly, monthly, quarterly) or ad-hoc (e.g. on-demand) meetings to address requirement questions, provide guidance on how changes within the organization could impact their overall compliance, as well as keep them up to date on upcoming changes to the HIPAA Audit Protocol (e.g. Audit Protocol – April 2016 Update).
HIPAA/HITECH Independent Third Party Audit
Contextual Security independent third party audit includes an evaluation of your environment against the HIPAA Audit Protocol as well as an assessment of those critical controls responsible for securing healthcare data during processing, transmission and storage. The HIPAA/HITECH Independent Third Party Audit also includes a focus on mobile device security and media disposal policies and procedures, which are two primary contributors that have resulted in healthcare organizations having to report a breach of unprotected healthcare data (source: Health & Human Services list of Breaches Affecting 500 individuals or more).
HIPAA Risk Assessment
Whether it’s part of a Meaningful Use attestation initiative, or simply to meet HIPAA requirement 45 CFR 164.308(a)(1), Contextual Security can assist organizations with conducting their annual risk assessment. Our HIPAA Risk Assessment offering is a streamlined approach that primarily focuses on identifying all locations where ePHI is created, received, maintained and transmitted, identifying the threats and vulnerabilities to the security of that ePHI, determining a risk score based on the potential impact of the associated threats and vulnerabilities, and finally working with the organization under review to determine a mitigation approach to address those risks uncovered through the engagement.
Deliverables
The deliverable is not simply pieces of papers….
Formal deliverables for each of our Healthcare Compliance tasks
Deliverables
- HIPAA Audit Protocol Compliance Report
- HIPAA Risk Assessment Report
In addition, project includes, as part of each engagement, an out brief call to discuss the findings and answer any questions your organization may have.
Contact one of expoIT’s Enterprise Consultants today for a free consultation listing of services, options and budget expectations.
Because…Solid Security begins with knowing. Excels by doing.