We start with a detailed, 48-point Risk Analysis using the same methodology as described in NIST Special Publication (SP) 800-30.
Using the findings discovered during the Risk Analysis, we work with you to develop a plan to resolve any areas of non-compliance.
We provide you with ready-made templates for BAAs with all of your business associates. We also request a copy of their Risk Analysis on your behalf; ensuring they are meeting HIPAA requirements.
We leverage the NIST HIPAA Security Rule Crosswalk to create a detailed, comprehensive security plan that addresses every aspect of the HIPAA Security Rule.
We work with you step-by-step to implement your security plan, ensuring due diligence to secure each weak point and address every concern under the Security Rule.
We provide thorough training for all staff members, covering both the Privacy Rule and the Security Rule. Topics include: What is Considered PHI under HIPAA, and How to Protect PHI, and Reporting a Breach.
We provide a Compliance Guidance Counselor to help you with your questions about HIPAA. We also provide you with a customized HIPAA Reference Guide based on your industry. Currently, we have one for Physicians, Practice Administrators, Mental Health Professionals, and Law Enforcement, with other editions in development.
We provide you with all the documentation HHS requires of covered entities and business associates. Our policies and procedures cover all the facets of the
Administrative, Physical, and Technical safeguards. They are customized to fit your needs, enabling them to integrate seamlessly into your HIPAA compliance manual.
Compliance is not a one and done scenario. It is an ongoing, continuous process, and we are with you each step of the way. We work with you to ensure your Risk Analysis is current, all policies and procedures are up-to-date, your new staff receives compliance training, and your risk of breach is reduced to the lowest common denominator.
Fill In The Form Below for industry news, and information about our services, events, webinars and more.