HIPAA / HITECH
Protect Your Private Healthcare Information
The Health Insurance Portability and Accountability Act (HIPAA) and Health Information Technology for Economic and Clinical Health (HITECH) are United States federal regulatory requirements specifying the administrative, physical, and technical safeguards for assuring the confidentiality, integrity, and availability of Electronic Protected Health Information (ePHI).
Compliance with HIPAA standards is mandatory for covered entities and business associates. This includes any healthcare provider that carries out transactions in electronic form. Any healthcare SaaS (Software-as-a-service) provider would also need to comply with this standard.
Compliance Doesn’t Have to be Complicated
We help you navigate the complexities of health information security. Our Healthcare Information Security and Privacy Practitioners (HCISPPs) and Certified Information Systems Security Professionals (CISSPs) can help you assess the unique regulatory factors that apply to your organization – no matter what type of business you are.
We’ve worked with companies in every part of the industry, from hospital networks and private practices to software vendors and health insurance payors. We’ll use our experience to guide you through your assessment, helping you confirm that your company’s protected health information is appropriately managed.
Risk Assessments
HIPAA requires a Risk Analysis to be conducted, often including vulnerability scans and penetration tests, as a component of protecting ePHI. We are here to help your organization leverage benefits of these components into your overall cybersecurity compliance program. Our deliverable is a comprehensive and easy to understand report outlining risks ranked by priority, including recommendations for areas requiring remediation, and a risk register for continuous use by management.
HIPAA Security Compliance Assessment
In this engagement, we leverage our deep healthcare knowledge, combined with our cybersecurity audit strength, to perform an in-depth review and analysis of policies, procedures and documentation; interview staff, and test existing processes and controls. Additionally, we will identify gaps and areas requiring remediation.
Let’s talk HIPAA / HITECH today
Facing compliance, cybersecurity, or privacy challenges? We’re here for you. Fill out the contact form, and within 24 hours, our team will provide the expert guidance you need.