HIPAA Gaining and proving HIPAA compliance Gaining and proving HIPAA compliance Gaining and proving HIPAA compliance Achieving HIPAA audit readiness External HIPAA audits: documentation review External HIPAA audits: fieldwork and testing Addressing HIPAA non-compliance and findings Ongoing monitoring and internal surveillance HIPAA “certification” and attestations HIPAA compliance is not achieved through a single assessment or…
HIPAA Evidence collection Breach management & reporting records Breach management & reporting records Evidence collection HIPAA evidence and system artifacts Documenting HIPAA risk analyses and remediation Role-based access, audit logs, and monitoring evidence Workforce training and sanctions evidence Vendor oversight & BAA evidence Breach management & reporting records Under the HIPAA Breach Notification Rule (45…