HIPAA Audit: OCR Is On The Move
If you are a small business with less than 500 employees, you are likely to be a target for information thefts. Hackers are increasingly targeting small organizations, as they are easier prey due to inadequate security infrastructure. A recent mid-November (2011) Research by Symantec “shows that at least 40 percent of all targeted attacks aimed at the corporate world are focused on companies with fewer than 500 employees compared with the 28 percent that are focused on large enterprises”
You may be fully aware of the security threats, but how much have you invested in the required infrastructure to ensure that your information is safe? Generally, small companies believe that larger enterprises are the targets of cyber-attacks. The SMB Threat Awareness Poll of Symantec, for instance highlights “that businesses are familiar with security threats, with 55 to 59 percent of respondents stating that they were ‘somewhat’ or ‘completely’ aware of each of the dangers” such as Distributed Denial of Service, shortened URLs, use of mobile devices for business, keystroke logging, and targeted attacks.
Isn’t time for you, if you believe that you are a small business, and especially if you are in the medical sector, to beef up your system to ensure that in the first place your patients’ health information is safe and secure from any kind of data breach and, secondly you are indeed compliant with the regulatory requirements under HIPAA and HITECH? And if you are handling credit cards of your patients, you will also be required to be compliant with the Payment Card Industry Data Security Standards PCI DSS.
Five steps to safeguarding your information and becoming compliant
- Participate in Cloud-based Self-Assessment Survey or send out a survey to all of your Business Associates: This online quick-scan (HI-SCAN) lets you how vulnerable you are as small business to security attacks and the levels of compliance with HIPAA / HITECH of your business as well as your Business Associates
- In responding to each question online with a simple YES or NO, you / BA willupload documentary evidence into a Secure Online Repository of the steps taken to ensure information security.
- Run Risk and compliance report to generate Action Roadmap. You have a full view of the Risk Status of your business and BAs’.
- Complete your Compliance Roadmap Action items and work with the high-risk elements to get compliant using SecureGRC
- You and your BA’s Achieve & prove HIPAA / HITECH compliance
Why wait until your business unfortunately becomes one of the targets of security attack? Get your assessment done at unimaginably low costs with SecureGRC. Get to know quickly: How compliant is your entity? How effective are your security policies and protocols? Have you been adequately documenting proof of compliance? eGestalt’s automated HIPAA compliance management toolkit has been designed to meet this purpose. It can help you seamlessly meet audit requirements by dramatically simplifying the compliance process.
Related posts
