How to Survive a HIPAA Security Audit
February 5, 2015 - Online event CA USMentorHealth
support@mentorhealth.com
Phone:8003851607
Fax:302-288-6884
Why should you attend: In 2012, the Department of Health and Human Services Office for Civil Rights (OCR) conducted on-site pilot audits during its first round of their HIPAA compliance audit program. A consulting firm OCR hired performed 115 pilot audits during that year. Starting the end of this year or beginning of 2015, OCR is resuming their HIPAA compliance audit program with its second round of audits - performed by OCR staff this time - that will address some red flags OCR found with security issues during 2012. This time around, OCR's random audit of 350 covered entities and 50 business associates will assess the selected organizations' compliance with the HIPAA privacy, security and breach notification rules. If you're a covered entity, OCR's focus is going to be on risk analysis and risk management (security rule part), the material and timeliness of breach notifications (the breach notification rule part) and the notification of privacy practices updates to changes in the HIPAA Omnibus Rule and access to rights (the privacy rule part). If you're a business associate, their focus is on security risk analysis and risk management and breach reporting to your covered entities. A desk audit involves you submitting certain content and documentation demonstrating the scope and timeliness of your efforts to comply with HIPAA and its rules. Only send the information asked for and send it on time! Auditors won't ask you for clarifications or for more information. They're only going to work with what they have and make their compliance decision off that. If you don't respond with a submission, you'll most likely receive a more formal review from the OCR. Areas Covered in the Session: Introduction to Speaker Industry events and trends Risk Management methodology HIPAA Basics Risk Analysis Documentation Progress Documentation Reporting Requirements The Fire-Drill-what to do when the OCR letter arrives How Meaningful Use and Figliozzi audits process Case studies MentorHealth Roger Steven contact no: 8003851607 fax no: 302-288-6884 Event Link:http://www.mentorhealth.com/control/w_product/~product_id=800432LIVE/ webinars@mentorhealth.com www.mentorhealth.com