HIPAA Compliance Consulting Services

• Cybersecurity Risk Assessment
• Cybersecurity Gap Analysis
• Cybersecurity Liability Insurance Policy (included in HIPAA SOW)
• Vulnerability and Penetration Testing
• Environmental, Natural, and Human Threat Analysis
• Staff Privacy and Security Training and Validation
• Incident Response Planning
• Full preparation for an Audit
• Remediation Guidance and Planning
• NIST best practices
• Policies and Procedures

Our approach is not a one time engagement. Many HIPAA consultants engage one time a year to help provide a Security Risk Assessment (SRA) and are not involved until the next year’s SRA is due. Our consultants have at minimum, quarterly engagements to ensure your practice is moving towards higher and higher levels of HIPAA compliance. This involves policy and procedure development, remediation of SRA findings, internal staff training, audit and security reviews with continual development of your HIPAA program.

The advent of Electronic Health Records (EHR or EMR) software, it’s changed the landscape for HIPAA compliance. HIPAA compliance software is about protecting patient information, PHI…now it’s ePHI – Electronic Patient Health Information with all your patient data stored ‘electronically’ instead of paper charts. It is beneficial and just makes sense to use a company with expertise in Healthcare and IT to provide a comprehensive Security Risk Assessment that can focus on the security aspects of protecting your data, software and systems from today’s cybersecurity threats.