HIPAA/HITECH Risk Assessments

What is HIPAA/HITECH Risk Assessments?

The purpose of this risk analysis, based on compliance with the security requirements related to HIPAAHITECH Risk Assessments, is to assess the adequacy of your organization's security controls. This risk analysis provides a structured qualitative assessment of the operating environment. It addresses threats, vulnerabilities, risks, and safeguards. The assessment recommends cost-effective safeguards to mitigate associated exploitable threats and vulnerabilities.

Security risk assessment to include with HIPAAHITECH Risk Assessments

Review and update PHI inventory to determine where electronic and other data is located in your organization,

Assessment of existing security policies and procedures to ensure they are sufficient to be effective, currently operational, and to meet compliance programs appropriate to your size organization,

Interview team members,

Analyze active BAAs,

Assessment of current HIPAA security compliance operations, including safeguards in place, as well as vulnerabilities and threats specific to safeguards,

Complete HIPAA security rule questionnaire (~250 related items),

Examination of the three safeguards required by 45 CFR 164.308(a)(1) - administrative, physical, and technical, including the most recent amendments to the Omnibus Rules,

Risk Assessment conducted in accordance with NIST SP 800-30 Guide to Conducting Risk Assessments,

The level of Risk Assessment effort is based on reasonable and timely access to employees, systems and documentation, and

Provide comprehensive, audit-ready reports with findings and recommendations that include detailed vulnerabilities and remediation recommendations provided in white paper and PDF format:

Generate a HIPAA security rules assessment report and

Generate a security risk analysis report.

System Requirements

Standard internet browsers: Safari, Firefox, Chrome, among others.