Compliance & Certification
HIPAA & HITRUST Compliance
Protect patient health information and meet HIPAA and HITRUST requirements with a structured compliance program.
Overview
Why it matters
HIPAA (the Health Insurance Portability and Accountability Act) sets standards for the privacy and security of protected health information (PHI). It applies to healthcare providers, health plans, clearinghouses and their business associates, and includes the Privacy Rule, the Security Rule and the Breach Notification Rule.
HITRUST builds on HIPAA with a comprehensive framework to assess, manage and reduce the risk of data breaches, through a rigorous assessment of policies, procedures and controls.
We tailor our compliance services to healthcare organizations of every size, from small clinics to large hospital networks.
Scope
What the service covers
Gap analysis
Evaluating your policies, procedures and controls against HIPAA and HITRUST.
Risk assessment
Identifying risks to PHI and recommending ways to reduce them.
Compliance validation
Support with self-assessment questionnaires, on-site assessments and vulnerability scans.
Remediation assistance
Help addressing gaps found during analysis or validation.
Compliance maintenance
Ongoing support and monitoring to keep you compliant.
Engagement
How an engagement works
- 01
Gap analysis
Compare your current posture with HIPAA and HITRUST requirements.
- 02
Risk assessment
Understand the risks to protected health information.
- 03
Validate and remediate
Validate compliance and close the gaps that are found.
- 04
Maintain
Keep compliance current with ongoing support.
Outcomes
Why it matters
- Show patients and stakeholders that their health information is protected
- Meet regulatory requirements related to PHI security
You build, we protect
Talk to us about HIPAA, HITRUST
Tell us about your environment and goals, and we will suggest a practical scope.
info@alangh.com