Risk assessment
Identifying vulnerabilities and risks associated with the handling of protected health information.
A healthcare BPO specialising in medical billing and coding needed to address risks in its handling of protected health information. The project scope combined risk assessment, information safeguards, employee training and policy implementation.
The review focused on the BPO’s handling of protected health information. Technical safeguards, staff responsibilities and operating procedures were addressed together as part of its HIPAA programme.
Identifying vulnerabilities and risks associated with the handling of protected health information.
Supporting access controls, data encryption and audit trails.
Training staff on HIPAA responsibilities and secure handling practices.
Developing and implementing policies and procedures to support the programme.
Describe the information your team handles, the systems involved and the responsibilities you want to clarify.