Risk assessment
Assessing vulnerabilities in the systems and processes used to handle patient information.
HIPAA / HEALTHCARE OUTSOURCING
Patient-information safeguards for a healthcare BPO.
A Philippines-based BPO supporting a US healthcare customer wanted to strengthen the handling of patient information. The project scope addressed risk assessment, workforce training, access controls and incident-response planning.
The challenge
Bring people, access and response together.
Staff responsibilities, access to sensitive information and incident procedures were the central concerns. The work combined a review of systems and processes with practical safeguards for the healthcare outsourcing relationship.
Project scope
The work involved.
Workforce training
Developing and delivering HIPAA training on staff responsibilities for protecting patient data.
Access safeguards
Implementing controls that restricted sensitive patient-information access to authorised personnel.
Incident-response planning
Developing an incident-response plan for data breaches and other security incidents.
Review the patient-information handover.
Tell us which healthcare processes you support and where access, staff responsibilities or incident escalation need attention.