How to pass HIPAA security compliance audit

HIPAA (Health Insurance Portability and Accountability Act) standards for the security of electronic health information was effective since 21 April 2005,  The Security Rule complements the Privacy Rule. While the Privacy Rule pertains to all Protected Health Information (PHI) including paper and electronic, the Security Rule deals specifically with Electronic Protected Health Information (EPHI).

It lays out three types of security safeguards required for compliance:

• Administrative,
• Physical, and
• Technical.

Here is simple step for comply to HIPAA audit

1. Understand why computer security is important
2. Make certain your colleagues and staff take security as seriously as you do
3. Catalog all the information system components that interact with protected health information in your office.
4. Prepare for disaster before it occurs.
5. Make sure your network and communications safeguards are intact and robust.
6. Be certain that you have anti-virus software and keep it up to date
7. Understand what encryption will do and when it is necessary
8. Consider chains of trust and your business relationships
9. Demand that your vendors fully understand the HIPAA security standards
10. Start with a plan - and the end - in mind.

American Academy of Family Physicians.
http://www.aafp.org/fpm/20050400/43tens.html