HIPAA Compliance Consultant, HIPAA Compliance Consulting Services, HIPAA Compliance Audit Certification Consultant

Overview

HIPAA was initially published on 1996 to protect an employee health insurance benefits while changing employment.
HIPAA Privacy and Security rules (added in 2003, and 2005 respectively) provides for protecting the personal health information.
Additional legislations (Breach Enforcement Rule (2006), HITECH act (2009), Breach Notification Rule (2009) and Final Omnibus Rule (2013), further increased the legal framework required to protect, secure, report and expand the scope of security obligations.
If your organisation is an either a covered entity or a business associate, you need to be HIPAA compliant.
In Coral we have successfully advised and implemented HIPAA compliance for business such as Insurance companies, cloud providers, software as a service providers, product companies, medical service providers, and business process outsourcing companies.
Using a 6-step methodology, we ensure that all the applicable requirements of the law and the best practices are designed, documented, implemented and monitored, thereby ensuring you remain HIPAA compliant.

Kindly share your details for HIPAA requirements

Name

Organisation

Phone

Please provide your additional request OR specific request (if any) : *

Security Code

What is the approach for successful implementation?

There are primarily five phases, and in each phase there can be several sub-phases:

PHASE I - Scope Determination

That part of the organisation/network needs to be covered which needs control prioritization.

PHASE II -
Asset Identification/Risk Assessment/Gap Analysis

Risk assessment is key to determine the scope of infrastructure and the requirement for controls. This phase results in the identification of each gap.

PHASE III - Implementation

Implementation through definition of policy/procedure/documentation and relevant people/process/technology records.

PHASE IV -
Internal Audit

Internal Audit is the process of verifying successful implementation, on one hand, and the inclusion of security principles in the business lifecycle on the other.

PHASE V -
HIPAA Compliance

At this stage you can declare yourself to be HIPAA compliant

Security Coverage

HIPAA Rule covers the following key areas

Administrative Safeguards

Security Management Process
Assigned Security Responsibility
Workforce Security
Information Access Management
Security Awareness and Training
Security Incident Procedures
Contingency Plan
Evaluation
Business Associate Contracts and Other Arrangements

Physical Safeguards

Facility Access Controls
Workstation Use
Workstation Security
Device and Media Controls

Organizational Requirements

Business Associate Contracts or Other Arrangements
Requirements for Group Health Plans

Technical Safeguards

Access Control
Audit Controls
Integrity
Person or Entity Authentication
Transmission Security

Training

We provide bespoke training, listed below are our offerings.

Shorter Sessions from 1 hour to 4 hours
Interpretation of the HIPAA requirements
1 Day Awareness Session
2 Days Internal Audit Course
3 Days Implementation Course covering 10+ hands-on exercises