Modern Information Systems are governed by multiple and at times competing security frameworks. The Health Insurance Portability and Accountability Act (HIPAA) and Health Information Technology for Economic and Clinical Health (HITECH) Act requires companies that handle electronic protected health information (ePHI) to protect the storage, transmission, and handling of ePHI. DASATECH’s security assessment team can help your organization become compliant with HIPAA and HITECH requirements.

The HIPAA Assessment Process

DASATECH performs the security assessment by testing against specific requirements and security controls required by the HIPAA framework. A series of interviews, visual inspections, and examination of evidence are conducted to determine if the security controls are in place as required. At DASATECH, we perform HIPAA security control testing based on evidence gathered from the information system as well as from observations performed by our qualified security auditors.

Acquiring a HIPAA/HITECH assessment report describes in detail how your company abides and adheres to the security requirements established by the HIPAA and HITECH Act.

HIPAA Deliverables

hipaa
The following documentation will be delivered as part of the HIPAA/HITECH assessment:

  • HIPAA/HITECH security assessment report
  • Testing approach and methodology
  • Detail description of findings and compliance level
Benefits of becoming HIPAA/HITECH compliant

Whether you are a data center, healthcare provider, or a business associate who happens to handle ePHI, a HIPAA / HITECH assessment report demonstrates the level of compliance with the required safeguards and security controls in place to protect ePHI. Your company can benefit from the following:

  • Avoid costly penalties and fines for not complying with government regulations
  • Being compliant with regulatory requirements enables your business to be seen as a secure option for transmitting, storing, and processing ePHI
  • Gain a competitive advantage over non-compliant ePHI handling businesses
  • Provide peace of mind to you customers by demonstrating compliance with HIPAA/HITECH requirements and standards