The HIPAA Privacy and Breach Notification Rules requires healthcare organizations, health plans, and business associates to have physical, administrative, and technical safeguards in place to protect the privacy of PHI.
That includes a mandatory risk assessment to identify and rectify compliance gaps.
To help organizations fulfill their obligations, our HIPAA Privacy and Breach Risk Assessment (PBRA) offering combines Intraprise Health’s highly rated privacy and security services with our industry leading HIPAA PBRA software, HIPAA One®.
Regardless of your organization type, our comprehensive tool provides a guided approach to meeting the requirements of the HIPAA Privacy and Breach Notification Rules.
Based on NIST 800-series methodologies, the software covers the current OCR Audit Protocol, State specific regulations, 42 CFR Part 2 (SAMHSA) and maps to the NIST Privacy Framework.
Whether you are a healthcare organization, health plan, or business associate, we have options available to help you successfully complete your PBRA.
You can independently complete your PBRA using the HIPAA One® compliance software, or if you would like greater assistance, our Assessors can work with you in a collaborative approach to assess your current privacy and breach risk management program and help you identify and lower your risk.
The HIPAA Breach Notification Rule outlines four factors of an effective breach assessment, and our tool comprehensively addresses all areas:
1. Assessing the nature and extent of PHI: Analyze the types of PHI involved in the security incident, such as demographic information, medical history, or financial data, and provide a complete overview of the potential impact and sensitivity of the compromised information.
2. Identifying unauthorized access or recipients: Identify any unauthorized individuals who may have accessed or received the PHI. Detect patterns, anomalies, and potential breaches involving external parties or internal personnel.
3. Determining the actual acquisition or viewing of PHI: Examine relevant data to determine whether the compromised PHI was acquired, viewed, or accessed by unauthorized individuals and provide insights into the extent of the breach to help you understand the full risk.
4. Assessing risk mitigation measures: Evaluate the effectiveness of existing security controls, safeguards, and mitigation measures implemented by your organization by identifying any gaps or weaknesses in the security posture and providing recommendations for strengthening security measures and reducing risk.
We were impressed with the HIPAA One solution and, more broadly, with the Intraprise Health team. HIPAA One just made sense for us to streamline, simplify, and automate our compliance process and information.
Independently Conduct your Risk Assessment Utilizing HIPAA One
Our Guided PBRA Includes:
Remote and/or On-Site Assessor-Managed Assessment Utilizing HIPAA One
Our Validated PBRA Includes:
Every Privacy & Breach Risk Assessment incorporates OCR Audit Protocol, HIPAA state specific regulations, 42 CFR Part 2 (SAMHSA) and maps findings to the NIST Privacy Framework
12110 Sunset Hills Road
Suite 600
Reston, VA 20190
Support: 877-861-6877
Sales: 888-329-0067
