Privacy and Security Audit Protocol Released

The Office of Civil Rights (OCR) has published the set of requirements that will be used by examiners during the assessment of privacy, security, and breach notification practices to ensure the Health Insurance Portability and Accountability Act (HIPAA) compliance. The audit protocol details key activities, including conducting a risk assessment, acquiring IT systems and services…