UDTSecure™ Team Performs Comprehensive HIPAA Security Assessment

The assessment process required only four days of on-site work. The remainder of the testing, analysis, and documentation were completed remotely.

The Challenge

HIPAA Security Requirements required that a large retail client with medical subsidiary locations conduct an accurate and thorough assessment of the potential risks and vulnerabilities to electronic protected health information during storage and transmission. The organization needed a third-party assessment and obtained quotes from several qualified security assessment vendors.

Initially, the organization believed UDTSecure’s proposal was too high, but ultimately chose UDTSecure based on the output generated by the reports and additional savings related to including hours spent on site, back office hours in research and analysis and remediation reporting. An additional deciding factor was UDTSecure’s ability to complete the work within two to three months — the organization’s Compliance Officer felt it would take their internal staff a year to achieve the same results.

The UDTSecure Solution

The organization engaged UDTSecure InfoSec Consulting to implement its HIPAA Security Assessment service. UDTSecure’s HIPAA security assessment is mapped directly to the security rule into what UDTSecure InfoSec Consultants identified as 70 unique, required and addressable provisions.

Led by an experienced security consultant, UDTSecure InfoSec Consultants audited the organization’s current administrative, physical, and technical security measures including policy, plans, procedures, systems, and networks. A compliance matrix with recommendations for remediation was then developed. Recommendations were based on UDTSecure’s expertise in balancing the cost for improvement versus the increased protection it would provide, allowing for development of a cost-effective compliance plan.

The assessment process required only four days of on-site work. The remainder of the testing, analysis, and documentation were completed remotely.

The Assessment

  • Remote and on-site collection of pertinent data and site information and remote testing of network security measures
  • On-site analysis and testing of physical and technical security measures and analysis of LAN, WAN, and Wireless networks
  • On-site interviews with key management and staff members
  • Development of three volume report of assessment process and findings and development of supporting digital content

The Results

The organization achieved the following as a result of UDTSecure’s HIPAA Security Assessment:

  • Met audit requirement as defined in Sec. 164.308(a)(1)(ii) of the security rule
  • Acquired detailed documentation for use in budget and remediation planning
  • Immediately lowered risk to their stored electronic information
  • Effectively communicated compliance status and plans to board of directors and auditors

To learn more about UDTSecure’s HIPPAA Security Assessment, please call 954-308-5100 today!

Download Now!

Accomplish More With UDT

Get your custom solution in cybersecurity, lifecycle management, digital transformation and managed IT services. Connect with our team today.

More to explore

Smishing Attacks are on the Rise—Here’s How To Keep Your Data Safe

Smishing attacks are on the rise, posing a significant threat to data security. Originating from a blend of SMS and Phishing, these attacks have seen a drastic increase since 2020. The widespread use of smishing attacks has persisted, with a lack of awareness being a major issue. Many view these as simple spam messages, unaware of the danger they pose. This blog aims to raise awareness about smishing and provide actionable insights to protect yourself and your organization.

5 Strategic Ways to Master Your IT Budget

Enhance finance IT efficiency with UDT and Cisco. Master IT budget planning, security, and innovation in the competitive industry.

IT Compliance Training for the Finance Industry (Get Your Resource Kit Now)

Download UDT’s IT Compliance Kit for financial services – empowering IT leaders to educate staff on compliance, data protection, and security.

Trend Alert! An Insider’s Look at the Latest IT Solutions for the Finance Industry

Explore the latest IT trends in finance and how UDT’s cutting-edge cybersecurity and managed IT services redefine security for the digital age.

Streamlining IT Operations in the Finance Industry—Top 10 Strategies for IT Leaders

Unleash the power of UDT and Cisco solutions with top 10 strategies to streamline IT operations for finance—enhancing security, compliance, and efficiency.

IT Leaders—Here’s Your Checklist for Disaster Recovery Planning in the Finance Industry

Equip your IT department with a disaster recovery plan checklist. Navigate unexpected technological upheavals with UDT.

Experiencing a security breach?

Get immediate assistance from our security operations center! Take the following recommended actions NOW while we get on the case:

RECOMMENDED IMMEDIATE NEXT ACTIONS

  1. Determine which systems were impacted and immediately isolate them. Take the network offline at the switch level or physically unplug the systems from the wired or wireless network.
  2. Immediately take backups offline to preserve them. Scan backups with anti-virus and malware tools to ensure they’re not infected
  3. Initiate an immediate password reset on affected user accounts with new passwords that are no less than 14 characters in length. Do this for Senior Management accounts as well.

Just one more step

Please fill out the following form,