UDTSecure™ Team Performs Comprehensive HIPAA Security Assessment

The assessment process required only four days of on-site work. The remainder of the testing, analysis, and documentation were completed remotely.

The Challenge

HIPAA Security Requirements required that a large retail client with medical subsidiary locations conduct an accurate and thorough assessment of the potential risks and vulnerabilities to electronic protected health information during storage and transmission. The organization needed a third-party assessment and obtained quotes from several qualified security assessment vendors.

Initially, the organization believed UDTSecure’s proposal was too high, but ultimately chose UDTSecure based on the output generated by the reports and additional savings related to including hours spent on site, back office hours in research and analysis and remediation reporting. An additional deciding factor was UDTSecure’s ability to complete the work within two to three months — the organization’s Compliance Officer felt it would take their internal staff a year to achieve the same results.

The UDTSecure Solution

The organization engaged UDTSecure InfoSec Consulting to implement its HIPAA Security Assessment service. UDTSecure’s HIPAA security assessment is mapped directly to the security rule into what UDTSecure InfoSec Consultants identified as 70 unique, required and addressable provisions.

Led by an experienced security consultant, UDTSecure InfoSec Consultants audited the organization’s current administrative, physical, and technical security measures including policy, plans, procedures, systems, and networks. A compliance matrix with recommendations for remediation was then developed. Recommendations were based on UDTSecure’s expertise in balancing the cost for improvement versus the increased protection it would provide, allowing for development of a cost-effective compliance plan.

The assessment process required only four days of on-site work. The remainder of the testing, analysis, and documentation were completed remotely.

The Assessment

Remote and on-site collection of pertinent data and site information and remote testing of network security measures
On-site analysis and testing of physical and technical security measures and analysis of LAN, WAN, and Wireless networks
On-site interviews with key management and staff members
Development of three volume report of assessment process and findings and development of supporting digital content

The Results

The organization achieved the following as a result of UDTSecure’s HIPAA Security Assessment:

Met audit requirement as defined in Sec. 164.308(a)(1)(ii) of the security rule
Acquired detailed documentation for use in budget and remediation planning
Immediately lowered risk to their stored electronic information
Effectively communicated compliance status and plans to board of directors and auditors

To learn more about UDTSecure’s HIPPAA Security Assessment, please call 954-308-5100 today!

Download Now!

Accomplish More With UDT

Get your custom solution in cybersecurity, lifecycle management, digital transformation and managed IT services. Connect with our team today.

More to explore

2024 Will Test Cybersecurity Leaders: Is Your Company Ready?

Experts say new AI-driven threats and an election year will spell trouble for companies.

K12 Budgeting: Planning Your 1:1 Device Refresh Program Cost

As K12 education evolves, managing 1:1 device programs effectively is crucial. These programs, providing each student with a personal computing device, play a pivotal role in modern education. Success demands strategic planning, communication, foresight, and a holistic approach to device management. With digital learning on the rise, these devices are more than just tools for accessing information; they are platforms for interactive, core learning experiences. However, funding remains a significant hurdle, making effective budgeting for your device refresh program essential for optimizing ROI and device longevity.

Crafting a Futureproof 1:1 Device Strategy for School Districts

In the evolving landscape of Education Technology, crafting a futureproof 1:1 device strategy is crucial. This strategy should link every student, teacher, and administrator experience with specific device specifications. The integration of educational apps into the curriculum can significantly enhance the learning environment. These apps, tailored to the needs of students, can provide interactive content, fostering a dynamic learning experience.

Optimizing Your K12 Tech Investments: Funding 1:1 Device Programs

This blog will guide school districts grappling with the financial and resource demands of implementing a successful 1:1 device program amid ongoing challenges of budget constraints and competing priorities. Our guided workbook, created in partnership with Intel, provides further support with personalized roadmap on “Pathways to Innovation: Building a Sustainable Digital Learning Environment”.

K12 Cybersecurity: How to Secure 1:1 Devices in Your School District

This blog post delves into the importance of security, cybersecurity, and data privacy in school districts implementing 1:1 device initiatives. It offers basic steps for evaluating, planning, and executing a security strategy. Our guided workbook, created in partnership with Intel, provides a personalized roadmap on “Pathways to Innovation: Building a Sustainable Digital Learning Environment”.

Lost & Stolen Devices are a Serious Data Security Threat—Here’s Why

Since the pandemic, remote and hybrid work has become the norm. While mobile devices and remote workstations have empowered great flexibility, it has also led to an increase in data security problems due to lost, misplaced, or stolen devices. Find out how remote and hybrid setups are contributing to this problem and how to protect yourself and your organization.