Security Audit
The Security Audit is performed by certified technical personnel and reviews and identifies any computer security risks as required by law and dictated by best practices. Some security gaps and needs can be addressed at no cost with just a change in process and procedure; other gaps may require additional expenditures. Physicians Medical Group(PMG) will provide a quote for any additional hardware or software needed to bring the practice into compliance with the state and federal laws.
What it Covers
- Computers, network, internet connection, firewall
- Data backup and off-site storage review
- Data at rest and data in transit encryption requirements
- Office policy review and recommendations
- PMG Security Review Summary
- Quote for hardware
- Security Plan Template and assistance
PMG will delivery the summary and the plan template. Although it is the practice’s responsibility to complete the template PMG can provide Security Plan template completion assistance.
Cost and Prerequisites
This offering is available to practices in the PMG HIPAA 2009 Privacy and Security Training and Compliance Program. Since this service involves an in-depth review of your computers, network and practice privacy, and security policies and readiness, we have priced this at three different levels. The service and price structure listed below covers practices with up to two practice locations and no more than ten remote connections.
- PMG Comprehensive Computer Support Contract clients: $995 delivery in 60 days
- Practices that lack the computer support contract $2,995 delivery in 90 days
- Combo HIPAA 2009 plus Security Audit and Plan – $19,995 delivery within 30 days
The Combo HIPAA 2009 plus Security Audit and Plan would normally be employed when the practice is undergoing a HIPAA investigation and anticipates a corrective action program by the Health & Human Services investigator. Although PMG recommends this audit and plan as a best practice, we recognize that some practices will choose to not participate at this level.