AHIMA Publishes Toolkit for On-Site OCR HIPAA Phase 2 Audits

March 6, 2017
The American Health Information Management Association’s (AHIMA) has released its newest toolkit, the “External HIPAA Audit Readiness Toolkit,” to assist organizations in preparing for Health Insurance Portability and Accountability Act (HIPAA) Phase 2 audits.

The American Health Information Management Association’s (AHIMA) has released its newest toolkit, the “External HIPAA Audit Readiness Toolkit,” to assist organizations in preparing for Health Insurance Portability and Accountability Act (HIPAA) Phase 2 audits.

The Department of Health and Human Services’ (HHS) Office for Civil Rights (OCR) Phase 2 Audits – which include desk and on-site visits – began last year. According to AHIMA, the “External HIPAA Audit Readiness Toolkit” addresses all the key aspects of Phase 2 audits, including helping covered entities and business associates understand their respective requirements. The toolkit also features best practices and tips to meet all the necessary responsibilities.

 “Phase 2 audits are broader and require a more detailed level of compliance with HIPAA privacy, security and breach notification requirements,” AHIMA CEO Lynne Thomas Gordon, said in a statement. “This toolkit can serve as a comprehensive resource to help healthcare organizations and health information management (HIM) professionals prepare for audits.”

The audit program is part of OCR’s overall health information privacy, security and breach notification compliance regulations. The Phase 2 audits will be conducted on site and will examine a broader scope of HIPAA requirements than those addressed during the initial desk audits.

The toolkit is free for AHIMA members.

Sponsored Recommendations

A Cyber Shield for Healthcare: Exploring HHS's $1.3 Billion Security Initiative

Unlock the Future of Healthcare Cybersecurity with Erik Decker, Co-Chair of the HHS 405(d) workgroup! Don't miss this opportunity to gain invaluable knowledge from a seasoned ...

Enhancing Remote Radiology: How Zero Trust Access Revolutionizes Healthcare Connectivity

This content details how a cloud-enabled zero trust architecture ensures high performance, compliance, and scalability, overcoming the limitations of traditional VPN solutions...

Spotlight on Artificial Intelligence

Unlock the potential of AI in our latest series. Discover how AI is revolutionizing clinical decision support, improving workflow efficiency, and transforming medical documentation...

Beyond the VPN: Zero Trust Access for a Healthcare Hybrid Work Environment

This whitepaper explores how a cloud-enabled zero trust architecture ensures secure, least privileged access to applications, meeting regulatory requirements and enhancing user...