StoneHenge Auditing Services

Want a "second opinion" on the health of your compliance with the Health Insurance Portability and Accountability Act? StoneHenge Partners has the expertise to examine your organization's HIPAA compliance initiatives, compare with current federal regulations, and provide a detailed analysis of your level of compliance. Our examination can include:

Audit: EDI, Security and Privacy Compliance

Review existing HIPAA compliance documentation

Documented HIPAA gaps
Documented risk
Remediation of gaps

Review existing acceptable risks to the organization

Review changes and impacts to the organization

Audit trails
Policies and procedures
Corporate Information Security Plan(s)
Network infrastructure
Emergency "first response" activities
Network security vulnerabilities and strategies
Departmental job responsibilities
Business partner agreements / Chain of Trust Agreements
Vendor contracts and vendor compliance

Review change documentation

Review overall compliance level and exceptions

Review training and awareness

Audit: Business Continuity Plan

Set audit objectives and scope

Prepare an audit plan, including:

Awareness and training
Current BCP plan
Organizational changes
Vital-records process
Maintenance schedule
Contract commitments
Data backup
Testing exercises Logistics
Command center and recovery site facilities

Audit the plan's structure, contents, and action sections

Audit the plan's documentation control procedures

Review audit results with your management

For more information, or to request a written proposal customized to your organization, please contact StoneHenge Parters.