[ Wednesday, September 10, 2014 ]


OCR Audits are Coming: This isn't news, or at least it shouldn't be. 

And when OCR comes, the first thing they're going to ask for is documentation of (i) your initial risk analysis and any updates or further assessments and (ii) your current policies and procedures.  IF YOU DO NOT HAVE THIS DOCUMENTATION, . . . . well, it's not going to be pretty. 

You can't say you weren't warned.

Jeff [1:31 PM]

Comments: Post a Comment
http://www.blogger.com/template-edit.g?blogID=3380636 Blogger: HIPAA Blog - Edit your Template